last executing test programs: 2m37.822215312s ago: executing program 0 (id=191): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xb) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2m37.063946519s ago: executing program 0 (id=203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0xc8040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0x0, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x3, 0x19, 0x9}, {0x5000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0x1000, 0x8, 0x5, 0x1, 0x3, 0x0, 0x9, 0x0, 0xab, 0x8, 0x81}, {0x6000, 0x100000, 0xc, 0x0, 0x3, 0x2, 0x1, 0xf8, 0x8, 0x9, 0xe, 0xf1}, {0xffff4000, 0x2000, 0xc, 0x3, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x100000, 0x1, 0xe, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x0, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x8, 0xf0, 0xc}, {0x3000, 0x32}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2120a4, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x5e, 0x3]}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r7, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0xffff}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0xee, "13590d905d6c1e9eaa3b5d3f56c9cb8112985808fff82646e29650074895d848e30811ad1cd89fd17376a645c9cbc796a7a17b9e6760603424532050983e1f35ffbb1c83187ba9b9c9f8d4d3bb4950e7a719742b1913d1c9327226c71980afd13ae4a68dc93c8bc3df8b72c52baa4e889e98003c3e605c046c205f116b2f8bdbfdaa1251b1bb8e227aae2237246c718c5af8ffbdf4b1706dedb97e512e667aa78dee8ede49fc8e70779027e2b6debff969ccc96465ce72f830b1978b112449064e65d96da29ac5417b371b336839e7d3e8cd7ee7af8cc9ee1a1656fa68d76d40701f5109eb494e4a81d468a285e9"}) splice(r0, &(0x7f0000000180)=0x946, r9, &(0x7f00000001c0), 0x401, 0x1) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r10, 0x6, 0x1e, 0x0, &(0x7f0000000500)) 2m36.914100969s ago: executing program 0 (id=208): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x681, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xfd, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1}}, @void, [{0xdd, 0xfe, "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"}, {0xdd, 0x6a, "6cc55cd051f37f718f0a62a8be8c0ebfff01c7073b12bcbbd3ccc1f86829d2847bdb85fb0a31dd8fe57bab132fd8d290f75e0e0391fd85766ec45a5c5c324fab994e69c40de4807d926a8d7126c22b7454afad7c45588d89ede3f7c54078976f73a2507199b3422a10bd"}, {0xdd, 0xe8, "2af18979c40099e94083ca7b6e9f8c6a3cefc35ec13dff0315bb01e29e862ab8b66230ea2b3bd7f2562d6986f3e9f06e9d54e7b48d8e16c58d6e8cc83145af55087bc3e1483eac2896242268c1f11e8353dcc038e6565bcc01ae800704f862dc8c024e8f12e190cafd6ca3a5f63d131252cf403e0d8cd2692635cf1658a39b2c09fe60195442e7f2eec72d4fcd48d3e4b3fbd52adcba2660e55e667beee949bc40320b657c77efdf9f81f6941cb152ee7c89d37c629563c8a9219802dcbbb31fe56967fa3597f8c4a4f6a5eadd7d9375d7d15075c40568e147e02bebb5c885288d3dff7183d27afb"}, {0xdd, 0x77, "0010cb01576ae9977fb57507aec173f1c8c096ef930200ed8dbaa7214993ff07375e48513367f686b8fb5d133df537a7ee3403c7a3cb96daac57dd5610debb996289bfcc735a296ed2c6ec929a7daf8d893ddb63a67e3d854e677bb490e0ca54bd566aa50a9c5be930b4b23e1019c0c4a4f7f1133d3da3"}]}, 0x306) 2m36.3434954s ago: executing program 0 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x60000007, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000340), &(0x7f0000000200)=0x4) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x2}) fcntl$lock(r3, 0x26, &(0x7f0000000100)={0x1, 0x2, 0x4, 0xd, r0}) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x12, &(0x7f0000000140)='barrier') 2m36.342983619s ago: executing program 0 (id=211): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/272], 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="639b0200000000001c1012800be032320a644346fe735400010067656e65766500000c0002800500090010000000"], 0xfffffffffffffd6f}}, 0x2000c000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88600) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040)) 2m36.034128857s ago: executing program 0 (id=212): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 2m35.962229136s ago: executing program 32 (id=212): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 2m17.401423961s ago: executing program 4 (id=506): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000003e000701f6d59af40000a69d0f0f60fcdbdf25047c000004000000140001030000060000", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0xe0000084) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @raw32={[0x3, 0xffffffff, 0x5]}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @addr={0x6, 0xcd}}, {0x0, 0x0, 0x5, 0x0, @time={0x2, 0x2}, {0x4, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000100)=[r6], 0x0, 0x1, 0x1}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002cbd7000fbdbdf250e00000008002c00fbffffff05002e00013d000008003a00000000000600280001000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x91) ioprio_set$uid(0x3, 0x0, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 2m17.322000101s ago: executing program 4 (id=507): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x3, 0x8, 0x2c, 0x64, 0x0, 0x77, 0x6, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x2}]}}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x6, 0x0, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xd1}]}}}]}, 0x3c}}, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x80, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m14.293560943s ago: executing program 4 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4020, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0504"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2m14.243361701s ago: executing program 4 (id=551): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x7, 0x10001, 0xac9, 0x1, 0x400, 0x1}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYBLOB="0800be001e6df009f16441847d91071e85e9ffffffffffffff7fbbe580e2a4e5e4df499c3e8d87fdf517c0f0bc90edb47d1e841e59a208f74c2ada89e78d8578a322679c5a42d0291123c0db7e4bc9142fc581706cbef831835c2d0aa4b00419e393bf590939d55a6e7cd6cb963b1716f7ce2328da8247f70d56f155246057ac4d31d5b6d5dff939f4622d4fd40e0be7ac8503255a04271e03b88a213bb4ba6cb547bd2944806e6a41d1a1bb0f5822c5ff6efe1d41316eed767eaa99356ecc7db402"], 0xc6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xf) 2m14.241531892s ago: executing program 4 (id=553): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}}, 0x20}}, 0x24044040) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r3, &(0x7f0000000080), 0xffffff1c) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x3, '\x00', @string=0x0}}) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0x1, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) (async) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r10, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x4}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r11, r8, 0x4, r8}, 0x8) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x8001, 0x2, 0x0, "ea313b8110365d466bcad30edfa0a0234cede1cc937381608a5d0329e4771185", 0x31384142}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000180)) 2m13.663763146s ago: executing program 4 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) syz_usb_connect$uac1(0x5, 0xcc, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x2b39f7554a08fa9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3, 0x70, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf090, 0x2}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x3, 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0xd], 0x8}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0x7, 0x4, 0xa], 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x7ff, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x1, 0x2, [0x8, 0x9], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x10, 0x4, 0x3, 0x40, "faac", "88a4ce"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0xce, "cc88", "72066f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x9, 0xa7, {0x7, 0x25, 0x1, 0x0, 0xb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, "6d31d6"}, @as_header={0x7, 0x24, 0x1, 0x94, 0x6, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5, 0x67, 0x4, {0x7, 0x25, 0x1, 0x3, 0x6, 0xc}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x70, 0x6, 0x2, 0x8, 0x6}, 0x67, &(0x7f0000000900)={0x5, 0xf, 0x67, 0x4, [@generic={0x44, 0x10, 0x4, "c100babe615a12fc71a1a4dbb5c60b7d3e40d3bb90db7feb92c27221776aa85caba50a4e777bd01277d75dce19191018dc4907aaf713eeea53e7c1b27c22e48f60"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0xf9, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x3e, 0x4, 0x5}]}, 0x1, [{0x54, &(0x7f0000000980)=@string={0x54, 0x3, "38abc01fa256010903d8924ac9fb645457a3405d99683625b2898241ef953bd47a1fb31bcfa0e394c4fb6c9fdfd56a82a9dd1bcb1acc708a891bd2243d497b57829bcd14ced575d4b3e7ba4fc36ccfdc9021"}}]}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r9, r10, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES32=r10, @ANYBLOB=',version=9p2000.L,euid<', @ANYRES16=0x0, @ANYBLOB="2c66736d616769633d307830b863e33e2411e319b68963eb45be6b6b3030304de47af4", @ANYRESDEC=r7, @ANYBLOB=',euid<', @ANYRESDEC=r9, @ANYBLOB="2c6673757569643d31ffbdac5e836b112c36663766665d2d393065612d3131366463346439c2c0e7713543e69c3feef2d62fb621bab6ce21505c339bd56815769e052ef892243f6a0f4972e741ff4e74ed7ba4dbc8", @ANYRESDEC=r3, @ANYRES32=r5]) syz_emit_ethernet(0x26b, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="62182ebea5cc", @void, {@ipv4={0x800, @igmp={{0x59, 0x4, 0x3, 0x9, 0x25d, 0x66, 0x0, 0xe, 0x2, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x10, "352db7b037b37d8133d35b173f92"}, {0x1, 0xd, "14893bab9e237c577bb10f"}, {0x0, 0x5, "d99671"}]}, @cipso={0x86, 0x58, 0xffffffffffffffff, [{0x2, 0xb, "6d195e392139c10465"}, {0x0, 0xa, "0ae5436e5cd4291d"}, {0x6, 0x12, "cd19631f00bc82b452a8a51de662d9f6"}, {0x0, 0x5, "a02b31"}, {0x2, 0xe, "eef4fc8cea1bf011b46a47fb"}, {0x1, 0xa, "ca22fa26ca8f4a49"}, {0x2, 0xe, "f00b11f29baacba33f93479e"}]}, @lsrr={0x83, 0x7, 0x74, [@multicast1]}, @generic={0x89, 0x8, "b244dd72f343"}, @lsrr={0x83, 0x1f, 0x89, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @private=0xa010100, @multicast2, @empty]}, @cipso={0x86, 0x43, 0x0, [{0x2, 0xd, "de097577099f99e5031f16"}, {0x6, 0x9, "a389aae811f3b7"}, {0x2, 0x3, "aa"}, {0xde00b2711657568, 0xa, "42734c2853489075"}, {0x7, 0x8, "11346a69bfbc"}, {0x7, 0x12, "ea7bca2a5afce0b1c71c1c1a5173f15e"}]}, @timestamp_addr={0x44, 0x44, 0xa9, 0x1, 0x3, [{@multicast1}, {@multicast2, 0xdfdb}, {@loopback, 0x986c}, {@multicast1, 0xfffffffc}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x80000000}, {@private=0xa010102, 0x1}]}, @lsrr={0x83, 0xf, 0xbd, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0xc}]}, @end]}}, {0x1f, 0x7, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "866d6b9ab24fb151c052e34c1f87ed2e950370934d131e58ee41548300aa5c4ba7b3a7ed19ce905428ff4b96d2524b80e364521239cccb382ca6767e4eef7c462041a2d940fccbbd9cfa459635e56418bbb8698dde6787b025355ba65d766884820e00622359bdbec2b49da4a858ea24a939736601bb83094ab647d74f3fc7866c135300550e284337398bf7a790122a800383e6e7f1c3e38e367f64884b5ecc132a327a2f7c8880b2b81cee899404f133ae5313574db87cf233995cfb4ecf2aaf4803f40efb25261067a3a7b41a2bae815eccbcce6d7281f003e94a57a1796828504a4a7a8b523fceaa4e2520859a2cb2"}}}}}, &(0x7f0000000140)={0x0, 0x2, [0xccf, 0xd10, 0x9ed, 0xbfa]}) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) 2m13.621644419s ago: executing program 33 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) syz_usb_connect$uac1(0x5, 0xcc, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x2b39f7554a08fa9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3, 0x70, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf090, 0x2}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x3, 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0xd], 0x8}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0x7, 0x4, 0xa], 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x7ff, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x1, 0x2, [0x8, 0x9], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x10, 0x4, 0x3, 0x40, "faac", "88a4ce"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0xce, "cc88", "72066f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x9, 0xa7, {0x7, 0x25, 0x1, 0x0, 0xb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, "6d31d6"}, @as_header={0x7, 0x24, 0x1, 0x94, 0x6, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5, 0x67, 0x4, {0x7, 0x25, 0x1, 0x3, 0x6, 0xc}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x70, 0x6, 0x2, 0x8, 0x6}, 0x67, &(0x7f0000000900)={0x5, 0xf, 0x67, 0x4, [@generic={0x44, 0x10, 0x4, "c100babe615a12fc71a1a4dbb5c60b7d3e40d3bb90db7feb92c27221776aa85caba50a4e777bd01277d75dce19191018dc4907aaf713eeea53e7c1b27c22e48f60"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0xf9, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x3e, 0x4, 0x5}]}, 0x1, [{0x54, &(0x7f0000000980)=@string={0x54, 0x3, "38abc01fa256010903d8924ac9fb645457a3405d99683625b2898241ef953bd47a1fb31bcfa0e394c4fb6c9fdfd56a82a9dd1bcb1acc708a891bd2243d497b57829bcd14ced575d4b3e7ba4fc36ccfdc9021"}}]}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r9, r10, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES32=r10, @ANYBLOB=',version=9p2000.L,euid<', @ANYRES16=0x0, @ANYBLOB="2c66736d616769633d307830b863e33e2411e319b68963eb45be6b6b3030304de47af4", @ANYRESDEC=r7, @ANYBLOB=',euid<', @ANYRESDEC=r9, @ANYBLOB="2c6673757569643d31ffbdac5e836b112c36663766665d2d393065612d3131366463346439c2c0e7713543e69c3feef2d62fb621bab6ce21505c339bd56815769e052ef892243f6a0f4972e741ff4e74ed7ba4dbc8", @ANYRESDEC=r3, @ANYRES32=r5]) syz_emit_ethernet(0x26b, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="62182ebea5cc", @void, {@ipv4={0x800, @igmp={{0x59, 0x4, 0x3, 0x9, 0x25d, 0x66, 0x0, 0xe, 0x2, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x10, "352db7b037b37d8133d35b173f92"}, {0x1, 0xd, "14893bab9e237c577bb10f"}, {0x0, 0x5, "d99671"}]}, @cipso={0x86, 0x58, 0xffffffffffffffff, [{0x2, 0xb, "6d195e392139c10465"}, {0x0, 0xa, "0ae5436e5cd4291d"}, {0x6, 0x12, "cd19631f00bc82b452a8a51de662d9f6"}, {0x0, 0x5, "a02b31"}, {0x2, 0xe, "eef4fc8cea1bf011b46a47fb"}, {0x1, 0xa, "ca22fa26ca8f4a49"}, {0x2, 0xe, "f00b11f29baacba33f93479e"}]}, @lsrr={0x83, 0x7, 0x74, [@multicast1]}, @generic={0x89, 0x8, "b244dd72f343"}, @lsrr={0x83, 0x1f, 0x89, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @private=0xa010100, @multicast2, @empty]}, @cipso={0x86, 0x43, 0x0, [{0x2, 0xd, "de097577099f99e5031f16"}, {0x6, 0x9, "a389aae811f3b7"}, {0x2, 0x3, "aa"}, {0xde00b2711657568, 0xa, "42734c2853489075"}, {0x7, 0x8, "11346a69bfbc"}, {0x7, 0x12, "ea7bca2a5afce0b1c71c1c1a5173f15e"}]}, @timestamp_addr={0x44, 0x44, 0xa9, 0x1, 0x3, [{@multicast1}, {@multicast2, 0xdfdb}, {@loopback, 0x986c}, {@multicast1, 0xfffffffc}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x80000000}, {@private=0xa010102, 0x1}]}, @lsrr={0x83, 0xf, 0xbd, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0xc}]}, @end]}}, {0x1f, 0x7, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "866d6b9ab24fb151c052e34c1f87ed2e950370934d131e58ee41548300aa5c4ba7b3a7ed19ce905428ff4b96d2524b80e364521239cccb382ca6767e4eef7c462041a2d940fccbbd9cfa459635e56418bbb8698dde6787b025355ba65d766884820e00622359bdbec2b49da4a858ea24a939736601bb83094ab647d74f3fc7866c135300550e284337398bf7a790122a800383e6e7f1c3e38e367f64884b5ecc132a327a2f7c8880b2b81cee899404f133ae5313574db87cf233995cfb4ecf2aaf4803f40efb25261067a3a7b41a2bae815eccbcce6d7281f003e94a57a1796828504a4a7a8b523fceaa4e2520859a2cb2"}}}}}, &(0x7f0000000140)={0x0, 0x2, [0xccf, 0xd10, 0x9ed, 0xbfa]}) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) 1m47.082272259s ago: executing program 3 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x1ffffffffffffed8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[], [], 0x3a}) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[], [], 0x3a}) madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) socket$kcm(0x10, 0x2, 0x10) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0xffe2, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x40080) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0xffe2, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x40080) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=0xee00, @ANYBLOB="040005000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="100001000000000020c0578b26ea3ddf"], 0x5c, 0x1) 1m46.977707536s ago: executing program 3 (id=1017): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1], 0x1c}}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0xc6400, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = dup(0xffffffffffffffff) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000480)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) write$sequencer(r0, &(0x7f00000000c0)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) 1m46.823643453s ago: executing program 3 (id=1018): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x2, 0xc8}}}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x600) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x3, 0x5) 1m46.822088945s ago: executing program 3 (id=1019): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/1551], 0x574}) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x4) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000240)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x200100c1}, 0x0) syz_io_uring_setup(0x5a4f, &(0x7f0000000380)={0x0, 0x58d5, 0x1, 0x3, 0x2cd}, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe) (async) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe) capset(&(0x7f0000000280)={0x20080522, r2}, &(0x7f00000000c0)={0x4, 0x92, 0x5, 0x3, 0x1, 0x3ff}) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x4000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x4000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m46.722650795s ago: executing program 3 (id=1020): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x25}, 0x60) close(r0) syz_emit_ethernet(0x56, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[@dstopts={0x2f}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0xa4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"00000000000000000200"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x1080}]}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000000300)="1a", 0x1, 0x4}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0xfff, 0x7, 0x3, 0x1}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x24044880) chdir(&(0x7f0000000180)='./file0\x00') sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x800) setxattr$incfs_metadata(&(0x7f0000000000)='\x00', &(0x7f0000000080), &(0x7f0000000100)="b889822c6e53760a1d7803de42d8d7f20dff813a6c320eff53aa2374f3be9529051926b58401e89b2f216d00316460700b93d5ea1ce8005c413f41166f845a5f9dab415de5", 0x45, 0x3) 1m44.373465013s ago: executing program 3 (id=1048): syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 1m44.279599142s ago: executing program 34 (id=1048): syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 50.34890493s ago: executing program 2 (id=1782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000000080)="3550d557b089df49683a293af177104545026b0393f9b25543175e3d336a6b1adbc85695bcc449e93b64c158cf471119fe859481cc90aee8978709c2425cd61d853290a7b579c35a625df497", 0x4c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240)=0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.211732511s ago: executing program 2 (id=1785): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = open(0x0, 0x0, 0x6f) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400), 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x40}]}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@flushsa={0xb0, 0x1c, 0x2, 0x70bd2b, 0x25dfdbfb, {0x33}, [@algo_auth_trunc={0x71, 0x14, {{'sha3-512\x00'}, 0x128, 0x80, "26cb5a760692fb101d8eb2ddae5129f779f1af6a7b835a080596a04b1c04f71b4ddd7cd72b"}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@remote, 0x2, 0x4, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="c6"}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r9, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 49.341665789s ago: executing program 2 (id=1793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) munmap(&(0x7f0000fef000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000800000c0"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x101ff, 0xc0, 0x140, &(0x7f00000006c0)=[0x400, 0x9, 0x2, 0xb, 0x8, 0x2, 0x39, 0x2, 0xfe, 0x0, 0x8, 0xfffffffffffffffa, 0x2, 0x8, 0x7, 0xa, 0x7, 0x9, 0x2, 0x8, 0x8, 0x9c, 0x1, 0x6998, 0xd4c, 0x0, 0xd96, 0x9, 0x5, 0x1ff, 0x5, 0x5, 0xd3e, 0x8000, 0xf, 0x1, 0x4, 0xff, 0x9, 0x0, 0x7fff, 0x5, 0x7f, 0x6, 0x6, 0x5, 0xc, 0x1, 0xa3b, 0x2c, 0x9, 0x8, 0x1, 0xa00000000000, 0xfff, 0x101, 0x7f, 0x5, 0x5af0000000000000, 0x9, 0x6, 0x9, 0x8000, 0x453377d8, 0x3, 0x6, 0x8b5, 0x6, 0xffffffffffffffff, 0x401, 0x6, 0x80000000, 0x3, 0x3, 0xfffffffffffffffa, 0x2, 0xfff, 0x7, 0x492c, 0x63, 0x3, 0xd69, 0x4, 0x10000, 0x1, 0x0, 0x200, 0x2, 0x0, 0x4, 0xc698, 0x1, 0xfffffffffffffffb, 0x1ff, 0x2, 0xffffffffffffffff, 0x2b7, 0x7fffffff, 0x6, 0x5, 0x7ff, 0x4, 0x7ff, 0xfff, 0x2, 0x6, 0x0, 0xa, 0xf, 0x9, 0xc, 0x9, 0x4, 0x7, 0x7fffffffffffffff, 0x8a, 0x9, 0x100, 0x547, 0x1, 0xf, 0x7fffffffffffffff, 0x7, 0x5, 0x1f6a, 0x6, 0x8, 0x1]}) 49.213394298s ago: executing program 2 (id=1796): r0 = syz_open_dev$I2C(&(0x7f0000002400), 0xa, 0x480) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x42201, 0x110}, 0x18) mknodat$loop(r1, &(0x7f0000000080)='.\x00', 0x202, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000002480)={0x0, 0x6, 0x7, &(0x7f0000002440)={0x19, "0e8222606612b745338752553a42f61981a54d27ce3a4313c752f3f77a1c2155bb"}}) syz_open_dev$I2C(&(0x7f0000002400), 0xa, 0x480) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x42201, 0x110}, 0x18) (async) mknodat$loop(r1, &(0x7f0000000080)='.