last executing test programs: 1m8.87453043s ago: executing program 2 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m8.872993039s ago: executing program 2 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x5707, 0xa, 0x8, 0xffff, 0x3, 0xffffffffffffff01]}, &(0x7f00000002c0)=0x78) 1m8.805341754s ago: executing program 2 (id=453): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000980)={'filter\x00', 0x4}, 0x68) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x17, 0x70, 0x1, 0x0, 0x2, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) connect$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x35, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x7, 0x1, 0xa, 0x5, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x3, &(0x7f0000000240)=""/3, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0xfffffffc, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000500)=[r3, r3, r3, r3, 0x1, r3, 0x1, r3], &(0x7f0000000540)=[{0x4, 0x3, 0xd, 0xa}, {0x0, 0x1, 0xa}, {0x4, 0x1, 0xc, 0x8}, {0x3, 0x1, 0x8, 0x8}, {0x5, 0x3, 0x7, 0x9}, {0x2, 0x4, 0x8}, {0x5, 0x5, 0xe, 0x8}, {0x0, 0x2, 0x0, 0x3}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x20) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), &(0x7f00000001c0)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000680), 0x600000, 0x0) ioctl$CDROM_DISC_STATUS(r7, 0x5327) 1m8.264985135s ago: executing program 2 (id=461): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x100, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@mh={{0x28}, {"df07", 0xfe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x610142, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f0000000040)=0x64) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xf18a) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x77) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r4, &(0x7f0000000300)) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f00000002c0)=0xb, 0x4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x80000) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x400, &(0x7f0000000480)={[{}], [{@obj_type={'obj_type', 0x3d, '$\\,]@/\x1a@!'}}, {@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '^[%\x01/!^!,'}}]}) fstat(r3, &(0x7f0000000380)) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x9) recvmsg$can_j1939(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x10000) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r8}}, './file0\x00'}) 1m8.045097266s ago: executing program 2 (id=468): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x1f, 0x12, 0x0, 0x4, {0x0, 0xf, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="a1198c4bddebe4936e4affca4438c523652dcff05be5c352335a8adea0184c8edb3aba49d2b808553b257164be05117aa2596470ca52302e284760a95c66590d76d4ad953679fb056d79aa5faa7ae23f54e3000adf9c19857e0e451a13343a1af8e127ef29d67d1d2afa884782f2cbdf197447e10474383f3fdbe6401f0d66a76f71931ed7dae9d9de421aaa3f1a2065c5a6c6b397d7879577f6f5f8f076c5376e9be3baa49f8ee1d70a6d738780a41578c3088d36c154c592c1395e45be5d558b4752b2e5e1f728ffdd706d316040a75122d7b4016b11392b270540ed5761883908100bb0f9ac4e55f788a6e947f2b8331f846088b5e611c4ef1a9f17d11896") mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x1}}, {@stats}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x1f, 0x12, 0x0, 0x4, {0x0, 0xf, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x1}}, {@stats}]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) (async) 1m7.974562783s ago: executing program 2 (id=472): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000480)=""/264, 0x8939ada8307e517e, 0x0, 0x1, 0x2}}, 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) umount2(&(0x7f00000016c0)='./file0\x00', 0x1) 1m7.895864618s ago: executing program 32 (id=472): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000480)=""/264, 0x8939ada8307e517e, 0x0, 0x1, 0x2}}, 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) umount2(&(0x7f00000016c0)='./file0\x00', 0x1) 38.098452627s ago: executing program 4 (id=1134): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x9, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r3, &(0x7f0000000040)='./file7/file0\x00', &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES8=r0, @ANYRES32=r3, @ANYRES64=0x0], 0x0, 0x1200) 38.095871309s ago: executing program 4 (id=1137): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000140)={0x0, "5622d02e54e0090aa90108e267cd87ab932cf729f85c7bd8fa1cea70f891568c", 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x1010044, &(0x7f0000000000)={[{@nofavordynmods}]}) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r3, &(0x7f0000000080)=""/38, 0x26) open$dir(&(0x7f0000000100)='./file0\x00', 0x40380, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x34}}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0xee01, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000400)={r7}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="50010000100013040000000000000000fc02000000000000000000000000000020010000000000000000000000000000000000004e2400000a0000202b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a000101000000000000000060001200726663343330392863636d2861657329290000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000a000000080000000b38e4d000000000000004600000000000000009feff2ebab000000000000000000"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) 37.913236525s ago: executing program 4 (id=1142): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7fffffff) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010faa84dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 37.7952128s ago: executing program 4 (id=1146): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x180500, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) getdents64(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000100)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x4000005, @dev, 0x4}, 0x3, {[0xe, 0x8, 0xffffffff, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x4a, 0x0, &(0x7f0000000280)) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f0000000500)=""/6, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000840)="90", 0x1}], 0x1}, 0x4048043) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x6, 0x2}, 0x8) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x109040, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xecc0}, @CTA_TIMEOUT_DCCP_CLOSING={0x4d, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x180}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800090300000000000000000a808000fd00fd000000200008000400", @ANYRES32=r9, @ANYBLOB="0600150003000000100016800c00010000000000000000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10004044) 37.722949211s ago: executing program 4 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x30, 0x0, @opaque="c5ff4080794fca23c26971acb78d05f3f15eb952536ae54ee063a14e4abd61f96a625bcd050bcdf9"}}}}}}, 0x5e) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4080) 37.421025508s ago: executing program 4 (id=1159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) 37.338526216s ago: executing program 33 (id=1159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) 21.958676184s ago: executing program 5 (id=1472): r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r0}, 0x0, 0x0) 21.878105631s ago: executing program 5 (id=1473): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') (async) unlink(&(0x7f0000000040)='./file0\x00') r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') dup2(r0, r1) (async) dup2(r0, r1) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) 21.877858028s ago: executing program 5 (id=1474): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 21.824527144s ago: executing program 5 (id=1475): r0 = fanotify_init(0x16, 0x0) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='hugepage_update\x00', r2, 0x0, 0x5}, 0x18) fanotify_mark(r0, 0x1, 0x40000010, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@volatile}]}) r3 = socket(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x100040, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0xc, 0x9, {0x7, @udp_ip4_spec={@loopback, @multicast1, 0x4e22, 0x4e21, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x9, 0x2, [0x0, 0x1]}, @sctp_ip4_spec={@broadcast, @remote, 0x4e20, 0x4e24, 0x8}, {0x0, @local, 0x3, 0x7, [0xffff, 0x7]}, 0x3, 0xffffffff}}}) poll(0x0, 0x0, 0x9) listen(r3, 0x0) r6 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) syz_io_uring_setup(0xb05, &(0x7f00000003c0)={0x0, 0xa798, 0x2000, 0x0, 0x284}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x40000060}) 21.758159672s ago: executing program 5 (id=1476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x10433}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x800}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x5, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000, 0x100002}) io_uring_setup(0x30db, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0xfffffffd}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x5b) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240000c4}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000054910000180001801400020873797a5f74756e0000000000000000000c0002800400040004000380"], 0x38}, 0x1, 0x0, 0x0, 0x40850}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000003700)="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", 0x2000, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 21.534886575s ago: executing program 5 (id=1478): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 21.490854505s ago: executing program 34 (id=1478): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 1.9253731s ago: executing program 0 (id=1860): socket$inet(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e77910c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x94, &(0x7f00000000c0)=""/148}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) getcwd(&(0x7f0000000200)=""/197, 0xc5) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept(r2, &(0x7f0000000300)=@generic, &(0x7f00000001c0)=0x80) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0x4, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x44000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x60) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x7) 1.924257628s ago: executing program 0 (id=1862): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000140)) (async, rerun: 64) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) (rerun: 64) landlock_restrict_self(r6, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1072fd1c128600000000", @ANYRES16=r8, @ANYBLOB="0103fcffffff7e394bcd2b0000000c00060001"], 0x20}}, 0x0) r9 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r9}) (async, rerun: 32) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000240)={0x1, 0x7}, 0x0) (async) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.423424967s ago: executing program 6 (id=1876): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0xffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbfffffe8c2e00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) setfsuid(r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) setresuid(0x0, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xe1, 0x0, 0x1, [@generic="9e1b73d1fa90f57f0c5dfbe64c0cbb59b43d4d13905a9670479f21c67da9eb32a7ac03bf90d9c3f733a58daf7f832f6db521e0f6ba90beb3973c2e335ecb2b37b1f82b2e06"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.327335833s ago: executing program 3 (id=1878): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000040)={@lba=0xb, 0x0, 0x0, 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, r6, 0x0, 0x7}, 0x10) write$nci(r2, &(0x7f00000001c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x3e}, 0x4) 1.325356049s ago: executing program 6 (id=1880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a4", 0x31) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x62c2, 0x30}, 0xc) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000262000/0x2000)=nil, 0x2000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.263056613s ago: executing program 0 (id=1881): syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xb1, [@dev]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.26259878s ago: executing program 3 (id=1883): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x60) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x7) 1.198872699s ago: executing program 3 (id=1885): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5, 0x4a, 0xf8, 0x7a}, {0xe91b, 0x3, 0x7, 0x2}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="130d5fe716d09be6f6ba6be4b3cd7f81f9648849734cda056c06a1b7abab6b983a13d9a040f7c27b565193d260c3af7b642c5a2b8b175ea18e047af8a5802cd08faa281b39ed3e4650c05c9e09337305c81200fd12c5b60890ab594c0bbd3913ef43df8069062dee4d702f44c0d0d8d79848da64bd236131bb2190301d3f39f451afba7e7fc3a5bf446e80512333c3d158b417b62cde0e5da414e77728eabc1ad409b8ccebf27f7d633ff1a9f0646b8553f06530d98ecf42ee9beb96ed41326e67", @ANYRES32=r2, @ANYRES8=r0, @ANYRES32=r1], 0x6) ptrace(0x10, r0) write$binfmt_misc(r1, &(0x7f0000000240)="6aa5c5b940a6578f9f751a3e775c3b46df425bc5ed507d7dcc6693f4da4ec1af6c3240618de0f0595bd9cb43b47a5c9648eceef9b5776a104058546109e6235ee1b5b749c30bf8fdc2709ca372627ef4e5be0d7e8e70f51783b4e123009321a9ff5b9b204dde883cf9b4838fd9c5a41f26bc7d0700a5f831a42e5b49cb35f9286f6faea17ffda1f40668d637d510a5680a895fb6941f00548ef03c67d5861f55e96e055cede3e235ee15287ec311471aea3423c4c0b9db964e1887ff76f1c593571bab2b647fb2b7734c17775c39baef25e9d7331add53543da40857e709b4b7adead7e2bfd64e9eee", 0xe9) exit(0x100000000000035) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) statx(r4, &(0x7f0000000100)='./file0\x00', 0x2000, 0x800, &(0x7f0000000540)) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a30000000030a01080000000000000000020000080900010073797a30000000000900030073797a3200ecf800040008"], 0x58}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) tkill(r0, 0x12) wait4(r0, 0x0, 0x8, 0x0) 1.198050867s ago: executing program 6 (id=1886): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902"], 0x0) mprotect(&(0x7f0000690000/0x1000)=nil, 0x1000, 0x5) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101700, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', '', [], 0xa, "3ffb168fd1719e329602db9f83f006f3fd1d8471f9cdb8627ecfc9e2d12abdd68aa145040b3cf2f5c745f954bcd4e8662965d3a713464f22c209"}, 0x3e) mmap(&(0x7f0000690000/0x1000)=nil, 0x1000, 0x2, 0x810, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0xfffffffd, 0xd6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x810) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x10, 0xffff}, {0xa}}}, 0x32050db95cd62100}}, 0x24040084) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a57fffc00060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000240)={0x5, 0xc, 0x7f, 0x6}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x3}, {0x2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xa0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488cc}, 0x0) 1.059591655s ago: executing program 1 (id=1887): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000080)={{r1}, 0x0, 0x4, @unused=[0x8, 0x5, 0x6, 0xc000000000000000], @name="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"}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000010c0)={0x0, 0x0, 0x1, 0xfffffff7, 0x359, 0x8, 0x1, 0x7, 0x44f}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001100)={0x4, {0x8, 0x1, 0x1, 0x9}}) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001140)={0x0, 0x0, 0x4}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000014c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000810}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)={0x204, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x40804) getsockname$packet(r3, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001540)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x0, '\x00', r5, r3, 0x1, 0x2, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001640), r3) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x54, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x240428c0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f00000018c0)={0x9, 0x10000, 0xffffffff, 0x2, 0x4, 0x9, 0x1, 0x0, 0x80, 0x8, 0x10, 0xa, &(0x7f0000001780)=[0x3, 0x43923c24], 0x2, &(0x7f00000017c0)="589b26bdfeefa6e2aa596793bfd0b00efa5298e85a86623dfe10900b0fdc7cd8bf078a2315975f518749db95da58243ceef80d0a2854ac80b94554cefbb5f0408332c0e87a06602f544660ef18938f89c69253fb9a285791a6647ca0e94a2750c1931133859c85e011dea6eed362bf78e55984d2abda8790500644d1cd5faf9379c4f7e80c2b26122dff0955934a5b9f8f89a4a46b95829814f09751b1b3573decc923ca84e18961e63cd6ec035295a4ecf21c2a70f06066a04bfc8aeacb070a40d5e937b0370e3dc6626096168aba4361788930a4dd1a9937aa80744bb16f86d0696f6edbc518090d1a1eca710f69325dc7cb309f83672306", 0xf9}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000001940)={0x8, 0x2, 0x2, {0x4, 0xac2e, 0x7, 0x80000000}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000019c0), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40100400}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x200000c0) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) close_range(r11, r9, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x24000000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), r9) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0xb0, r12, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000884) 1.058205317s ago: executing program 0 (id=1888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4) 977.332776ms ago: executing program 0 (id=1889): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r2, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYBLOB="56c78e3c503d76697274696f0edc55b6733d616e792c63610000653d667323616368652c76657239ece9963d3970320000008075", @ANYRES64=r2, @ANYRES32=0x0]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0x1, 0x14) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x7f, 0x4) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 867.456978ms ago: executing program 1 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000020b00000000000e14cd5c2675dfa5900"], &(0x7f00000003c0)='syzkaller\x00', 0x2}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) 