last executing test programs: 2m54.311301869s ago: executing program 2 (id=756): mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) (async, rerun: 64) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2) 2m54.261662213s ago: executing program 2 (id=757): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x2, 0x9}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc00) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="aec5e403"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ba8980ee9a103bf23687234c41d98bd7"}]}, 0x44}}, 0x4000c010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x80, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x37, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0xd, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x5, @void, @void, @void, @val={0x65, 0x12, {@from_mac=@broadcast, @device_a, @broadcast}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x10) io_setup(0x80, &(0x7f00000009c0)=0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ec0), 0x800, 0x0) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000fc0), 0x400003, 0x0) io_submit(r10, 0xa, &(0x7f0000001200)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f0000000a00)="6c83a83f27c68f5bb11d102686fd547602c4c5104a03ef22663cf0cad6a5a50724b11070fc9ff4dd3610c636a0ec81a356048df9738b20a9af47981d0a", 0x3d, 0xfffffffffffffff1, 0x0, 0x4, r0}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x7, r8, &(0x7f0000000a80)="148fc08c7be2727a31f605929fa3d9ba8b9343daa35e7e575ec52aeb663823106e6e25381645e3aa37b34e7b2f39786ab3114fbfc6f21361bbe1e10256e1bb83135f44983eea50b09ff94edace0ba3bddf6ddadc9f10e4561e1886630199797f9bb04f5be84b61a65000e2ae7d02de5420613e0a34149d507194cfa8761d3c47cc926648f689b00f6942948492e63b31d9dd6d0be67e5f474dd7595c8c963e162d938bdbfe", 0xa5, 0x6, 0x0, 0x0, r3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000b80)="a9c924d7447a29e0dc26dc30a0bc06c9090d8ea345c34da1fb8fa244503a39f450a8", 0x22, 0x46edbf5d, 0x0, 0x1, r3}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000c00)="6748a0425d178b80cc6346a43bdd958b555ec1f7813a5f0c91c7383809593922c39a5090c1d41d15818ac33d00be57fa9f27b5143487b069ec4e04a1543ecfe0f81243d2f94ebdd62d2fe14254899edf5f7af0e1a3f12067c8cb8bc1f31c6fc3465d922fa46fa6f1040bceaf86d78ef458a756d0842ec7e76ce28ca101067b534c3215ef7d3df56c039a99431e18e25e3fa2c5f172642d3cd73a2ea2a8d8d7051f049a78f43706f56dcf0af28bfbaf773ccedc134568824d663fbaefabd4", 0xbe, 0x380000000000000, 0x0, 0x0, r0}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x6, 0xfffc, r8, &(0x7f0000000d00)="f9730231ac", 0x5, 0x9, 0x0, 0x1, r0}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000d80)="6cf1fc60112cc51fd83efaf7debf64b7687e3e1abef1e130b8d936e65a0a9fb83085c2fed79cfd24f7b8db32549119b6a39a9764b0fcdc9d22fca213fb8ebe77", 0x40, 0x6, 0x0, 0x2, r3}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x1ff, r11, &(0x7f0000000e00)="cc14dddab2b5732bea19d83b84de4fc95ba130a229420317cc9e9c7f322d936569760da53a6edc9eb2855cef4582567e1a5a9714433b300f195adccb57b074668414b0ea20d1845747767d4ed2f15a5415df0c2bd0655b1c94d07a8b", 0x5c, 0x5, 0x0, 0x2, r3}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x5, 0x3, r12, &(0x7f0000000f00)="561974dd62287bd1c618ae530e6619b72103f0f07696697d5829d0fb364d71dbd702fed4c19f9463f25ce5ef3a16926022e1eedba3f19ed2bf77eeb2bd7630110f493ba50d2680001266f8c7c429e1946b17cebdb4cd4f361ff0d6295f794ba5dbb91dee653f1e4443efb66a3c40c2e9973b5c1dbf314d9df91205", 0x7b, 0x470cba88, 0x0, 