\x00', 0x202, 0x0) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000002480)={0x0, 0x6, 0x7, &(0x7f0000002440)={0x19, "0e8222606612b745338752553a42f61981a54d27ce3a4313c752f3f77a1c2155bb"}}) (async) 49.21316414s ago: executing program 2 (id=1797): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x408000000, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f00000000c0)=0x70000000000, 0x12) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0xfc, 0x5, 0xff}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES16, @ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 49.15316355s ago: executing program 2 (id=1798): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80) (async, rerun: 64) writev(r2, &(0x7f0000000900)=[{&(0x7f000000ce80)="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", 0x1000}, {&(0x7f0000000400)="6c3d2349513bd8c820bb70057adeea4ddcb933f00fb5ed066440f0ed64c273d290b563454a392875b2d8ab0abb88cb20b63c01b90629c2a194c62f6a95ca6037f40ea4a3c26ce1824e98d7d1d23a4aea1eb30a340193dca4bb01f6f2c204d2d8db521402c8bb99f74915507afcec031f2bfce1c0b9a578b2aecfc0d06fb18a96fe3a51", 0x83}, {&(0x7f00000009c0)="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", 0x1e0}, {&(0x7f0000000340)="080b15f2da1317a5e141a61c8fd039d4e746a269cf35ae1fe22f9c9d1440756c970b7807b7b7df7b45f7e58fedd93988d3f2c51d8f6b0a85c44c23b87defde1d703f1efe0b0fd41a90d7907ad7", 0x4d}, {&(0x7f0000000100)="7d371617e1d619daed3ad0ef6a77f2e07b8668be0d37827136c3247e8b9a8a337acd70fcc57ed209ea5dd051ee", 0x2d}, {&(0x7f0000000200)="74011294bbcf5195431815a9e7df1cd4ee91070e60cc98cc701ec911a30f838d7ed8acb5a2b2e50c6c0c7334bf07f44c9a66971021fe759f3d0f38fdb409a18a529341e2be0660846b68bbc031fc51e647771b32f1f7ca1f1f9885e117aa6227df4e3320f7a16c6aa524b19ce1f0c2e7ba658dedc6912edb5cc5029024ac4b97605db822a52ff218d5974a69743042a6b213ee8c061e77f83ed648b4a648db4a92b280bbf06a2786f9", 0xa9}, {&(0x7f0000000740)="07621371d713484cdd5499a34f6dc0e7657c4e34b7c7e80d3196cac821b0197ffc8f268e3833b60af42e7d57550286fdc72807922317c908c6989f3a47149234dd09d8c07541b5d354d797ba664467c741f77b0d8113a542cf00c9bc289d68045381cecd6576f70556bfa12a70962d1772a378131e04e2810a4ccfb7f86d008acb4987363c4e997c24533d7b0ba65dada26d96fcb750c7eba27b21997d2644e7d3367c2789158bf608023a0a3477ce16e7070945e21936068294d333c651b6218ea4f34e9cc0091740d5703843292d3eeab5625110806803e3a493e880a69050a5a72bc3eaca1f52b01445c3c053999fb669dfde3bb48446", 0xf8}, {&(0x7f00000000c0)="54b8ba5c89a73859b0df875dc28110f64de72ab0b0cb46", 0x17}, {&(0x7f000000de80)="59a83cad8f878588cb5d214a45c0a2b78b413ddc55c0938205630fdb84ee4d29141cf68f14b8321d0ff25524dda7487244e09fea2903bca40ca6b4a7c5733e2f24e9482ca011ca284d8d6a74850bf74d7832d9fce0f1289caa46c559977e2249ff2ed0c729a7416c970705f17d9bce79ddea4844526ba7986fecc0d8bad08d5df2c363b453056c2c8b6ac8f357fda1193eafd3587bfca3a7afe330026dc22b001c0accb953ee20b320feda20077ac62761748fa9154e73ea04ede198e4fc046e2c7cec2d4cb7342d6ea7796156981f5b365251a28c9a21c30165d22f93fc82d0303176b06bbd4201b1d3454a2ebed5dcc8692c165fc4c428d1e24747f272d98312aac58023c831ab2bef401b17093517ebbe248ae1474e6d96fdf3eb136770bb3787d1646b8ef3498df9918d33daf0d327dc45fd2237d0fc25d58af55f25bbdba622ea77aa9f457278617e4b622cb8a6f765e0c4392224706a1c8d3330ada95f51ccb4a7ca45671fa10006678308154f6072d249db47ac23eea254d5a97508ce03a933d07a8eb941159340fd53c676ea0a9430fab10a5633182de5e98dd423e60012e6507f04122e9eb7e56a0da11972f1c75e8569b878c7ec79af05d0b8460d6022397c780109bdf8f79b4619cebb07cbec825633e1327df7ed5f39f437d91a25ed43fbb1f36747eda44e29f2d8585ba0989d1e5803ab50e407bba077d03e32c10f579c3c16a7ba68fc5c9e27b002747f7d0fc150c34912935d6a7b7570b063bd41b35e4fed270f10d37719d6992d2d01a44cdc937eb2c06f6030108cc6edb3b762f17610ca4dc2d8454103d740895e3e14d5db960e7e565df9d53813b930114e3412704bbeabf0cd8c67d3f3d26534a18ea909675dc86d82b1dc8b55d031296c5701e6010d64bb1544c6327cf1e74dafa3935dd33732c6e7c93b057092f69ad353c1d10c7b32a3c182a16bf584219c19d90fc641a7a1bc7564117de930ea19a0c18e882caa2510cff16b2ca09f3123f8a8668be7209a78a9b8d05616a62caeca2ea0d65ba00dbee8bfe1b736955118caf946bff8559b162a1da7bbec1dd974656c52f10c78b6cc4fbe27c31a3ef7a0a751b86cebb000aba74a95419b2b1f2ef06bab5b7984f0b7ba0dbfc01394cbe7b50ee340f971b12974e2020a1558695d5e7854b799d6806394b5aa5fcf62a3b61ce479503ad5f21ea5208d3476b1c39b090395f8a3c8b9a9469d15ed4248d11bd073bff4b89a2c41edc0787b3b648e9cbc72f314985ba75567143e0f6546a45805b154241dd1098a91a039265737cc8e70991b3dfc18aaab2766159d312938ee00b417faf330eb9dc04eb6d2189ee47369cd81d90ba9c742bd7ccb9485fe7f4b8b730a69cfd8cd13b224c614a2a96e35cc2c79e119a161af0ce9b6241c8d913743fb2951e0b2d426eccea96e8b5a7c522ab049c5c40b8439ce1087b55d058fca3bc4f1bba98440a345fec3f87b614c57c2e0cd306ef46df9a34391ae105733ea1a73c1de3cac01e8a51946b3f8edaef1d5f90a953360b89ecec30cf5e26db409f6fc96adba4527656b4f55222f0d9564c57480b567e18f5b1b02bfb4e47925431819c5e5bceddb4d07b0198a5df3ab8f5c84d10fe1dfa93c1464d94e1468919040084e87934a1b17b69825cad653f95cbbf72765ee6b94e2cfd3a41066e0960aa34574b24c7a6f07a4fd9f2857613a8622122562b89e21b82a2821aaa57dd3850212d7e837d3174af399082065b727eca38d590b773494e357785642068af71ed960894c194c67497948ef27b61328658a04cc35cd135595a98e399ef3adf7952c39768b6d65c7fa9ddf8e71e5481f308cc94c1e66cf940f94b12b6498ad844400296cb550096d17b27399a8543c05fd19bb491d7e4a6aeaa886d07d494a0579ea1bb802ebce77e3bb757ff812bce1197649eea326711176249313706126ad3cb57ee16c66678d37a6b0435be004a816aec3743f69ada5955bc6712c1f29db609d40c4cb8092081e1f176fefa77ec6f00895bfe85d14aeafcc61f7f42c790916403548623ae18a39025d071ac22a7b9f0e383e187a0523b5a5baeae270297d0bfae207ddfde5e00e79a2a35c0e331a8ff8f5276f43de297e5f31a96e66090f2d9df7b177dd81be2584919fae7ad21968b7f49d8665c3f78faf8ee52150ef01281aa1febf66b8b116e35f60513dd7206062ad13823435a885776974136f6594aaa397331cf734e247345bc6ce0e06e25170790b8656b1b87a006897b635e67348f9420d2acf527056b851f45cd7c59c2f2933e17d0d6f0846f4432adcfea1861cde6805982866145775e88c8ed1ad7e701c83ae4f60d361307a375f53b213eec38a70a2b1eb6b954aafa27a6919ce1ab059a8d6f72b3931d6e12b0c515c5b88bded9f43792d84791aff21832602c1decf8ac1eaaf44ca3ca53cc111ec93e86d94b9d31efb0556532b65be4448d51cb8da8fcbf2e9bda721f47353f1b7c5a0c35b97467cbaba5ff5df1684fc80c16065cb25c55d9fe271638ef928a1058f10ddbcae2ca7e900d4cb9c8c4eb63c838b76243b3f04b75e8771db3e050a05cf105c22723a964a564c809b1f7f89d9ca97513737fca3ab508b1739c08a9ecc580625bbb2fac624d2befb32c2f0904dc95e4bfe4cc578da3e25e819e4f1f0e809ce5ac869a0be4fe2d56aa62682b410241dd213e62a876b67bd76a908a04c243b56f27e998938ff59ceeb13a313dfb490b711087ed48e20fc55553dd0801fc3b41f4705cc12aac1c6a31dec4c60241f0e3d75fe06db4269eb3efa9dad1292e44daffe934d6c2d5117d101e356801cf1f03bff1c582d1288a8aaecaff1d6eb6471b17c561a5396727bc5c5400ce24298368c91ccf1572edace680fc1400e7829f9cb77a6006d2797806cab65eb014264300ab0ecf4ed4522ef248970567731276500967006421d019c3e96eb7ee1621939ea9f551799a9da287fcadfcdc8edf0e2dac4ef2fe874802c0eb19bca5f39189f716fdcb04f802be8ca4daac0a711e03dca87659f4b84de93ef3bcb7945432dbf2a2fbd757c23f3848b5ae10f9a962375b9c875aa1a477e9f4904aa04ce6f5b2b1ea863f8a50f8fb11248eb7c3ac9159a03ff0a4a8bff5e736cac0e8fc5ddf789504e7038ad8fb830cee9122f773d22c1945a53670c736bd000966f8539a16392cb201b17fcbc8e2478017b1ab6d4ce05dfff898cfadffef33df49b516b4005328c61d6fef04ac2acac9ca66c19349ef4be497e6b34d15c5e48830fe3c4357bebd79a0268eb1d6b61bd12e727fcedd64c9e9f69c013e84a78434fef2f9bc006431eda253bf82bdaa8be33093e6f9928b9fd45379b945463391d5fe163ca48af5148a5eab48c8856f28f9dabc46c65c8287c2e1e0957398100b467daf977e4946bb3eec2a5a302e36604cb7ad1834b133d1c4da1f70bc7793f04267960997361bac6f0ff724dc5970ab783c435a39bc76250da5a5dbfcae24eac440adc0c889373e5024bcfc3653d835b8690ff7fade7c6e318b811f7fd728d9a750f95e487624093a8417eee77da2846a99e10d25eddb9844abaa450fb155c0f8ca58ffa6a648616e77d5e1a1bdb53497bc51c712ff42479912ee8a8b21166ca99e907903842dc69bd505aae9dbc9a59e5302275a9822ae96be86e963c343d63a0696844eede124bbaf797d39b90f564f241c61bff32b7c074f578d26ba7a06eff40eb8007cfb44bc9368eca6e22cc49dfa0f0dcf4427bc8efa657dc2309c39df588ac06d095d3d869220b4e7a29a68a24be522a9e4a940223f505c2a59f21fcef495c339c84fddd71643ba1e5eff90ae4f4424e89563c7fb51fe8e7cef2a6bc534e236ebb3a39d12d8baadeeab2ac9c5604b2ededc55dfa4ba19754a1f92dbf2700d543ad6d11f5a18d3534eb81fde77c85aa2b07fc1b0809525bc56c17242df1ae6d7f2e89fc62e8435fb3e0ac27a5fb08e059100468852032095d788f48ff580a8af968b84473eacadc7860e2df4fdcc96044b3fad737bd245ccd196dbc30c96b6ac3d93c4e4b0583e42a2561ad3fdebb1f3c13f3be11d446f176d18fceea0043ad062031be199772e5c39518543d156b591f1ffc8dfec9356b5f26cd6b4f58c2652557df1a15ca5891754885c7d5851d859add1d3472422935f499f26df67954591231e2686f275fee309d4e5d55052eb8f55b568143140df990041f0d59ec48be8bfeda9fe2696aab713dc082436717bb8837e3b767f036e2e460eb661476507b978259784cbdf045993708fdf839f9842156eb8a5e979899fcae2b862461dd1e1e8dc2c30b077ca0215d77cea7f12651084790dad6bc460229952e596bafd81568ec84ea6ad1f0f56f9afcebcf90578938e02e9c5d2cfbc2d9ebee7d555f72ade8a6f38e7f783c12d4a842b466cfda3dc8a193c19905a9d3e03f827139e46eb589a0990aa58f33610d5224d949af1db5dcfb45ab5047801a97d4fbe3ed261cfc9262fc664a4f24e4081cc1270e0000000000000086fe39eecda985e8673eed627479f068ee69d9fcd1848e576038406f5944e8a2dc64a0315ad83dbc5d95f1aec0c510a14b79a3d767b3d168edfadc24b3cd79a38f88c147cf7a015d77cb141e8c1e0abc208afb845c0e07758bd2c97a1ae1175b9b41c2b2eb395904ed41952c20a553c8fcc3d339", 0xd01}], 0x9) (async, rerun: 64) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async, rerun: 64) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (rerun: 64) 34.147243347s ago: executing program 35 (id=1798): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x80) (async, rerun: 64) writev(r2, &(0x7f0000000900)=[{&(0x7f000000ce80)="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", 0x1000}, {&(0x7f0000000400)="6c3d2349513bd8c820bb70057adeea4ddcb933f00fb5ed066440f0ed64c273d290b563454a392875b2d8ab0abb88cb20b63c01b90629c2a194c62f6a95ca6037f40ea4a3c26ce1824e98d7d1d23a4aea1eb30a340193dca4bb01f6f2c204d2d8db521402c8bb99f74915507afcec031f2bfce1c0b9a578b2aecfc0d06fb18a96fe3a51", 0x83}, {&(0x7f00000009c0)="8e076bb66054915a2224dde934afd6817386fec2f7b5254334aaafeade34ea22bc5e7e422f1d26bf33e690acadb3dead426cc5dbfbdad2b6c3148019deab23257a43adc0e43c90f22d6305e435c726cdfdc3cf6bc771804427cf2c864085fef87765f13bf9f4c9e13cb6a940869dd148264a6c5043c07089ecb73796a259bd5d9abc2ea8ce9fe69de6bfb557c0e56f8ebd76d627f9ba2f489020bda40c2dedc7762d4bb05d3577b1500000000001000000bb8eeb9a76026bd493f19c831b1b9ad77d800e4a1eff8c0d82d18c7ae2e14042a570acf204c3f7f909c99954203d98ce2b028dd38ff1047062983de608df8e4b34fc61597ef216e6c30e8aa426ea750e57a17501de995afc4797191e00847cec3b710c829ba78291a1b2d372faab9072a1d9e8a018930663afcf40296c0cd01a2dae5237e543bfb70dc635eed3b290c2d6466892df9a0384aeecf668c3c9987ce9881ba804b902000000000000002e79f503f3b919a6fc2e8aa3a9f541690132328876468db1d5550afeb0d079c006d933e1a7e7d4a99f61e640729d225b94607b0bb04441de5a4cd5c8f8e6df356a6b8717b779eb641b542ec0271361af0f4cc34a55086b72c15c051650006f4c636278975541892c864a20e77ab23dd46e2a14c7a294445400f6923e5df9b60073", 0x1e0}, {&(0x7f0000000340)="080b15f2da1317a5e141a61c8fd039d4e746a269cf35ae1fe22f9c9d1440756c970b7807b7b7df7b45f7e58fedd93988d3f2c51d8f6b0a85c44c23b87defde1d703f1efe0b0fd41a90d7907ad7", 0x4d}, {&(0x7f0000000100)="7d371617e1d619daed3ad0ef6a77f2e07b8668be0d37827136c3247e8b9a8a337acd70fcc57ed209ea5dd051ee", 0x2d}, {&(0x7f0000000200)="74011294bbcf5195431815a9e7df1cd4ee91070e60cc98cc701ec911a30f838d7ed8acb5a2b2e50c6c0c7334bf07f44c9a66971021fe759f3d0f38fdb409a18a529341e2be0660846b68bbc031fc51e647771b32f1f7ca1f1f9885e117aa6227df4e3320f7a16c6aa524b19ce1f0c2e7ba658dedc6912edb5cc5029024ac4b97605db822a52ff218d5974a69743042a6b213ee8c061e77f83ed648b4a648db4a92b280bbf06a2786f9", 0xa9}, {&(0x7f0000000740)="07621371d713484cdd5499a34f6dc0e7657c4e34b7c7e80d3196cac821b0197ffc8f268e3833b60af42e7d57550286fdc72807922317c908c6989f3a47149234dd09d8c07541b5d354d797ba664467c741f77b0d8113a542cf00c9bc289d68045381cecd6576f70556bfa12a70962d1772a378131e04e2810a4ccfb7f86d008acb4987363c4e997c24533d7b0ba65dada26d96fcb750c7eba27b21997d2644e7d3367c2789158bf608023a0a3477ce16e7070945e21936068294d333c651b6218ea4f34e9cc0091740d5703843292d3eeab5625110806803e3a493e880a69050a5a72bc3eaca1f52b01445c3c053999fb669dfde3bb48446", 0xf8}, {&(0x7f00000000c0)="54b8ba5c89a73859b0df875dc28110f64de72ab0b0cb46", 0x17}, {&(0x7f000000de80)="59a83cad8f878588cb5d214a45c0a2b78b413ddc55c0938205630fdb84ee4d29141cf68f14b8321d0ff25524dda7487244e09fea2903bca40ca6b4a7c5733e2f24e9482ca011ca284d8d6a74850bf74d7832d9fce0f1289caa46c559977e2249ff2ed0c729a7416c970705f17d9bce79ddea4844526ba7986fecc0d8bad08d5df2c363b453056c2c8b6ac8f357fda1193eafd3587bfca3a7afe330026dc22b001c0accb953ee20b320feda20077ac62761748fa9154e73ea04ede198e4fc046e2c7cec2d4cb7342d6ea7796156981f5b365251a28c9a21c30165d22f93fc82d0303176b06bbd4201b1d3454a2ebed5dcc8692c165fc4c428d1e24747f272d98312aac58023c831ab2bef401b17093517ebbe248ae1474e6d96fdf3eb136770bb3787d1646b8ef3498df9918d33daf0d327dc45fd2237d0fc25d58af55f25bbdba622ea77aa9f457278617e4b622cb8a6f765e0c4392224706a1c8d3330ada95f51ccb4a7ca45671fa10006678308154f6072d249db47ac23eea254d5a97508ce03a933d07a8eb941159340fd53c676ea0a9430fab10a5633182de5e98dd423e60012e6507f04122e9eb7e56a0da11972f1c75e8569b878c7ec79af05d0b8460d6022397c780109bdf8f79b4619cebb07cbec825633e1327df7ed5f39f437d91a25ed43fbb1f36747eda44e29f2d8585ba0989d1e5803ab50e407bba077d03e32c10f579c3c16a7ba68fc5c9e27b002747f7d0fc150c34912935d6a7b7570b063bd41b35e4fed270f10d37719d6992d2d01a44cdc937eb2c06f6030108cc6edb3b762f17610ca4dc2d8454103d740895e3e14d5db960e7e565df9d53813b930114e3412704bbeabf0cd8c67d3f3d26534a18ea909675dc86d82b1dc8b55d031296c5701e6010d64bb1544c6327cf1e74dafa3935dd33732c6e7c93b057092f69ad353c1d10c7b32a3c182a16bf584219c19d90fc641a7a1bc7564117de930ea19a0c18e882caa2510cff16b2ca09f3123f8a8668be7209a78a9b8d05616a62caeca2ea0d65ba00dbee8bfe1b736955118caf946bff8559b162a1da7bbec1dd974656c52f10c78b6cc4fbe27c31a3ef7a0a751b86cebb000aba74a95419b2b1f2ef06bab5b7984f0b7ba0dbfc01394cbe7b50ee340f971b12974e2020a1558695d5e7854b799d6806394b5aa5fcf62a3b61ce479503ad5f21ea5208d3476b1c39b090395f8a3c8b9a9469d15ed4248d11bd073bff4b89a2c41edc0787b3b648e9cbc72f314985ba75567143e0f6546a45805b154241dd1098a91a039265737cc8e70991b3dfc18aaab2766159d312938ee00b417faf330eb9dc04eb6d2189ee47369cd81d90ba9c742bd7ccb9485fe7f4b8b730a69cfd8cd13b224c614a2a96e35cc2c79e119a161af0ce9b6241c8d913743fb2951e0b2d426eccea96e8b5a7c522ab049c5c40b8439ce1087b55d058fca3bc4f1bba98440a345fec3f87b614c57c2e0cd306ef46df9a34391ae105733ea1a73c1de3cac01e8a51946b3f8edaef1d5f90a953360b89ecec30cf5e26db409f6fc96adba4527656b4f55222f0d9564c57480b567e18f5b1b02bfb4e47925431819c5e5bceddb4d07b0198a5df3ab8f5c84d10fe1dfa93c1464d94e1468919040084e87934a1b17b69825cad653f95cbbf72765ee6b94e2cfd3a41066e0960aa34574b24c7a6f07a4fd9f2857613a8622122562b89e21b82a2821aaa57dd3850212d7e837d3174af399082065b727eca38d590b773494e357785642068af71ed960894c194c67497948ef27b61328658a04cc35cd135595a98e399ef3adf7952c39768b6d65c7fa9ddf8e71e5481f308cc94c1e66cf940f94b12b6498ad844400296cb550096d17b27399a8543c05fd19bb491d7e4a6aeaa886d07d494a0579ea1bb802ebce77e3bb757ff812bce1197649eea326711176249313706126ad3cb57ee16c66678d37a6b0435be004a816aec3743f69ada5955bc6712c1f29db609d40c4cb8092081e1f176fefa77ec6f00895bfe85d14aeafcc61f7f42c790916403548623ae18a39025d071ac22a7b9f0e383e187a0523b5a5baeae270297d0bfae207ddfde5e00e79a2a35c0e331a8ff8f5276f43de297e5f31a96e66090f2d9df7b177dd81be2584919fae7ad21968b7f49d8665c3f78faf8ee52150ef01281aa1febf66b8b116e35f60513dd7206062ad13823435a885776974136f6594aaa397331cf734e247345bc6ce0e06e25170790b8656b1b87a006897b635e67348f9420d2acf527056b851f45cd7c59c2f2933e17d0d6f0846f4432adcfea1861cde6805982866145775e88c8ed1ad7e701c83ae4f60d361307a375f53b213eec38a70a2b1eb6b954aafa27a6919ce1ab059a8d6f72b3931d6e12b0c515c5b88bded9f43792d84791aff21832602c1decf8ac1eaaf44ca3ca53cc111ec93e86d94b9d31efb0556532b65be4448d51cb8da8fcbf2e9bda721f47353f1b7c5a0c35b97467cbaba5ff5df1684fc80c16065cb25c55d9fe271638ef928a1058f10ddbcae2ca7e900d4cb9c8c4eb63c838b76243b3f04b75e8771db3e050a05cf105c22723a964a564c809b1f7f89d9ca97513737fca3ab508b1739c08a9ecc580625bbb2fac624d2befb32c2f0904dc95e4bfe4cc578da3e25e819e4f1f0e809ce5ac869a0be4fe2d56aa62682b410241dd213e62a876b67bd76a908a04c243b56f27e998938ff59ceeb13a313dfb490b711087ed48e20fc55553dd0801fc3b41f4705cc12aac1c6a31dec4c60241f0e3d75fe06db4269eb3efa9dad1292e44daffe934d6c2d5117d101e356801cf1f03bff1c582d1288a8aaecaff1d6eb6471b17c561a5396727bc5c5400ce24298368c91ccf1572edace680fc1400e7829f9cb77a6006d2797806cab65eb014264300ab0ecf4ed4522ef248970567731276500967006421d019c3e96eb7ee1621939ea9f551799a9da287fcadfcdc8edf0e2dac4ef2fe874802c0eb19bca5f39189f716fdcb04f802be8ca4daac0a711e03dca87659f4b84de93ef3bcb7945432dbf2a2fbd757c23f3848b5ae10f9a962375b9c875aa1a477e9f4904aa04ce6f5b2b1ea863f8a50f8fb11248eb7c3ac9159a03ff0a4a8bff5e736cac0e8fc5ddf789504e7038ad8fb830cee9122f773d22c1945a53670c736bd000966f8539a16392cb201b17fcbc8e2478017b1ab6d4ce05dfff898cfadffef33df49b516b4005328c61d6fef04ac2acac9ca66c19349ef4be497e6b34d15c5e48830fe3c4357bebd79a0268eb1d6b61bd12e727fcedd64c9e9f69c013e84a78434fef2f9bc006431eda253bf82bdaa8be33093e6f9928b9fd45379b945463391d5fe163ca48af5148a5eab48c8856f28f9dabc46c65c8287c2e1e0957398100b467daf977e4946bb3eec2a5a302e36604cb7ad1834b133d1c4da1f70bc7793f04267960997361bac6f0ff724dc5970ab783c435a39bc76250da5a5dbfcae24eac440adc0c889373e5024bcfc3653d835b8690ff7fade7c6e318b811f7fd728d9a750f95e487624093a8417eee77da2846a99e10d25eddb9844abaa450fb155c0f8ca58ffa6a648616e77d5e1a1bdb53497bc51c712ff42479912ee8a8b21166ca99e907903842dc69bd505aae9dbc9a59e5302275a9822ae96be86e963c343d63a0696844eede124bbaf797d39b90f564f241c61bff32b7c074f578d26ba7a06eff40eb8007cfb44bc9368eca6e22cc49dfa0f0dcf4427bc8efa657dc2309c39df588ac06d095d3d869220b4e7a29a68a24be522a9e4a940223f505c2a59f21fcef495c339c84fddd71643ba1e5eff90ae4f4424e89563c7fb51fe8e7cef2a6bc534e236ebb3a39d12d8baadeeab2ac9c5604b2ededc55dfa4ba19754a1f92dbf2700d543ad6d11f5a18d3534eb81fde77c85aa2b07fc1b0809525bc56c17242df1ae6d7f2e89fc62e8435fb3e0ac27a5fb08e059100468852032095d788f48ff580a8af968b84473eacadc7860e2df4fdcc96044b3fad737bd245ccd196dbc30c96b6ac3d93c4e4b0583e42a2561ad3fdebb1f3c13f3be11d446f176d18fceea0043ad062031be199772e5c39518543d156b591f1ffc8dfec9356b5f26cd6b4f58c2652557df1a15ca5891754885c7d5851d859add1d3472422935f499f26df67954591231e2686f275fee309d4e5d55052eb8f55b568143140df990041f0d59ec48be8bfeda9fe2696aab713dc082436717bb8837e3b767f036e2e460eb661476507b978259784cbdf045993708fdf839f9842156eb8a5e979899fcae2b862461dd1e1e8dc2c30b077ca0215d77cea7f12651084790dad6bc460229952e596bafd81568ec84ea6ad1f0f56f9afcebcf90578938e02e9c5d2cfbc2d9ebee7d555f72ade8a6f38e7f783c12d4a842b466cfda3dc8a193c19905a9d3e03f827139e46eb589a0990aa58f33610d5224d949af1db5dcfb45ab5047801a97d4fbe3ed261cfc9262fc664a4f24e4081cc1270e0000000000000086fe39eecda985e8673eed627479f068ee69d9fcd1848e576038406f5944e8a2dc64a0315ad83dbc5d95f1aec0c510a14b79a3d767b3d168edfadc24b3cd79a38f88c147cf7a015d77cb141e8c1e0abc208afb845c0e07758bd2c97a1ae1175b9b41c2b2eb395904ed41952c20a553c8fcc3d339", 0xd01}], 0x9) (async, rerun: 64) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async, rerun: 64) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) (rerun: 64) 2.241662824s ago: executing program 5 (id=2496): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0xe78429125f23143e, &(0x7f000073d000/0x3000)=nil) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 2.237796777s ago: executing program 5 (id=2498): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x20000010) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$rfkill(r2, &(0x7f00000002c0)={0x4, 0x9, 0x3, 0x0, 0x1}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8}]}]}}, 0x0, 0x2e}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32=0x0], 0x24}}, 0x0) 2.162335627s ago: executing program 5 (id=2499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000980)={@val={0x0, 0x6003}, @void, @ipv4=@gre={{0xb, 0x4, 0x0, 0x37, 0x1167, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, {[@cipso={0x86, 0x17, 0x1, [{0x0, 0x11, "4e44481c53943f40efebd6186fa52b"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9d, 0x2, [], "1a42b87d885e3c669b6d1e44066d27d6303662100f91068e049551736476dd0a8f21fd5349420eecf95dd4aae82fe38452e0f6336240081be09fbc3a5709e68c87f5fbcfc53c5bfb0100c45a9944bcaa0b102a01e2d4261faabfbf1b7e5028e2a28511d2b8c590c4f308aa4c1bd7047a1e6f5282d3aa25b9284cff252e4720534b90acab192ef8ed41135d241b0c6451b6bbc9c586fe09b31e1e7d36db"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6, 0x398c], "2e8672b0c9ce29dc18ccfd44"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0xe, 0x3, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x107}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x35, 0x0, 0x0, 0x3, 0x0, 0x11}, 0x2, {0x4b4, 0xe, 0x0, 0x10, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x0, "95dddbc92253fb132bb808375d3a85c2533064b0f5f880f2b76c06f521b6d695defd7ea07547bdb9d30b5eed4d7c4d9a67e9ce07f6c1675de48f823863507102b9c30398185eb30d1ae8"}}}}, 0x116b) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB="0000000014690005ee010000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) 2.082903697s ago: executing program 5 (id=2501): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f00000000c0)=@generic={0x0, "95377c3f880f0201a15060f13e15e4dc2d5d6586667770ce73969e3d994009147d1637dd69d7fe4c1465402f81fffd7a7a4ddfe3042cd2cd3bdfc0510696eea517ffbccfa6303966334aa4c0e36a8c2d9d4a875bfd68da0b8c588bcdf8cc9b4d4c8812d18cddc9a07aa7eec08d5247ee26a976f3099963696db39301df7d"}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe21}, 0x2a) 2.082391203s ago: executing program 5 (id=2502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x5}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0xf, @local, 0x9}}, 0x6, 0x6, 0x3, 0x1, 0x8, 0x7f, 0x80}, 0x9c) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) r5 = fanotify_init(0xf00, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) fanotify_mark(r5, 0x105, 0x4800002c, r6, 0x0) read$FUSE(r5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r9, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x1}], 0x93, 0x0, &(0x7f0000000340)="3b301b8871d4cac8361c0b05f9ce69a4b8f3ab48f72510f1a402f2fe3c6e8bed68bcb3a27ad63bd7395d1f4d2af859bd4ecb8d8150f78a2754143c9ba7259dff161149eca876607b59a83db48f1a45cf1b3d0ceee4eb817bd2844d5d2f597f188311ea0ec1e7f0a1a7ef73f19e923fec519d072ee96437b40dfcdf04cf65f9b590cdcf197d94b00b05738f10e46645aac90dd8"}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x4, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x87, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00/\b']) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000640)={0xa, 0x4e23, 0xfffffffc, @local, 0x20000009}, 0x1c) r11 = dup(r10) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c) 1.872185328s ago: executing program 5 (id=2504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) capset(&(0x7f00000000c0)={0x9719066145d8e1b9, 0xffffffffffffffff}, &(0x7f0000000180)={0xfffffff7, 0x4, 0x6, 0x4, 0x4, 0xfffffffc}) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=""/150, &(0x7f0000000280)=0x96) (async) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=""/150, &(0x7f0000000280)=0x96) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xe) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="680100001000130728bd700000000000fc02000000000000000000000000000000000000000000000000000000000000fffd000800000002020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r0], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="680100001000130728bd700000000000fc02000000000000000000000000000000000000000000000000000000000000fffd000800000002020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r0], 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x800) (async) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x800) io_setup(0x0, &(0x7f0000000000)) 1.672763151s ago: executing program 6 (id=2506): creat(&(0x7f00000000c0)='./bus\x00', 0x50) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) (async, rerun: 32) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10801, 0x0) (rerun: 32) 1.611951351s ago: executing program 6 (id=2509): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) pipe2$9p(&(0x7f0000000000), 0x80) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @private0, 0xfff}, 0x1c) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x2, 0x1, 