792.015915ms ago: executing program 1 (id=1891): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0, 0x2) 652.179024ms ago: executing program 1 (id=1892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x60) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x1, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x40) (async, rerun: 64) r2 = semget$private(0x0, 0x207, 0x0) (rerun: 64) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000003c0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="061cc6c8970628"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) close(r4) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={""/10, ""/2, @remote}}, &(0x7f0000000040)=0x14) (async, rerun: 32) socket(0xf, 0x1, 0x5) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 32) r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 354.106058ms ago: executing program 6 (id=1893): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x5, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000, 0x100002}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'comedi_parport\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0xffffffea, 0x10001, 0x10087, 0x2, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0x80000000]}) io_uring_setup(0x30db, &(0x7f0000000500)={0x0, 0x5297, 0x4, 0x1, 0xfffffffd}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 353.731121ms ago: executing program 6 (id=1894): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0xfffffffe, 0x40024e}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x10000, 0x9, 0x8, 0xfffffbf9, 0x0, 0x40000000, 0x800000, 0x100100, 0x2, 0x1, 0x1, 0xfffffffe, 0x404, 0xf, 0xfffffffc, 0x0, 0x3, 0x40000003, 0x89, 0xfffffff7, 0x0, 0x20001e52, 0x400000b, 0xfff, 0x3a, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x12, r3, 0x37085000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 289.220437ms ago: executing program 3 (id=1895): ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0x7}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x841) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000080)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8}, 0x14) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r8, 0x40045109, &(0x7f0000000080)=0x4) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 287.438026ms ago: executing program 6 (id=1896): unshare(0x6a040000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) write(r0, &(0x7f0000000300)="89", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) ioctl$BLKGETNRZONES(r5, 0x80041285, &(0x7f0000000140)=0x1bd0) socket$netlink(0x10, 0x3, 0xf) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) unshare(0x2040600) r7 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r7, 0x0) close(0x3) socket(0x200000000000011, 0x4000000000080002, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) 287.178991ms ago: executing program 1 (id=1897): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 54.919995ms ago: executing program 3 (id=1898): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x20000006, 0x2) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x37, 0x2, 0x0, "11010000001400000100b64c00005c4b7c15000000000800", 0x39565559}) 767.496µs ago: executing program 0 (id=1899): r0 = socket$inet6(0xa, 0x2, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80) recvfrom(r0, &(0x7f00000000c0)=""/252, 0xfc, 0x10003, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x3, 0x99, "0c5a72c46af8c5074b28c62b53516b384ee38f455bb9d58cfb89da08e36cfc94be7900b35da67ceab11e8c77708a24944eafd3a837edf6493516164fd39735f2a96055c81ffb0778c1be1e4d5233eb2eb262504677c4d57ebed11117dc7f87e68d12ad8a40aab5f9a0aeb08d25b500309fe5f446c469bf99d571844feb7417c3c8a892b4f39739e238aee6ad6f20a47a2c99f4794c7576a9dd"}, 0xa1) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) recvfrom$inet6(r0, &(0x7f00000002c0)=""/187, 0xbb, 0x20, &(0x7f0000000380)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, 0x1c) r2 = syz_open_dev$loop(&(0x7f00000003c0), 0x40, 0x42000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x12}}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010600)={0xc0002, 0x6, 0x8}, 0x18) linkat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', r5, &(0x7f0000010640)='./file0\x00', 0x400) getsockname$packet(r1, &(0x7f0000010680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000106c0)=0x14) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000010700)={'veth1_to_team\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000010880)={&(0x7f0000010740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000010840)={&(0x7f0000010780)={0x9c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000108c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000010900)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000010940)={'pim6reg1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000010980)={0x0, 0xff}, &(0x7f00000109c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000010a00)={r8, 0x10}, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000010a40), r1) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000010a80)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000010ac0)={r8, 0x9d, "82a61cf945aa925c0e109e0c3d792cb7ed45a24fa62df0cba4f4133663a123eaf4c98efd95f44f3d78713f1ece311f28e114898e34933714ada7a9447bc31cd0f95c0d8570f84bc3b4b7f848527cc908d53392821e3284d882c7ec7f4813f4391c7b080babd6bb0628c15eb457be39427c44070f959e51b9023c1255ae36a8647ce52d167fbb8c8fa3f41dfdeed0593ad21375daae386ae33aace6c6a0"}, &(0x7f0000010b80)=0xa5) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0xee01, &(0x7f0000010bc0)) r9 = io_uring_setup(0x317a, &(0x7f0000010c00)={0x0, 0x3f3f, 0x100, 0x0, 0x6c}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000010c80)={0x9, r2, 0x8, {0x2, 0x8000000000000001}, 0x9}, 0x1) socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000011580)={&(0x7f0000010cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000011540)={&(0x7f0000010e40)={0x6d4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x2bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$(\x19.\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "9f96b6ebc57aa8038b610412db417583e2ea72a6d2891ca0f51eb7ea8299c9e12f448c3b0929d61fa66f97f81ccaa65d1fac393e6e55ee6dddf991317a7de9a03f8031dc0e3e38c17d4bb1fb2099eee337302ed7cec4ed471b8cca0599eb5ad6f41aab7cd63c9053f70c98470b92bb888f83889f5cf5b3f9c85793e302c72d50503b1d29d906c2770a"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xa2\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()]+!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(\x14\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/loop#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^!@),&@^\x93\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'm\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x173}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa31}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%[#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "f13fac314d317e578d2c0f57e3a5aa24f56d576f5967741a2c51e988e130d0dedd24d9348d878958e7441f1c912c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x2d0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x86, 0x5, "9f0f2ea80dea0951a0cf0d75fce2a240d4aca4a286f4633cf4698dd4eb77b18e86a85248acebc2eb47b0b9a066cf1100460533e876d144f5265fc4f41843bedbd6a4acd4fb6dea1f329eb874a11af0974b48e8e26d6c321e7528a1a70e7c80525c52fae42abfd73a2ef345908a75d9c6bced7b961b4e6081b45d821f1a2b1829b35b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1695}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/loop#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[:@@.@%+[/{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@}\x86\xf9\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':-\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "0a78b0c0751b3d484c36e9e9e52a3a128a7d841ca9dc0475"}]}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x14}, 0x24000880) 478.957µs ago: executing program 3 (id=1900): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 1 (id=1901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000380)={{0x6}, 'port0\x00', 0xb703581204f8ad4c, 0x51, 0x0, 0x56c0, 0xfffffffe, 0x2, 0xfff, 0x0, 0x1, 0x6}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.681'. [ 86.942590][ T8299] bond2: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 86.951630][ T8299] netlink: 48 bytes leftover after parsing attributes in process `syz.3.681'. [ 86.955602][ T8299] bond2: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 87.001377][ T8307] random: crng reseeded on system resumption [ 87.022687][ T8307] ntfs3(sr0): Primary boot signature is not NTFS. [ 87.028578][ T8307] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 87.036000][ T8311] tmpfs: Unknown parameter 'ize' [ 87.037827][ T8311] tmpfs: Unknown parameter 'ize' [ 87.039979][ T8311] tmpfs: Unknown parameter 'ize' [ 87.042336][ T8311] tmpfs: Unknown parameter 'ize' [ 87.044899][ T8311] tmpfs: Unknown parameter 'ize' [ 87.047317][ T8311] tmpfs: Unknown parameter 'ize' [ 87.049688][ T8311] tmpfs: Unknown parameter 'ize' [ 87.052142][ T8311] tmpfs: Unknown parameter 'ize' [ 87.054578][ T8311] tmpfs: Unknown parameter 'ize' [ 87.056872][ T8311] tmpfs: Unknown parameter 'ize' [ 87.059234][ T8311] tmpfs: Unknown parameter 'ize' [ 87.061137][ T8311] tmpfs: Unknown parameter 'ize' [ 87.062948][ T8311] tmpfs: Unknown parameter 'ize' [ 87.064614][ T8311] tmpfs: Unknown parameter 'ize' [ 87.066270][ T8311] tmpfs: Unknown parameter 'ize' [ 87.067944][ T8311] tmpfs: Unknown parameter 'ize' [ 87.069639][ T8311] tmpfs: Unknown parameter 'ize' [ 87.071732][ T8311] tmpfs: Unknown parameter 'ize' [ 87.073849][ T8311] tmpfs: Unknown parameter 'ize' [ 87.075575][ T8311] tmpfs: Unknown parameter 'ize' [ 87.077272][ T8311] tmpfs: Unknown parameter 'ize' [ 87.078961][ T8311] tmpfs: Unknown parameter 'ize' [ 87.080699][ T8311] tmpfs: Unknown parameter 'ize' [ 87.082398][ T8311] tmpfs: Unknown parameter 'ize' [ 87.084793][ T8311] tmpfs: Unknown parameter 'ize' [ 87.087230][ T8311] tmpfs: Unknown parameter 'ize' [ 87.089567][ T8311] tmpfs: Unknown parameter 'ize' [ 87.092016][ T8311] tmpfs: Unknown parameter 'ize' [ 87.095669][ T8311] tmpfs: Unknown parameter 'ize' [ 87.098185][ T8311] tmpfs: Unknown parameter 'ize' [ 87.100707][ T8311] tmpfs: Unknown parameter 'ize' [ 87.103790][ T8311] tmpfs: Unknown parameter 'ize' [ 87.106261][ T8311] tmpfs: Unknown parameter 'ize' [ 87.130851][ T8327] usb usb9: usbfs: process 8327 (syz.1.690) did not claim interface 47 before use [ 87.309988][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 87.365630][ T8312] cgroup: fork rejected by pids controller in /syz4 [ 87.435655][ T8372] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 87.440907][ T8371] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.865349][ T8407] netfs: Couldn't get user pages (rc=-14) [ 87.942863][ T6019] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 88.074302][ T8443] netfs: Couldn't get user pages (rc=-14) [ 88.093832][ T6019] usb 8-1: Using ep0 maxpacket: 8 [ 88.099333][ T6019] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 88.104364][ T6019] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.108244][ T6019] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.111912][ T6019] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.111935][ T8440] ISOFS: Unable to identify CD-ROM format. [ 88.118561][ T6019] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.125242][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.337033][ T6019] usb 8-1: usb_control_msg returned -32 [ 88.338684][ T6019] usbtmc 8-1:16.0: can't read capabilities [ 88.694873][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.698199][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.701197][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.704043][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.770110][ T8491] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.943027][ T5981] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.095975][ T5981] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.098751][ T5981] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.101921][ T5981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.105192][ T5981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 89.109382][ T5981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 89.114158][ T5981] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.116951][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.119675][ T5981] usb 6-1: Product: syz [ 89.121324][ T5981] usb 6-1: Manufacturer: syz [ 89.126957][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 89.128645][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 89.132479][ T5981] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 89.134494][ T5981] cdc_wdm 6-1:1.0: Unknown control protocol [ 89.186332][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 89.186343][ T40] audit: type=1400 audit(1768204597.793:890): avc: denied { unmount } for pid=7630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 89.228061][ T8502] netlink: 'syz.4.737': attribute type 2 has an invalid length. [ 89.302836][ T40] audit: type=1400 audit(1768204597.903:891): avc: denied { append } for pid=8507 comm="syz.4.739" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.310487][ T40] audit: type=1400 audit(1768204597.913:892): avc: denied { setattr } for pid=8507 comm="syz.4.739" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.328546][ T5981] usb 6-1: USB disconnect, device number 7 [ 89.345151][ T8510] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 89.368095][ T8510] bond1: entered promiscuous mode [ 89.370244][ T8510] bond1: entered allmulticast mode [ 89.372889][ T8510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.382505][ T8510] erspan1: entered allmulticast mode [ 89.389432][ T8510] bond1: (slave erspan1): making interface the new active one [ 89.392623][ T8510] erspan1: entered promiscuous mode [ 89.396938][ T8510] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 89.401313][ T40] audit: type=1400 audit(1768204598.003:893): avc: denied { ioctl } for pid=8509 comm="syz.4.740" path="socket:[20950]" dev="sockfs" ino=20950 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.464213][ T8510] bond1 (unregistering): (slave erspan1): Releasing active interface [ 89.467155][ T8510] erspan1: left promiscuous mode [ 89.471389][ T8510] bond1 (unregistering): Released all slaves [ 89.535838][ T8487] ufs: You didn't specify the type of your ufs filesystem [ 89.535838][ T8487] [ 89.535838][ T8487] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 89.535838][ T8487] [ 89.535838][ T8487] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 89.547952][ T8487] ufs: ufstype=old is supported read-only [ 89.550275][ T8487] ufs: ufs_fill_super(): bad magic number [ 89.792889][ T5936] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 89.827065][ T40] audit: type=1400 audit(1768204598.433:894): avc: denied { sys_module } for pid=8525 comm="syz.0.745" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.905093][ T8535] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 89.944281][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.948630][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.951654][ T5936] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.956580][ T5936] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.960423][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.963132][ T8537] __nla_validate_parse: 10 callbacks suppressed [ 89.963142][ T8537] netlink: 211088 bytes leftover after parsing attributes in process `syz.0.748'. [ 89.969522][ T5936] usb 9-1: config 0 descriptor?? [ 90.098874][ T40] audit: type=1400 audit(1768204598.703:895): avc: denied { create } for pid=8546 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.105594][ T40] audit: type=1400 audit(1768204598.703:896): avc: denied { ioctl } for pid=8546 comm="syz.1.750" path="socket:[19869]" dev="sockfs" ino=19869 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.174440][ T40] audit: type=1400 audit(1768204598.783:897): avc: denied { create } for pid=8560 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.181710][ T8561] trusted_key: encrypted_key: insufficient parameters specified [ 90.181729][ T40] audit: type=1400 audit(1768204598.783:898): avc: denied { setopt } for pid=8560 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.384208][ T5936] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 90.691206][ T6019] usb 8-1: USB disconnect, device number 4 [ 90.716317][ T40] audit: type=1400 audit(1768204599.323:899): avc: denied { create } for pid=8569 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.808930][ T8576] netfs: Couldn't get user pages (rc=-14) [ 91.125673][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 91.146785][ T8590] bond4: Invalid ad_actor_system MAC address. [ 91.149482][ T8590] bond4: option ad_actor_system: invalid value (255) [ 91.154606][ T8590] bond4 (unregistering): Released all slaves [ 91.198472][ T8596] tipc: Started in network mode [ 91.200093][ T8596] tipc: Node identity 84e, cluster identity 4711 [ 91.202672][ T8596] tipc: Node number set to 2126 [ 91.250887][ T8600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'. [ 91.321332][ T8614] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 91.341169][ T8612] netlink: 'syz.1.769': attribute type 25 has an invalid length. [ 91.349226][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.769'. [ 91.353885][ T8612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.769'. [ 91.356976][ T8612] netlink: 52 bytes leftover after parsing attributes in process `syz.1.769'. [ 91.366808][ T8617] netlink: 1424 bytes leftover after parsing attributes in process `syz.0.770'. [ 91.472994][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.773'. [ 91.718642][ T8648] netlink: 56 bytes leftover after parsing attributes in process `syz.0.780'. [ 91.840107][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 91.869703][ T8662] tmpfs: Too few inodes for current use [ 91.917500][ T8668] fuse: Bad value for 'user_id' [ 