0x1}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r13, &(0x7f0000001000)="83443fc06547a1dbbba20d333730d939fdd8c478d9d4c0f0dc522ed0b77084943695e8d2339200c87be0074afd241d454c7a89e41789806d5263e98e69063fc4d118615b3d7cfd6222458549a18101f493d897475d73c43c73b5e34848b34d81694a642fe03a41bdec5f1235468624173821dd671e96c4a291b9afd33689593682e8734648caed66d66b385eb59dc1d5a814517c3a37061e524620eba4f3bfa3e9454bd3960cd773be3067d7c9", 0xad, 0xfffffffffffffffa, 0x0, 0x0, r3}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000001100)="a2e8ecfdd93678fb197c4a2d30ba70ae87c1a2668add061d1bff71db97f32da6419d57ef380b7644a30e8d79d98bb6b6e7069f3e636bc038a877326293091c06774305fea52500d5cc586b2a6c2ae150e2662b4b2fcd833dcc73dab8ec66ed8d2a150cb61116645701e99cfceeef692b3a6b8d24e840d5df838e97c373b6701d88283387a1a1", 0x86, 0x3, 0x0, 0x1, r0}]) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001280)={r5}) readahead(r14, 0x504e, 0x0) chroot(&(0x7f00000012c0)='./file0\x00') sendmsg$NL80211_CMD_SET_MCAST_RATE(r13, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x140a000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfff, 0x1}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000051}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001400)={0x0, 0x0, 0x8, [0x0, 0xea54, 0x9828, 0x8000, 0x7, 0x80, 0xff1c, 0xa00]}, 0x18) accept4$unix(r3, &(0x7f0000001440), &(0x7f00000014c0)=0x6e, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0x8) 2m54.17058799s ago: executing program 2 (id=760): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x75, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x9, 0x11, 0x8, 0xa, 0xd2}}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400000000ffecff0000000000000000000000000100df0000200002000a0000000080000000000000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl(r2, 0x8b01, &(0x7f0000000040)) 2m54.084623655s ago: executing program 2 (id=762): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000003000000a00300008300000000000000", @ANYRES32, @ANYBLOB="0000deff0000000007000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) 2m54.083065524s ago: executing program 2 (id=764): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mq_timedreceive(r1, &(0x7f0000000000)=""/2, 0x2, 0x0, &(0x7f0000000040)) 2m53.959276682s ago: executing program 2 (id=766): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) io_setup(0xfd, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x0, &(0x7f0000000400)) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="030000020900450a000000000000000004a2373642000380"], 0x24}}, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0xfffeffff, 0x2, 0x4, 0x8, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x1}) r3 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='task_newtask\x00', r9}, 0x18) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000000)=0x2) r10 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000200)={"bff600fe", 0x7, 0x1, 0x0, 0xff, 0x6, "aaa476daabe861b29c8071125e2e42", "5c5febfe", "08b400ab", "f01a34be", ["06f79b50c9f7327483e71098", "1d9a08e29107afa6e6cb4622", "9058deefd47aaf9ddfc38bfe", "3629c5294708a2cc459f4966"]}) msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) io_pgetevents(r0, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x0, &(0x7f0000000400)) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="030000020900450a000000000000000004a2373642000380"], 0x24}}, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0xfffeffff, 0x2, 0x4, 