0x4}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="18000000030000000000000000002abf186800000300000000000000060000009500000002000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="18000000030000000000000000002abf186800000300000000000000060000009500000002000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x45, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x45, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)) 1.611242051s ago: executing program 7 (id=2510): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000540)="88", 0x1}}, 0x20044044) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 1.48283027s ago: executing program 6 (id=2511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r5 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x110, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xec, 0x2, 0x0, 0x1, [@nested={0x18, 0x14, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}, @generic="463bc1b197b27dde8853a79331ea97c01aac5a08b4406a0000aebf375aa7a48b99bf6a37c00215b8609b64f409c37ee986e5e6eb34bbbbd965eafa6b13333dd02a751a7c1ff628c983ee24acdc886b20d88d7354a1129dec8dadb844671aa8e23f63d1c807ee51d2c7c4a61b7c7a07765a0ee7a855fc430847951ff43a8add3c9a8da7bd3853bf6d3edc703ae2d2918082083d8e41c90b60c84423e9ffe81f14fb750fca1aae7668c8701224cbec7f7e92897262cd2b71784cc5094af32382c0f67f10fc31bcb4385ac783f8d58132b6"]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) 1.482593079s ago: executing program 6 (id=2512): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000600000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2840) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a"]) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x8004, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x20007}]}}]}, 0xa4}}, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="2b407929c6d82b8a54da4de062994f93865072bc7c0dcb15", 0x18}, {&(0x7f0000000180)="136ab714e5922d9a6e11a13bd01d85d301f3de391c17d07d6dad3de3ed15c3a4cd40136382ec95be378aceb00803968054c914cc3a99183436dbcda0c6046a5508a93a85be3507e9dea33fac75c6f483fb56db55494a73985fd7f618f81e9bf17554a2e4ba93ef065d585b82531534a7a3ae744074830f99a52ac0293adae982ad86f315037a5a61df5c7aed1dab450a19819b277ae0ea8d85bdcfe92e49fe1b0230757c6cb31c325dd3ae031e17ab", 0xaf}, {&(0x7f0000000240)="071165652bea25c14901683b2f419fc911b0185916642bd62ce2f9ce08fa3d3176807f40cc43aa34df4cc533666f6a69d8e36f4ea87f76fbf8e5ea3439628b1b8cc746c77ba11eb8d3d9d79006027c81f42c2e42fdd08a37a0a504e0b0265bb1dbcde6d246148d8bb130759a85a08c2f7b036947650a871cf627e0d890349ad9eaa1e6e78563e7e804f2dcb702e3b12a3f432276e5a75bbaacaff76aabc4fcb2b12cbbc5457a41266e647d9d848034ef93826c4a03c1ce09b7123ef2d418465f29804bf1400521b2c759a8bb9631bb7f3ec09ef1a5a383e8185bccb278af5cba764e8ba96c1e60a9e6d425b256b604ea703a06d5f25dcde9848a", 0xfa}, {&(0x7f0000000340)="65132a9526", 0x5}], 0x4}, 0x4000) getpeername(r2, 0x0, &(0x7f0000000000)) 1.37222093s ago: executing program 6 (id=2514): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xa4f3, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0100000020000000400000008202000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) landlock_restrict_self(r1, 0x0) listen(r0, 0xa) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f4, &(0x7f0000000000)) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000221667ff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) r5 = socket(0x1, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x32, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) landlock_restrict_self(r1, 0x0) listen(r0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) syz_open_procfs(r10, &(0x7f0000000200)='setgroups\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1c001, 0x0) syz_open_procfs(r9, &(0x7f00000003c0)='numa_maps\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x3, 0xc2, &(0x7f00000000c0)=""/194) 1.105626604s ago: executing program 1 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000100)) listen(r0, 0x7) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0xfffbfffc}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x14) 1.042542372s ago: executing program 1 (id=2521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000fe5000/0x3000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000fe5000/0x3000)=nil}) (async) 822.639533ms ago: executing program 1 (id=2522): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, 0x23e, 0x107, 0xfffffffd, 0x25dfdbff, {0x20, 0x7c}, [@nested={0x4, 0x140}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x1d, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}, @nested={0x4, 0x9d}, @generic="49ea8b59883c46a5a6478e0057e2635127"]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x20040004) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xd6623eb58c40f624}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 721.415545ms ago: executing program 7 (id=2523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c100000000000224e0000", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c100000000000224e0000", 0x58}], 0x1) (async) 720.883616ms ago: executing program 7 (id=2524): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0xc, 0x840) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xc, 0x840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x1ff) sendto$inet(r3, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x3, [], [0x800000, 0x0, 0x3], [0x10000, 0x1001000, 0x2, 0xfff], [0x0, 0xfffffffffffffffa, 0xe8a6]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x0, 0x3], [0x10000, 0x1001000, 0x2, 0xfff], [0x0, 0xfffffffffffffffa, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) 652.421118ms ago: executing program 7 (id=2525): socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x39bd, 0x40082) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') (async) rmdir(&(0x7f0000000180)='./bus\x00') mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='.\x00', 0x0, 0x111401, 0x0) (async) rename(0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8a21d57b0000", 0x0, 0x0, 0x10001, 0x0, 0x0}) (async) getresuid(&(0x7f0000000b80)=0x0, &(0x7f0000000bc0), &(0x7f0000000c40)) mount$nfs4(&(0x7f0000000ac0)='.{(\v\x00', &(0x7f0000000b00)='./file2\x00', &(0x7f0000000b40), 0x800040, &(0x7f0000000c80)={[{'syz0\x00'}, {'f&\x0e@$^'}, {'\\'}], [{@euid_gt={'euid>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xb}}]}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x20000, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8, [@multicast2, @remote, @multicast2]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) linkat(r2, &(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000a80)='.\x00', 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x84083, 0x0) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x1}, 0x80, 0x1, 0x0, 0x5, 0xe, 'syz0\x00', "01a9fcaade3702b0740454e9b9666247587f33dfa03e5ea7292208e8b941c2b6", "8d7e9581c4cbd855b158fa5f250ea4a98f7e10a911d9fcfb26b448b01846e43b", [{0x5, 0xba32, {0x1, 0x80}}, {0x3, 0x2, {0x0, 0x1}}, {0x3, 0x5, {0x3}}, {0x3, 0x5, {0x3, 0x817}}, {0x5, 0x0, {0x2, 0x2}}, {0x0, 0x1, {0x2, 0xff}}, {0x7, 0xea7d, {0x3, 0x7f}}, {0x5, 0x2, {0x0, 0xd}}, {0x300, 0x4, {0x1, 0x100}}, {0xb, 0x6, {0x3, 0x80}}, {0x5, 0x24, {0x0, 0x7}}, {0x2, 0x4, {0x3, 0x2}}, {0xf, 0x6, {0x1, 0x7fffffff}}, {0x9, 0x5, {0x0, 0x100}}, {0x2924, 0xcc, {0x3, 0x1}}, {0x7, 0x800}, {0xc66, 0x1, {0x2, 0xfffffff7}}, {0x6, 0xa, {0x0, 0x1}}, {0x8, 0x5, {0x2, 0x6}}, {0x5, 0x2, {0x1, 0x6}}, {0x5, 0x9, {0x0, 0x4d340d8e}}, {0xd34, 0x0, {0x2, 0x1}}, {0x7, 0x946, {0x3, 0xc339}}, {0x6, 0x0, {0x3, 0x7fff}}, {0x7746, 0x6, {0x1, 0xfc5}}, {0x8, 0x100, {0x0, 0x3}}, {0x0, 0x9, {0x1, 0xfa2}}, {0x101, 0x0, {0x2, 0x18f}}, {0x5313, 0xfff6, {0x1, 0x10001}}, {0x2, 0x8, {0x3}}, {0x5, 0xf, {0x1, 0xf7c}}, {0x9, 0x5, {0x1}}, {0x848, 0x53, {0x1, 0x7ff}}, {0x40, 0x400, {0x0, 0x1}}, {0xfc00, 0xec, {0x2, 0x6}}, {0x763, 0x1, {0x3, 0x7}}, {0x2, 0x4, {0x3, 0x7}}, {0x4, 0x9, {0x3, 0x8}}, {0x5, 0x73, {0x3, 0x2}}, {0x3, 0x85, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x47, 0x38, 0x0, 0xf911, 0x25, 'syz0\x00', "9d8ff8dd071a9dc6f8d8ceea0e5cccfba7d1f8e38bd8abbac1e51fc502e0ace6", "28220a0060b7a7f4a248eab34c6eab327c327b5d3a0e2498254e28aaebf9591a", [{0x8d, 0x6135, {0x2, 0x50}}, {0xcc, 0x8, {0x1, 0x5}}, {0xb, 0x8, {0x2, 0x7}}, {0x0, 0x1000, {0x2, 0x1}}, {0xff, 0x1, {0x3, 0x1}}, {0x2000, 0x7, {0x0, 0x2}}, {0x9, 0x6, {0x2, 0x9f}}, {0x0, 0x6, {0x2, 0x1}}, {0x7, 0x9, {0x0, 0x3}}, {0x400, 0x7, {0x1, 0x3ff}}, {0xd46, 0x8, {0x1, 0x7fffffff}}, {0x6, 0x5, {0x3, 0xfa9}}, {0x9, 0x7, {0x0, 0x7fff}}, {0x18f, 0x10, {0x1}}, {0x9, 0xebdc, {0x3, 0x4}}, {0x29d9, 0x3, {0x2, 0x7}}, {0x5, 0x0, {0x0, 0x9}}, {0x9, 0x8, {0x0, 0x40}}, {0x8, 0x94, {0x1, 0xffffff45}}, {0x0, 0x6, {0x2, 0xb}}, {0x8f, 0x9, {0x3, 0xffffff3c}}, {0x2, 0x2, {0x1, 0x7}}, {0xe, 0x1b, {0x1, 0x1}}, {0xfffc, 0x6, {0x3, 0x10000}}, {0x1ff, 0xa4cf, {0x2, 0x1}}, {0x9, 0x2a, {0x2, 0xf}}, {0x9, 0xc137, {0x1, 0x7f}}, {0x401, 0xe0, {0x3, 0x4b}}, {0x80, 0x1, {0x2, 0xfffffff7}}, {0x2, 0x9, {0x2, 0x2c}}, {0x38, 0xe, {0x1, 0x1}}, {0x4, 0x0, {0x3, 0x1}}, {0x3, 0x2, {0x2, 0x10}}, {0x1, 0x101, {0x1, 0x7}}, {0xffff, 0x1, {0x3, 0x80000000}}, {0x1, 0x5, {0x1, 0x7}}, {0x3, 0x5, {0x0, 0x1}}, {0x7f, 0x5, {0x2}}, {0xb, 0xa, {0x3, 0x6}}, {0x9, 0x0, {0x2, 0x7f}}]}}}, {{0x254, 0x1, {{0x1, 0x58}, 0x2, 0xf1, 0x3, 0x15f5, 0x7, 'syz0\x00', "ceb42bc378a2ee8fc0f5955be24d9f0512357d99abb214a5a19d7db29881e010", "b0f37ff1ea926fa887add661d2392747e8272ec990b78c4aa9e882ca31d7b910", [{0x8001, 0x2, {0x2, 0x1}}, {0x6, 0x39a, {0x3, 0x53}}, {0x9944, 0x3, {0x1, 0x3}}, {0x6, 0xa, {0x2, 0x1ff}}, {0xd8c0, 0x1, {0x0, 0xff}}, {0x1, 0xac4, {0x2, 0xfffffff8}}, {0x59b8, 0x6, {0x1, 0x49f8fafb}}, {0xc490, 0x401, {0x1, 0x3}}, {0x1000, 0xfffd, {0x0, 0x1}}, {0x4d86, 0x1, {0x3, 0x100}}, {0x7, 0x7, {0x1, 0x9}}, {0x5672, 0x5c99, {0x3, 0x6}}, {0x2, 0x5, {0x3}}, {0x2, 0x8, {0x0, 0xd}}, {0x1, 0x1a, {0x3, 0x6}}, {0x1, 0x5, {0x3, 0x10}}, {0x5, 0x3ff, {0x1, 0x7}}, {0x1, 0x9, {0x2, 0xfe}}, {0x0, 0xf, {0x2, 0x40000000}}, {0x101, 0x2, {0x1, 0x8}}, {0x3ff, 0x4, {0x2, 0x2b4}}, {0x8, 0xd, {0x1, 0x62c}}, {0x5, 0x1, {0x1, 0x3}}, {0x3, 0x484, {0x1, 0x8000}}, {0x3, 0x4, {0x1, 0x4}}, {0x7, 0x9, {0x3, 0x1cdbfd38}}, {0xf49, 0x1ff, {0x2, 0x32}}, {0x1, 0xfff8, {0x3, 0xb04e}}, {0xec, 0x8, {0x3, 0x3}}, {0x5, 0xed2, {0x1, 0xcb}}, {0x1, 0x8, {0x3, 0xffff}}, {0x1, 0x4, {0x2, 0x401}}, {0x0, 0x4, {0x2, 0x9}}, {0x7, 0x2, {0x2, 0x9e}}, {0x6, 0x400, {0x3, 0x3}}, {0x3, 0x8, {0x1, 0x2}}, {0x80, 0x55, {0x0, 0x6c}}, {0xb8ba, 0x5, {0x1, 0x36c}}, {0x4, 0xccf, {0x0, 0x5}}, {0x7, 0x9, {0x2, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x44015}, 0x20000001) 649.452948ms ago: executing program 6 (id=2526): getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4, "4b9e9034"}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0xe7bf664a6f2c343b, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x880) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 532.646219ms ago: executing program 7 (id=2527): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0x9, 0xf909, 0x899d, 0x80, 0xfffffffb, 0x7, 0x10, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$security_selinux(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x2) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)=ANY=[]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x1408}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000000c0)={0x8, r6}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100000, 0x0, 0x81, 0x813, 0x0, [{0x9, 0x2, 0x8, '\x00', 0x80}, {0x9, 0xb, 0x11, '\x00', 0x5}, {0x7, 0x56, 0x4, '\x00', 0xfa}, {0xff, 0xc8, 0x6, '\x00', 0x1}, {0x8, 0x5, 0x7, '\x00', 0x3}, {0x8, 0x1, 0x81, '\x00', 0x4}, {0x8f, 0xb, 0x7f, '\x00', 0x34}, {0x7, 0x7f, 0x57, '\x00', 0x10}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x7f, 0x4, 0x9, '\x00', 0x3}, {0x1, 0x3, 0xfc, '\x00', 0x4}, {0x1, 0xf7, 0x1, '\x00', 0x7}, {0x2, 0x8, 0x0, '\x00', 0x5}, {0xdb, 0x8, 0xf2, '\x00', 0x1}, {0x99, 0x2, 0xc0, '\x00', 0x1f}, {0x6, 0xa0, 0x7, '\x00', 0x2}, {0xfc, 0xdf, 0x5b, '\x00', 0x7}, {0xe0, 0x8, 0xff, '\x00', 0xf}, {0xe7, 0x9, 0x2, '\x00', 0xf9}, {0x9, 0xd, 0x1, '\x00', 0x33}, {0x40, 0x3, 0x7, '\x00', 0x5}, {0xf, 0x8, 0x8, '\x00', 0x2}, {0x4, 0x0, 0x5}, {0xf9, 0x1, 0x1, '\x00', 0x7f}]}}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') 422.333039ms ago: executing program 7 (id=2528): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f00000102c0)={0x84, "a148dd2f30fbd84b8afc6aa52d58277d06528b10799ce3b6e1c195c3ff0ff945f5503e59f44818fc1d215118e2fd34ac52065397af6ca56252cc1da9a3bf68502123ed8fe445f120a7d38803f731d353f4839357fac2f64fb762feed51f5d864ecc39f828d0e8104a7d93562a9aa24141bb077548b4d7ea9d96ec48d35f7413ef6e20952"}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in6, @in=@initdev}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000001100), 0x4) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000840)={0xa, 0x4e23, 0x1, @local, 0xb}, 0x1c) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 152.646344ms ago: executing program 1 (id=2529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@rand_addr, @local, 0x0}, &(0x7f00000002c0)=0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x83) readahead(r4, 0x7fffffff, 0x10000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x8, @void}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x1}, 0x1c) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdfa", 0x3}], 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xab, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x100}, &(0x7f00000007c0), &(0x7f0000000800)) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x4f27, 0x5, 0xfa, 0xfffffff8, 0x6, 0x40, 0xf, 0x4, 0x100a, 0xe8aa, 0x3, 0x77b, 0x5, 0x1, 0x6, 0x101, 0x0, 0x1a44b, 0x0, 0xc00c0003, 0x99, 0x7, 0x378, 0x6, 0x7, 0xe6d, 0x103e, 0x2, 0x9a1a, 0x0, 0xfffffff8, 0xfffffffe]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'pim6reg0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) 2.930238ms ago: executing program 1 (id=2530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r3, 0x796c) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"2f29eabbd222bffc7b74838b337938ef5a7f7d6b4e4fd0a57c673798d6cc4bb825181dd42772e73bc97b114be31682b0dee3ff6278f28d25b67c99db4845985fd7f6a203a298c64ae36744b403d2032468f85f8f171c063521195ae8be6ca4d0e22f444c20e993d7a11b8a055efa3fb9b2dbc2561a37d9e7737fff7384681d12706d138ae9c1ce27959ba18d14a7fe73043519eef81eee19d0819d9f9054dadf08d48f5bf1e2169510c11deb8aeeaf80b41c38817ef720bc7f2394260f5a109e46cdd17ce7eb75bdc0180e6a5497f90f4a30a71f7e7a6550c463e431c311329944849a5f164edc095ce1ec0f0cab531469600720d6d2acdd3ab0c99ac88ef4b3db06fec897fd7ac1336a7efe82129fc0426b2ff19d5211fc697bb0c91a56832c29a02e63f44109bcba9dbe4cbad716ab77123a703ed600c423a2a0656e3d4e2ddcc6595e1dbcb45403d49172cf4eb74815ae975e642133319075d295df8aa42aa3f581a5f5d6f2916deca261d03ec1ec3dd882a1f0db5e59a01815ce55f330b6a8218b712b7033cf6a55f9e207032ef5421032a3627229ef41788ae3c79a535ef714cb0b118b5dbea481b993fc0f865b10b84959f5c2fd107004bcac250ec21d8e6057d6fab069ed9bbfeebe60b009d0026cea244ee83002edd9bf60e8bb4b1f5f9ea92231a3a454b5d3beb6084cfeb7776d36a679f16e33e062c01fc4597c69565a6c9285c79c6927fdbda96f8f7a348798065f07c74b6471859d4573425ea1c44aa07436d072d57a4913b155c866970dd69ea50928637131ca0574999f88df03a03637c09ee6eca8097a903ec36ea9e8bc74cd23218d9d33e5fd993b9971e772ff6a6a81231eafa61401050e1779fea92160cff5c67c6ef8a585792e1bf7e6055aacaa14d81727d5b263f9e5d7a30f9aa7840463b995ea4b04314228a06205ebe414d43c28bd0d57862d8eb5cabfbb5657a4e22718c17fd7ff6a77ffa0e0698b54046a42899a9f2cfb0a1ba765c775f851b7720dd498dc6d9a3273267dc2793d15f7d3e51d10c69e8e67d308e62f5054798ca24120bd75d553724f0be22b078b06c928888f867ef4fd4e4a0d73d931868fdbea8aa6831c8dbc24cc03802ec1025815ed4a7c850b7c80f0f1dd6d52a8d26c691fef9b2037395f7bd7c38862aa1ca735b5f4e532c0531eda121fecb3f23f0ac00d096d7b209d71a4431e33764ab0e7850ccb9de2c007b2e37fabdb5ab452a1f107bc921f872a56de1b5c9243a29ed7855511fe83370cb7f13f5044c76ef840cbeb81159c3ac97517d237340580d5f305a1c0180d99bedc770091dfe877b4834278f56f594d82291b0c1859f462b1d8fc9ab91aa92e6c7a603ab6c08d1d410ef6f545a0e33bb742c95f0ed71c6f9684c2e2e341a30332667d3a765572048970b959460f0c523f29712e6e5b45276520849e2d9fde61f78fe66e5f913e3bc0d560bfeb86a0f783b1aa7358cf906892dd65d69bf3941edc7b7a847d0c50302eec7d64d67b7f72e53be1d8ad298cb2477b8e9bc293efd60af8158423c13fd918534dafa662181322133d9e6b9c560a4cac9d46d4a6d6a21e5a1b14d39867fee3b6478cd416015445a4f857c20a7d1efff31527d82e679ad13e0833e4c22951793d7d8e7e7470b401122b8bded823cb0f2e778b896702444444055696a6ddee3d4ac128c24eb5417ebb76b29a03c75a771eedc39c141e0062832f292492579e8312a8f2613688a2d3f2f38e56ada79278edb80acd5dc8b8ed1b3baf37b2e7b6171b88269c782bee0763a9a5dbd85b5ee99e44f581031c64d96cb726f92d169b7e0903abb7ef1eb6606107e60f3ffbc990c43fa2488525ccf28ecd51d8204589b9495073aa34d002b90eeea0013f868e4625c06281e7421e014d0fe9bfdd79e12bd41dcfbb8009c5297d4720664fc8cae0e27bd63f2de10d10705e4a1145cddc99279727ed58c3635e42271e94015a6956f8a4920959217ed53596d5c414b24f8b691304c3f965a0fa4c15cbbb466d46f8aff37173b134c4d3db244b7792ca63d5d03c80f804889fb6e98723890cf08ed6c2578cc6a50ebdf4623b228df4b71afc6825aa56bc9b4957409f8cbc6834f6760867baf0e46d9559c53144d31d1c9fd243d93a206a97912d05ed73e33c33bda91cbc493fa912e9cb7e643a85c34f0fe22c163a64db519e8df478d07fed8fc8747ba4bcc5611e8b31c09bbda69d5d3cd786ba84432bc1dd0ebceddc29f490db0d7c2b33b44d370268364964f6744310feff7e07718e398147727b7e440404de01af724b6e9ae1005510eca6b2a48b889f40a1665cdf2465bfbae3b61aa2ad5fb9fffd321a81769fded8c7a52be4328856d45c7b0d89cb07bab60e44fe51c6f9cb1904d698b3cf709810d0398cfa208699465e99d48cc457d7107a90e7cd9c170f72161126cea7a6fad1fd5bbcf00bd3451d4f2ba2c8fa5462ecb9fd2c0a13b60d1190fed8bd576c875f74834fe5b9ae34f396e62f61996ea78550101df7e82bce4acf62a122aedcd5335b8419c12b71076a457e97f5eb90a54131ff3d4c1ec72dd0efb34e82dbb422bd1e9d62d78c13da1c6d05f24e03f17d254ff16a4d2fd52a8f9188e20be4aef84a6b258f10aaa7f795a2c7abdf3c3e6612db243c51d32cae43f5000b8ef213edff9975ab5ba082e8055b2a3a8d5141615cf6fce5ad6e1b4ddfe3eaec82ac16f38c0cbcd75f2b67a80a72a867eb8330adcc79c9e4b17379ad1636de6250a7cc54caa0cd227832f1cde8e9c056a179f9ede030378955c50068141c9ec6b69ad4c8355b8bd6b5a9363ea79a0469e93105e922f0915d165a62cce9af5984c447cf8af9c17e12de5a9e1f211653f73e5e51b99d2a2fc9bc2bb25d27650a9764256c4accd0c8a3e75abefb0acbc76629c265c55d56e491095001345ef70c24a6b2dff3e163bff4f4671a2f537a466fe9cb33f4c149da0597cd021b42d75dea5fe45db7af69230f86ed021903cab1f2799d11b3e6bd4f62c3cd54c4b3dee271bec908bdcb4c60e88c60b558c57d59dc5c2c800766cf19623b2314fd8cc1218b58198202fd1a9d9942ea45a207642716ad5fbbd2e16935b0673b38e3d43d26f69eeeec66f730703d28c271792c1ea86c9cd2ee3fd048e4d2265634a14034585b37a1ce09da86e3dc15dd65410a7b787eea1b598eacec762e841563353cdab585e08910deb0c71b768f9fb1362964bde250cb0186993ec0cfd8d825b824f7af06c6aef7618ad7b62ae943c5f8bcc13a965bbbfd7dc55db89640ff6a31121cf2960dd0bd36c3b913d59cdd951e838999d51efb15ccadde8fca07ab752cbf515203c6565392684498c0bf4602f6b22806bf84ce8be208c0861af8b2bb4de8656bd4a05673440f6ad6108d34d5bf0a3276d75d4e6e49eeca89ad07538e864878ccdcb7104f3d260432f1ef4efd316b91b4708f4a96a752ef84ebc81814d5348f4633fa5c57053e06f8465b0e32ce869ce90632dd55fe411c6dc1115570b46e2c29365fafc0edd946f34072a93f39fd6a6ee6ac79032b00d66c904b302b4424f467fb2a010ee59b68c4d659ebbe6ea7e441a0091037dc5879accdea094cc86c07c70e891c20cb2667603802caa60ea2e44d517fbf9cd792c2610cefeaabd9145a87f0302f8333d851336d3f763e11cb1685dbc713b9df2655162930feaa7ecedc0e5d1cee850f8e2bf16e24a6cb9643134891621810f1bc980e55ec71a3295cbcbf6ae5f01958b2d0636e75b6adc618b0cc9596051bd19bf3fbe0608e6834b616561c8a3d424facaebe7e142183e1008fe7b6a8eb0510860109c9bff16a4009c97c1354ec02461176fe0bd8cb32189fe581c0d00c0f3ec38d68bb14b0d2e6ac680ea7cf3a9a204ba204fa22c6ae3632c7088663dfb726bdf3a82f6387a7cbfb1ff6c7ff2e7c00459e6faf7a90d333a84c0b155ae5d3f04ed0192b1292ce93abcedbdf8ef6762e0dc8b7d48f5b8278e6157464e0785cf1130a39878f376ce742fa4085f34ec9765e759e76e9552bb5548dd8720c89be30204f7fb783a3ac7aec809c6565d7f26aa742cba6c9e134d3e38bbf5e291d741f4d4efbc9474a5fef8df2190f3f59799ac973c2f898b16a60ea96531b25e26edeb66b66a36ddfe8bfe20a46d966533cde8aaec997bef6adecbd50eb75179f09ef2e3c78c629894e43325392ae0cfb7d6d551fc1c910c1e81c680f8800e2e0ce0a069790f7be94181b7e0bba221644501fa89a9ef5efe96fdd1823406cf63d8489ebd4500b4eb04cf7aefea4c096b21cdd2aefe4987e61b9125daf90851296d6cff0ca8938c78f6607c2ef7f0571b2eb11f64717753a4460552f94d40dbde3f5b84a7a8ac9290010f1a50f4cd313a0663637074aac30ce706a51b1e0ecfef67aca4dca06eaa7159950aabc8803741b6f5998e425d9a34111535f2d21a5769cb44ae4530fb6af15a9a1daab99497b4ae99a86ad87fd94ed5801d4da4499cedc310c5c2a7fb2e2448b7eba7287844ba915472fead9a619abf1b4d668e60eed1f336333a0d8fa9568747bc8ccae08639dae981b1fab9c6df51f91567be4f5c61ced3a066474ae3bb3eb44d928796df1fc3981db690505ae6b5b30cb4aa150283215ec13a47aff84571d26f36e3fcaaa388d3137aa53642dd1924d8696b44cab9cc3a3df34b9a389e8a1c3dbd9c3e57115dce745efd66203faa705ed44af4f1281f1ae9f5e022b250d2b0dbd3e3ca4485804405b4f75ac8fd73642b8ad95afb2cbc62329e037ae34d89a6c8a4879e01b7af7c068bc7a817a7a48429cb6d1e3e8470bbe2ab210376b71d4bd223a0db09cedcac1139c289f11328e8fb64e0f79c1d73cfda5bf35173401d49afb145f37e898538f81fba069080ef9e00c93e5930e0ada3696aea15c4ac526dd3472cd4be6df8adba5ff47a1dbca3b5807882ad726d7bcfce616e9f3e6cce4ac84708a244f40b7b6adc95c0d60a513d6da2c439f505fdaefed420c73e5962b3d3a112407a46411a09bdc3c38f53244db77dfe4576ab428bc6eb0707dee7b15c5a01844c148290a18c2a1fec965710509d264d9a5c54020e27ed5e694f61c152511a767c59462a099483d54f21495ea4330fdab32e2cce1ef15ab5bc35ddccfe4415d6e2c62cfa9f1130e79b50feeeaf71b1acd8c76f14ae78af1f44211e1820a311bbc4296d459010541274a7cccc60452f748cb9392a6153c9e65519f2223339f0221231a280e7405f06c65e6a56b264bdc015e2d6263a05a88e5477ea25ea49c959659ae7d63721abb88459d5c19860b561844e79a2a6e2eb5b5f6b7856b1503a0d1a5220f7242aa6e147ee13eceb987c80a5900804c13e02d7c3f51eb24ce4862b08e4966a60ad9c6e8261fd64a01a621201127d8c8444173d6d1a16aad0ca725e847f4184c43dc194cde720d0d6b40840e0bde3563107d374f397d50b6de324cd2caa2ffc2fb4b84db9400514de070b2f88ff7a94fb33ec33cd94932bcddb170c8556b6ffe199969108895f029557bf6a919c825728826cdb1029eb1b1c6d1deff3fa152d88fd66154f83cb9e6704fe06bcec48782f860086c4d57a7da84428e9b912398d30165b14af529d565dce135b2d4eee14c37553c9ea13d8011f56fc5bc1cd92522cb5dd40a60c1c6e4fb5a6e787fa1ba3c8e252af3f3b671193cc11906b431b25b3d0b5654c72945152264131a937d5f0d1702df86487fb6d9c9cee700f2f25310ce0f8097844d4acc31612ef5be98239c3db97b2332ec45b4", 0x1000}}, 0x1006) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x24}}, 0x4000004) 0s ago: executing program 1 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x20, r1, 0xf21, 0x70bd26, 0x0, {{}, {@void, @val={0xc, 0x99, {0x6, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 0s ago: executing program 1 (id=2533): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000500)='syzkaller\x00', 0x20000006}, 0x94) (async) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r3, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b5a", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="71f7c7", 0x3}], 0x1}}], 0x3, 0x48800) shutdown(r0, 