91.919159][ T8668] fuse: Bad value for 'user_id' [ 91.936016][ T8668] netfs: Couldn't get user pages (rc=-14) [ 92.505270][ T8707] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 92.551517][ T8702] usb usb8: usbfs: process 8702 (syz.1.799) did not claim interface 0 before use [ 92.584287][ T53] usb 9-1: USB disconnect, device number 3 [ 92.649516][ T8732] openvswitch: netlink: Flow key attr not present in new flow. [ 92.664436][ T8733] team0: left allmulticast mode [ 92.670402][ T8733] team_slave_0: left allmulticast mode [ 92.672245][ T8733] team_slave_1: left allmulticast mode [ 92.674392][ T8733] team0: left promiscuous mode [ 92.675946][ T8733] team_slave_0: left promiscuous mode [ 92.683002][ T8733] team_slave_1: left promiscuous mode [ 92.685061][ T8733] bridge0: port 3(team0) entered disabled state [ 92.692243][ T8733] bridge_slave_1: left allmulticast mode [ 92.694389][ T8733] bridge_slave_1: left promiscuous mode [ 92.696240][ T5945] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 92.698632][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.704358][ T8733] bridge_slave_0: left allmulticast mode [ 92.706196][ T8733] bridge_slave_0: left promiscuous mode [ 92.715157][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.838131][ T8737] vlan2: entered promiscuous mode [ 92.839942][ T8737] vlan2: entered allmulticast mode [ 92.841580][ T8737] hsr_slave_1: entered allmulticast mode [ 92.912697][ T8752] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 92.913760][ T8753] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 92.915891][ T8752] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 92.920943][ T8752] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 92.924660][ T8752] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 92.930439][ T8753] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 93.033018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.173065][ T8778] fuse: Unknown parameter '1' [ 93.428935][ T6020] IPVS: starting estimator thread 0... [ 93.488224][ T8809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.496987][ T8806] bond1 (unregistering): Released all slaves [ 93.513075][ T8804] IPVS: using max 26 ests per chain, 62400 per kthread [ 93.724456][ T8832] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.929874][ C3] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 93.933352][ C3] sr 2:0:0:0: [sr0] tag#23 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 94.217552][ T8861] tmpfs: Unknown parameter 'usrquota_inode_hardlim Ÿ¥X>' [ 94.287396][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 94.287410][ T40] audit: type=1400 audit(1768204602.893:1004): avc: denied { nlmsg_read } for pid=8872 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.366741][ T8887] Malformed UNC in devname [ 94.366741][ T8887] [ 94.369589][ T8887] CIFS: VFS: Malformed UNC in devname [ 94.369785][ T40] audit: type=1400 audit(1768204602.973:1005): avc: denied { load_policy } for pid=8885 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.369898][ T8888] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 94.370024][ T8888] SELinux: failed to load policy [ 94.414942][ T40] audit: type=1800 audit(1768204603.023:1006): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.866" name="SYSV798dd814" dev="tmpfs" ino=3 res=0 errno=0 [ 94.455648][ T40] audit: type=1400 audit(1768204603.063:1007): avc: denied { bind } for pid=8897 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.485217][ T8904] bond5: Unable to set up delay as MII monitoring is disabled [ 94.488673][ T8904] bond5 (unregistering): Released all slaves [ 94.576896][ T6019] IPVS: starting estimator thread 0... [ 94.624397][ T40] audit: type=1400 audit(1768204603.233:1008): avc: denied { read write } for pid=8917 comm="syz.1.874" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.631661][ T40] audit: type=1400 audit(1768204603.233:1009): avc: denied { open } for pid=8917 comm="syz.1.874" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.639182][ T40] audit: type=1400 audit(1768204603.233:1010): avc: denied { ioctl } for pid=8917 comm="syz.1.874" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 94.662911][ T8916] IPVS: using max 43 ests per chain, 103200 per kthread [ 94.663579][ T40] audit: type=1400 audit(1768204603.263:1011): avc: denied { write } for pid=8921 comm="syz.1.875" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.671961][ T40] audit: type=1400 audit(1768204603.273:1012): avc: denied { map } for pid=8921 comm="syz.1.875" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.722857][ T5936] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 94.872969][ T5936] usb 8-1: Using ep0 maxpacket: 32 [ 94.877313][ T5936] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 94.880591][ T5936] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 94.884882][ T5936] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.888395][ T5936] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 94.895350][ T5936] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 94.898227][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.900750][ T5936] usb 8-1: Product: syz [ 94.902081][ T5936] usb 8-1: Manufacturer: syz [ 94.903815][ T5936] usb 8-1: SerialNumber: syz [ 94.910009][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 94.916806][ T5936] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input8 [ 94.923116][ T40] audit: type=1400 audit(1768204603.523:1013): avc: denied { read } for pid=5328 comm="acpid" name="mouse2" dev="devtmpfs" ino=2924 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.940350][ T8934] tipc: Invalid UDP bearer configuration [ 94.940375][ T8934] tipc: Enabling of bearer rejected, failed to enable media [ 95.002935][ T5945] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 95.006017][ T5945] Bluetooth: hci3: Injecting HCI hardware error event [ 95.009819][ T5945] Bluetooth: hci3: hardware error 0x00 [ 95.123631][ T5936] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 95.126623][ T5936] (id 0x00) [ 95.173150][ T5936] rc_core: IR keymap rc-imon-pad not found [ 95.175096][ T5936] Registered IR keymap rc-empty [ 95.176751][ T5936] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 95.180068][ T5936] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 95.300668][ T8949] __nla_validate_parse: 23 callbacks suppressed [ 95.300744][ T8949] netlink: 220 bytes leftover after parsing attributes in process `syz.1.884'. [ 95.323889][ T5936] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 95.328712][ T5936] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input9 [ 95.336150][ T5936] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:5> initialized [ 95.421980][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 95.473398][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.888'. [ 95.487500][ T8957] kvm: kvm [8956]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 95.662387][ T8966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.890'. [ 95.666354][ T8966] netlink: 'syz.4.890': attribute type 21 has an invalid length. [ 95.669460][ T8966] netlink: 'syz.4.890': attribute type 6 has an invalid length. [ 95.672342][ T8966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.890'. [ 95.817773][ T8982] Bluetooth: MGMT ver 1.23 [ 95.865267][ T8984] bond5: Unable to set down delay as MII monitoring is disabled [ 95.869768][ T8984] bond5 (unregistering): Released all slaves [ 95.904402][ T5936] usb 8-1: USB disconnect, device number 5 [ 95.949200][ T8991] loop2: detected capacity change from 0 to 7 [ 95.956479][ T5942] Dev loop2: unable to read RDB block 7 [ 95.958921][ T5942] loop2: unable to read partition table [ 95.961365][ T5942] loop2: partition table beyond EOD, truncated [ 95.961804][ T8993] program syz.3.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.966448][ T8993] ata1.00: non-matching transfer count (0/2304) [ 95.970263][ T8991] Dev loop2: unable to read RDB block 7 [ 95.972450][ T8991] loop2: unable to read partition table [ 95.974442][ T8991] loop2: partition table beyond EOD, truncated [ 95.978840][ T8991] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.027293][ T8995] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 96.029884][ T8995] netlink: 96 bytes leftover after parsing attributes in process `syz.1.900'. [ 96.033007][ T8995] netlink: 658 bytes leftover after parsing attributes in process `syz.1.900'. [ 96.035968][ T8995] netlink: 1 bytes leftover after parsing attributes in process `syz.1.900'. [ 96.139971][ T9002] tipc: Started in network mode [ 96.141717][ T9002] tipc: Node identity c201f6a4c1c1, cluster identity 4711 [ 96.144077][ T9002] tipc: Enabled bearer , priority 0 [ 96.146590][ T9002] syzkaller0: entered promiscuous mode [ 96.148311][ T9002] syzkaller0: entered allmulticast mode [ 96.152372][ T9002] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 96.162885][ T9002] tipc: Resetting bearer [ 96.167147][ T9002] JFS: discard option not supported on device [ 96.169662][ T9002] Mount JFS Failure: -5 [ 96.194959][ T9001] tipc: Resetting bearer [ 96.205718][ T9001] tipc: Disabling bearer [ 96.366689][ T9010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.369215][ T9010] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 96.384590][ T9010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.386820][ T9010] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 96.436775][ T9020] syzkaller0: entered promiscuous mode [ 96.442461][ T9020] syzkaller0: entered allmulticast mode [ 96.594241][ T9024] syz.3.911: attempt to access beyond end of device [ 96.594241][ T9024] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 96.600879][ T9024] gfs2: error -5 reading superblock [ 96.752866][ T9034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.833952][ T9037] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.917'. [ 96.833954][ T9038] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.917'. [ 97.207546][ T5945] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 97.311153][ T9053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.465650][ T9056] bond5: Unable to set up delay as MII monitoring is disabled [ 97.471085][ T9056] bond5 (unregistering): Released all slaves [ 97.727398][ T1179] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.730339][ T1179] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.735665][ T1179] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.738475][ T1179] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.244627][ T5981] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 98.407246][ T5981] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 98.410570][ T5981] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.416912][ T5981] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.419965][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.423099][ T5981] usb 9-1: Product: syz [ 98.424517][ T5981] usb 9-1: Manufacturer: ïŒç¡ì—¼á¾©Þ¥â®£â€¬ã­Ÿä“œè ¬ï”€ï£“弘㈩푠蟯鹺᱾昧擫柱寳剥䯃ï£è ‹éŽ€âšæ¶§î«›çºëº¶å²³í„°å©£î©è¹ã¾—ç¼ã›ê¢­ãƒ·â–žê‡¯â—Œì¥å´­Ý³î¾»î¼”î­îš•ç¹¡èŒ†á³ŸäªîŸ°â»æ¶ƒè‹¤ä¡¨ç‚邩㩗ꮘ窄塪뽘æ¨î¼®æª¾æ·˜á‡³â»œá³Œè‡–䢾벖腴腶잘Έ鿜Ửᳶ䯎糾î¾ë™…綑㫜䳋줪鎵봼뜇ﴖÎê”—î«è€£å¡›ãª¨ã‘Œß™í‘î”å„都厞æ¶ã“ [ 98.436328][ T5981] usb 9-1: SerialNumber: syz [ 98.440019][ T9091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.442548][ T9091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.668414][ T5981] usb 9-1: USB disconnect, device number 4 [ 98.691973][ T9114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.695304][ T9114] batadv_slave_0: entered promiscuous mode [ 98.697534][ T9114] batadv_slave_0: entered allmulticast mode [ 98.708604][ T5343] udevd[5343]: worker [5942] terminated by signal 33 (Unknown signal 33) [ 98.714842][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.747826][ T9119] fuse: Unknown parameter '”Òq0x0000000000000003' [ 98.766021][ T9122] netlink: 'syz.3.945': attribute type 11 has an invalid length. [ 98.770394][ T9122] netlink: 'syz.3.945': attribute type 7 has an invalid length. [ 98.893527][ T9135] vim2m vim2m.0: vidioc_s_fmt queue busy [ 99.028033][ T9147] tipc: Enabled bearer , priority 0 [ 99.035123][ T9147] syzkaller0: MTU too low for tipc bearer [ 99.038021][ T9147] tipc: Disabling bearer [ 99.058661][ T9156] ip6gretap1: entered promiscuous mode [ 99.060542][ T9156] ip6gretap1: entered allmulticast mode [ 99.346757][ T9186] tmpfs: Unknown parameter 'usrquota_block_hardliòt' [ 99.356306][ T9187] tmpfs: Unknown parameter 'usrquota_block_hardliòt' [ 99.389972][ T9192] efs: device does not support 512 byte blocks [ 99.392067][ T9192] device does not support 512 byte blocks [ 99.392067][ T9192] [ 99.407570][ T9196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.515464][ T9209] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 99.622865][ T9209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19984 sclass=netlink_route_socket pid=9209 comm=syz.1.974 [ 99.812520][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 99.812530][ T40] audit: type=1400 audit(1768204608.131:1073): avc: denied { append } for pid=9235 comm="syz.4.980" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.851719][ T9243] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.856205][ T40] audit: type=1400 audit(1768204608.168:1074): avc: denied { getopt } for pid=9242 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.889679][ T40] audit: type=1400 audit(1768204608.196:1075): avc: denied { append } for pid=9246 comm="syz.4.984" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.890450][ T9247] netlink: 'syz.4.984': attribute type 21 has an invalid length. [ 99.904722][ T9247] netlink: 'syz.4.984': attribute type 4 has an invalid length. [ 99.907058][ T9247] netlink: 'syz.4.984': attribute type 5 has an invalid length. [ 99.945753][ T9256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.957090][ T9261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.964564][ T9261] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 99.968265][ T9261] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 99.970960][ T9261] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 99.970971][ T40] audit: type=1400 audit(1768204608.280:1076): avc: denied { firmware_load } for pid=9260 comm="syz.0.988" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.982670][ T40] audit: type=1400 audit(1768204608.290:1077): avc: denied { setopt } for pid=9262 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.046407][ T9270] FAULT_INJECTION: forcing a failure. [ 100.046407][ T9270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.052497][ T9270] CPU: 2 UID: 0 PID: 9270 Comm: syz.4.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.052526][ T9270] Tainted: [L]=SOFTLOCKUP [ 100.052532][ T9270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.052543][ T9270] Call Trace: [ 100.052549][ T9270] [ 100.052556][ T9270] dump_stack_lvl+0x16c/0x1f0 [ 100.052607][ T9270] should_fail_ex+0x512/0x640 [ 100.052646][ T9270] _copy_from_user+0x2e/0xd0 [ 100.052675][ T9270] copy_msghdr_from_user+0x98/0x160 [ 100.052698][ T9270] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.052730][ T9270] ___sys_sendmsg+0xfe/0x1d0 [ 100.052751][ T9270] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.052816][ T9270] __sys_sendmsg+0x16d/0x220 [ 100.052839][ T9270] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.052874][ T9270] do_syscall_64+0xcd/0xf80 [ 100.052901][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.052921][ T9270] RIP: 0033:0x7f195dd8f7c9 [ 100.052936][ T9270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.052953][ T9270] RSP: 002b:00007f195ecae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.052970][ T9270] RAX: ffffffffffffffda RBX: 00007f195dfe5fa0 RCX: 00007f195dd8f7c9 [ 100.052982][ T9270] RDX: 0000000000008854 RSI: 0000200000000200 RDI: 0000000000000003 [ 100.052993][ T9270] RBP: 00007f195ecae090 R08: 0000000000000000 R09: 0000000000000000 [ 100.053004][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.053015][ T9270] R13: 00007f195dfe6038 R14: 00007f195dfe5fa0 R15: 00007ffd1cf3d7f8 [ 100.053046][ T9270] [ 100.175174][ T40] audit: type=1400 audit(1768204608.467:1078): avc: denied { write } for pid=9275 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.251394][ T9283] syz.4.997 uses old SIOCAX25GETINFO [ 100.254652][ T40] audit: type=1400 audit(1768204608.542:1079): avc: denied { ioctl } for pid=9281 comm="syz.4.997" path="socket:[24816]" dev="sockfs" ino=24816 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.283153][ T40] audit: type=1400 audit(1768204608.570:1080): avc: denied { write } for pid=9281 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.442047][ T40] audit: type=1400 audit(1768204608.720:1081): avc: denied { connect } for pid=9299 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.448853][ T40] audit: type=1400 audit(1768204608.729:1082): avc: denied { getopt } for pid=9299 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.500383][ T9310] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 100.538056][ T9310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.544879][ T9310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9310 comm=syz.1.1006 [ 100.551803][ T9313] ªªªªªª©*°;¾eÕܲ: renamed from lo (while UP) [ 100.803036][ T9349] syz.1.1017 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.807614][ T9348] __nla_validate_parse: 211 callbacks suppressed [ 100.807625][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 100.817600][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 100.876649][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 100.917791][ T9348] nbd0: detected capacity change from 0 to 1024 [ 100.925183][ T9359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9359 comm=syz.0.1021 [ 100.925355][ T5945] block nbd0: Receive control failed (result -32) [ 100.985554][ T9364] xt_l2tp: unknown flags: 51 [ 101.024076][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 101.028788][ T9374] lo speed is unknown, defaulting to 1000 [ 101.030865][ T9374] lo speed is unknown, defaulting to 1000 [ 101.034797][ T9374] lo speed is unknown, defaulting to 1000 [ 101.039666][ T9374] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.047501][ T9374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.063347][ T9374] lo speed is unknown, defaulting to 1000 [ 101.065974][ T9374] lo speed is unknown, defaulting to 1000 [ 101.069178][ T9374] lo speed is unknown, defaulting to 1000 [ 101.071908][ T9374] lo speed is unknown, defaulting to 1000 [ 101.101075][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 101.105136][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 101.256071][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 101.268604][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1039'. [ 101.291395][ T9407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9407 comm=syz.3.1039 [ 101.330561][ T9409] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.902102][ T9434] x_tables: ip_tables: osf match: only valid for protocol 6 [ 101.905958][ T9437] x_tables: ip_tables: osf match: only valid for protocol 6 [ 102.311182][ T9475] overlayfs: failed to resolve './bus': -2 [ 102.395333][ T1179] Bluetooth: Error in BCSP hdr checksum [ 102.415691][ T6018] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.608506][ T6018] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.612665][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.616149][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.620429][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.625534][ T6018] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.628373][ T6018] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.631150][ T6018] usb 6-1: Manufacturer: syz [ 102.632206][ T9493] lo speed is unknown, defaulting to 1000 [ 102.633636][ T6018] usb 6-1: config 0 descriptor?? [ 102.682815][ T847] Bluetooth: Error in BCSP hdr checksum [ 103.074813][ T6018] hid_parser_main: 4084 callbacks suppressed [ 103.074826][ T6018] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 103.083366][ T6018] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 103.222812][ T9502] delete_channel: no stack [ 103.361894][ T6018] usb 6-1: USB disconnect, device number 8 [ 103.994046][ T9521] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 104.239105][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 104.249251][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 104.296604][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.392600][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.396627][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.399872][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.402897][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.406516][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.410850][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.415155][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.419332][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.422592][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.425875][ T9554] ptrace attach of "/syz-executor exec"[9556] was attempted by "/syz-executor exec"[9554] [ 104.442076][ T9560] program syz.1.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.483263][ T9565] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 104.542165][ T9575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.707086][ T9593] random: crng reseeded on system resumption [ 104.747599][ T9595] overlayfs: workdir and upperdir must be separate subtrees [ 104.950448][ T9612] lo speed is unknown, defaulting to 1000 [ 105.104978][ T9622] overlayfs: failed to clone upperpath [ 105.242468][ T9631] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 105.247562][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 105.247575][ T40] audit: type=1400 audit(1768204613.209:1105): avc: denied { ioctl } for pid=9630 comm="syz.0.1107" path="socket:[25597]" dev="sockfs" ino=25597 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.385054][ T9633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.432865][ T40] audit: type=1400 audit(1768204613.377:1106): avc: denied { execute_no_trans } for pid=9635 comm="syz.1.1109" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=27297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 105.492505][ T40] audit: type=1400 audit(1768204613.443:1107): avc: denied { map } for pid=9639 comm="syz.3.1111" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.504817][ T40] audit: type=1400 audit(1768204613.443:1108): avc: denied { execute } for pid=9639 comm="syz.3.1111" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.751209][ T40] audit: type=1400 audit(1768204613.677:1109): avc: denied { remove_name } for pid=9659 comm="syz.4.1117" name="file1" dev="9p" ino=71827725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.761062][ T40] audit: type=1400 audit(1768204613.677:1110): avc: denied { unlink } for pid=9659 comm="syz.4.1117" name="file1" dev="9p" ino=71827725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 105.792749][ T40] audit: type=1400 audit(1768204613.723:1111): avc: denied { bind } for pid=9664 comm="syz.1.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.800832][ T40] audit: type=1400 audit(1768204613.733:1112): avc: denied { setattr } for pid=9664 comm="syz.1.1120" name="NETLINK" dev="sockfs" ino=28695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.816619][ T40] audit: type=1400 audit(1768204613.751:1113): avc: denied { create } for pid=9659 comm="syz.4.1117" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 105.926812][ T40] audit: type=1400 audit(1768204613.845:1114): avc: denied { sqpoll } for pid=9672 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.273275][ T9712] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.391122][ T9729] dlm: no local IP address has been set [ 106.394955][ T9729] dlm: cannot start dlm midcomms -107 [ 106.398448][ T9729] tmpfs: Unknown parameter 'grpquota' [ 106.429813][ T9731] delete_channel: no stack [ 106.468597][ T9744] No control pipe specified [ 106.484604][ T9744] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.546540][ T9750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.557723][ T9756] autofs: Unknown parameter './file0' [ 106.628911][ T9762] IPv6: Can't replace route, no match found [ 106.665030][ T9762] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.813726][ T9779] __nla_validate_parse: 6 callbacks suppressed [ 106.813744][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 106.823246][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 106.827346][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 106.863393][ T9781] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 106.869149][ T9781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.930540][ T9789] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 106.937381][ T9789] cramfs: wrong magic [ 106.993902][ T9795] fuse: Bad value for 'group_id' [ 106.997617][ T9795] fuse: Bad value for 'group_id' [ 107.051996][ T847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.056834][ T847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.173970][ T847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.178101][ T847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.197196][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.201494][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.206032][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.209887][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.213332][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.219689][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.223072][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.225561][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.229385][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.230892][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1164'. [ 107.232892][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.234778][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1164'. [ 107.236294][ T9816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1166'. [ 107.248323][ T9815] overlayfs: failed to resolve './file1': -2 [ 107.261669][ T847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.265947][ T847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.269866][ T9819] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 107.269885][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1167'. [ 107.298704][ T9809] lo speed is unknown, defaulting to 1000 [ 107.365937][ T847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.370062][ T847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.422309][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 107.456658][ T9809] chnl_net:caif_netlink_parms(): no params data found [ 107.541783][ T9842] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 107.559099][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.562018][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.565113][ T9809] bridge_slave_0: entered allmulticast mode [ 107.569645][ T9809] bridge_slave_0: entered promiscuous mode [ 107.581194][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.585274][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.588246][ T9809] bridge_slave_1: entered allmulticast mode [ 107.591673][ T9809] bridge_slave_1: entered promiscuous mode [ 107.943560][ T847] bond0 (unregistering): Released all slaves [ 107.970136][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.975665][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.000907][ T9809] team0: Port device team_slave_0 added [ 108.005023][ T9809] team0: Port device team_slave_1 added [ 108.026371][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.031731][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.042168][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.047268][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.050170][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.059061][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.098615][ T9809] hsr_slave_0: entered promiscuous mode [ 108.101375][ T9809] hsr_slave_1: entered promiscuous mode [ 108.104230][ T9809] debugfs: 'hsr0' already exists in 'hsr' [ 108.106137][ T9809] Cannot create hsr debugfs directory [ 108.151539][ T9854] tmpfs: Unknown parameter 'nr_i·à¦wу' [ 108.215419][ T9867] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 108.218324][ T9867] VFS: Can't find a romfs filesystem on dev nullb0. [ 108.218324][ T9867] [ 108.249607][ T9809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.268148][ T9809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.275351][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 108.278878][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 108.315324][ T9809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.413879][ T9879] fuse: Bad value for 'group_id' [ 108.416010][ T9879] fuse: Bad value for 'group_id' [ 108.425153][ T9809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.524163][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.542722][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.548967][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.551429][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.566413][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.568625][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.576759][ T9897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.579768][ T9897] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.706895][ T9910] loop6: detected capacity change from 0 to 2640 [ 108.710180][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.713581][ T5936] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 108.717362][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.721166][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.728289][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.731010][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.733500][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.740845][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.743335][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.746331][ T9910] ldm_validate_partition_table(): Disk read failed. [ 108.749018][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.752016][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.754482][ T9910] Dev loop6: unable to read RDB block 0 [ 108.756478][ T9910] loop6: unable to read partition table [ 108.758608][ T9910] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 108.762255][ T9910] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 108.764891][ T9910] SELinux: failed to load policy [ 108.771264][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.781797][ T9916] IPv6: syztnl0: Disabled Multicast RS [ 108.857979][ T5936] usb 6-1: device descriptor read/64, error -71 [ 108.913858][ T9809] veth0_vlan: entered promiscuous mode [ 108.934375][ T9809] veth1_vlan: entered promiscuous mode [ 108.943809][ T9934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.963844][ T9809] veth0_macvtap: entered promiscuous mode [ 108.968413][ T9809] veth1_macvtap: entered promiscuous mode [ 108.977277][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.985672][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.992236][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.994927][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.998641][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.002825][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060009][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.063219][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.077641][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.081079][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.108510][ T5936] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 109.247176][ T5936] usb 6-1: device descriptor read/64, error -71 [ 109.345862][ T13] wlan1: Trigger new scan to find an IBSS to join [ 109.347593][ T9948] netlink: 'syz.5.1197': attribute type 1 has an invalid length. [ 109.349695][ T9947] 8021q: VLANs not supported on sit0 [ 109.369372][ T5936] usb usb6-port1: attempt power cycle [ 109.429064][ T5945] Bluetooth: hci3: command tx timeout [ 109.749676][ T5936] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 109.772903][ T5936] usb 6-1: device descriptor read/8, error -71 [ 109.865362][ T9961] tmpfs: Bad value for 'mpol' [ 109.890553][ T9959] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.052824][ T5936] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 110.092232][ T5936] usb 6-1: device descriptor read/8, error -71 [ 110.209692][ T5936] usb usb6-port1: unable to enumerate USB device [ 110.217471][ T847] hsr_slave_0: left promiscuous mode [ 110.222812][ T847] hsr_slave_1: left promiscuous mode [ 110.245512][ T847] veth1_macvtap: left promiscuous mode [ 110.248366][ T847] veth0_macvtap: left promiscuous mode [ 110.251207][ T847] veth1_vlan: left promiscuous mode [ 110.255705][ T847] veth0_vlan: left promiscuous mode [ 110.260785][ T9982] /dev/nullb0: Can't lookup blockdev [ 110.376475][ T9989] overlayfs: failed to clone upperpath [ 110.565953][ T9996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9996 comm=syz.0.1214 [ 110.871905][T10000] overlay: Bad value for 'workdir' [ 110.875111][T10000] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.924718][T10002] mkiss: ax0: crc mode is auto. [ 111.465452][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 111.465468][ T40] audit: type=1400 audit(1768204619.026:1134): avc: denied { create } for pid=10017 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.475805][ T40] audit: type=1400 audit(1768204619.026:1135): avc: denied { accept } for pid=10017 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.653001][ T5945] Bluetooth: hci3: command tx timeout [ 111.823392][T10030] 9pnet_fd: Insufficient options for proto=fd [ 112.680234][ T98] wlan1: Trigger new scan to find an IBSS to join [ 112.736133][T10063] __nla_validate_parse: 4 callbacks suppressed [ 112.736148][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 112.741737][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1238'. [ 112.771720][T10065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1239'. [ 112.775440][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 112.909032][T10077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10077 comm=syz.0.1243 [ 113.105266][T10094] lo speed is unknown, defaulting to 1000 [ 113.142417][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'. [ 113.260697][ T40] audit: type=1400 audit(1768204620.710:1136): avc: denied { setattr } for pid=10100 comm="syz.5.1247" name="NETLINK" dev="sockfs" ino=30946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.341262][ T40] audit: type=1400 audit(1768204620.775:1137): avc: denied { name_connect } for pid=10108 comm="syz.0.1251" dest=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 113.351155][ T40] audit: type=1400 audit(1768204620.775:1138): avc: denied { getopt } for pid=10109 comm="syz.5.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.448466][ T40] audit: type=1400 audit(1768204620.878:1139): avc: denied { mount } for pid=10124 comm="syz.3.1257" name="/" dev="ramfs" ino=30968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.460603][ T40] audit: type=1400 audit(1768204620.897:1140): avc: denied { getopt } for pid=10124 comm="syz.3.