0x8, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x1}) r3 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='task_newtask\x00', r9}, 0x18) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000000)=0x2) r10 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000200)={"bff600fe", 0x7, 0x1, 0x0, 0xff, 0x6, "aaa476daabe861b29c8071125e2e42", "5c5febfe", "08b400ab", "f01a34be", ["06f79b50c9f7327483e71098", "1d9a08e29107afa6e6cb4622", "9058deefd47aaf9ddfc38bfe", "3629c5294708a2cc459f4966"]}) msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}}, 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x113, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0xf, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[], 0x32c}, 0x1, 0x0, 0x0, 0x97f5915ab18f42cb}, 0x20000811) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000000906010200000000000000000200ffff24000780180001801400028000000000000000000000000000aa08000a40000000020900020073797a310000400005000100070000000100"], 0x4c}}, 0x4000080) 3.108961843s ago: executing program 3 (id=2329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) (async) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) (rerun: 32) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xa20000, 0x101, 0x8, r3, 0x0, &(0x7f0000000100)={0x990afc, 0x100, '\x00', @string=&(0x7f00000000c0)=0x8}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="1401000034000100000000000000000001"], 0x114}], 0x1}, 0x0) 3.101681093s ago: executing program 1 (id=2331): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) gettid() ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000140)={@my=0x1, 0x1}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000080), 0x10) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.101249394s ago: executing program 0 (id=2332): r0 = socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a22"], 0x1d) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r8]) ioctl$KVM_GET_VCPU_EVENTS(r9, 0xc048aeca, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "d0913096152f5ce0b93c6517428ad50d2f6b54ed39d054bec9cf9e83b5cd52de", "4232154ae74b33fb0bdc18f4adfe4d645be0119886724721f7c1fb5a266b2e23", "bd3269486684774235e4ecc689af4579a64d81140a17da9c4ce0eaf50dcef5c5", "7c0c28c1506ca435efa044f4645ecd20db8cb50cf69e2dedac905fe88b23a859", "dc146c13a1a05d946b5890de5baf53d02d2c3bfa4316aacb7173032105601dfa", "dd82f9f2320c7eef72b33019", 0xfffffffa, 0x8001, 0x10, 0x9, 0x7f}}) 3.018432634s ago: executing program 3 (id=2335): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2.934427634s ago: executing program 0 (id=2336): sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000090}, 0x4882) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000380)={0x30000002}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 2.869600614s ago: executing program 0 (id=2337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf90, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e2, '\x00', [@jumbo, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfc6) 1.144653453s ago: executing program 3 (id=2340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = userfaultfd(0x801) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000003780), 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x23) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x18, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.068872783s ago: executing program 0 (id=2342): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c000180"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 999.450434ms ago: executing program 0 (id=2344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000040)={0x70, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRESOCT=r0], 0x74}}, 0x0) 709.064464ms ago: executing program 0 (id=2346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8000000000f23c00f21f835030001000f23f865640fc729f00fbb151c0000000faeb9e08300000f017f00f30f1ef80fc76dff2edeb4f7d40100008fc8009ffd7064660f176a0e", 0x47}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200081, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x11, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x5412, &(0x7f00000006c0)=0xa) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd}, {0x0, 0x14}, {0x2, 0x7ffa}}, [{0x8, 0xb, 0x797}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x6c, 0x28, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0xf}, {0x0, 0xffe0}, {0xe, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x82, 0x4}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x46a, 0x9, 0xc5}}, @TCA_HFSC_RSC={0x10, 0x1, {0xa3a, 0x0, 0x80000000}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x100, 0x2}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8848}, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r11 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r12 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r11) r13 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c970b000c00000004000000020000000000000f04000000005f5f009b7fbca40c95193941374db58024b9701cfef9625974678be76ecf025cbd7e10bdfc62c7"], 0x0, 0x28}, 0x28) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r13) keyctl$KEYCTL_MOVE(0x1e, r12, r13, r11, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) 478.4934ms ago: executing program 4 (id=2350): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x76d201) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 410.217807ms ago: executing program 4 (id=2351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf90, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e2, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc1d689b989710dd0f9a418f90637db3aae7034a9b83e8c843ba835c6a500ae43e840688d0801a882ffb94b7a77bd2314217aac52d296d169395c0b3dc7339a389354e1e4ff0746e6b2e3fc0149a36e75eafc20d51812e984faeecb52ad9b89288bacf21c152290ff2f6781dc761a3e50d88a8b4da3e65782fa959d583c718cf64d09d330c381ae123bea01e7d25eb8f8be911f3928237e3878e505be36bb6852903dff1e77be22ccf3b3e1c8658a5b92c816c6f3f0306a196ec62d5a39ecf36528f18e639b26351b6bc9d1230482e5d8e2c9561de5204d98487364c50f7236c503db3665876f6c04f7f23d1606d36120f62e3fd3de4a7525678e3748905d5a14fa840297c7dda43e13e18fad1453d5c24ddcb4bef61ab494d4f620201993b1b20f339ec6409474a6f104edbe42e0df14633c9a40352f773600b335e6a7ec6f0b0511c6d55fb484696d3b3e2fa4346d26446cba1e2e7ae1de5df058e7c2b52a1d6bb2d2daff1c73a4718541d6b9882891870b3f17442bdc250de45202f7314cd6c3670c3061b9ea658f21e1c362d622316f158968f118a72bef80745a9159f3c77985ecd9bca98ccd482b96ab39701053e30fb4d6d5efc4ba8f33fe18b0df2ab24ad5b2169ed8569cc264f91481fe3accc27448231088f05d996f562fd1950e43313193d23338fc134753ef5127d57161597f99598d546e290123ac1c3df0f5ded6cad9f523e71f7d5ce0b7d41f0d2fc6f911bd6b578f156b7b85dcf90d423e1cb854bb18ddc6801fc30ce76df9c27c1d5d91e06e9209d061b43449d0abdf346c644db465ee610d3ed406af49cce6119a1ec2ac9846350367f99e7255e5be602f0cce16439f3c5beb7276f96f2f9dffc88da05c8b197b90bf4ca75be6d767dc10d1ff883728fcaecbde596ed9b01a456e417fb