0x2) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101d40, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8f) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fb"], 0x830200) (async, rerun: 32) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x50) (rerun: 32) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000400), &(0x7f0000000480)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './bus\x00'}) fchownat(r3, &(0x7f0000000280)='./bus\x00', r8, r9, 0x1000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) kernel console output (not intermixed with test programs): ode [ 144.362373][T11320] kvm: kvm [11319]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 144.365945][T11320] kvm: kvm [11319]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 144.453145][ T40] audit: type=1400 audit(1756292450.764:669): avc: denied { listen } for pid=11333 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.482110][T11334] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 144.676162][ T40] audit: type=1400 audit(1756292450.984:670): avc: denied { execute } for pid=11361 comm="syz.6.1516" path="/proc/249/net/vlan/vlan0" dev="proc" ino=4026533463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.744892][T11368] NILFS (nullb0): couldn't find nilfs on the device [ 144.778155][T11370] cgroup: noprefix used incorrectly [ 144.836765][T11377] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 144.840750][T11379] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 144.873787][T11382] netlink: 'syz.6.1522': attribute type 5 has an invalid length. [ 144.929194][T11395] support for cryptoloop has been removed. Use dm-crypt instead. [ 145.024004][ T40] audit: type=1400 audit(1756292451.334:671): avc: denied { append } for pid=11407 comm="syz.2.1532" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 145.069914][T11418] __nla_validate_parse: 13 callbacks suppressed [ 145.069926][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 145.075617][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1534'. [ 145.136173][T11428] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 145.158348][T11428] bond3: (slave bridge4): making interface the new active one [ 145.161198][T11428] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 158.150304][T11443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11443 comm=syz.2.1543 [ 158.239753][ T40] audit: type=1400 audit(1756292464.544:672): avc: denied { ioctl } for pid=11461 comm="syz.2.1548" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x3b8a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 158.252477][ T40] audit: type=1400 audit(1756292464.544:673): avc: denied { write } for pid=11461 comm="syz.2.1548" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.263835][ T40] audit: type=1400 audit(1756292464.544:674): avc: denied { ioctl } for pid=11461 comm="syz.2.1548" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.877336][T11492] vxcan1: tx address claim with different name [ 158.880413][T11492] overlayfs: failed to resolve './file1': -2 [ 158.897267][T11484] netlink: 'syz.2.1554': attribute type 12 has an invalid length. [ 159.017163][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 159.054598][T11513] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1562'. [ 159.065485][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 159.069262][T11490] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.213733][ T8320] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 159.307711][T11533] CIFS: Unable to determine destination address [ 159.311525][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1569'. [ 159.362428][ T8320] usb 10-1: Using ep0 maxpacket: 8 [ 159.371970][ T8320] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.375532][ T8320] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.378373][ T8320] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.383510][ T8320] usb 10-1: config 0 descriptor?? [ 159.397805][ T40] audit: type=1400 audit(1756292465.704:675): avc: denied { write } for pid=11524 comm="syz.2.1567" laddr=::ffff:172.20.20.170 lport=56236 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 159.466619][ T40] audit: type=1400 audit(1756292465.774:676): avc: denied { mount } for pid=11536 comm="syz.2.1571" name="/" dev="rpc_pipefs" ino=41046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 159.466899][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'. [ 159.587210][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.590653][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.600734][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.605236][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.610259][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.615212][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.618338][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.621647][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.626094][T11507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.628885][T11507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.638840][ T8320] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 159.652691][ T8320] usb 10-1: USB disconnect, device number 10 [ 159.781808][ T40] audit: type=1400 audit(1756292466.084:677): avc: denied { bind } for pid=11553 comm="syz.5.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 159.849498][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.853503][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.862936][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.867697][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.870480][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.879042][ T5978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.883002][ T5978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.887060][ T5978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.891223][ T5978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.895581][ T5978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.914512][ T7429] bridge0: port 1(syz_tun) entered disabled state [ 159.926623][ T7429] syz_tun (unregistering): left allmulticast mode [ 159.928833][ T7429] syz_tun (unregistering): left promiscuous mode [ 159.931303][ T7429] bridge0: port 1(syz_tun) entered disabled state [ 160.039665][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1581'. [ 160.149051][T11568] chnl_net:caif_netlink_parms(): no params data found [ 160.171980][T11582] block nbd6: Attempted send on invalid socket [ 160.174958][T11582] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 160.180585][T11582] SQUASHFS error: Failed to read block 0x0: -5 [ 160.183924][T11582] unable to read squashfs_super_block [ 160.342485][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.345595][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.348860][T11568] bridge_slave_0: entered allmulticast mode [ 160.353224][T11568] bridge_slave_0: entered promiscuous mode [ 160.356407][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.358682][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.361165][T11568] bridge_slave_1: entered allmulticast mode [ 160.364157][T11568] bridge_slave_1: entered promiscuous mode [ 160.399157][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.405122][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.450317][T11568] team0: Port device team_slave_0 added [ 160.455661][T11568] team0: Port device team_slave_1 added [ 160.494313][ T40] audit: type=1400 audit(1756292466.804:678): avc: denied { bind } for pid=11598 comm="syz.2.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.494594][T11598] delete_channel: no stack [ 160.508277][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.510582][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.518890][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.523394][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.525647][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.534538][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.555345][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1588'. [ 160.575162][T11606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11606 comm=syz.6.1589 [ 160.613727][T11604] gretap0: entered promiscuous mode [ 160.614824][T11608] usb usb8: usbfs: process 11608 (syz.5.1588) did not claim interface 0 before use [ 160.616779][T11604] macvtap1: entered allmulticast mode [ 160.622387][T11604] gretap0: entered allmulticast mode [ 160.629589][T11568] hsr_slave_0: entered promiscuous mode [ 160.631949][T11568] hsr_slave_1: entered promiscuous mode [ 160.634859][T11568] debugfs: 'hsr0' already exists in 'hsr' [ 160.636678][T11568] Cannot create hsr debugfs directory [ 160.672067][T11618] netlink: 'syz.5.1592': attribute type 1 has an invalid length. [ 160.682324][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.710094][ T40] audit: type=1400 audit(1756292467.014:679): avc: denied { map } for pid=11620 comm="syz.6.1593" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.717569][ T40] audit: type=1400 audit(1756292467.014:680): avc: denied { execute } for pid=11620 comm="syz.6.1593" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.750354][T11618] gretap2: entered promiscuous mode [ 161.035764][T11634] XFS (nullb0): Invalid superblock magic number [ 161.712433][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.952299][ T5978] Bluetooth: hci4: command tx timeout [ 162.087798][ T1249] bond0 (unregistering): Released all slaves [ 162.095608][ T1249] bond1 (unregistering): Released all slaves [ 162.104922][ T1249] bond2 (unregistering): Released all slaves [ 162.118232][ T1249] bond3 (unregistering): Released all slaves [ 162.134569][ T1249] bond4 (unregistering): Released all slaves [ 162.244894][ T1249] bond5 (unregistering): Released all slaves [ 162.256003][ T1249] bond6 (unregistering): Released all slaves [ 162.267714][ T1249] bond7 (unregistering): Released all slaves [ 162.278534][ T1249] bond8 (unregistering): Released all slaves [ 162.366753][ T1249] bond9 (unregistering): Released all slaves [ 162.539319][ T1249] : left promiscuous mode [ 162.588966][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 162.623857][ T1249] tipc: Disabling bearer [ 162.626357][ T1249] tipc: Left network mode [ 162.686399][T11680] binder: 11679:11680 unknown command 0 [ 162.688885][T11680] binder: 11679:11680 ioctl c0306201 200000000080 returned -22 [ 162.693354][T11680] CIFS mount error: No usable UNC path provided in device string! [ 162.693354][T11680] [ 162.694865][T11681] CIFS mount error: No usable UNC path provided in device string! [ 162.694865][T11681] [ 162.697671][T11680] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.701828][T11681] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.757012][T11689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1608'. [ 162.893776][T11704] input: syz0 as /devices/virtual/input/input18 [ 162.910940][T11701] vivid-007: ================= START STATUS ================= [ 162.915079][T11701] vivid-007: Enable Output Cropping: true [ 162.918497][T11701] vivid-007: Enable Output Composing: true [ 162.921065][T11701] vivid-007: Enable Output Scaler: true [ 162.924330][T11701] vivid-007: Tx RGB Quantization Range: Automatic [ 162.927063][T11701] vivid-007: Transmit Mode: HDMI [ 162.929369][T11701] vivid-007: Hotplug Present: 0x00000000 [ 162.931790][T11701] vivid-007: RxSense Present: 0x00000000 [ 162.934682][T11701] vivid-007: EDID Present: 0x00000000 [ 162.937210][T11701] vivid-007: ================== END STATUS ================== [ 163.024207][T11568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.031437][T11568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.047956][ T1249] hsr_slave_0: left promiscuous mode [ 163.050222][ T1249] hsr_slave_1: left promiscuous mode [ 163.877347][T11728] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 163.880994][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 164.042399][ T5978] Bluetooth: hci4: command tx timeout [ 164.395200][T11568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.403263][T11568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.414576][T11726] wg2: entered promiscuous mode [ 164.416295][T11726] wg2: entered allmulticast mode [ 164.456957][T11568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.471997][T11568] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.483613][T11746] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 164.484159][ T765] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.485704][T11746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.487927][ T765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.492520][T11746] vhci_hcd vhci_hcd.0: Device attached [ 164.499465][T11746] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 164.501558][T11746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.504681][T11746] vhci_hcd vhci_hcd.0: Device attached [ 164.507257][T11746] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(43) [ 164.507789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.509322][T11746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.509346][T11746] vhci_hcd vhci_hcd.0: Device attached [ 164.512494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.517308][T11746] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(45) [ 164.517470][T11750] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 164.523583][T11746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.526485][T11746] vhci_hcd vhci_hcd.0: Device attached [ 164.541841][T11758] vhci_hcd: connection closed [ 164.542048][ T1150] vhci_hcd: stop threads [ 164.543655][T11753] vhci_hcd: connection closed [ 164.546372][ T1150] vhci_hcd: release socket [ 164.549082][T11751] vhci_hcd: connection closed [ 164.549123][T11748] vhci_hcd: connection closed [ 164.550323][ T1150] vhci_hcd: disconnect device [ 164.555615][ T1150] vhci_hcd: stop threads [ 164.557199][ T1150] vhci_hcd: release socket [ 164.558640][ T1150] vhci_hcd: disconnect device [ 164.560405][ T1150] vhci_hcd: stop threads [ 164.561818][ T1150] vhci_hcd: release socket [ 164.564260][ T1150] vhci_hcd: disconnect device [ 164.566022][ T1150] vhci_hcd: stop threads [ 164.567376][ T1150] vhci_hcd: release socket [ 164.568830][ T1150] vhci_hcd: disconnect device [ 164.615823][T11767] serio: Serial port ptm1 [ 164.618646][T11771] input: syz1 as /devices/virtual/input/input19 [ 164.640261][T11771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11771 comm=syz.5.1626 [ 164.653589][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.687479][ T40] audit: type=1400 audit(1756292470.994:681): avc: denied { create } for pid=11775 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 164.698481][T11568] veth0_vlan: entered promiscuous mode [ 164.703865][ T1249] IPVS: stop unused estimator thread 0... [ 164.704961][T11568] veth1_vlan: entered promiscuous mode [ 164.726678][T11568] veth0_macvtap: entered promiscuous mode [ 164.733201][T11568] veth1_macvtap: entered promiscuous mode [ 164.745419][T11568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.753947][T11568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.761308][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.766647][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.773321][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.777516][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.818331][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.820860][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.843018][ T6044] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 60 sec [ 164.849195][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.856486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.868935][ T40] audit: type=1400 audit(1756292471.174:682): avc: denied { mounton } for pid=11568 comm="syz-executor" path="/syzkaller.LOfW7E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 165.244828][T11806] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1637'. [ 165.747539][T11824] hub 9-0:1.0: USB hub found [ 165.749903][T11824] hub 9-0:1.0: 1 port detected [ 165.829167][T11818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1641'. [ 166.104623][ T40] audit: type=1400 audit(1756292472.414:683): avc: denied { create } for pid=11848 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.116948][ T40] audit: type=1400 audit(1756292472.424:684): avc: denied { ioctl } for pid=11848 comm="syz.5.1650" path="socket:[40512]" dev="sockfs" ino=40512 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.127893][ T5979] Bluetooth: hci4: command tx timeout [ 166.138044][ T40] audit: type=1400 audit(1756292472.444:685): avc: denied { bind } for pid=11848 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.176485][T11853] tmpfs: Bad value for 'mpol' [ 166.592545][ T5979] Bluetooth: hci2: command 0x1003 tx timeout [ 166.592803][ T5978] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 166.602991][ T53] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 166.759174][ T53] usb 10-1: config 0 has no interfaces? [ 166.763752][ T53] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 166.766494][T11874] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1657'. [ 166.766726][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.774945][ T53] usb 10-1: Product: syz [ 166.776300][ T53] usb 10-1: Manufacturer: syz [ 166.777825][ T53] usb 10-1: SerialNumber: syz [ 166.780664][ T53] usb 10-1: config 0 descriptor?? [ 166.865690][T11874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.872066][T11874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.877322][T11874] bond0 (unregistering): Released all slaves [ 166.937272][T11882] overlayfs: workdir and upperdir must reside under the same mount [ 167.389946][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1666'. [ 167.468285][T11914] openvswitch: netlink: IP tunnel TTL not specified. [ 167.538531][T11921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1670'. [ 167.541982][T11921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1670'. [ 168.192311][ T5978] Bluetooth: hci4: command tx timeout [ 168.334384][ T60] usb 10-1: USB disconnect, device number 11 [ 168.918941][T11933] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1673'. [ 169.042335][ T60] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 169.208905][ T60] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.211866][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.215083][ T60] usb 7-1: Product: syz [ 169.216988][ T60] usb 7-1: Manufacturer: syz [ 169.218835][ T60] usb 7-1: SerialNumber: syz [ 169.324297][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 169.429022][ T60] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 169.435560][ T60] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 169.439633][ T60] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 169.445947][ T60] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 169.452464][ T60] usb 7-1: USB disconnect, device number 11 [ 169.474811][ T40] audit: type=1400 audit(1756292475.784:686): avc: denied { ioctl } for pid=11954 comm="syz.5.1680" path="/213/file0/file0" dev="9p" ino=38666252 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.957888][T11964] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 169.960425][T11964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.963812][T11964] vhci_hcd vhci_hcd.0: Device attached [ 169.968230][T11964] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 169.970917][T11964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.974440][T11964] vhci_hcd vhci_hcd.0: Device attached [ 169.977097][T11965] vhci_hcd: connection closed [ 169.977121][T11967] vhci_hcd: connection closed [ 169.977392][ T1249] vhci_hcd: stop threads [ 169.983915][ T1249] vhci_hcd: release socket [ 169.985927][ T1249] vhci_hcd: disconnect device [ 169.988110][ T1249] vhci_hcd: stop threads [ 169.989848][ T1249] vhci_hcd: release socket [ 169.991734][ T1249] vhci_hcd: disconnect device [ 170.024319][T11972] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1685'. [ 170.068160][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 170.175986][T11981] ip6tnl1: entered promiscuous mode [ 170.178069][T11981] ip6tnl1: entered allmulticast mode [ 170.516142][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 170.597965][T12010] netlink: 'syz.6.1698': attribute type 2 has an invalid length. [ 170.605602][T12010] netlink: 'syz.6.1698': attribute type 2 has an invalid length. [ 170.777038][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1704'. [ 170.892995][T12026] block nbd6: shutting down sockets [ 170.921048][ T40] audit: type=1400 audit(1756292477.224:687): avc: denied { module_load } for pid=12028 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 170.921087][T12029] Invalid ELF header type: 0 != 1 [ 170.935105][T12029] serio: Serial port ptm0 [ 171.039902][ T40] audit: type=1400 audit(1756292477.344:688): avc: denied { mounton } for pid=12031 comm="syz.6.1706" path="/proc/422/task" dev="proc" ino=41726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 171.301703][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1709'. [ 171.341132][T12039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12039 comm=syz.6.1709 [ 171.342371][T12047] netlink: 'syz.2.1712': attribute type 9 has an invalid length. [ 171.472267][ T6996] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.622262][ T6996] usb 6-1: Using ep0 maxpacket: 32 [ 171.625943][ T6996] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 171.629530][ T6996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.636692][ T6996] usb 6-1: config 0 descriptor?? [ 171.640190][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.643976][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.646942][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.648222][ T6996] as10x_usb: device has been detected [ 171.649856][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.653440][ T6996] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 171.655258][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.661069][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.663845][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.666556][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.669159][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.670938][ T6996] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 171.671848][T12057] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 171.693702][ T40] audit: type=1400 audit(1756292477.994:689): avc: denied { firmware_load } for pid=6996 comm="kworker/0:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 171.694313][ T6996] as10x_usb: error during firmware upload part1 [ 171.704570][ T6996] Registered device nBox DVB-T Dongle [ 171.856263][T12072] lo: entered promiscuous mode [ 171.894762][ T6996] usb 6-1: USB disconnect, device number 2 [ 171.910476][ T6996] Unregistered device nBox DVB-T Dongle [ 171.912665][ T6996] as10x_usb: device has been disconnected [ 172.139988][T12088] netlink: 'syz.6.1725': attribute type 29 has an invalid length. [ 172.143144][T12088] netlink: 'syz.6.1725': attribute type 29 has an invalid length. [ 172.155593][T12088] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8215 sclass=netlink_xfrm_socket pid=12088 comm=syz.6.1725 [ 172.270156][T12102] netlink: 'syz.5.1729': attribute type 15 has an invalid length. [ 172.274728][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 172.282251][T12102] netlink: 'syz.5.1729': attribute type 15 has an invalid length. [ 172.283439][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'. [ 172.285140][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 172.285803][ T765] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.285854][ T765] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.285876][ T765] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.285896][ T765] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.361314][T12108] bond0: Error: Cannot enslave bond to itself. [ 172.367239][T12108] loop6: detected capacity change from 0 to 7 [ 172.444303][T12113] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 172.471213][T12115] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 172.485464][T12117] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1737'. [ 172.519740][T11447] Dev loop6: unable to read RDB block 7 [ 172.521552][T11447] loop6: unable to read partition table [ 172.524213][T11447] loop6: partition table beyond EOD, truncated [ 172.649007][T12129] IPVS: set_ctl: invalid protocol: 137 172.20.20.56:20002 [ 172.677433][T12108] Dev loop6: unable to read RDB block 7 [ 172.679816][T12108] loop6: unable to read partition table [ 172.682369][T12108] loop6: partition table beyond EOD, truncated [ 172.684954][T12108] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 172.762406][T12139] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 172.765242][T12139] netlink: 'syz.1.1744': attribute type 3 has an invalid length. [ 172.768110][T12139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1744'. [ 172.774415][T12139] NCSI netlink: No device for ifindex 0 [ 172.869109][T12141] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1735'. [ 172.890577][T12148] omfs: Invalid superblock (0) [ 173.036829][T12163] kAFS: No cell specified [ 173.086580][T12164] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 173.399246][T12197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.399397][T12196] ipvlan2: entered promiscuous mode [ 174.002211][T12161] comedi comedi2: reset error (fatal) [ 174.154457][T12203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12203 comm=syz.6.1766 [ 174.159065][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1766'. [ 174.219576][T12203] geneve2: entered promiscuous mode [ 174.221436][T12203] geneve2: entered allmulticast mode [ 174.412731][T12224] ata1.00: invalid multi_count 1 ignored [ 174.490778][T12224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=12224 comm=syz.2.1772 [ 174.497702][ T40] audit: type=1400 audit(1756292480.804:690): avc: denied { getopt } for pid=12231 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.505894][ T40] audit: type=1400 audit(1756292480.804:691): avc: denied { map } for pid=12231 comm="syz.6.1775" path="pipe:[46207]" dev="pipefs" ino=46207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 174.552484][T12239] netlink: 'syz.5.1776': attribute type 12 has an invalid length. [ 174.649263][ T40] audit: type=1400 audit(1756292480.954:692): avc: denied { read } for pid=12258 comm="syz.1.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.655683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.658546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.694700][T12264] binder: 12263:12264 ioctl 40046205 0 returned -22 [ 174.856606][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.442381][ T72] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 175.524312][T12264] binder: 12263:12264 ioctl c0306201 200000001a80 returned -14 [ 175.592576][ T72] usb 11-1: Using ep0 maxpacket: 32 [ 175.596706][ T72] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.599636][ T72] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.602788][ T72] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.605652][ T72] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.608721][ T72] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.611917][ T72] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.616315][ T72] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.619321][ T72] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.623414][ T72] usb 11-1: config 0 descriptor?? [ 175.710653][ T40] audit: type=1400 audit(1756292482.014:693): avc: denied { bind } for pid=12301 comm="syz.2.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.808634][T12310] block nbd5: Attempted send on invalid socket [ 175.810771][T12310] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 175.814200][T12310] EXT4-fs (nbd5): unable to read superblock [ 175.832280][ T72] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.041961][ T8320] usb 11-1: USB disconnect, device number 4 [ 176.048622][ T8320] usblp0: removed [ 176.150618][T12325] __nla_validate_parse: 4 callbacks suppressed [ 176.150630][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 176.265550][T12328] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 176.390573][ T40] audit: type=1400 audit(1756292482.694:694): avc: denied { append } for pid=12331 comm="syz.1.1805" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 176.581501][T12344] No source specified [ 176.696191][T12357] input: syz1 as /devices/virtual/input/input21 [ 176.790261][T12365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.791485][T12366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.804166][T12365] syz_tun: entered allmulticast mode [ 176.815911][T12365] dvmrp8: entered allmulticast mode [ 176.818532][T12364] syz_tun: left allmulticast mode [ 176.820988][T12364] dvmrp8: left allmulticast mode [ 176.952325][ T6021] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 177.007763][T12370] input: syz0 as /devices/virtual/input/input22 [ 177.012787][T12370] input: failed to attach handler leds to device input22, error: -6 [ 177.024456][T12370] vlan0: entered promiscuous mode [ 177.026636][T12370] vlan0: entered allmulticast mode [ 177.028742][T12370] hsr_slave_1: entered allmulticast mode [ 177.051294][T12370] veth6: entered promiscuous mode [ 177.075259][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1817'. [ 177.104211][ T6021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.108565][ T6021] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.113954][ T6021] usb 10-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 177.117711][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.125350][ T6021] usb 10-1: config 0 descriptor?? [ 177.346098][ T6021] usb 10-1: string descriptor 0 read error: -71 [ 177.357188][ T6021] usbhid 10-1:0.0: can't add hid device: -71 [ 177.359363][ T6021] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 177.366255][ T6021] usb 10-1: USB disconnect, device number 12 [ 177.418250][T12383] ipvlan2: entered promiscuous mode [ 177.421256][T12383] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 177.489549][T12391] validate_nla: 3 callbacks suppressed [ 177.489561][T12391] netlink: 'syz.6.1825': attribute type 15 has an invalid length. [ 177.534813][T12395] netlink: 'syz.1.1827': attribute type 8 has an invalid length. [ 177.607793][T12399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.692426][T12399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.780282][T12399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.853541][T12399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.998135][ T765] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.007349][ T765] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.017679][ T765] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.027384][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.991450][T12410] 9pnet_fd: Insufficient options for proto=fd [ 178.994635][T12408] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 179.000591][T12408] overlayfs: overlapping lowerdir path [ 179.045355][T12413] usb usb9: usbfs: process 12413 (syz.1.1833) did not claim interface 0 before use [ 179.065223][T12404] netlink: 209712 bytes leftover after parsing attributes in process `syz.5.1830'. [ 179.068410][T12404] net_ratelimit: 23 callbacks suppressed [ 179.068420][T12404] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 179.094097][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1835'. [ 179.142005][ T40] audit: type=1400 audit(1756292485.444:695): avc: denied { mount } for pid=12423 comm="syz.5.1837" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 179.154088][ T40] audit: type=1400 audit(1756292485.464:696): avc: denied { unmount } for pid=8063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 179.162510][ T40] audit: type=1400 audit(1756292485.464:697): avc: denied { mounton } for pid=12419 comm="syz.6.1835" path=2F70726F632F3532352F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026533253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.238832][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1842'. [ 179.243846][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'. [ 179.434794][T12467] 9pnet_rdma: rdma_create_trans (12467): problem binding to privport: 13 [ 179.440195][T12467] program syz.5.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.505191][ T40] audit: type=1400 audit(1756292485.814:698): avc: denied { connect } for pid=12478 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.544341][T12484] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1854'. [ 179.592511][ T6004] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 179.593177][T12488] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.598866][T12488] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 179.602123][T12488] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.605498][T12488] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 179.614746][T12488] fuse: Bad value for 'fd' [ 179.617086][T12488] fuse: Bad value for 'fd' [ 179.619361][T12488] fuse: Bad value for 'fd' [ 179.621733][T12488] fuse: Bad value for 'fd' [ 179.624454][T12488] fuse: Bad value for 'fd' [ 179.626928][T12488] fuse: Bad value for 'fd' [ 179.629178][T12488] fuse: Bad value for 'fd' [ 179.631364][T12488] fuse: Bad value for 'fd' [ 179.634688][T12488] fuse: Bad value for 'fd' [ 179.636967][T12488] fuse: Bad value for 'fd' [ 179.639063][T12488] fuse: Bad value for 'fd' [ 179.641144][T12488] fuse: Bad value for 'fd' [ 179.643348][T12488] fuse: Bad value for 'fd' [ 179.645431][T12488] fuse: Bad value for 'fd' [ 179.647424][T12488] fuse: Bad value for 'fd' [ 179.649076][T12488] fuse: Bad value for 'fd' [ 179.650626][T12488] fuse: Bad value for 'fd' [ 179.652223][T12488] fuse: Bad value for 'fd' [ 179.653854][T12488] fuse: Bad value for 'fd' [ 179.655604][T12488] fuse: Bad value for 'fd' [ 179.657118][T12488] fuse: Bad value for 'fd' [ 179.658746][T12488] fuse: Bad value for 'fd' [ 179.660314][T12488] fuse: Bad value for 'fd' [ 179.661873][T12488] fuse: Bad value for 'fd' [ 179.663975][T12488] fuse: Bad value for 'fd' [ 179.665642][T12488] fuse: Bad value for 'fd' [ 179.667217][T12488] fuse: Bad value for 'fd' [ 179.669486][T12488] fuse: Bad value for 'fd' [ 179.671307][T12488] fuse: Bad value for 'fd' [ 179.673018][T12488] fuse: Bad value for 'fd' [ 179.674833][T12488] fuse: Bad value for 'fd' [ 179.676391][T12488] fuse: Bad value for 'fd' [ 179.677969][T12488] fuse: Bad value for 'fd' [ 179.725787][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1857'. [ 179.731496][T12495] loop6: detected capacity change from 0 to 7 [ 179.735463][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.738906][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.743566][ T6004] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.743585][ T6004] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.743597][ T6004] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.743617][ T6004] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.743629][ T6004] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.745154][ T6004] usb 11-1: config 0 descriptor?? [ 179.749721][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.771494][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.774457][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.776973][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.779594][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.782111][T11447] ldm_validate_partition_table(): Disk read failed. [ 179.785013][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.788489][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.791959][T11447] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.796315][T11447] Dev loop6: unable to read RDB block 0 [ 179.798875][T11447] loop6: unable to read partition table [ 179.801408][T11447] loop6: partition table beyond EOD, truncated [ 179.806386][T12495] ldm_validate_partition_table(): Disk read failed. [ 179.808701][T12495] Dev loop6: unable to read RDB block 0 [ 179.810964][T12495] loop6: unable to read partition table [ 179.813536][T12495] loop6: partition table beyond EOD, truncated [ 179.816284][T12495] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 179.962146][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1858'. [ 179.977307][ T6004] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 179.995693][ T6004] usb 11-1: USB disconnect, device number 5 [ 180.036875][T12510] fido_id[12510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/report_descriptor': No such file or directory [ 180.200736][T12530] netlink: 'syz.5.1866': attribute type 3 has an invalid length. [ 180.203435][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1866'. [ 180.229068][ T40] audit: type=1400 audit(1756292486.534:699): avc: denied { map } for pid=12529 comm="syz.5.1866" path="/268/file0/net_prio.prioidx" dev="9p" ino=38666420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.328414][ T40] audit: type=1400 audit(1756292486.634:700): avc: denied { mounton } for pid=12532 comm="syz.5.1867" path="/syzcgroup/unified/syz5" dev="configfs" ino=3212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.351468][ T40] audit: type=1400 audit(1756292486.654:701): avc: denied { mount } for pid=12532 comm="syz.5.1867" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 180.454211][T12540] binder: BC_ATTEMPT_ACQUIRE not supported [ 180.456599][T12540] binder: 12539:12540 ioctl c0306201 2000000001c0 returned -22 [ 180.494539][ T6004] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 180.664352][ T6004] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 180.665718][T12546] tipc: Started in network mode [ 180.668936][ T6004] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 180.670487][T12546] tipc: Node identity 6ee5cbe99865, cluster identity 4711 [ 180.675145][ T6004] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 180.678531][ T6004] usb 11-1: string descriptor 0 read error: -22 [ 180.678934][T12546] tipc: Enabled bearer , priority 10 [ 180.686120][ T6004] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.692416][ T6004] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.699261][T12523] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 180.764174][T12553] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 180.910648][ T6004] cdc_ncm 11-1:1.0: bind() failure [ 180.917034][ T6004] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 180.919226][ T6004] cdc_ncm 11-1:1.1: bind() failure [ 180.923126][ T6004] usb 11-1: USB disconnect, device number 6 [ 181.451954][ T40] audit: type=1400 audit(1756292487.754:702): avc: denied { mounton } for pid=12567 comm="syz.6.1879" path="/173/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 181.792357][ T53] tipc: Node number set to 4135635945 [ 181.880039][T12588] program syz.1.1886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.885444][T12588] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.972492][T12596] __nla_validate_parse: 1 callbacks suppressed [ 181.972505][T12596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1888'. [ 182.088890][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'. [ 182.094025][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'. [ 182.123630][T12610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12610 comm=syz.1.1894 [ 182.126476][ T40] audit: type=1400 audit(1756292488.434:703): avc: denied { accept } for pid=12611 comm="syz.5.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 182.337023][ T24] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 182.409212][T12624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 182.442510][ T8320] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 182.486968][ T24] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 182.489889][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 182.492684][ T24] usb 11-1: Product: syz [ 182.494233][ T24] usb 11-1: Manufacturer: syz [ 182.496112][ T24] usb 11-1: SerialNumber: syz [ 182.503719][ T24] usb 11-1: config 0 descriptor?? [ 182.508239][ T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 182.511640][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 182.524103][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.528387][ T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 182.531553][ T24] usb 11-1: media controller created [ 182.543519][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.582323][ T8320] usb 10-1: device descriptor read/64, error -71 [ 182.714592][T12608] cxusb: i2c wr: len=79 is too big! [ 182.714592][T12608] [ 182.745954][ T24] cxusb: set interface failed [ 182.747519][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 182.783768][ T24] DVB: Unable to find symbol mt352_attach() [ 182.785951][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 182.788116][ T24] zl10353_read_register: readreg error (reg=127, ret==-121) [ 182.790555][ T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 182.832890][ T8320] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 182.833777][ T24] rc_core: IR keymap rc-dvico-mce not found [ 182.837503][ T24] Registered IR keymap rc-empty [ 182.841762][ T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 182.846672][ T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input25 [ 182.851452][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 182.855251][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 182.860277][ T24] usb 11-1: USB disconnect, device number 7 [ 182.894539][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 182.972391][ T8320] usb 10-1: device descriptor read/64, error -71 [ 182.974808][ T40] audit: type=1400 audit(1756292489.274:704): avc: denied { setattr } for pid=12651 comm="syz.6.1909" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.024769][T12657] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 183.026941][T12657] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.030198][T12657] vhci_hcd vhci_hcd.0: Device attached [ 183.060817][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 183.082409][ T8320] usb usb10-port1: attempt power cycle [ 183.212395][ T53] vhci_hcd: vhci_device speed not set [ 183.282357][ T53] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 183.372330][ T24] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 183.422313][ T8320] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 183.453545][ T8320] usb 10-1: device descriptor read/8, error -71 [ 183.523903][ T24] usb 11-1: config 0 has no interfaces? [ 183.526125][ T24] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.529580][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.536046][ T24] usb 11-1: config 0 descriptor?? [ 183.566604][ T40] audit: type=1400 audit(1756292489.874:705): avc: denied { name_bind } for pid=12669 comm="syz.1.1915" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 183.722368][ T8320] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 183.740094][T12660] vhci_hcd: cannot find a urb of seqnum 53716 max seqnum 1 [ 183.743465][ T8320] usb 10-1: device descriptor read/8, error -71 [ 183.744087][ T72] usb 11-1: USB disconnect, device number 8 [ 183.744772][ T1150] vhci_hcd: stop threads [ 183.744784][ T1150] vhci_hcd: release socket [ 183.744807][ T1150] vhci_hcd: disconnect device [ 183.852737][ T8320] usb usb10-port1: unable to enumerate USB device [ 183.977346][T12692] syzkaller1: entered promiscuous mode [ 183.979201][T12692] syzkaller1: entered allmulticast mode [ 184.239385][T12700] sg_write: data in/out 1725392170/384 bytes for SCSI command 0x79-- guessing data in; [ 184.239385][T12700] program syz.1.1925 not setting count and/or reply_len properly [ 184.308308][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1928'. [ 184.312934][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1928'. [ 184.317267][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1928'. [ 184.320432][T12709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'. [ 184.320994][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1928'. [ 184.327463][T12709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12709 comm=syz.1.1929 [ 184.364043][T12714] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1930'. [ 184.367141][T12714] netlink: 'syz.6.1930': attribute type 5 has an invalid length. [ 184.402029][T12717] overlayfs: workdir and upperdir must be separate subtrees [ 184.431989][ T40] audit: type=1401 audit(1756292490.734:706): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 184.547232][T12729] input: syz0 as /devices/virtual/input/input26 [ 184.680128][T12738] tipc: Enabled bearer , priority 0 [ 184.683597][T12738] syzkaller0: MTU too low for tipc bearer [ 184.685527][T12738] tipc: Disabling bearer [ 184.744220][T12740] wg2: left promiscuous mode [ 184.745781][T12740] wg2: left allmulticast mode [ 184.754358][T12740] wg2: entered promiscuous mode [ 184.755868][T12740] wg2: entered allmulticast mode [ 184.895793][ T40] audit: type=1400 audit(1756292491.204:707): avc: denied { watch watch_reads } for pid=12747 comm="syz.6.1945" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 184.897748][T12748] tmpfs: Bad value for 'mpol' [ 184.902685][ T40] audit: type=1400 audit(1756292491.204:708): avc: denied { mounton } for pid=12747 comm="syz.6.1945" path="/file0" dev="bpf" ino=47783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 185.019252][T12763] bond3 (unregistering): Released all slaves [ 185.049104][T12770] veth0: entered promiscuous mode [ 185.051285][T12770] veth0: left promiscuous mode [ 185.205992][ T5978] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 185.208715][T12779] fuse: Bad value for 'user_id' [ 185.210737][T12779] fuse: Bad value for 'user_id' [ 185.306075][T12786] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 185.365185][T12790] ./bus: Can't lookup blockdev [ 185.620597][T12799] block nbd6: Attempted send on invalid socket [ 185.623695][T12799] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.628128][T12799] block nbd6: Attempted send on invalid socket [ 185.631998][T12799] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.639340][T12799] Mount JFS Failure: -5 [ 185.641457][T12799] jfs_mount failed w/return code = -5 [ 185.845115][ T40] audit: type=1400 audit(1756292492.154:709): avc: denied { getattr } for pid=12814 comm="syz.6.1965" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 185.846686][T12815] overlayfs: statfs failed on './file0' [ 185.930533][ T40] audit: type=1400 audit(1756292492.234:710): avc: denied { read } for pid=12814 comm="syz.6.1965" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 185.931171][T12815] sd 0:0:0:0: PR command failed: 1026 [ 185.938614][ T40] audit: type=1400 audit(1756292492.234:711): avc: denied { open } for pid=12814 comm="syz.6.1965" path="/209/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 185.948040][T12815] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 185.950759][T12815] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 186.307371][T12831] fuse: Unknown parameter 'hash' [ 186.422597][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 186.575227][ T60] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.578591][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.582416][ T6004] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 186.585123][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.588289][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.594404][ T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 186.598036][ T60] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 186.601342][ T60] usb 6-1: Manufacturer: syz [ 186.605439][ T60] usb 6-1: config 0 descriptor?? [ 186.663182][T12835] IPv6: Can't replace route, no match found [ 186.747048][ T6004] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 186.750176][ T6004] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.754121][ T6004] usb 11-1: Product: syz [ 186.756112][ T6004] usb 11-1: Manufacturer: syz [ 186.758078][ T6004] usb 11-1: SerialNumber: syz [ 186.969369][T12844] syzkaller1: entered promiscuous mode [ 186.971449][T12844] syzkaller1: entered allmulticast mode [ 187.013101][ T60] hid_parser_main: 78 callbacks suppressed [ 187.013115][ T60] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 187.022848][ T60] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 187.175933][ T6004] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 187.180112][ T6004] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 187.185675][ T6004] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 187.189433][ T6004] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71 [ 187.194528][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 187.194538][ T40] audit: type=1400 audit(1756292493.504:714): avc: denied { getopt } for pid=12846 comm="syz.5.