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.479080][T10128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=10128 comm=syz.1.1258 [ 113.485664][T10128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1258'. [ 113.503721][T10128] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1258'. [ 113.518035][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1259'. [ 113.721427][T10158] macvlan0: entered allmulticast mode [ 113.723290][T10158] veth1_vlan: entered allmulticast mode [ 113.728361][T10158] veth1_vlan: left allmulticast mode [ 113.747856][T10158] macvlan0 (unregistering): left allmulticast mode [ 113.817836][T10165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=10165 comm=syz.3.1269 [ 113.846085][T10167] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1270'. [ 113.887721][ T5945] Bluetooth: hci3: command tx timeout [ 114.081811][T10181] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 114.084237][T10181] SELinux: failed to load policy [ 114.089840][T10180] netlink: 'syz.0.1277': attribute type 13 has an invalid length. [ 114.121990][T10183] 9p: Unknown Cache mode or invalid value fs [ 114.126955][T10183] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 114.129534][T10187] ksmbd: Unknown IPC event: 1, ignore. [ 114.163884][T10183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.178690][ T40] audit: type=1400 audit(1768204621.570:1141): avc: denied { create } for pid=10182 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.188618][T10183] bond4: (slave gretap1): making interface the new active one [ 114.189460][ T40] audit: type=1400 audit(1768204621.570:1142): avc: denied { write } for pid=10182 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.193106][T10183] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 114.256938][T10196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10196 comm=syz.5.1283 [ 114.257940][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 114.358891][T10208] xt_cgroup: path and classid specified [ 114.454538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.458130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.494758][T10215] pimreg: left allmulticast mode [ 114.607357][T10226] netlink: 'syz.5.1293': attribute type 29 has an invalid length. [ 114.611516][T10226] netlink: 'syz.5.1293': attribute type 29 has an invalid length. [ 114.875233][ T40] audit: type=1400 audit(1768204622.215:1143): avc: denied { map } for pid=10245 comm="syz.0.1302" path="socket:[31953]" dev="sockfs" ino=31953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.951742][T10254] netlink: 'syz.0.1304': attribute type 17 has an invalid length. [ 114.954391][T10254] macvtap0: entered allmulticast mode [ 114.956250][T10254] veth0_macvtap: entered allmulticast mode [ 114.960095][T10254] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 114.989537][ T5981] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 115.111319][T10268] overlayfs: failed to resolve './file1/file0': -2 [ 115.163809][ T5981] usb 10-1: Using ep0 maxpacket: 32 [ 115.167863][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.174363][ T5981] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.178291][ T5981] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 115.181756][ T5981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.185863][ T5981] usb 10-1: config 0 descriptor?? [ 115.405130][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.411093][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.477269][T10295] netlink: 'syz.0.1317': attribute type 2 has an invalid length. [ 115.487500][T10295] !: entered promiscuous mode [ 115.492271][T10295] netlink: 'syz.0.1317': attribute type 2 has an invalid length. [ 115.495499][T10295] !: left promiscuous mode [ 115.547177][T10297] bond0: entered allmulticast mode [ 115.548837][T10297] bond_slave_0: entered allmulticast mode [ 115.550649][T10297] bond_slave_1: entered allmulticast mode [ 115.552901][T10297] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.636139][ T5981] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 115.710003][T10307] Cannot find set identified by id 0 to match [ 115.941218][ T847] wlan1: Trigger new scan to find an IBSS to join [ 115.967583][ T5981] usb 10-1: USB disconnect, device number 2 [ 116.101139][ T5945] Bluetooth: hci3: command tx timeout [ 116.556161][T10337] program syz.1.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.645230][T10345] input: syz1 as /devices/virtual/input/input12 [ 116.737303][T10348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2227891147 (8911564588 ns) > initial count (2488152548 ns). Using initial count to start timer. [ 116.818269][T10353] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 116.818341][T10354] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 116.836981][T10357] netlink: 'syz.3.1338': attribute type 21 has an invalid length. [ 116.849817][T10353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.856348][T10353] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 116.901977][T10362] befs: (nbd3): unable to read superblock [ 116.903097][ T1460] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 116.959051][ T46] wlan1: Creating new IBSS network, BSSID f2:c6:e4:3f:c8:60 [ 117.084728][ T1460] usb 10-1: Using ep0 maxpacket: 8 [ 117.091808][ T1460] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 117.094580][ T1460] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.098017][ T1460] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.101180][ T1460] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.104397][ T1460] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.104714][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 117.104725][ T40] audit: type=1400 audit(1768204624.301:1146): avc: denied { setopt } for pid=10376 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.109219][ T1460] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.109234][ T1460] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.124060][ T40] audit: type=1400 audit(1768204624.310:1147): avc: denied { search } for pid=10376 comm="syz.3.1345" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.131165][ T40] audit: type=1400 audit(1768204624.310:1148): avc: denied { setattr } for pid=10376 comm="syz.3.1345" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.175356][T10383] lo speed is unknown, defaulting to 1000 [ 117.327824][ T40] audit: type=1400 audit(1768204624.507:1149): avc: denied { listen } for pid=10342 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.334418][ T40] audit: type=1400 audit(1768204624.507:1150): avc: denied { accept } for pid=10342 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.383089][ T40] audit: type=1400 audit(1768204624.563:1151): avc: denied { ioctl } for pid=10342 comm="syz.5.1333" path="socket:[29608]" dev="sockfs" ino=29608 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 117.384853][T10392] overlayfs: conflicting options: userxattr,redirect_dir=on [ 117.402330][T10392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.405945][T10392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.426972][ T1460] usb 10-1: usb_control_msg returned -71 [ 117.429412][ T1460] usbtmc 10-1:16.0: can't read capabilities [ 117.441247][ T1460] usb 10-1: USB disconnect, device number 3 [ 117.496741][ T40] audit: type=1400 audit(1768204624.666:1152): avc: denied { watch watch_reads } for pid=10400 comm="syz.5.1351" path="/29/file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.576520][ T40] audit: type=1800 audit(1768204624.740:1153): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1355" name="file1" dev="tmpfs" ino=2248 res=0 errno=0 [ 117.662346][ T40] audit: type=1400 audit(1768204624.825:1154): avc: denied { getopt } for pid=10421 comm="syz.0.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.662775][T10422] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 117.688063][ T40] audit: type=1400 audit(1768204624.853:1155): avc: denied { unlink } for pid=10413 comm="syz.1.1357" name="file1" dev="9p" ino=71827725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 117.938540][T10457] nbd: error processing sock list [ 118.067372][T10472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 118.093763][T10473] veth5: entered promiscuous mode [ 118.098466][T10473] bond6: (slave veth5): Enslaving as an active interface with a down link [ 118.107458][T10472] vlan0: entered allmulticast mode [ 118.109343][T10472] bond6: entered allmulticast mode [ 118.112738][T10472] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 118.184178][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.191383][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.197884][T10493] xt_HMARK: spi-set and port-set can't be combined [ 118.200693][T10496] xt_HMARK: spi-set and port-set can't be combined [ 118.333499][T10508] __nla_validate_parse: 14 callbacks suppressed [ 118.333512][T10508] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1385'. [ 118.370275][ T847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.373825][ T847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.432313][ T5936] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 118.468724][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1391'. [ 118.533861][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 118.548129][T10531] 8021q: adding VLAN 0 to HW filter on device bond8 [ 118.558289][T10531] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 118.581924][ T5936] usb 10-1: device descriptor read/64, error -71 [ 118.870403][ T5936] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 119.020155][ T5936] usb 10-1: device descriptor read/64, error -71 [ 119.138136][ T5936] usb usb10-port1: attempt power cycle [ 119.501194][ T5936] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 119.544420][ T5936] usb 10-1: device descriptor read/8, error -71 [ 119.593897][T10561] validate_nla: 5 callbacks suppressed [ 119.593908][T10561] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 119.625184][T10561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.628689][T10561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10561 comm=syz.0.1402 [ 119.635124][T10561] xt_cgroup: invalid path, errno=-2 [ 119.821962][ T5936] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 119.843894][ T5936] usb 10-1: device descriptor read/8, error -71 [ 119.972827][ T5936] usb usb10-port1: unable to enumerate USB device [ 120.050232][T10578] pim6reg9: entered allmulticast mode [ 120.279988][T10585] 9p: Bad value for 'rfdno' [ 120.554011][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 120.567232][T10606] sp0: Synchronizing with TNC [ 120.572974][T10606] sp0: Found TNC [ 120.577167][T10605] [U] è` [ 120.702002][T10612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.705344][T10612] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 120.710520][T10612] bond0: (slave gre0): Error -95 calling set_mac_address [ 120.807056][T10621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=10621 comm=syz.3.1420 [ 121.048950][T10628] program syz.1.1422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.054241][T10628] Cannot find add_set index 65532 as target [ 121.570299][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 121.684111][T10701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1444'. [ 121.754970][T10708] kAFS: unable to lookup cell '(,' [ 121.883452][T10732] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1457'. [ 121.885627][T10734] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1457'. [ 121.892322][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 121.895902][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'. [ 121.935378][T10742] /dev/nullb0: Can't open blockdev [ 122.045539][T10751] netlink: 'syz.5.1464': attribute type 4 has an invalid length. [ 122.195822][ T53] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 122.356826][ T53] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 122.360709][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.363982][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.368000][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.371123][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.374482][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.378678][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.382629][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.385467][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.388949][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.391773][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.394738][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.398962][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.402429][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.405125][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.408663][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.412389][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.415689][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.419721][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.423358][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.426666][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.430749][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.434370][ T53] usb 6-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 122.438156][ T53] usb 6-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.441981][ T53] usb 6-1: config 64 interface 0 has no altsetting 0 [ 122.445658][ T53] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.449028][ T53] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.451939][ T53] usb 6-1: Product: syz [ 122.453507][ T53] usb 6-1: Manufacturer: syz [ 122.455320][ T53] usb 6-1: SerialNumber: syz [ 122.457770][T10772] syz.5.1471 (10772): attempted to duplicate a private mapping with mremap. This is not supported. [ 122.461418][ T53] yurex 6-1:64.0: USB YUREX device now attached to Yurex #0 [ 122.541787][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 122.541803][ T40] audit: type=1400 audit(1768204629.389:1165): avc: denied { setopt } for pid=10776 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.597195][T10783] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 122.600158][T10783] overlayfs: missing 'lowerdir' [ 122.678102][ T5936] usb 6-1: USB disconnect, device number 13 [ 122.681735][ T5936] yurex 6-1:64.0: USB YUREX #0 now disconnected [ 122.891542][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.952407][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.014162][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.017615][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.021877][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.026148][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.031381][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.047530][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.067081][T10787] lo speed is unknown, defaulting to 1000 [ 123.149360][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.160073][T10787] chnl_net:caif_netlink_parms(): no params data found [ 123.217481][T10787] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.219997][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.222448][T10787] bridge_slave_0: entered allmulticast mode [ 123.225126][T10787] bridge_slave_0: entered promiscuous mode [ 123.228537][T10787] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.231084][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.234200][T10787] bridge_slave_1: entered allmulticast mode [ 123.237604][T10787] bridge_slave_1: entered promiscuous mode [ 123.253139][T10796] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 123.270126][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.278976][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.305140][T10787] team0: Port device team_slave_0 added [ 123.309549][T10787] team0: Port device team_slave_1 added [ 123.311518][ T46] bridge_slave_1: left allmulticast mode [ 123.314461][ T46] bridge_slave_1: left promiscuous mode [ 123.317646][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.323196][ T46] bridge_slave_0: left allmulticast mode [ 123.325555][ T46] bridge_slave_0: left promiscuous mode [ 123.327517][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.739921][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.746752][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.752184][ T46] bond0 (unregistering): Released all slaves [ 123.785020][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.788818][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.800979][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.807392][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.810390][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.826147][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.870417][T10787] hsr_slave_0: entered promiscuous mode [ 123.873337][T10787] hsr_slave_1: entered promiscuous mode [ 123.876288][T10787] debugfs: 'hsr0' already exists in 'hsr' [ 123.878717][T10787] Cannot create hsr debugfs directory [ 124.084113][ T46] hsr_slave_0: left promiscuous mode [ 124.087222][ T46] hsr_slave_1: left promiscuous mode [ 124.091197][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.094517][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.098435][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.102334][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.122399][ T46] veth1_macvtap: left promiscuous mode [ 124.125448][ T46] veth0_macvtap: left promiscuous mode [ 124.127837][ T46] veth1_vlan: left promiscuous mode [ 124.129926][ T46] veth0_vlan: left promiscuous mode [ 124.193876][ T40] audit: type=1400 audit(1768204630.932:1166): avc: denied { connect } for pid=10837 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.212990][ T40] audit: type=1400 audit(1768204630.941:1167): avc: denied { lock } for pid=10837 comm="syz.1.1495" path="socket:[33518]" dev="sockfs" ino=33518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.232610][ T40] audit: type=1400 audit(1768204630.969:1168): avc: denied { connect } for pid=10839 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.333600][T10849] __nla_validate_parse: 3 callbacks suppressed [ 124.333616][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 124.481981][ T46] team0 (unregistering): Port device team_slave_1 removed [ 124.510423][ T46] team0 (unregistering): Port device team_slave_0 removed [ 124.760816][T10787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.770395][T10787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.776152][T10787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.780470][T10787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.843818][T10787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.863083][T10787] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.872128][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.875083][T10775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.887485][T10831] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.890238][T10831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.071126][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.253574][T10787] veth0_vlan: entered promiscuous mode [ 125.255659][ T5935] Bluetooth: hci3: command tx timeout [ 125.261601][T10787] veth1_vlan: entered promiscuous mode [ 125.279349][T10787] veth0_macvtap: entered promiscuous mode [ 125.283878][T10787] veth1_macvtap: entered promiscuous mode [ 125.297269][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.306245][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.320638][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.323739][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.327472][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.332297][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.336259][ T40] audit: type=1400 audit(1768204631.998:1169): avc: denied { read } for pid=10910 comm="syz.3.1505" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 125.350096][ T40] audit: type=1400 audit(1768204632.007:1170): avc: denied { open } for pid=10910 comm="syz.3.1505" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 125.390380][ T40] audit: type=1400 audit(1768204632.045:1171): avc: denied { ioctl } for pid=10913 comm="syz.3.1506" path="socket:[35942]" dev="sockfs" ino=35942 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.434551][T10916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.031752][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.035409][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.058631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.061157][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.242839][ T40] audit: type=1400 audit(1768204632.849:1172): avc: denied { create } for pid=10931 comm="syz.6.