9ded7431323b19a6fa8f6fd0ec596410a887037ff6a0feb81ce0dffdfdec39a5b04ec962e87bc038e4436b2a8ac00e51bca0976eef42211107422ff30034cc62355fcf65b51325fcd25861ee487c695b51ba4be9b3c47ab47388e9a8dcce4507acbf5b16164f85d12161c8038019f589e0117a02161dcf2fc01968983bde59dceda258e008e337a3af1c1127258b8877558918caa71355ca8d17be32b10d61e72a0391b6ed88327d1f6d030877fe893f777de0e0ec863f15a50b40d003a9a941182a0639674bd0b4f4f9716fb1c2e115a6465fa731759793b86a9bb70ae0bb18d0c5e53c120d192a71302d15fff0c2c76ad1f9e1281c42a659ed7b67c4f4d7c3fcd56a022bf8f043006c61f254a80184519935bbc805eefba13ed54234322506f28f362065d6a68c35473280d4b8196754a11604a901cfdea47dc6f442fa73ffc6fe5e59bece8741407a57fd5f36a5906951fe75bea732413200bb85053ad500ea6245bea8abccbf5e8927261f752c12a2765827ea9908f084b862ce41b11443f73f0ec6aa095db1bbce0b14bce8397b45da28c2ac2f33c8ecce00bdf34cd00aa95d181ea33e08b7c8a768a365c4279e0b5d9352eb62c628909cc4191e0ff81fd84cc4c371ffc000d8841a9ebe70574993579cfd0e35574ef6e4cc6edf42deb8cb1e38b55fead366238d8d7d83902c6da5ad2ee63843db90090d57eeebd90ec9b08a6ffffd6c60e0b017e0c22d08cf1e22e2e63df06b62e5e0cfcd7b9441d2ca09b4e96c3b61ed1459fc24d83301148940e554f4d78c453c7e2f262f09aebee218ec5a22f874768e4c1afa870262f2f67155c94b17a36475dd421eaee27632427ede8330b1d74d2cd1a2d0a7de694a7d87ede13b5ea664e89f3d872512581adc606cd841a2abd2ed34efe3ec8e4f03d1e38fadfd08cb1b65f4eac10c48894b6fda1440ddd5d22b06214dbd483a5da821c4f447cce31df27c40b14f4471abccd35e6673aaa17133e78a589f45331399d930534edae0402e811a411d557c184c44ebec37a4e146d8076a070cf1f967ba3341e4e8e0c8b4b4617ee2bf3e8ae478567137641b6f6bc1fafd0d15cfed74198646906b5b853c8206ebf1e7e46bd74ae848281c4d89c02057de523e7e3e75567811685c1be1d2f5a57ff5b32fb8ef19e44f25226701f1b6b66cac452620cb7529b411cd833e3b1ad07bc781be7cda26eeccdb57f44308e765e13f357356e3fb83dcb4994b369fd3ee6aa6e405da03703c0dbd0e47110533992fd2be5bde2cbf6f7e777082427189766afbe426e6014ec9d041e96bcc900d5bdf4be72142ed1ab4c1d88afe8408145e06ddd3c2820f5d928309b3ef77afdd500568d76eb99ebd6f4ab78d5e43aa61b8a0ec27e1f6475691183e19f9e43ef1e94f2656da3eb693921f13aee4d4140fc4d56ac5ff3ec97163915a028c1ed16c7d08e6862503b18283b30489507e35945197c22733dee593f1d20a53dc5a463d5b8a058fa555c220de3fe5252a83e10f163babc01ec11c2e2197491ebb06b43919320c7237c0e55cbf927e0b5aaadd81c0c4c49a30ff2f9426b32311cbf09e1bcbe75c89aec74cf848d1b2194760a6edc734aebac9b429ae0438c620d4ad23b42deb8f7f1806ee8db02261b1e6d35742b1c85602c8099c0ed85cd89969f7b9ffd5906483e788d9f8c01e998c000f3005ea9efef9ca977530999344093bd6d234e500d784b22ccc8de58065451196dc977d8e8c8deac7d47b1ddc23f82f09159796a883d8b530fa193a20c53c22c5ffa3e5d411329f6489266ea75ff184b7ff1b301293b3ff5de6eb3658d826e6aa114eac2e572bf7d0d085e1e927af2bc1b21d1eaa37075a4778bec44521e5341c89c7589ca85b0cbda1060bca778906705be8791e479cb9867b4f6f06802ae76fba15b8fbf14bfd1b393bcef6f7997ac66bd87fcdda9387a519b5dbb61f7f970772a406bdce40f48511344070ed00a20880fdcc19732df83f0ba1bf6c94e201a7a2c833239ebf380720d3ddd644c8b3d78a0eae5d0d7d22937fc5c3e9295cd7a412897b9c1123ffc1aec8c49c768ed008f795e62ad47250ad92f90d4d2c903fdba9c19f8ce5dd5eb69c099ba28eac5717c975c7504ce86b168744f9944ca63ba1938c02918ca9bfb77fc4e97c093108b3d35b8330bc32758c7f3ee746315e758ccb5e220de655350eba786e400bc89e958862541506c6e4958d3fd0987686f2d6236abd0bd118fea29e09d6025f1ac9730e72177ef28399c25134261f785b5e1b7f20bde4e347da83f8dfe0c9080d48b9dc371d9e81174faf9ebcefd3804718b05bbd6f41f40e726d390b87e60afbdadd45cd2f0c4d7495b6a6f074259518838317973877d991ef156d2d39098b50e8b6e1bbfb4096d5801d64e0655be19f7390594ad273f83e7c5128a579e6faf44c76bfdd70