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.199075][ T6004] usb 11-1: USB disconnect, device number 9 [ 187.247510][ T40] audit: type=1400 audit(1756292493.554:715): avc: denied { create } for pid=12851 comm="syz.5.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 187.284782][T12856] __nla_validate_parse: 4 callbacks suppressed [ 187.284796][T12856] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1979'. [ 187.289774][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1979'. [ 187.426443][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1980'. [ 187.429842][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1980'. [ 187.669813][ T40] audit: type=1400 audit(1756292493.974:716): avc: denied { execute } for pid=12824 comm="syz.1.1969" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 187.833753][ T6004] usb 6-1: USB disconnect, device number 3 [ 187.932304][ T6021] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 188.063473][ T6021] usb 11-1: device descriptor read/64, error -71 [ 188.302844][ T839] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 188.312392][ T6021] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 188.422380][ T53] vhci_hcd: vhci_device speed not set [ 188.422881][T12899] geneve2: entered promiscuous mode [ 188.452357][ T6021] usb 11-1: device descriptor read/64, error -71 [ 188.470652][ T40] audit: type=1400 audit(1756292494.774:717): avc: denied { map } for pid=12902 comm="syz.1.1992" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.478716][ T40] audit: type=1400 audit(1756292494.784:718): avc: denied { call } for pid=12902 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.486786][ T40] audit: type=1400 audit(1756292494.784:719): avc: denied { bind } for pid=12902 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.495675][T12901] SELinux: syz.5.1991 (12901) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.562595][ T6021] usb usb11-port1: attempt power cycle [ 188.752466][ T6996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 188.902361][ T6996] usb 6-1: Using ep0 maxpacket: 8 [ 188.906577][ T6996] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.910043][ T6996] usb 6-1: config 0 has no interface number 0 [ 188.912930][ T6996] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.917333][ T6996] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 188.921892][ T6996] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.922415][ T6021] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 188.926361][ T6996] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.934051][ T6996] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.937532][ T6996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.941546][ T6996] usb 6-1: config 0 descriptor?? [ 188.945683][ T6021] usb 11-1: device descriptor read/8, error -71 [ 188.948693][ T6996] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 189.182284][ T6021] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 189.203086][ T6021] usb 11-1: device descriptor read/8, error -71 [ 189.243835][ T5978] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 189.248239][ T5978] Bluetooth: hci4: Injecting HCI hardware error event [ 189.251587][ T5978] Bluetooth: hci4: hardware error 0x00 [ 189.313321][ T6021] usb usb11-port1: unable to enumerate USB device [ 189.795419][ T6996] usb 6-1: USB disconnect, device number 4 [ 189.802399][ T6996] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 189.882219][ T40] audit: type=1400 audit(1756292496.184:720): avc: denied { connect } for pid=12913 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.963999][T12918] tmpfs: Unknown parameter 'smackfstransmute' [ 190.417627][T12926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3663400886 (468915313408 ns) > initial count (101983626112 ns). Using initial count to start timer. [ 190.436403][T12926] kvm: pic: level sensitive irq not supported [ 190.436955][T12926] kvm: pic: non byte read [ 190.824975][ T6764] tipc: Resetting bearer [ 190.842477][ T6764] tipc: Disabling bearer [ 190.862260][ T6996] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 191.019863][ T6996] usb 6-1: config 0 has no interfaces? [ 191.021801][ T5332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.024097][ T6996] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.028231][ T6996] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.029868][ T5332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.031441][ T6996] usb 6-1: Product: syz [ 191.036262][ T6996] usb 6-1: Manufacturer: syz [ 191.037623][ T5332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.040209][ T6996] usb 6-1: config 0 descriptor?? [ 191.048856][ T5332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.053458][ T5332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.194652][T12948] syz.6.2005: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 191.199723][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.200775][T12941] chnl_net:caif_netlink_parms(): no params data found [ 191.214197][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.226845][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.266575][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.275323][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.290602][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.310139][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.312355][ T5978] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.338644][T12941] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.339459][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.342111][T12941] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.348765][T12941] bridge_slave_0: entered allmulticast mode [ 191.352855][T12941] bridge_slave_0: entered promiscuous mode [ 191.362305][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.362461][T12941] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.368847][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.371871][T12941] bridge_slave_1: entered allmulticast mode [ 191.376985][T12941] bridge_slave_1: entered promiscuous mode [ 191.384250][T12948] netlink: 'syz.6.2005': attribute type 8 has an invalid length. [ 191.429119][T12941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.440494][T12941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.456243][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.460377][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.464600][T12936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2002'. [ 191.505439][ T6021] usb 6-1: USB disconnect, device number 5 [ 191.514036][T12941] team0: Port device team_slave_0 added [ 191.518488][T12941] team0: Port device team_slave_1 added [ 191.596473][T12941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.599546][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.610537][T12941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.615395][T12941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.618725][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.629095][T12941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.715730][T12941] hsr_slave_0: entered promiscuous mode [ 191.719143][T12941] hsr_slave_1: entered promiscuous mode [ 191.722701][T12941] debugfs: 'hsr0' already exists in 'hsr' [ 191.725893][T12941] Cannot create hsr debugfs directory [ 192.037511][T12941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.044530][T12941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.058034][T12941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 192.063547][T12941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.146904][T12941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.161095][T12941] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.167896][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.170517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.179646][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.182257][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.276794][ T40] audit: type=1400 audit(1756292498.584:721): avc: denied { create } for pid=12983 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 192.301424][T12941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.378425][ T40] audit: type=1326 audit(1756292498.684:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.6.2014" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13a538ebe9 code=0x0 [ 192.443841][ T1341] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 192.464214][T12941] veth0_vlan: entered promiscuous mode [ 192.469467][T12941] veth1_vlan: entered promiscuous mode [ 192.485636][T12941] veth0_macvtap: entered promiscuous mode [ 192.489672][T12941] veth1_macvtap: entered promiscuous mode [ 192.499390][T12941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.506505][T12941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.514931][ T1150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.518674][ T1150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.524086][ T1150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.527541][ T1150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.584087][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.586883][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.603721][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.606931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.613031][ T1341] usb 6-1: Using ep0 maxpacket: 16 [ 192.619311][ T1341] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 192.623914][ T1341] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 192.626594][ T1341] usb 6-1: Product: syz [ 192.627955][ T1341] usb 6-1: Manufacturer: syz [ 192.629919][ T1341] usb 6-1: SerialNumber: syz [ 192.634931][ T1341] usb 6-1: config 0 descriptor?? [ 192.651703][T13004] sch_tbf: burst 43 is lower than device lo mtu (65550) ! [ 192.844684][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 192.858512][ T1341] usb 6-1: USB disconnect, device number 6 [ 192.950269][T13016] input: syz1 as /devices/virtual/input/input29 [ 193.001471][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2019'. [ 193.038983][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2020'. [ 193.082368][ T5978] Bluetooth: hci2: command tx timeout [ 193.123329][T13026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.180660][ T40] audit: type=1400 audit(1756292499.484:723): avc: denied { mount } for pid=13025 comm="syz.7.2022" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 193.418983][T13041] openvswitch: netlink: Message has 8 unknown bytes. [ 193.451496][T13046] fuse: Bad value for 'user_id' [ 193.454774][T13046] fuse: Bad value for 'user_id' [ 193.530782][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2027'. [ 193.683617][T13064] tmpfs: Unknown parameter 'nr' [ 193.911249][T13079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2039'. [ 193.916094][T13079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2039'. [ 193.970024][T13084] loop2: detected capacity change from 0 to 7 [ 193.976724][T13084] Dev loop2: unable to read RDB block 7 [ 193.978812][T13084] loop2: AHDI p1 p2 p3 [ 193.980352][T13084] loop2: partition table partially beyond EOD, truncated [ 193.983413][T13084] loop2: p1 start 1601398130 is beyond EOD, truncated [ 193.985587][T13084] loop2: p2 start 1702059890 is beyond EOD, truncated [ 194.232001][T13105] SELinux: Context is not valid (left unmapped). [ 194.233993][T13102] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 194.252996][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2043'. [ 194.266071][ T40] audit: type=1400 audit(1756292500.564:724): avc: denied { node_bind } for pid=13091 comm="syz.7.2043" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 194.270463][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 194.677145][T13141] input: syz0 as /devices/virtual/input/input30 [ 194.741479][T13141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2060'. [ 195.005728][T13169] can0: slcan on ptm0. [ 195.063978][T13167] can0 (unregistered): slcan off ptm0. [ 195.162335][ T5978] Bluetooth: hci2: command tx timeout [ 195.274037][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 195.276837][T13178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.279143][T13178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.281889][T13178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.284561][T13178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.462967][T13184] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 195.465939][T13184] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 195.568698][T13183] infiniband syz1: set down [ 195.571295][T13183] infiniband syz1: added ipvlan0 [ 195.592496][T13183] RDS/IB: syz1: added [ 195.595259][T13183] smc: adding ib device syz1 with port count 1 [ 195.597365][T13183] smc: ib device syz1 port 1 has pnetid [ 196.832368][ T8320] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 196.834822][ T8320] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 196.864633][T13146] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 196.902933][T13189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.968493][T13189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.112828][ T1341] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 197.118726][T13194] syzkaller1: entered promiscuous mode [ 197.121043][T13194] syzkaller1: entered allmulticast mode [ 197.138164][T13194] validate_nla: 44 callbacks suppressed [ 197.138179][T13194] netlink: 'syz.6.2077': attribute type 10 has an invalid length. [ 197.152578][T13194] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.177927][T13198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.262465][ T1341] usb 10-1: Using ep0 maxpacket: 8 [ 197.265732][ T1341] usb 10-1: config 0 interface 0 has no altsetting 0 [ 197.268069][ T1341] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.270988][ T1341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.275264][ T1341] usb 10-1: config 0 descriptor?? [ 197.436073][ T40] audit: type=1400 audit(1756292503.744:725): avc: denied { bind } for pid=13210 comm="syz.1.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.457982][ T40] audit: type=1400 audit(1756292503.764:726): avc: denied { ioctl } for pid=13212 comm="syz.6.2084" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 197.510148][T13219] geneve3: entered promiscuous mode [ 197.511913][T13219] geneve3: entered allmulticast mode [ 197.869666][T13251] netlink: '': attribute type 4 has an invalid length. [ 197.894788][T13253] random: crng reseeded on system resumption [ 197.906245][T13253] netlink: 'syz.6.2094': attribute type 4 has an invalid length. [ 197.906694][ T1341] usbhid 10-1:0.0: can't add hid device: -71 [ 197.911341][ T1341] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 197.912725][T13253] netlink: 'syz.6.2094': attribute type 4 has an invalid length. [ 197.917154][ T1341] usb 10-1: USB disconnect, device number 17 [ 198.022422][ T6996] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 198.172295][ T60] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 198.194220][ T6996] usb 12-1: config 0 has no interfaces? [ 198.196024][ T6996] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.198852][ T6996] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.202701][ T6996] usb 12-1: config 0 descriptor?? [ 198.302332][ T60] usb 11-1: device descriptor read/64, error -71 [ 198.408579][T13244] program syz.7.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.423045][T13255] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 198.428639][ T1150] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.534620][ T40] audit: type=1400 audit(1756292504.844:727): avc: denied { read } for pid=13261 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 198.552328][ T60] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 198.592584][T13265] 9pnet: p9_errstr2errno: server reported unknown error ?n [ 198.592584][T13265] kl [ 198.693010][ T60] usb 11-1: device descriptor read/64, error -71 [ 198.728136][T13274] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 198.730851][T13274] netlink: 'syz.1.2101': attribute type 101 has an invalid length. [ 198.733838][T13274] __nla_validate_parse: 3 callbacks suppressed [ 198.733848][T13274] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2101'. [ 198.740573][ T40] audit: type=1400 audit(1756292505.044:728): avc: denied { listen } for pid=13273 comm="syz.1.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.812994][ T60] usb usb11-port1: attempt power cycle [ 198.912901][T13275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.172355][ T60] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 199.203943][ T60] usb 11-1: device descriptor read/8, error -71 [ 199.314515][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.317335][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.442370][ T60] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 199.463923][ T60] usb 11-1: device descriptor read/8, error -71 [ 199.545314][T13283] smc: net device bond0 applied user defined pnetid SYZ0 [ 199.548300][T13283] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 199.572812][ T60] usb usb11-port1: unable to enumerate USB device [ 200.358186][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 200.395192][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 200.432370][ T5978] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 200.432410][ T5979] Bluetooth: hci5: command 0x1003 tx timeout [ 200.457913][ T40] audit: type=1400 audit(1756292506.764:729): avc: denied { search } for pid=13286 comm="syz.1.2106" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.464848][ T40] audit: type=1400 audit(1756292506.774:730): avc: denied { search } for pid=13286 comm="syz.1.2106" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.471751][ T40] audit: type=1400 audit(1756292506.774:731): avc: denied { search } for pid=13286 comm="syz.1.2106" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.519587][ T40] audit: type=1400 audit(1756292506.824:732): avc: denied { bind } for pid=13291 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.524069][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2109'. [ 200.577875][ T40] audit: type=1400 audit(1756292506.884:733): avc: denied { map } for pid=13300 comm="syz.1.2112" path="socket:[52600]" dev="sockfs" ino=52600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.603025][T13306] tipc: Enabled bearer , priority 10 [ 200.607122][T13306] tipc: Bearer : already 2 bearers with priority 10 [ 200.608714][T13308] netlink: 'syz.5.2111': attribute type 7 has an invalid length. [ 200.609485][T13306] tipc: Bearer : trying with adjusted priority [ 200.615661][T13306] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 200.616003][T13308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13308 comm=syz.5.2111 [ 200.616846][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2111'. [ 200.616943][T13310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13310 comm=syz.5.2111 [ 200.618694][T13306] tipc: Enabled bearer , priority 9 [ 200.665707][T13313] tmpfs: Bad value for 'huge' [ 200.739115][ T6996] usb 12-1: USB disconnect, device number 2 [ 200.773737][ T1150] smc: removing ib device syz1 [ 200.801519][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2115'. [ 200.808699][ T1341] hid (null): global environment stack underflow [ 200.811609][ T1341] hid (null): unknown global tag 0xe [ 200.814402][ T1341] hid (null): global environment stack underflow [ 200.816897][ T1341] hid (null): invalid report_count 53268 [ 200.819270][ T1341] hid (null): unknown global tag 0xd [ 200.825143][ T1341] hid (null): unknown global tag 0xc [ 200.827554][ T1341] hid (null): bogus close delimiter [ 200.829770][ T1341] hid (null): unknown global tag 0x76 [ 200.832292][ T1341] hid (null): unknown global tag 0xe [ 200.834564][ T1341] hid (null): report_id 332760064 is invalid [ 200.836810][ T1341] hid (null): unknown global tag 0xe [ 200.839215][ T1341] hid (null): global environment stack underflow [ 200.842052][ T1341] hid (null): unknown global tag 0xd [ 200.844910][ T1341] hid (null): global environment stack underflow [ 200.847594][ T1341] hid (null): unknown global tag 0xe [ 200.850101][ T1341] hid (null): unknown global tag 0xd [ 200.852422][ T1341] hid (null): invalid report_count 45416 [ 200.854546][ T1341] hid (null): unknown global tag 0xc [ 200.856746][ T1341] hid (null): report_id 0 is invalid [ 200.858962][ T1341] hid (null): invalid report_count 33555 [ 200.861360][ T1341] hid (null): unknown global tag 0xc [ 200.863611][ T1341] hid (null): unknown global tag 0xc [ 200.865922][ T1341] hid (null): unknown global tag 0xd [ 200.868174][ T1341] hid (null): unknown global tag 0xc [ 200.870519][ T1341] hid (null): unknown global tag 0xd [ 200.873124][ T1341] hid (null): unknown global tag 0xd [ 200.875385][ T1341] hid (null): unknown global tag 0xc [ 200.878300][ T1341] hid (null): invalid report_size 62145 [ 200.880850][ T1341] hid (null): unknown global tag 0xe [ 200.883194][ T1341] hid (null): global environment stack underflow [ 200.885874][ T1341] hid (null): unknown global tag 0xc [ 200.893235][ T1341] hid-generic 0001:FFFFFF80:0006.000A: global environment stack underflow [ 200.896783][ T1341] hid-generic 0001:FFFFFF80:0006.000A: item 0 1 1 11 parsing failed [ 200.900495][ T1341] hid-generic 0001:FFFFFF80:0006.000A: probe with driver hid-generic failed with error -22 [ 200.961195][T13321] netlink: 'syz.7.2117': attribute type 32 has an invalid length. [ 200.986099][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2118'. [ 201.107562][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2120'. [ 201.121654][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2120'. [ 201.125640][T13339] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 201.128937][T13339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.164357][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2121'. [ 201.223763][ T40] audit: type=1400 audit(1756292507.534:734): avc: denied { bind } for pid=13343 comm="syz.6.