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.250324][T10932] NILFS (nbd6): device size too small [ 126.348354][T10934] program syz.1.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.390601][T10948] pimreg: entered allmulticast mode [ 126.426266][T10951] netlink: 'syz.1.1516': attribute type 5 has an invalid length. [ 126.460714][ T40] audit: type=1400 audit(1768204633.045:1173): avc: denied { nlmsg_read } for pid=10954 comm="syz.1.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 126.492060][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.552350][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.557671][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.809070][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1522'. [ 126.819899][ T40] audit: type=1400 audit(1768204633.391:1174): avc: denied { create } for pid=10975 comm="syz.6.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.838499][T10976] netlink: 'syz.6.1522': attribute type 11 has an invalid length. [ 127.289670][T11001] SELinux: ebitmap: truncated map [ 127.300314][T11001] SELinux: failed to load policy [ 127.399223][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 127.405626][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 127.490207][ T5935] Bluetooth: hci3: command tx timeout [ 127.614025][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'. [ 127.618967][T11028] lo speed is unknown, defaulting to 1000 [ 127.723222][T11036] vfat: block size(16384) > page size(4096) not supported by filesystem [ 127.727615][T11038] overlayfs: failed to clone upperpath [ 127.774098][T11040] lo speed is unknown, defaulting to 1000 [ 127.784695][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1545'. [ 127.928035][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 127.935039][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1544'. [ 127.939355][T11040] netlink: 'syz.0.1544': attribute type 4 has an invalid length. [ 128.039233][T11060] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1552'. [ 128.096810][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'. [ 128.104325][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 128.104338][ T40] audit: type=1400 audit(1768204634.589:1179): avc: denied { watch } for pid=11063 comm="syz.6.1554" path="/27/file0/file0" dev="9p" ino=71827717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.119290][ T40] audit: type=1800 audit(1768204634.598:1180): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1554" name="file0" dev="9p" ino=71827717 res=0 errno=0 [ 128.131300][T11067] ubi31: attaching mtd0 [ 128.135880][T11067] ubi31: scanning is finished [ 128.137833][T11067] ubi31: empty MTD device detected [ 128.190501][T11068] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 128.201191][ T40] audit: type=1400 audit(1768204634.682:1181): avc: denied { map } for pid=11066 comm="syz.1.1555" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 128.210385][ T40] audit: type=1400 audit(1768204634.682:1182): avc: denied { execute } for pid=11066 comm="syz.1.1555" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 128.270111][T11067] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.270459][T11070] fuse: Unknown parameter 'rootmode}ñ500000000000000004000ïgýw©ÆjÇ‹¡qÅJÕnÓ±y§¥&÷' [ 128.273523][T11067] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.273560][T11067] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.284448][T11067] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 128.287712][T11067] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.291534][T11067] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.295042][T11067] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3174734207 [ 128.299512][T11067] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.305557][T11071] ubi31: background thread "ubi_bgt31d" started, PID 11071 [ 128.539591][T11076] binder: Unknown parameter 'subj_type' [ 128.562928][ T40] audit: type=1400 audit(1768204635.019:1183): avc: denied { read } for pid=11079 comm="syz.1.1560" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.571240][ T40] audit: type=1400 audit(1768204635.019:1184): avc: denied { open } for pid=11079 comm="syz.1.1560" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.580821][ T40] audit: type=1400 audit(1768204635.019:1185): avc: denied { ioctl } for pid=11079 comm="syz.1.1560" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.641984][T11087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.703353][T11089] __vm_enough_memory: pid: 11089, comm: syz.6.1562, bytes: 4503599627366400 not enough memory for the allocation [ 128.914972][T11103] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 128.917572][T11103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.922899][T11103] vhci_hcd vhci_hcd.0: Device attached [ 128.924997][T11104] vhci_hcd: connection closed [ 128.926902][ T12] vhci_hcd vhci_hcd.6: stop threads [ 128.932259][ T12] vhci_hcd vhci_hcd.6: release socket [ 128.934481][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 128.977375][T11109] xt_CONNSECMARK: invalid mode: 0 [ 129.146407][ T40] audit: type=1400 audit(1768204635.571:1186): avc: denied { setopt } for pid=11122 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.263175][ T40] audit: type=1326 audit(1768204635.673:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0e98f7c9 code=0x7ffc0000 [ 129.274876][ T40] audit: type=1326 audit(1768204635.692:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.0.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e0e98f7c9 code=0x7ffc0000 [ 129.701969][ T5935] Bluetooth: hci3: command tx timeout [ 129.781174][T11164] __nla_validate_parse: 4 callbacks suppressed [ 129.781191][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1585'. [ 129.794012][T11164] gre2: entered promiscuous mode [ 129.832064][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 129.834946][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'. [ 129.837563][T11167] netlink: 'syz.3.1586': attribute type 11 has an invalid length. [ 129.839982][T11167] netlink: 'syz.3.1586': attribute type 7 has an invalid length. [ 129.926886][ T29] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 130.099997][ T29] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.103923][ T29] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.107392][ T29] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.110468][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.115113][T11158] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 130.119346][ T29] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.223001][T11190] netlink: 'syz.3.1593': attribute type 3 has an invalid length. [ 130.229316][T11190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.281716][T11196] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1596'. [ 130.282641][T11197] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 130.287233][T11197] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 130.294060][T11197] netlink: 'syz.1.1595': attribute type 10 has an invalid length. [ 130.303527][T11196] bond6: peer notification delay (2365) is not a multiple of miimon (16760838), value rounded to 0 ms [ 130.323051][T11197] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 130.327276][T11197] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.336696][ T7025] usb 11-1: USB disconnect, device number 2 [ 130.535412][T11219] vivid-002: disconnect [ 130.538640][T11219] vivid-002: reconnect [ 130.569452][T11223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.748199][T11236] overlayfs: failed to clone lowerpath [ 130.837904][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 131.391498][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 131.415963][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1626'. [ 131.425251][T11294] bond0: entered promiscuous mode [ 131.428117][T11294] bond_slave_0: entered promiscuous mode [ 131.430562][T11294] bond_slave_1: entered promiscuous mode [ 131.434014][T11294] gretap0: entered promiscuous mode [ 131.437768][T11294] hsr1: entered promiscuous mode [ 131.440254][T11294] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 131.473093][T11289] xt_hashlimit: invalid rate [ 131.587579][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.591619][ T34] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.594927][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.600289][ T34] usb 11-1: config 0 descriptor?? [ 131.815100][T11309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.823017][ T34] usbhid 11-1:0.0: can't add hid device: -71 [ 131.825064][ T34] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 131.829118][ T34] usb 11-1: USB disconnect, device number 3 [ 131.936632][ T5935] Bluetooth: hci3: command tx timeout [ 132.059139][T11312] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 132.062483][T11312] netlink: 'syz.1.1632': attribute type 4 has an invalid length. [ 132.066891][T11312] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1632'. [ 132.249771][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 132.252565][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1635'. [ 132.255498][T11324] netlink: 'syz.0.1635': attribute type 13 has an invalid length. [ 132.299996][ T53] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 132.471208][ T53] usb 11-1: Using ep0 maxpacket: 32 [ 132.475376][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.480685][ T53] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 132.484590][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.490514][ T53] usb 11-1: config 0 descriptor?? [ 132.499346][ T53] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.507777][ T53] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.656528][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 132.697603][T11350] __vm_enough_memory: pid: 11350, comm: syz.1.1644, bytes: 4503599627366400 not enough memory for the allocation [ 132.714216][T11352] mac80211_hwsim hwsim8 : renamed from wlan1 (while UP) [ 133.048655][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 133.074358][T11373] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.074358][T11373] program syz.3.1652 not setting count and/or reply_len properly [ 133.199839][T11376] gfs2: gfs2 mount does not exist [ 133.219598][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 133.223457][ T53] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 133.227253][ T53] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 133.230995][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 133.234849][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.238927][ T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.243210][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.248117][ T53] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 133.252180][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.256592][ T53] usb 6-1: config 0 descriptor?? [ 133.408848][T11390] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 133.447155][T11395] netlink: 'syz.3.1658': attribute type 96 has an invalid length. [ 133.477144][ T53] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 133.481784][ T53] usb 6-1: USB disconnect, device number 14 [ 133.485813][ T53] usblp1: removed [ 133.581777][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 133.581792][ T40] audit: type=1400 audit(1768204639.704:1210): avc: denied { ioctl } for pid=11394 comm="syz.3.1658" path="socket:[35708]" dev="sockfs" ino=35708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.594590][ T40] audit: type=1400 audit(1768204639.723:1211): avc: denied { listen } for pid=11404 comm="syz.0.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.736803][T11417] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 133.739687][T11417] overlayfs: missing 'lowerdir' [ 133.741478][T11416] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 133.745034][T11416] overlayfs: missing 'lowerdir' [ 133.957535][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.128429][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 134.131674][ T34] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 134.134775][ T34] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.137460][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.140411][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.143441][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.146565][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.150860][ T34] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 134.154036][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.157818][ T34] usb 6-1: config 0 descriptor?? [ 134.352030][ T53] usb 11-1: USB disconnect, device number 4 [ 134.355734][ T53] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 134.376487][ T34] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 134.377819][T11356] mkiss: ax0: crc mode is auto. [ 134.586452][ T40] audit: type=1400 audit(1768204640.649:1212): avc: denied { open } for pid=11448 comm="syz.6.1678" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.920297][ T34] usb 6-1: USB disconnect, device number 15 [ 134.920816][T11470] netlink: 'syz.0.1681': attribute type 23 has an invalid length. [ 134.929375][ T34] usblp0: removed [ 135.016667][T11480] netlink: 'syz.0.1685': attribute type 2 has an invalid length. [ 135.021271][T11480] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 135.146030][ T40] audit: type=1400 audit(1768204641.182:1213): avc: denied { ioctl } for pid=11475 comm="syz.1.1684" path="socket:[36804]" dev="sockfs" ino=36804 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.208597][T11501] netlink: 'syz.0.1691': attribute type 12 has an invalid length. [ 135.252078][ T40] audit: type=1400 audit(1768204641.276:1214): avc: denied { watch_sb } for pid=11503 comm="syz.3.1692" path="/305/file0" dev="tmpfs" ino=1632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.441165][T11516] infiniband syz2: set down [ 135.443578][T11516] infiniband syz2: added bond0 [ 135.461551][T11516] RDS/IB: syz2: added [ 135.463256][T11516] smc: adding ib device syz2 with port count 1 [ 135.469548][T11516] smc: ib device syz2 port 1 has no pnetid [ 135.542059][T11531] __nla_validate_parse: 1 callbacks suppressed [ 135.542071][T11531] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1700'. [ 135.806185][ T40] audit: type=1400 audit(1768204641.790:1215): avc: denied { ioctl } for pid=11549 comm="syz.6.1707" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.818514][T11550] dvmrp17: entered allmulticast mode [ 135.939165][T11559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.947146][T11559] loop2: detected capacity change from 0 to 7 [ 135.949866][ T40] audit: type=1326 audit(1768204641.930:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.6.1712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88378f7c9 code=0x7ffc0000 [ 135.950292][ T40] audit: type=1326 audit(1768204641.930:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.6.1712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88378f7c9 code=0x7ffc0000 [ 135.963479][T11559] Dev loop2: unable to read RDB block 7 [ 135.971642][T11559] loop2: unable to read partition table [ 135.973680][T11559] loop2: partition table beyond EOD, truncated [ 135.975799][T11559] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.981320][ T40] audit: type=1326 audit(1768204641.949:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.6.1712" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa88378f7c9 code=0x7ffc0000 [ 135.988570][ T40] audit: type=1326 audit(1768204641.949:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11561 comm="syz.6.1712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88378f7c9 code=0x7ffc0000 [ 136.072092][T11571] FAULT_INJECTION: forcing a failure. [ 136.072092][T11571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.077864][T11571] CPU: 2 UID: 0 PID: 11571 Comm: syz.1.1715 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.077891][T11571] Tainted: [L]=SOFTLOCKUP [ 136.077899][T11571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.077910][T11571] Call Trace: [ 136.077917][T11571] [ 136.077923][T11571] dump_stack_lvl+0x16c/0x1f0 [ 136.077977][T11571] should_fail_ex+0x512/0x640 [ 136.078019][T11571] _copy_from_user+0x2e/0xd0 [ 136.078047][T11571] copy_msghdr_from_user+0x98/0x160 [ 136.078069][T11571] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 136.078101][T11571] ___sys_sendmsg+0xfe/0x1d0 [ 136.078121][T11571] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.078170][T11571] __sys_sendmsg+0x16d/0x220 [ 136.078191][T11571] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.078226][T11571] do_syscall_64+0xcd/0xf80 [ 136.078255][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.078272][T11571] RIP: 0033:0x7f60b858f7c9 [ 136.078288][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.078304][T11571] RSP: 002b:00007f60b939a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.078323][T11571] RAX: ffffffffffffffda RBX: 00007f60b87e5fa0 RCX: 00007f60b858f7c9 [ 136.078335][T11571] RDX: 0000000000008020 RSI: 0000200000000480 RDI: 0000000000000003 [ 136.078347][T11571] RBP: 00007f60b939a090 R08: 0000000000000000 R09: 0000000000000000 [ 136.078358][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.078367][T11571] R13: 00007f60b87e6038 R14: 00007f60b87e5fa0 R15: 00007fff412b17a8 [ 136.078392][T11571] [ 136.258731][T11593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1719'. [ 136.308268][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 136.311306][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 136.636903][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1728'. [ 136.962381][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 136.965909][T11625] netem: invalid attributes len -22 [ 136.967671][T11625] netem: change failed [ 137.319282][T11644] binder: 11642:11644 ioctl c0306201 200000000640 returned -22 [ 137.340784][T11645] netlink: 'syz.6.1737': attribute type 10 has an invalid length. [ 137.361055][T11645] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.413882][T11655] FAULT_INJECTION: forcing a failure. [ 137.413882][T11655] name failslab, interval 1, probability 0, space 0, times 0 [ 137.418435][T11655] CPU: 1 UID: 0 PID: 11655 Comm: syz.3.