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.286537][T13358] binder: 13357:13358 ioctl c0306201 200000000080 returned -14 [ 201.295057][T13358] erspan0: entered promiscuous mode [ 201.297552][T13358] gretap0: entered promiscuous mode [ 201.312074][T13349] could not allocate digest TFM handle cryptd(blake2b-160) [ 201.316523][T13362] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 201.320814][T13363] netlink: 'syz.7.2125': attribute type 1 has an invalid length. [ 201.323574][T13362] netlink: 'syz.7.2125': attribute type 1 has an invalid length. [ 201.612679][ T6032] Process accounting resumed [ 201.686761][T13409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13409 comm=syz.6.2138 [ 201.827248][T13420] xfrm0: mtu greater than device maximum [ 201.865863][T13425] lo: left promiscuous mode [ 201.867465][T13425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.898340][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 202.050824][T13439] netlink: zone id is out of range [ 202.052493][T13439] netlink: zone id is out of range [ 202.054212][T13439] netlink: zone id is out of range [ 202.055916][T13439] netlink: zone id is out of range [ 202.057596][T13439] netlink: zone id is out of range [ 202.059251][T13439] netlink: zone id is out of range [ 202.073523][T13446] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 202.075695][T13446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.078126][T13446] vhci_hcd vhci_hcd.0: Device attached [ 202.082120][T13446] batman_adv: batadv0: Adding interface: dummy0 [ 202.085198][T13446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.093364][T13446] batman_adv: batadv0: Interface activated: dummy0 [ 202.133215][T13447] vhci_hcd: connection closed [ 202.133727][ T1150] vhci_hcd: stop threads [ 202.136732][ T1150] vhci_hcd: release socket [ 202.138281][ T1150] vhci_hcd: disconnect device [ 202.392481][ T1341] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 202.522454][ T1341] usb 6-1: device descriptor read/64, error -71 [ 202.713535][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 202.713546][ T40] audit: type=1400 audit(1756292509.024:737): avc: denied { listen } for pid=13469 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.758716][T13474] vlan2: entered promiscuous mode [ 202.761210][T13474] vlan2: entered allmulticast mode [ 202.764238][T13474] hsr_slave_1: entered allmulticast mode [ 202.772691][ T1341] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 202.903566][ T1341] usb 6-1: device descriptor read/64, error -71 [ 203.023201][ T1341] usb usb6-port1: attempt power cycle [ 203.230814][T13484] bridge: RTM_NEWNEIGH with invalid ether address [ 203.383513][ T1341] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 203.413174][ T1341] usb 6-1: device descriptor read/8, error -71 [ 203.454597][T13508] bond2: entered allmulticast mode [ 203.498865][T13511] validate_nla: 3 callbacks suppressed [ 203.498877][T13511] netlink: 'syz.7.2173': attribute type 6 has an invalid length. [ 203.506307][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.510167][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.543507][T13513] netlink: 'syz.7.2174': attribute type 64 has an invalid length. [ 203.546127][T13513] netlink: 'syz.7.2174': attribute type 4 has an invalid length. [ 203.662722][ T1341] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 203.694792][ T1341] usb 6-1: device descriptor read/8, error -71 [ 203.802582][ T1341] usb usb6-port1: unable to enumerate USB device [ 203.861907][ T40] audit: type=1400 audit(1756292510.164:738): avc: denied { mounton } for pid=13530 comm="syz.7.2179" path="/file0" dev="ramfs" ino=53791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 203.866259][T13531] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 203.873896][T13531] overlayfs: failed to set xattr on upper [ 203.875706][T13531] overlayfs: ...falling back to redirect_dir=nofollow. [ 203.877984][T13531] overlayfs: ...falling back to index=off. [ 203.879916][T13531] overlayfs: ...falling back to uuid=null. [ 203.881802][T13531] overlayfs: conflicting lowerdir path [ 204.341831][ T40] audit: type=1400 audit(1756292510.644:739): avc: denied { setopt } for pid=13569 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.412346][ T60] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 204.465868][ T40] audit: type=1400 audit(1756292510.774:740): avc: denied { unmount } for pid=12941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 204.492604][T13586] netlink: 'syz.7.2198': attribute type 9 has an invalid length. [ 204.495186][T13586] netlink: 'syz.7.2198': attribute type 7 has an invalid length. [ 204.497583][T13586] netlink: 'syz.7.2198': attribute type 8 has an invalid length. [ 204.501116][ T40] audit: type=1400 audit(1756292510.804:741): avc: denied { remount } for pid=13585 comm="syz.7.2198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 204.526618][T13586] syz.7.2198 (13586) used greatest stack depth: 17752 bytes left [ 204.536737][ T40] audit: type=1400 audit(1756292510.844:742): avc: denied { unmount } for pid=12941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 204.562511][ T60] usb 11-1: Using ep0 maxpacket: 8 [ 204.565580][ T60] usb 11-1: config 0 interface 0 has no altsetting 0 [ 204.567697][ T60] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 204.570658][ T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.575008][ T60] usb 11-1: config 0 descriptor?? [ 204.785155][ T60] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 204.788516][ T6032] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 204.841991][ T40] audit: type=1400 audit(1756292511.144:743): avc: denied { lock } for pid=13601 comm="syz.7.2204" path="socket:[52918]" dev="sockfs" ino=52918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 204.922439][ T6032] usb 10-1: device descriptor read/64, error -71 [ 205.194003][ T6032] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 205.274900][T13610] loop6: detected capacity change from 0 to 7 [ 205.279078][T11447] Dev loop6: unable to read RDB block 7 [ 205.281065][T11447] loop6: unable to read partition table [ 205.284016][T11447] loop6: partition table beyond EOD, truncated [ 205.288521][T13610] Dev loop6: unable to read RDB block 7 [ 205.290993][T13610] loop6: unable to read partition table [ 205.293907][T13610] loop6: partition table beyond EOD, truncated [ 205.296569][T13610] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 205.342266][ T6032] usb 10-1: device descriptor read/64, error -71 [ 205.430562][T13626] __nla_validate_parse: 78 callbacks suppressed [ 205.430573][T13626] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2211'. [ 205.462456][ T6032] usb usb10-port1: attempt power cycle [ 205.692438][T13635] trusted_key: encrypted_key: master key parameter 'J-J4;I&iɿqnSZTx/^Ooɼfx:/}m"> [ 205.692438][T13635] ' is invalid [ 205.822408][ T6032] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 205.853457][ T6032] usb 10-1: device descriptor read/8, error -71 [ 205.931981][ T40] audit: type=1326 audit(1756292512.234:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13652 comm="syz.1.2219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f738ebe9 code=0x7ffc0000 [ 205.932114][ T40] audit: type=1326 audit(1756292512.234:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13652 comm="syz.1.2219" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f738ebe9 code=0x7ffc0000 [ 206.091604][T13668] 9pnet_virtio: no channels available for device syz [ 206.112966][ T6032] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 206.133973][ T6032] usb 10-1: device descriptor read/8, error -71 [ 206.254042][ T6032] usb usb10-port1: unable to enumerate USB device [ 206.662244][ T6032] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 206.793970][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2225'. [ 206.812338][ T6032] usb 6-1: Using ep0 maxpacket: 8 [ 206.816802][ T6032] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 206.820000][ T6032] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 206.823508][ T6032] usb 6-1: config 1 interface 0 has no altsetting 0 [ 206.827596][ T6032] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 206.830432][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.833086][ T6032] usb 6-1: Product: syz [ 206.834471][ T6032] usb 6-1: Manufacturer: ᇈﮕꃨ쟑⦸춅䄺ณ횰۸䲃젛纠ᅶ쁾⪶㙄鍱䦏쀨᪨岩⻧퇓읟輣Ⴙ차㮗䄓万쟲傂릳ᑻ✏䌢䩎罝헎㛇곈냥鴱抄ら܋褾䱱Ւ웏ﱃ훜䟣旫庛餦편⡞ﵺ䀴햕⋚徂 [ 206.841762][ T6032] usb 6-1: SerialNumber: syz [ 206.846454][T13671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.848879][T13671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.181719][ T840] usb 11-1: USB disconnect, device number 18 [ 207.225783][T13691] cdrom: dropping to single frame dma [ 207.236586][T13694] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 207.260396][ T6032] usblp0: Disabling reads from problematic bidirectional printer [ 207.266273][ T6032] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 5 proto 2 vid 0x03F0 pid 0x0004 [ 207.292953][ T6032] usb 6-1: USB disconnect, device number 11 [ 207.297562][ T6032] usblp0: removed [ 207.344516][ T40] audit: type=1326 audit(1756292513.654:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13701 comm="syz.6.2233" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13a538ebe9 code=0x0 [ 207.453188][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2235'. [ 207.456766][T13708] netlink: 'syz.7.2235': attribute type 7 has an invalid length. [ 207.459757][T13708] netlink: 'syz.7.2235': attribute type 8 has an invalid length. [ 207.462256][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2235'. [ 207.468056][T13708] gretap0: entered promiscuous mode [ 207.470879][T13708] batadv_slave_1: entered promiscuous mode [ 207.474604][T13708] gretap0: left promiscuous mode [ 207.476585][T13708] batadv_slave_1: left promiscuous mode [ 207.672663][T13721] net_ratelimit: 27 callbacks suppressed [ 207.672673][T13721] xfrm0: mtu greater than device maximum [ 207.791630][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 207.794765][T13728] openvswitch: netlink: Flow key attr not present in new flow. [ 207.811443][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 207.814951][T13728] openvswitch: netlink: Flow key attr not present in new flow. [ 207.888710][T13738] netlink: 'syz.1.2246': attribute type 21 has an invalid length. [ 207.974475][T13749] netlink: 'syz.1.2248': attribute type 25 has an invalid length. [ 208.052312][ T6044] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 208.139619][T13762] misc userio: No port type given on /dev/userio [ 208.202266][ T6044] usb 10-1: Using ep0 maxpacket: 16 [ 208.206372][ T6044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.210747][ T6044] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.214755][ T6044] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.220154][ T6044] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 208.225469][ T6044] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.235655][ T6044] usb 10-1: config 0 descriptor?? [ 208.255920][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 208.255931][ T40] audit: type=1400 audit(1756292514.564:748): avc: denied { ioctl } for pid=13770 comm="syz.6.2256" path="socket:[54106]" dev="sockfs" ino=54106 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 208.417877][T13782] vlan2: entered allmulticast mode [ 208.419666][T13782] batadv0: entered allmulticast mode [ 208.431336][ T72] libceph: connect (1)[c::]:6789 error -13 [ 208.433593][ T72] libceph: mon0 (1)[c::]:6789 connect error [ 208.656846][ T6044] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 208.659825][ T6044] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 208.662957][ T6044] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 208.665812][ T6044] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 208.668739][ T6044] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 208.675437][ T6044] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 208.698323][ T72] libceph: connect (1)[c::]:6789 error -13 [ 208.700879][ T72] libceph: mon0 (1)[c::]:6789 connect error [ 208.706510][ T6044] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 208.710082][ T6044] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 208.970269][ T6996] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 208.970894][ T840] usb 10-1: USB disconnect, device number 22 [ 208.974129][ T6996] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.979283][ T6996] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 208.985436][ T6996] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 209.073413][T13796] zonefs (nbd6) ERROR: Not a zoned block device [ 209.082471][T13797] zonefs (nbd6) ERROR: Not a zoned block device [ 209.084512][T13793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2260'. [ 209.176088][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2263'. [ 209.185873][T13802] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 209.189224][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2263'. [ 209.238068][ T6996] libceph: connect (1)[c::]:6789 error -13 [ 209.242363][ T6996] libceph: mon0 (1)[c::]:6789 connect error [ 209.247792][T13782] ceph: No mds server is up or the cluster is laggy [ 209.344392][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2268'. [ 210.124951][T13857] binder: Bad value for 'stats' [ 210.125149][T13858] binder: Bad value for 'stats' [ 210.159119][T13860] syz_tun: refused to change device tx_queue_len [ 210.165874][T13860] unknown channel width for channel at 909000KHz? [ 210.307449][T13881] sctp: [Deprecated]: syz.7.2285 (pid 13881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.307449][T13881] Use struct sctp_sack_info instead [ 210.389736][T13890] program syz.1.2289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.434322][T13899] 9pnet_fd: p9_fd_create_tcp (13899): problem binding to privport [ 210.486826][T13906] kvm: pic: non byte read [ 210.489410][T13906] kvm: pic: level sensitive irq not supported [ 210.489641][T13906] kvm: pic: non byte read [ 210.495719][T13906] kvm: pic: level sensitive irq not supported [ 210.495969][T13906] kvm: pic: non byte read [ 210.503172][T13906] kvm: pic: level sensitive irq not supported [ 210.503423][T13906] kvm: pic: non byte read [ 210.508347][T13906] kvm: pic: level sensitive irq not supported [ 210.508583][T13906] kvm: pic: non byte read [ 210.513169][T13906] kvm: pic: level sensitive irq not supported [ 210.513406][T13906] kvm: pic: non byte read [ 210.517715][T13906] kvm: pic: level sensitive irq not supported [ 210.517951][T13906] kvm: pic: non byte read [ 210.523147][T13906] kvm: pic: level sensitive irq not supported [ 210.523597][T13906] kvm: pic: non byte read [ 210.527891][T13906] kvm: pic: level sensitive irq not supported [ 210.528122][T13906] kvm: pic: non byte read [ 210.629502][T13919] __nla_validate_parse: 42 callbacks suppressed [ 210.629513][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2298'. [ 210.704763][T13930] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 210.707230][T13930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.713854][T13930] vhci_hcd vhci_hcd.0: Device attached [ 210.717032][T13931] vhci_hcd: connection closed [ 210.717298][ T13] vhci_hcd: stop threads [ 210.721254][ T13] vhci_hcd: release socket [ 210.723444][ T13] vhci_hcd: disconnect device [ 210.888892][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 210.930367][T13941] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2303'. [ 210.934271][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.945648][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.948457][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.951046][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.955287][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.975456][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 211.007692][T13945] pvfs2: Unknown parameter 'system_u:object_r:hald_sonypic_exec_t:s0' [ 211.044037][T13947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.046398][T13947] IPv6: NLM_F_CREATE should be set when creating new route [ 211.048773][T13947] IPv6: NLM_F_CREATE should be set when creating new route [ 211.051097][T13947] IPv6: NLM_F_CREATE should be set when creating new route [ 211.054272][T13947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.098853][T13949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13949 comm=syz.1.2307 [ 211.102864][T13949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13949 comm=syz.1.2307 [ 211.106705][T13949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13949 comm=syz.1.2307 [ 211.343384][T13960] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.392706][ T8320] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 211.542314][ T60] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 211.542454][ T8320] usb 6-1: Using ep0 maxpacket: 8 [ 211.548580][ T8320] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 211.551186][ T8320] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.554611][ T8320] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.557820][ T8320] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.561206][ T8320] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.565549][ T8320] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.568358][ T8320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.693715][ T60] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.697250][ T60] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.700386][ T60] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.703343][ T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.709409][T13958] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 211.716105][ T60] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.774966][ T8320] usb 6-1: usb_control_msg returned -32 [ 211.776721][ T8320] usbtmc 6-1:16.0: can't read capabilities [ 212.028223][T13964] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 212.186180][T13967] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 212.394181][ T8320] usb 6-1: USB disconnect, device number 12 [ 212.539375][T13991] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2317'. [ 212.543839][T13991] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2317'. [ 212.547447][T13991] netlink: 'syz.7.2317': attribute type 39 has an invalid length. [ 212.549235][T13987] netlink: 'syz.1.2316': attribute type 10 has an invalid length. [ 212.568585][T13987] syz_tun: entered promiscuous mode [ 212.573072][T13987] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 212.649369][ T40] audit: type=1400 audit(1756292518.964:749): avc: denied { unmount } for pid=11568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 212.788808][ T40] audit: type=1804 audit(1756292519.094:750): pid=14003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2319" name="/newroot/235/file0" dev="tmpfs" ino=1293 res=1 errno=0 [ 212.799305][ T40] audit: type=1800 audit(1756292519.094:751): pid=14003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2319" name="file0" dev="tmpfs" ino=1293 res=0 errno=0 [ 212.982255][T14008] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2321'. [ 213.073543][T14015] binfmt_misc: register: failed to install interpreter file ./file0 [ 213.146915][T14026] veth0_to_bond: entered allmulticast mode [ 213.154372][T14027] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 213.402295][ T60] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 213.447748][ T40] audit: type=1400 audit(1756292519.754:752): avc: denied { accept } for pid=14033 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.449706][T14034] tmpfs: Unknown parameter 'nr_blo' [ 213.553718][ T60] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.557656][ T60] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.561562][ T60] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.565079][ T60] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.570187][ T60] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.573977][ T60] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.576515][ T60] usb 12-1: Manufacturer: syz [ 213.579625][ T60] usb 12-1: config 0 descriptor?? [ 213.986431][ T60] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 213.993974][ T60] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 214.244581][ T60] usb 12-1: USB disconnect, device number 3 [ 214.293704][ T8320] usb 11-1: USB disconnect, device number 19 [ 214.371841][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 214.426384][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2337'. [ 214.429413][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2337'. [ 214.432793][T14070] netlink: 'syz.6.2337': attribute type 12 has an invalid length. [ 214.459492][T14068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.558601][ T1249] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.561799][ T1249] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.565228][ T1249] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.567970][ T1249] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.727074][T14116] netlink: 'syz.6.2348': attribute type 1 has an invalid length. [ 214.727075][T14117] netlink: 'syz.6.2348': attribute type 1 has an invalid length. [ 214.747863][T14116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.779552][ T40] audit: type=1400 audit(1756292521.084:753): avc: denied { mount } for pid=14125 comm="syz.7.2351" name="/" dev="pstore" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 214.786831][ T40] audit: type=1400 audit(1756292521.084:754): avc: denied { remount } for pid=14125 comm="syz.7.2351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 214.787706][T14116] veth9: entered promiscuous mode [ 214.805725][T14116] bond4: (slave veth9): Enslaving as an active interface with a down link [ 214.826390][T14128] 9pnet: Found fid 0 not clunked [ 214.854433][T14116] netlink: zone id is out of range [ 214.856113][T14116] netlink: zone id is out of range [ 214.857746][T14116] netlink: zone id is out of range [ 214.859361][T14116] netlink: zone id is out of range [ 214.860967][T14116] netlink: zone id is out of range [ 214.862899][T14116] netlink: zone id is out of range [ 214.864597][T14116] netlink: zone id is out of range [ 214.866355][T14116] netlink: zone id is out of range [ 214.868011][T14116] netlink: zone id is out of range [ 214.871178][T14117] veth11: entered promiscuous mode [ 214.876193][T14117] bond4: (slave veth11): Enslaving as an active interface with a down link [ 214.903514][ T40] audit: type=1400 audit(1756292521.214:755): avc: denied { unmount } for pid=12941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 214.930375][T14136] netlink: 'syz.7.2353': attribute type 1 has an invalid length. [ 215.041804][T14151] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 215.046259][T14151] overlayfs: missing 'lowerdir' [ 215.173756][T14165] netlink: 'syz.7.2363': attribute type 1 has an invalid length. [ 215.173782][T14166] netlink: 'syz.7.2363': attribute type 1 has an invalid length. [ 215.191676][T14165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.945908][T14183] nftables ruleset with unbound chain [ 215.950478][T14183] __nla_validate_parse: 8 callbacks suppressed [ 215.950494][T14183] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2367'. [ 215.957293][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2367'. [ 216.049850][T14192] comedi comedi0: dac02: I/O port conflict (0xfffffffffffffbff,8) [ 216.063329][ T840] IPVS: starting estimator thread 0... [ 216.063469][T14194] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 216.118075][T14199] program syz.6.2372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.119907][T14200] netlink: 'syz.1.2370': attribute type 27 has an invalid length. [ 216.152281][T14195] IPVS: using max 42 ests per chain, 100800 per kthread [ 216.172824][T14200] syz_tun: left promiscuous mode [ 216.184736][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.238232][T14200] tipc: Resetting bearer [ 216.246376][T14200] veth0_to_bond: left allmulticast mode [ 216.267329][T14204] binder: 14202:14204 ioctl c0306201 200000000640 returned -22 [ 216.353067][T14200] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 216.355848][T14200] ipvlan2: left promiscuous mode [ 216.366821][T14200] geneve2: left promiscuous mode [ 216.379642][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2374'. [ 216.383082][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.385974][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.389048][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.391728][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.396240][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.399117][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.401765][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.404526][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.429205][T14208] ISOFS: Unable to identify CD-ROM format. [ 216.440693][T14212] ISOFS: Unable to identify CD-ROM format. [ 216.508166][T14219] netlink: 'syz.6.2377': attribute type 7 has an invalid length. [ 216.855495][T14238] netfs: Couldn't get user pages (rc=-14) [ 216.859315][ T40] audit: type=1400 audit(1756292523.164:756): avc: denied { read } for pid=14237 comm="syz.1.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.867474][ T40] audit: type=1400 audit(1756292523.164:757): avc: denied { watch } for pid=14237 comm="syz.1.2384" path="/267/file0" dev="9p" ino=38666248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.068066][ T40] audit: type=1400 audit(1756292523.374:758): avc: denied { connect } for pid=14243 comm="syz.1.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 218.117253][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804f26d400: rx timeout, send abort [ 218.122608][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804f26cc00: rx timeout, send abort [ 218.123037][ T40] audit: type=1400 audit(1756292524.434:759): avc: denied { read } for pid=5364 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 218.126649][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f26d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.132886][ T40] audit: type=1400 audit(1756292524.434:760): avc: denied { search } for pid=5364 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.140457][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f26cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.145224][ T40] audit: type=1400 audit(1756292524.434:761): avc: denied { search } for pid=5364 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.453618][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 218.453630][ T40] audit: type=1400 audit(1756292524.754:769): avc: denied { set_context_mgr } for pid=14266 comm="syz.6.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 218.463551][ T40] audit: type=1400 audit(1756292524.764:770): avc: denied { call } for pid=14266 comm="syz.6.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 218.509481][T14270] tipc: Can't bind to reserved service type 2 [ 218.511938][T14270] syzkaller1: entered promiscuous mode [ 218.513822][T14270] syzkaller1: entered allmulticast mode [ 218.540220][T14255] input: syz1 as /devices/virtual/input/input35 [ 218.679955][T14282] program syz.1.2399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.684962][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2401'. [ 218.729266][T14290] tmpfs: Unknown parameter 'mp90:' [ 218.754860][T14291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14291 comm=syz.6.2401 [ 218.863617][ T40] audit: type=1400 audit(1756292525.174:771): avc: denied { accept } for pid=14295 comm="syz.1.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.093239][ T40] audit: type=1400 audit(1756292525.404:772): avc: denied { allowed } for pid=14298 comm="syz.7.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 219.822310][ T40] audit: type=1400 audit(1756292526.124:773): avc: denied { create } for pid=14325 comm="syz.1.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.822904][T14326] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2414'. [ 219.828705][ T40] audit: type=1400 audit(1756292526.124:774): avc: denied { ioctl } for pid=14325 comm="syz.1.2414" path="socket:[56192]" dev="sockfs" ino=56192 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.914437][T14338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2417'. [ 219.927629][T14340] netlink: 'syz.7.2418': attribute type 4 has an invalid length. [ 219.939632][T14340] netlink: 'syz.7.2418': attribute type 4 has an invalid length. [ 219.969137][ T40] audit: type=1400 audit(1756292526.274:775): avc: denied { listen } for pid=14335 comm="syz.6.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 220.066632][ T40] audit: type=1400 audit(1756292526.374:776): avc: denied { getopt } for pid=14358 comm="syz.6.2423" lport=42017 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 220.121406][T14363] netlink: 'syz.6.2425': attribute type 13 has an invalid length. [ 220.371963][ T40] audit: type=1800 audit(1756292526.674:777): pid=14366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2428" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 220.378577][ T1341] Process accounting resumed [ 220.400661][T14373] Process accounting resumed [ 220.413435][ T40] audit: type=1326 audit(1756292526.724:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14374 comm="syz.6.2429" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13a538ebe9 code=0x0 [ 220.466488][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2432'. [ 220.560699][T14399] binder: 14396:14399 unknown command 0 [ 220.563148][T14399] binder: 14396:14399 ioctl c0306201 200000000080 returned -22 [ 220.573792][T14398] ucma_write: process 808 (syz.1.2435) changed security contexts after opening file descriptor, this is not allowed. [ 220.665277][T14404] netlink: 'syz.5.2438': attribute type 1 has an invalid length. [ 220.668012][T14406] tmpfs: Unknown parameter '/sys/power/mem_sleep' [ 220.668555][T14404] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2438'. [ 221.098237][T14444] netlink: 'syz.5.2447': attribute type 4 has an invalid length. [ 221.107386][T14444] netlink: 'syz.5.2447': attribute type 4 has an invalid length. [ 221.228359][T14449] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 221.231754][T14449] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2452'. [ 221.410929][T14463] fuse: Invalid rootmode [ 221.444749][T14466] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2457'. [ 221.586149][T14486] 9pnet_virtio: no channels available for device syz [ 221.586186][T14485] 9pnet_virtio: no channels available for device syz [ 221.676187][T14493] nfs4: Bad value for 'source' [ 221.761032][T14502] binder: Binderfs stats mode cannot be changed during a remount [ 221.997327][T14523] 9pnet_fd: p9_fd_create_unix (14523): problem connecting socket: qY3aK: -91 [ 222.124746][T14536] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 222.128588][T14536] overlayfs: missing 'lowerdir' [ 222.215006][T14550] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2486'. [ 222.258828][T14552] net_ratelimit: 21 callbacks suppressed [ 222.258840][T14552] openvswitch: netlink: IP tunnel TTL not specified. [ 222.300240][T14555] loop2: detected capacity change from 0 to 7 [ 222.303904][T14555] Dev loop2: unable to read RDB block 7 [ 222.306391][T14555] loop2: unable to read partition table [ 222.309031][T14555] loop2: partition table beyond EOD, truncated [ 222.311475][T14555] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 222.361611][ T60] hid (null): invalid report_size 26978 [ 222.366026][ T60] hid-generic 000C:0007:000C.000E: invalid report_size 26978 [ 222.366040][ T60] hid-generic 000C:0007:000C.000E: item 0 2 1 7 parsing failed [ 222.366301][ T60] hid-generic 000C:0007:000C.000E: probe with driver hid-generic failed with error -22 [ 222.456641][T14566] ubi0: attaching mtd0 [ 222.458174][T14566] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 222.666670][T14583] random: crng reseeded on system resumption [ 222.996839][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2500'. [ 223.001534][T14594] netlink: 'syz.6.2500': attribute type 10 has an invalid length. [ 223.073082][T14604] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.075392][T14604] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2504'. [ 223.078325][T14605] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2504'. [ 223.078559][ T1249] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.119693][T14607] program syz.6.2505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.359581][T14622] netlink: 'syz.7.2510': attribute type 1 has an invalid length. [ 223.378374][T14622] bond4: (slave bridge1): making interface the new active one [ 223.381472][T14622] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 223.386877][T14622] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.409928][T14625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.468321][T14627] program syz.6.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.530604][T14630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=14630 comm=syz.1.2513 [ 224.078128][ T5332] Bluetooth: hci6: sending frame failed (-49) [ 224.080898][ T5979] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 224.165771][T14658] mkiss: ax0: crc mode is auto. [ 224.165887][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2523'. [ 224.170291][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2523'. [ 224.173669][T14661] netlink: 50 bytes leftover after parsing attributes in process `syz.7.2523'. [ 224.181343][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2523'. [ 224.441534][T14676] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 224.446984][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 224.446996][ T40] audit: type=1400 audit(1756292530.754:786): avc: denied { relabelto } for pid=14675 comm="syz.7.2527" name="file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 224.458611][ T40] audit: type=1400 audit(1756292530.754:787): avc: denied { associate } for pid=14675 comm="syz.7.2527" name="file0" dev="tmpfs" ino=828 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fuse_device_t:s0" [ 224.470597][ T40] audit: type=1400 audit(1756292530.754:788): avc: denied { mounton } for pid=14675 comm="syz.7.2527" path="/149/file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 224.479324][ T40] audit: type=1400 audit(1756292530.764:789): avc: denied { write } for pid=14675 comm="syz.7.2527" name="file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 224.488087][ T40] audit: type=1400 audit(1756292530.764:790): avc: denied { open } for pid=14675 comm="syz.7.2527" path="/149/file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 224.497241][ T40] audit: type=1400 audit(1756292530.774:791): avc: denied { unlink } for pid=12941 comm="syz-executor" name="file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 224.758693][ T40] audit: type=1400 audit(1756292531.064:792): avc: granted { setsecparam } for pid=14681 comm="syz.1.2529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 224.766865][T14682] comedi comedi3: comedi_config --init_data is deprecated [ 224.985648][T14695] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 224.989800][T14695] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 224.993229][T14695] CPU: 2 UID: 0 PID: 14695 Comm: syz.1.2533 Not tainted syzkaller #0 PREEMPT(full) [ 224.997210][T14695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.000509][T14695] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 225.002185][T14695] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 225.008248][T14695] RSP: 0018:ffffc90003e57bf0 EFLAGS: 00010293 [ 225.010175][T14695] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b6a [ 225.012652][T14695] RDX: ffff88805681c880 RSI: ffffffff887a5bb6 RDI: 0000000000000005 [ 225.015167][T14695] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 225.017662][T14695] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003e57d88 [ 225.020301][T14695] R13: ffffc90003e57d88 R14: 0000000000000001 R15: ffff88804960fc00 [ 225.022825][T14695] FS: 00007f43f82086c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 225.025659][T14695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.027759][T14695] CR2: 00007f43f8207f98 CR3: 00000000401e3000 CR4: 0000000000352ef0 [ 225.030638][T14695] Call Trace: [ 225.031710][T14695] [ 225.032661][T14695] ? __pfx_bcsp_recv+0x10/0x10 [ 225.034245][T14695] hci_uart_tty_receive+0x251/0x7e0 [ 225.035902][T14695] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 225.037722][T14695] tty_ioctl+0x583/0x1680 [ 225.039185][T14695] ? __pfx_tty_ioctl+0x10/0x10 [ 225.040708][T14695] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 225.043030][T14695] ? hook_file_ioctl_common+0x145/0x410 [ 225.045232][T14695] ? selinux_file_ioctl+0x180/0x270 [ 225.046909][T14695] ? selinux_file_ioctl+0xb4/0x270 [ 225.048596][T14695] ? __pfx_tty_ioctl+0x10/0x10 [ 225.050134][T14695] __x64_sys_ioctl+0x18b/0x210 [ 225.051644][T14695] do_syscall_64+0xcd/0x4c0 [ 225.053063][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.054937][T14695] RIP: 0033:0x7f43f738ebe9 [ 225.056351][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.062324][T14695] RSP: 002b:00007f43f8208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.064936][T14695] RAX: ffffffffffffffda RBX: 00007f43f75b6180 RCX: 00007f43f738ebe9 [ 225.067405][T14695] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 225.070052][T14695] RBP: 00007f43f7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 225.072565][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.075136][T14695] R13: 00007f43f75b6218 R14: 00007f43f75b6180 R15: 00007ffeb90606b8 [ 225.077654][T14695] [ 225.078674][T14695] Modules linked in: [ 225.080473][T14695] ---[ end trace 0000000000000000 ]--- [ 225.082427][T14695] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 225.084089][T14695] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 4a 30 41 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 225.090316][T14695] RSP: 0018:ffffc90003e57bf0 EFLAGS: 00010293 [ 225.092431][T14695] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887a5b6a [ 225.094967][T14695] RDX: ffff88805681c880 RSI: ffffffff887a5bb6 RDI: 0000000000000005 [ 225.097817][T14695] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 225.100410][T14695] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003e57d88 [ 225.103677][T14695] R13: ffffc90003e57d88 R14: 0000000000000001 R15: ffff88804960fc00 [ 225.106716][T14695] FS: 00007f43f82086c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 225.110309][T14695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.113391][T14695] CR2: 00007f43f8207f98 CR3: 00000000401e3000 CR4: 0000000000352ef0 [ 225.116625][T14695] Kernel panic - not syncing: Fatal exception [ 225.119899][T14695] Kernel Offset: disabled [ 225.121693][T14695] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:57:55 Registers: info registers vcpu 0 CPU#0 RAX=00000000001417cc RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=ffffed100d486656 RSI=ffffffff8c162880 RDI=ffffffff81913331 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f43f8208d58 CR3=000000004ea81000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff81bbec00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff81bbed86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff81bbed86 00007fff81bbed8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b04c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b04c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b04c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b04c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b04c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6b04c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000015dfac RBX=0000000000000001 RCX=ffffffff8b93bc29 RDX=ffffed100d4a6656 RSI=ffffffff8c162880 RDI=ffffffff81913331 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f43f8228f98 CR3=000000002205f000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000009 DR2=0000000000000101 DR3=0000000000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557b24730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557b3e0ff 0000555557b3dac0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557b24490 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555557b5570d 0000555557b546a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67646301ffffffff fffffffff7080280 03048c0800021000 141000060070ec3c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1404000003081000 0280041a08000c08 000100000008060a 016d860002000700 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 886745839ceea67e b823f4b7a5a3b705 8a10b46ac3936569 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58eec7d8ae8b0c96 35c7c73fb8c512db 620a2be8462b1b5d 6b550a66c8000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005810010000000 7001ea0802800302 80040003000401a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005810010000000 7001ea0802800302 80040003000401a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58eec7d8ae8b0c96 35c7c73fb8c512db 620a2be8462b1b5d 6b550a66c8000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 886745839ceea67e b823f4b7a5a3b705 8a10b46ac3936569 975f7ca0a081b75a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 0000000806060168 e000080001e00300 100001d003001000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85643d40 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90003e57508 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622266 R15=dffffc0000000000 RIP=ffffffff85643d67 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f43f82086c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f43f8207f98 CR3=00000000401e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb9060bc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb9060bc6 00007ffeb9060bcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f7412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f7412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f7412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f7412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f7412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f7412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f75874a8 00007f43f75874a0 00007f43f7587498 00007f43f7587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f80ed100 00007f43f7587460 00007f43f7587478 00007f43f75874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43f75874b8 00007f43f75874b0 00007f43f75874a8 00007f43f75874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 EAX=00000000 EBX=00000000 ECX=00000000 EDX=00000000 ESI=00000000 EDI=00000000 EBP=00000000 ESP=00000f80 EIP=00000040 EFL=00010006 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =004b 00000000 000fffff 0040f300 DPL=3 DS [-WA] CS =0043 00000000 000fffff 0040fb00 DPL=3 CS32 [-RA] SS =004b 00000000 000fffff 0040f300 DPL=3 DS [-WA] DS =004b 00000000 000fffff 0040f300 DPL=3 DS [-WA] FS =004b 00000000 000fffff 0040f300 DPL=3 DS [-WA] GS =004b 00000000 000fffff 0040f300 DPL=3 DS [-WA] LDT=0008 00001800 000007ff 00408200 DPL=0 LDT TR =0000 00000000 0000ffff 00008b00 DPL=0 TSS32-busy GDT= 00001000 000007ff IDT= 00003800 000001ff CR0=00000031 CR2=00000000 CR3=00000000 CR4=00002040 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000001 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000