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.418464][T11655] Tainted: [L]=SOFTLOCKUP [ 137.418470][T11655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.418481][T11655] Call Trace: [ 137.418488][T11655] [ 137.418495][T11655] dump_stack_lvl+0x16c/0x1f0 [ 137.418524][T11655] should_fail_ex+0x512/0x640 [ 137.418551][T11655] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.418572][T11655] should_failslab+0xc2/0x120 [ 137.418596][T11655] kmem_cache_alloc_noprof+0x83/0x770 [ 137.418615][T11655] ? skb_clone+0x190/0x3f0 [ 137.418660][T11655] ? skb_clone+0x190/0x3f0 [ 137.418680][T11655] skb_clone+0x190/0x3f0 [ 137.418702][T11655] netlink_deliver_tap+0xabd/0xd30 [ 137.418736][T11655] netlink_unicast+0x64c/0x870 [ 137.418763][T11655] ? __pfx_netlink_unicast+0x10/0x10 [ 137.418796][T11655] netlink_sendmsg+0x8c8/0xdd0 [ 137.418823][T11655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.418856][T11655] ____sys_sendmsg+0xa5d/0xc30 [ 137.418882][T11655] ? copy_msghdr_from_user+0x10a/0x160 [ 137.418901][T11655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.418936][T11655] ___sys_sendmsg+0x134/0x1d0 [ 137.418957][T11655] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.419007][T11655] __sys_sendmsg+0x16d/0x220 [ 137.419027][T11655] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.419057][T11655] ? fput+0x70/0xf0 [ 137.419078][T11655] do_syscall_64+0xcd/0xf80 [ 137.419105][T11655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.419122][T11655] RIP: 0033:0x7f1ef3f8f7c9 [ 137.419137][T11655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.419154][T11655] RSP: 002b:00007f1ef21ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.419171][T11655] RAX: ffffffffffffffda RBX: 00007f1ef41e5fa0 RCX: 00007f1ef3f8f7c9 [ 137.419183][T11655] RDX: 0000000000008020 RSI: 0000200000000480 RDI: 0000000000000003 [ 137.419194][T11655] RBP: 00007f1ef21ee090 R08: 0000000000000000 R09: 0000000000000000 [ 137.419204][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.419215][T11655] R13: 00007f1ef41e6038 R14: 00007f1ef41e5fa0 R15: 00007ffe5e4fe658 [ 137.419240][T11655] [ 137.550716][T11674] overlay: ./file0 is not a directory [ 137.606401][T11678] binder: BINDER_SET_CONTEXT_MGR already set [ 137.608836][T11678] binder: 11677:11678 ioctl 4018620d 200000000100 returned -16 [ 137.609759][T11679] binder: 11677:11679 ioctl c0306201 200000000140 returned -22 [ 137.614571][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 137.617846][T11680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.623290][T11680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.629667][T11680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.853867][T11701] IPVS: Error connecting to the multicast addr [ 137.900976][T11645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.938738][T11708] lo speed is unknown, defaulting to 1000 [ 138.145739][T11718] binder: BINDER_SET_CONTEXT_MGR already set [ 138.147901][T11718] binder: 11716:11718 ioctl 4018620d 200000000100 returned -16 [ 138.151266][T11718] adfs: Unknown parameter '.-' [ 138.153206][T11718] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1765'. [ 138.157871][T11718] binder: BINDER_SET_CONTEXT_MGR already set [ 138.160535][T11718] binder: 11716:11718 ioctl 4018620d 200000000040 returned -16 [ 138.258773][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 138.403113][T11748] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1773'. [ 138.745517][T11787] ip6_vti0: entered promiscuous mode [ 138.747876][T11787] ip6_vti0: entered allmulticast mode [ 138.923941][T11799] loop2: detected capacity change from 0 to 7 [ 138.927462][T11799] Dev loop2: unable to read RDB block 7 [ 138.929610][T11799] loop2: AHDI p1 p2 p3 [ 138.931232][T11799] loop2: partition table partially beyond EOD, truncated [ 138.933681][T11799] loop2: p1 start 1601398130 is beyond EOD, truncated [ 138.935950][T11799] loop2: p2 start 1702059890 is beyond EOD, truncated [ 139.011041][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 139.011057][ T40] audit: type=1400 audit(1768204644.792:1244): avc: denied { wake_alarm } for pid=11802 comm="syz.6.1791" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.270063][T11826] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 139.325018][T11835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.328922][T11833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.480464][T11841] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 139.812895][T11853] FAULT_INJECTION: forcing a failure. [ 139.812895][T11853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.818520][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.3.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.818550][T11853] Tainted: [L]=SOFTLOCKUP [ 139.818557][T11853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.818568][T11853] Call Trace: [ 139.818574][T11853] [ 139.818582][T11853] dump_stack_lvl+0x16c/0x1f0 [ 139.818611][T11853] should_fail_ex+0x512/0x640 [ 139.818663][T11853] _copy_from_user+0x2e/0xd0 [ 139.818691][T11853] copy_msghdr_from_user+0x98/0x160 [ 139.818712][T11853] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 139.818743][T11853] ___sys_sendmsg+0xfe/0x1d0 [ 139.818764][T11853] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.818827][T11853] __sys_sendmsg+0x16d/0x220 [ 139.818848][T11853] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.818889][T11853] do_syscall_64+0xcd/0xf80 [ 139.818917][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.818936][T11853] RIP: 0033:0x7f1ef3f8f7c9 [ 139.818950][T11853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.818967][T11853] RSP: 002b:00007f1ef21ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.818986][T11853] RAX: ffffffffffffffda RBX: 00007f1ef41e5fa0 RCX: 00007f1ef3f8f7c9 [ 139.818998][T11853] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 139.819009][T11853] RBP: 00007f1ef21ee090 R08: 0000000000000000 R09: 0000000000000000 [ 139.819020][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.819030][T11853] R13: 00007f1ef41e6038 R14: 00007f1ef41e5fa0 R15: 00007ffe5e4fe658 [ 139.819055][T11853] [ 140.098189][ T40] audit: type=1400 audit(1768204645.811:1245): avc: denied { bind } for pid=11886 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.108390][ T40] audit: type=1400 audit(1768204645.821:1246): avc: denied { name_bind } for pid=11886 comm="syz.1.1815" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 140.117383][ T40] audit: type=1400 audit(1768204645.821:1247): avc: denied { node_bind } for pid=11886 comm="syz.1.1815" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 140.129909][ T40] audit: type=1400 audit(1768204645.821:1248): avc: denied { connect } for pid=11886 comm="syz.1.1815" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.166311][ T40] audit: type=1400 audit(1768204645.868:1249): avc: denied { create } for pid=11890 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 140.172444][T11891] gfs2: not a GFS2 filesystem [ 140.177661][ T40] audit: type=1400 audit(1768204645.868:1250): avc: denied { bind } for pid=11890 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 140.187776][ T40] audit: type=1400 audit(1768204645.868:1251): avc: denied { write } for pid=11890 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 140.578421][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.724062][T11898] ceph: Path missing in source [ 140.851375][ T40] audit: type=1400 audit(1768204646.513:1252): avc: denied { read } for pid=11903 comm="syz.6.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.916840][ T40] audit: type=1400 audit(1768204646.569:1253): avc: denied { getopt } for pid=11908 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.043605][T11924] Cannot find add_set index 1 as target [ 141.087315][T11931] __nla_validate_parse: 2 callbacks suppressed [ 141.087327][T11931] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1827'. [ 141.173765][T11949] xt_hashlimit: invalid interval [ 141.216538][T11955] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.216538][T11955] program syz.1.1835 not setting count and/or reply_len properly [ 141.276655][T11960] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.321133][T11967] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 141.407145][T11977] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 141.412674][T11977] bond1 (unregistering): Released all slaves [ 141.718178][T11994] FAULT_INJECTION: forcing a failure. [ 141.718178][T11994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.727148][T11994] CPU: 3 UID: 0 PID: 11994 Comm: syz.6.1844 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.727180][T11994] Tainted: [L]=SOFTLOCKUP [ 141.727186][T11994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.727198][T11994] Call Trace: [ 141.727204][T11994] [ 141.727211][T11994] dump_stack_lvl+0x16c/0x1f0 [ 141.727240][T11994] should_fail_ex+0x512/0x640 [ 141.727273][T11994] _copy_from_iter+0x2a4/0x16c0 [ 141.727304][T11994] ? __alloc_skb+0x220/0x410 [ 141.727319][T11994] ? __alloc_skb+0x35d/0x410 [ 141.727334][T11994] ? __pfx__copy_from_iter+0x10/0x10 [ 141.727362][T11994] ? netlink_autobind.isra.0+0x158/0x370 [ 141.727395][T11994] netlink_sendmsg+0x820/0xdd0 [ 141.727422][T11994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.727455][T11994] ____sys_sendmsg+0xa5d/0xc30 [ 141.727480][T11994] ? copy_msghdr_from_user+0x10a/0x160 [ 141.727500][T11994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.727535][T11994] ___sys_sendmsg+0x134/0x1d0 [ 141.727556][T11994] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.727606][T11994] __sys_sendmsg+0x16d/0x220 [ 141.727631][T11994] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.727667][T11994] do_syscall_64+0xcd/0xf80 [ 141.727693][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.727712][T11994] RIP: 0033:0x7fa88378f7c9 [ 141.727727][T11994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.727743][T11994] RSP: 002b:00007fa8846fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.727762][T11994] RAX: ffffffffffffffda RBX: 00007fa8839e5fa0 RCX: 00007fa88378f7c9 [ 141.727774][T11994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 141.727785][T11994] RBP: 00007fa8846fa090 R08: 0000000000000000 R09: 0000000000000000 [ 141.727795][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.727805][T11994] R13: 00007fa8839e6038 R14: 00007fa8839e5fa0 R15: 00007fff1ace6b78 [ 141.727830][T11994] [ 141.822520][ T7025] IPVS: starting estimator thread 0... [ 141.826303][T12008] overlayfs: failed to clone upperpath [ 141.912568][T12009] IPVS: using max 46 ests per chain, 110400 per kthread [ 141.959573][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 142.373743][T12030] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.466155][T12043] syz_tun: refused to change device tx_queue_len [ 142.540917][T12055] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 142.543632][T12055] ªªªªªª©*°;¾eÕܲ: entered promiscuous mode [ 142.545580][T12055] bond0: (slave ªªªªªª©*°;¾eÕܲ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.622332][T12068] FAULT_INJECTION: forcing a failure. [ 142.622332][T12068] name failslab, interval 1, probability 0, space 0, times 0 [ 142.627741][T12068] CPU: 2 UID: 0 PID: 12068 Comm: syz.1.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.627772][T12068] Tainted: [L]=SOFTLOCKUP [ 142.627779][T12068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.627790][T12068] Call Trace: [ 142.627796][T12068] [ 142.627804][T12068] dump_stack_lvl+0x16c/0x1f0 [ 142.627833][T12068] should_fail_ex+0x512/0x640 [ 142.627860][T12068] ? __kmalloc_cache_noprof+0x5f/0x800 [ 142.627881][T12068] should_failslab+0xc2/0x120 [ 142.627906][T12068] __kmalloc_cache_noprof+0x80/0x800 [ 142.627924][T12068] ? qfq_change_class+0xcf8/0x1da0 [ 142.627953][T12068] ? qfq_change_class+0xcf8/0x1da0 [ 142.627975][T12068] qfq_change_class+0xcf8/0x1da0 [ 142.628003][T12068] ? __pfx_qfq_change_class+0x10/0x10 [ 142.628029][T12068] ? qdisc_match_from_root+0x16f/0x260 [ 142.628056][T12068] ? __pfx_qfq_change_class+0x10/0x10 [ 142.628078][T12068] tc_ctl_tclass+0x59d/0x16c0 [ 142.628110][T12068] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 142.628134][T12068] ? __mutex_lock+0x27b/0x1ca0 [ 142.628162][T12068] ? rtnetlink_rcv_msg+0x371/0xe90 [ 142.628184][T12068] ? __lock_acquire+0x436/0x2890 [ 142.628226][T12068] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 142.628252][T12068] rtnetlink_rcv_msg+0x3c9/0xe90 [ 142.628277][T12068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.628306][T12068] ? ref_tracker_free+0x37c/0x830 [ 142.628327][T12068] netlink_rcv_skb+0x158/0x420 [ 142.628352][T12068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.628375][T12068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.628408][T12068] ? netlink_deliver_tap+0x1ae/0xd30 [ 142.628436][T12068] netlink_unicast+0x5aa/0x870 [ 142.628463][T12068] ? __pfx_netlink_unicast+0x10/0x10 [ 142.628496][T12068] netlink_sendmsg+0x8c8/0xdd0 [ 142.628524][T12068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.628557][T12068] ____sys_sendmsg+0xa5d/0xc30 [ 142.628583][T12068] ? copy_msghdr_from_user+0x10a/0x160 [ 142.628603][T12068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.628640][T12068] ___sys_sendmsg+0x134/0x1d0 [ 142.628661][T12068] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.628725][T12068] __sys_sendmsg+0x16d/0x220 [ 142.628762][T12068] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.628793][T12068] ? fput+0x70/0xf0 [ 142.628814][T12068] do_syscall_64+0xcd/0xf80 [ 142.628840][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.628860][T12068] RIP: 0033:0x7f60b858f7c9 [ 142.628874][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.628891][T12068] RSP: 002b:00007f60b939a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.628909][T12068] RAX: ffffffffffffffda RBX: 00007f60b87e5fa0 RCX: 00007f60b858f7c9 [ 142.628920][T12068] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 142.628930][T12068] RBP: 00007f60b939a090 R08: 0000000000000000 R09: 0000000000000000 [ 142.628940][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.628950][T12068] R13: 00007f60b87e6038 R14: 00007f60b87e5fa0 R15: 00007fff412b17a8 [ 142.628973][T12068] [ 142.789079][T12054] cgroup: fork rejected by pids controller in /syz0 [ 142.946868][T12107] FAULT_INJECTION: forcing a failure. [ 142.946868][T12107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.964568][T12107] CPU: 0 UID: 0 PID: 12107 Comm: syz.3.1874 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.964589][T12107] Tainted: [L]=SOFTLOCKUP [ 142.964593][T12107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.964605][T12107] Call Trace: [ 142.964609][T12107] [ 142.964613][T12107] dump_stack_lvl+0x16c/0x1f0 [ 142.964632][T12107] should_fail_ex+0x512/0x640 [ 142.964652][T12107] _copy_to_user+0x32/0xd0 [ 142.964670][T12107] simple_read_from_buffer+0xcb/0x170 [ 142.964686][T12107] proc_fail_nth_read+0x197/0x240 [ 142.964699][T12107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.964711][T12107] ? rw_verify_area+0xcf/0x6c0 [ 142.964723][T12107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.964738][T12107] vfs_read+0x1e4/0xcf0 [ 142.964758][T12107] ? __pfx___mutex_lock+0x10/0x10 [ 142.964801][T12107] ? __pfx_vfs_read+0x10/0x10 [ 142.964830][T12107] ? __fget_files+0x20e/0x3c0 [ 142.964855][T12107] ksys_read+0x12a/0x250 [ 142.964869][T12107] ? __pfx_ksys_read+0x10/0x10 [ 142.964886][T12107] do_syscall_64+0xcd/0xf80 [ 142.964902][T12107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.964913][T12107] RIP: 0033:0x7f1ef3f8e1dc [ 142.964923][T12107] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.964933][T12107] RSP: 002b:00007f1ef21ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.964944][T12107] RAX: ffffffffffffffda RBX: 00007f1ef41e5fa0 RCX: 00007f1ef3f8e1dc [ 142.964951][T12107] RDX: 000000000000000f RSI: 00007f1ef21ee0a0 RDI: 000000000000000a [ 142.964957][T12107] RBP: 00007f1ef21ee090 R08: 0000000000000000 R09: 0000000000000000 [ 142.964963][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.964970][T12107] R13: 00007f1ef41e6038 R14: 00007f1ef41e5fa0 R15: 00007ffe5e4fe658 [ 142.964984][T12107] [ 143.054971][T12123] netlink: 'syz.1.1877': attribute type 29 has an invalid length. [ 143.065192][T12123] netlink: 'syz.1.1877': attribute type 29 has an invalid length. [ 143.144814][T12135] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1881'. [ 143.229233][T12142] cgroup: fork rejected by pids controller in /syz1 [ 143.257924][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1884'. [ 144.147545][T12339] lo speed is unknown, defaulting to 1000 [ 144.307923][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 144.311004][T12342] ip_vti0: Master is either lo or non-ether device [ 144.320671][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1896'. [ 144.361137][ T40] kauditd_printk_skb: 327 callbacks suppressed [ 144.361148][ T40] audit: type=1400 audit(1768204649.786:1581): avc: denied { prog_load } for pid=12346 comm="syz.3.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 144.370849][ T40] audit: type=1400 audit(1768204649.796:1582): avc: denied { read write } for pid=12346 comm="syz.3.1898" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 144.392616][T12339] sp0: Synchronizing with TNC [ 144.395959][ T40] audit: type=1400 audit(1768204649.833:1583): avc: denied { create } for pid=12337 comm="syz.6.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 144.405330][ T40] audit: type=1400 audit(1768204649.842:1584): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.437466][ T40] audit: type=1400 audit(1768204649.870:1585): avc: denied { create } for pid=12351 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 144.446657][ T40] audit: type=1400 audit(1768204649.870:1586): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.454451][ T40] audit: type=1400 audit(1768204649.870:1587): avc: denied { read } for pid=12351 comm="syz.3.1900" dev="nsfs" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 144.482665][ T40] audit: type=1400 audit(1768204649.908:1588): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.524427][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 144.524788][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 144.529339][T12358] ================================================================== [ 144.532701][T12358] BUG: KASAN: slab-use-after-free in qfq_search_class+0x16e/0x1a0 [ 144.535220][T12358] Read of size 4 at addr ffff8880651e5300 by task syz.1.1901/12358 [ 144.539479][T12358] [ 144.540653][T12358] CPU: 0 UID: 0 PID: 12358 Comm: syz.1.1901 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.540672][T12358] Tainted: [L]=SOFTLOCKUP [ 144.540676][T12358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.540684][T12358] Call Trace: [ 144.540688][T12358] [ 144.540693][T12358] dump_stack_lvl+0x116/0x1f0 [ 144.540713][T12358] print_report+0xcd/0x630 [ 144.540728][T12358] ? __virt_addr_valid+0x81/0x610 [ 144.540740][T12358] ? __phys_addr+0xe8/0x180 [ 144.540751][T12358] ? qfq_search_class+0x16e/0x1a0 [ 144.540766][T12358] kasan_report+0xe0/0x110 [ 144.540780][T12358] ? qfq_search_class+0x16e/0x1a0 [ 144.540795][T12358] qfq_search_class+0x16e/0x1a0 [ 144.540811][T12358] ? qdisc_lookup+0x86/0x3f0 [ 144.540827][T12358] tc_ctl_tclass+0x789/0x16c0 [ 144.540845][T12358] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 144.540861][T12358] ? __mutex_lock+0x27b/0x1ca0 [ 144.540877][T12358] ? rtnetlink_rcv_msg+0x371/0xe90 [ 144.540890][T12358] ? __lock_acquire+0x436/0x2890 [ 144.540907][T12358] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 144.540923][T12358] rtnetlink_rcv_msg+0x3c9/0xe90 [ 144.540937][T12358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.540951][T12358] ? ref_tracker_free+0x37c/0x830 [ 144.540962][T12358] netlink_rcv_skb+0x158/0x420 [ 144.540977][T12358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.540990][T12358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.541006][T12358] ? netlink_deliver_tap+0x1ae/0xd30 [ 144.541020][T12358] netlink_unicast+0x5aa/0x870 [ 144.541035][T12358] ? __pfx_netlink_unicast+0x10/0x10 [ 144.541051][T12358] netlink_sendmsg+0x8c8/0xdd0 [ 144.541066][T12358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.541082][T12358] ____sys_sendmsg+0xa5d/0xc30 [ 144.541098][T12358] ? copy_msghdr_from_user+0x10a/0x160 [ 144.541109][T12358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.541123][T12358] ? preempt_schedule_thunk+0x16/0x30 [ 144.541135][T12358] ? try_to_wake_up+0xa67/0x1860 [ 144.541154][T12358] ___sys_sendmsg+0x134/0x1d0 [ 144.541165][T12358] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.541176][T12358] ? futex_private_hash_put+0x160/0x1b0 [ 144.541197][T12358] __sys_sendmsg+0x16d/0x220 [ 144.541209][T12358] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.541220][T12358] ? __x64_sys_futex+0x1e0/0x4c0 [ 144.541239][T12358] do_syscall_64+0xcd/0xf80 [ 144.541254][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.541266][T12358] RIP: 0033:0x7f60b858f7c9 [ 144.541275][T12358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.541287][T12358] RSP: 002b:00007f60b939a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.541297][T12358] RAX: ffffffffffffffda RBX: 00007f60b87e5fa0 RCX: 00007f60b858f7c9 [ 144.541305][T12358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 144.541311][T12358] RBP: 00007f60b8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 144.541318][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.541325][T12358] R13: 00007f60b87e6038 R14: 00007f60b87e5fa0 R15: 00007fff412b17a8 [ 144.541335][T12358] [ 144.541338][T12358] [ 144.543977][ T40] audit: type=1400 audit(1768204649.945:1589): avc: denied { write } for pid=5862 comm="syz-executor" path="pipe:[2920]" dev="pipefs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 144.544886][T12358] Allocated by task 11350: [ 144.544894][T12358] kasan_save_stack+0x33/0x60 [ 144.544910][T12358] kasan_save_track+0x14/0x30 [ 144.544923][T12358] __kasan_kmalloc+0xaa/0xb0 [ 144.546416][ T40] audit: type=1400 audit(1768204649.945:1590): avc: denied { write } for pid=5862 comm="syz-executor" path="pipe:[2920]" dev="pipefs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 144.549724][T12358] qfq_change_class+0x2ba/0x1da0 [ 144.666798][T12358] tc_ctl_tclass+0x59d/0x16c0 [ 144.668351][T12358] rtnetlink_rcv_msg+0x3c9/0xe90 [ 144.669965][T12358] netlink_rcv_skb+0x158/0x420 [ 144.671913][T12358] netlink_unicast+0x5aa/0x870 [ 144.673556][T12358] netlink_sendmsg+0x8c8/0xdd0 [ 144.675146][T12358] ____sys_sendmsg+0xa5d/0xc30 [ 144.676751][T12358] ___sys_sendmsg+0x134/0x1d0 [ 144.678244][T12358] __sys_sendmsg+0x16d/0x220 [ 144.679736][T12358] do_syscall_64+0xcd/0xf80 [ 144.681141][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.683029][T12358] [ 144.683802][T12358] Freed by task 12068: [ 144.685116][T12358] kasan_save_stack+0x33/0x60 [ 144.686989][T12358] kasan_save_track+0x14/0x30 [ 144.688882][T12358] kasan_save_free_info+0x3b/0x60 [ 144.690507][T12358] __kasan_slab_free+0x5f/0x80 [ 144.692100][T12358] kfree+0x2f8/0x6e0 [ 144.693372][T12358] qfq_change_class+0x1576/0x1da0 [ 144.695044][T12358] tc_ctl_tclass+0x59d/0x16c0 [ 144.696732][T12358] rtnetlink_rcv_msg+0x3c9/0xe90 [ 144.698466][T12358] netlink_rcv_skb+0x158/0x420 [ 144.700110][T12358] netlink_unicast+0x5aa/0x870 [ 144.701745][T12358] netlink_sendmsg+0x8c8/0xdd0 [ 144.703594][T12358] ____sys_sendmsg+0xa5d/0xc30 [ 144.705649][T12358] ___sys_sendmsg+0x134/0x1d0 [ 144.707207][T12358] __sys_sendmsg+0x16d/0x220 [ 144.708695][T12358] do_syscall_64+0xcd/0xf80 [ 144.710153][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.712028][T12358] [ 144.712837][T12358] The buggy address belongs to the object at ffff8880651e5300 [ 144.712837][T12358] which belongs to the cache kmalloc-128 of size 128 [ 144.717243][T12358] The buggy address is located 0 bytes inside of [ 144.717243][T12358] freed 128-byte region [ffff8880651e5300, ffff8880651e5380) [ 144.721552][T12358] [ 144.722552][T12358] The buggy address belongs to the physical page: [ 144.724977][T12358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x651e5 [ 144.727668][T12358] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 144.730055][T12358] page_type: f5(slab) [ 144.731326][T12358] raw: 00fff00000000000 ffff88801b442a00 0000000000000000 dead000000000001 [ 144.733977][T12358] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 144.736723][T12358] page dumped because: kasan: bad access detected [ 144.738806][T12358] page_owner tracks the page as allocated [ 144.741016][T12358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9272, tgid 9271 (syz.1.993), ts 100051406974, free_ts 100051372730 [ 144.747276][T12358] post_alloc_hook+0x1af/0x220 [ 144.748859][T12358] get_page_from_freelist+0xd0b/0x31a0 [ 144.750619][T12358] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 144.752546][T12358] alloc_pages_mpol+0x1fb/0x550 [ 144.754125][T12358] new_slab+0x2c3/0x430 [ 144.755499][T12358] ___slab_alloc+0xe18/0x1c90 [ 144.757071][T12358] __slab_alloc.constprop.0+0x63/0x110 [ 144.758865][T12358] __kmalloc_cache_noprof+0x485/0x800 [ 144.760591][T12358] __hw_addr_add_ex+0x3c9/0x7c0 [ 144.762205][T12358] dev_addr_init+0x161/0x250 [ 144.763735][T12358] alloc_netdev_mqs+0x363/0x1550 [ 144.765447][T12358] __tun_chr_ioctl+0x193e/0x4880 [ 144.767599][T12358] __x64_sys_ioctl+0x18e/0x210 [ 144.769207][T12358] do_syscall_64+0xcd/0xf80 [ 144.770720][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.772644][T12358] page last free pid 9272 tgid 9271 stack trace: [ 144.774646][T12358] __free_frozen_pages+0x7df/0x1170 [ 144.776364][T12358] inode_doinit_with_dentry+0xaca/0x12e0 [ 144.778168][T12358] selinux_d_instantiate+0x26/0x30 [ 144.779829][T12358] security_d_instantiate+0x142/0x1a0 [ 144.781553][T12358] d_make_persistent+0x6a/0x190 [ 144.783154][T12358] __debugfs_create_file+0x26b/0x530 [ 144.784873][T12358] debugfs_create_file_full+0x41/0x60 [ 144.786660][T12358] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 144.788427][T12358] alloc_netdev_mqs+0x314/0x1550 [ 144.790037][T12358] __tun_chr_ioctl+0x193e/0x4880 [ 144.791664][T12358] __x64_sys_ioctl+0x18e/0x210 [ 144.793719][T12358] do_syscall_64+0xcd/0xf80 [ 144.795321][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.797478][T12358] [ 144.798441][T12358] Memory state around the buggy address: [ 144.800713][T12358] ffff8880651e5200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.803838][T12358] ffff8880651e5280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.806463][T12358] >ffff8880651e5300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.809393][T12358] ^ [ 144.811060][T12358] ffff8880651e5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.814300][T12358] ffff8880651e5400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 144.817308][T12358] ================================================================== [ 144.992522][T12358] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.994774][T12358] CPU: 3 UID: 0 PID: 12358 Comm: syz.1.1901 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.998037][T12358] Tainted: [L]=SOFTLOCKUP [ 144.999408][T12358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.002691][T12358] Call Trace: [ 145.003730][T12358] [ 145.004668][T12358] dump_stack_lvl+0x3d/0x1f0 [ 145.006117][T12358] vpanic+0x640/0x6f0 [ 145.007380][T12358] panic+0xca/0xd0 [ 145.008563][T12358] ? __pfx_panic+0x10/0x10 [ 145.009993][T12358] ? qfq_search_class+0x16e/0x1a0 [ 145.011590][T12358] ? preempt_schedule_common+0x44/0xc0 [ 145.013257][T12358] ? preempt_schedule_thunk+0x16/0x30 [ 145.014925][T12358] check_panic_on_warn+0xab/0xb0 [ 145.016479][T12358] end_report+0x107/0x160 [ 145.017831][T12358] kasan_report+0xee/0x110 [ 145.019250][T12358] ? qfq_search_class+0x16e/0x1a0 [ 145.020824][T12358] qfq_search_class+0x16e/0x1a0 [ 145.022373][T12358] ? qdisc_lookup+0x86/0x3f0 [ 145.023836][T12358] tc_ctl_tclass+0x789/0x16c0 [ 145.025330][T12358] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 145.026961][T12358] ? __mutex_lock+0x27b/0x1ca0 [ 145.028504][T12358] ? rtnetlink_rcv_msg+0x371/0xe90 [ 145.030262][T12358] ? __lock_acquire+0x436/0x2890 [ 145.031876][T12358] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 145.033516][T12358] rtnetlink_rcv_msg+0x3c9/0xe90 [ 145.035114][T12358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.036882][T12358] ? ref_tracker_free+0x37c/0x830 [ 145.038486][T12358] netlink_rcv_skb+0x158/0x420 [ 145.040005][T12358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.041741][T12358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.043432][T12358] ? netlink_deliver_tap+0x1ae/0xd30 [ 145.045156][T12358] netlink_unicast+0x5aa/0x870 [ 145.046721][T12358] ? __pfx_netlink_unicast+0x10/0x10 [ 145.048406][T12358] netlink_sendmsg+0x8c8/0xdd0 [ 145.049938][T12358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.051626][T12358] ____sys_sendmsg+0xa5d/0xc30 [ 145.053154][T12358] ? copy_msghdr_from_user+0x10a/0x160 [ 145.054842][T12358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.056492][T12358] ? preempt_schedule_thunk+0x16/0x30 [ 145.058212][T12358] ? try_to_wake_up+0xa67/0x1860 [ 145.059769][T12358] ___sys_sendmsg+0x134/0x1d0 [ 145.061266][T12358] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.062964][T12358] ? futex_private_hash_put+0x160/0x1b0 [ 145.065097][T12358] __sys_sendmsg+0x16d/0x220 [ 145.066638][T12358] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.068271][T12358] ? __x64_sys_futex+0x1e0/0x4c0 [ 145.069863][T12358] do_syscall_64+0xcd/0xf80 [ 145.071346][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.073268][T12358] RIP: 0033:0x7f60b858f7c9 [ 145.074762][T12358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.080796][T12358] RSP: 002b:00007f60b939a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.083505][T12358] RAX: ffffffffffffffda RBX: 00007f60b87e5fa0 RCX: 00007f60b858f7c9 [ 145.086037][T12358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 145.088582][T12358] RBP: 00007f60b8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.091132][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.093681][T12358] R13: 00007f60b87e6038 R14: 00007f60b87e5fa0 R15: 00007fff412b17a8 [ 145.096224][T12358] [ 145.097819][T12358] Kernel Offset: disabled [ 145.099216][T12358] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:57:33 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85328505 RDI=ffffffff9aeedc40 RBP=ffffffff9aeedc00 RSP=ffffc90006e3eee0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=000000000000006b R14=ffffffff9aeedc00 R15=ffffffff853284a0 RIP=ffffffff8532852f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f60b939a6c0 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2de057 CR3=000000004fdef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b8615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b861505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b8615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b861506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b86150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b86151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b87ba4a8 00007f60b87ba4a0 00007f60b87ba498 00007f60b87ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b931d100 00007f60b87ba460 00007f60b87ba478 00007f60b87ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b87ba4b8 00007f60b87ba4b0 00007f60b87ba4a8 00007f60b87ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff8eefebf4 RCX=0000000000000000 RDX=0000000000000007 RSI=ffffffff84b5d326 RDI=ffff888057170054 RBP=0000000000000000 RSP=ffffc90006a956b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=ffff888057170042 R12=0000000000000012 R13=dffffc0000000000 R14=ffff888057170000 R15=0000000000000000 RIP=ffffffff84b5d355 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f60b939a6c0 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000002e4b6000 CR4=00352ef0 DR0=0000000000000001 DR1=fffffffffffffff7 DR2=0000000000000000 DR3=000000000000000a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef21edbf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef4015050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef401505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef4015057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef401506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef40150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef40151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000005a0 RBX=0000000000000078 RCX=ffff88805d5201e0 RDX=ffff88803faf8000 RSI=ffffffff84b5c57d RDI=ffff88805d52d610 RBP=ffff88805d5223f8 RSP=ffffc900068cd6b8 R8 =0000000000000001 R9 =000000000000040d R10=0000000000000000 R11=ffff88805d520042 R12=ffff88805d52a350 R13=dffffc0000000000 R14=ffff88805d520000 R15=000000000000047f RIP=ffffffff84b5c5cb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f60b939a6c0 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=0000000057309000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc290daf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e0ea15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e0ea1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e0ea15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e0ea1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e0ea150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e0ea151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8eefec21 RCX=ffffffff84b5d318 RDX=ffff88802beb8000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000683d6b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffff888013980042 R12=0000000000000014 R13=dffffc0000000000 R14=ffff888013980000 R15=0000000000000000 RIP=ffffffff81bee930 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f60b939a6c0 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555a8ac808 CR3=0000000029896000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff412b1b30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b8615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b861505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b8615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b861506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b86150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60b86151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000