d726c0ea4cb9f69976b5beee76f5bec995e49d26795c9731d36d013d628fd7ac2f0bfde44c434d2bfc547480ae597b3e1e5214f108255fa0d22eb69df4a1691c6614743298af40e283090a4039b8bdf9822a86caeabd18d12c506d3448c1b15efa929881029ca0f8d4861d5f7a2d06f0e1a2f18db910ab1bf391a690086eb91341e38649f8bbd8299c3e81e0c816f34629b191e722e9bfdb8610fd135d36b0335198e2a4c06e2f37b9efeeb85a07896674c979e720347fa61782ac09cacd7967a7484e55ea2bfd50a9cb3e1863a59e6ad867593237bdb2baebaf9c88df6b91b5801393186a64dd33ba3472c0a3cb99b7ed8c93f1b95832d75df45c65df69d818ad0680e39606045c996691fcbf1bc69b3f171a46fc81fa66877758c76f73c1d83cc3dddd321b1c03c6b56fa9e02bc3fa4bef43050420202370c5074c0abd08d94c9b75a871cee948ca2e055ab07e1c062e8a1435e06073dc5911d91237ce9fe8cdf47a345de4ca65febc8f48de09603e44d7f14e1e0c37428680dd3428f0f4563dc90e0714fe0a40689acc472394704b9feba33ec9bca45533cd4635b3249a24025c271e6661d0060de48689debb58be19a6cef15f39dd6f42828d8440bc5b9e6d3aae0f745f05181c9d74832c358b8438bf46f0f4f302ffafc395b226d5bd1c5d5b011c846be3d133470db70800297699c8ee17104945a73cc77c2c9cdae9383904dc428f76480558a40c0dc19cd9190dbb78ed1da18eea6694406f428c4ad3e8b4add1ececf520fc9ffbdbde06ac39b2ceb2f24b6054268f179d258a9b260490216f6169e5867c050f3898a555907bd18b18c6d11748cf43bf7b7b1a8eeef32cee7560eed7faea9218ff4f08f69835cd6b1af390f4159ed300faf2d8b5b5904a42bb3e926b383496fb018c8da32e13a952bb172d749edc6e1e38c1e88db1d75f141d3bed099f275e3d0e7fed711d1c4e882612dc7f33fc567a19ce4a901a5350b128d08eff31b1f660e108b146ac3d415ec86820207bf9a9c32d7df1e648cc68bf093faccc1c9e3e31a45ec81a1ce6ceef43240543476ae1305a6beeb8337a0e7c6dae864081fe962b7fd63326415e01b2ebfc770f1c5f8704add7da3a0380625c1162191af137b6a5ada314e0f7233b41e6e58f9ea7e1cf9927da4770bc2d4c45e71d5728930f5a02d740f124521490231229b99cbce370627517017e6d3d82526faecdd573e135d5bc3b96e1292e0b473471e2e93e8162eadf6fc2caced5f9aa494d0eadf8dc5442a9da1d9caf007f8e47c05eb38fa8f99e480c49957c7bae1efb2ce516bd690b7379e83f0493df617449fd9c61e6f9393750464e8d59eb10c8bc84"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfc6) 290.470669ms ago: executing program 4 (id=2352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "00f6ff00", "d5a1d50399459b68"}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x4000000) 290.163687ms ago: executing program 3 (id=2353): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2800508005000200010000000800030001ac0f00090001007ee5d52ffd00000008000700"], 0x68}}, 0x20000000) 228.59441ms ago: executing program 1 (id=2354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$inet6(0xa, 0x803, 0x6) syz_emit_vhci(0x0, 0x22) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r1, r0}) 228.198895ms ago: executing program 3 (id=2355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff88, 0x0, 0x1, 0x0, 0x0, 0x2f78b6b16f6e6574}, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1008c847}, 0x8808) 220.342949ms ago: executing program 1 (id=2356): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/249, 0xf9}], 0x1, &(0x7f0000000240)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x3}, 0xffffffffffffff97) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) (async, rerun: 32) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) (rerun: 32) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x200000000000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 159.172992ms ago: executing program 4 (id=2357): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES16=r0, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e0000000000000000180002800800020020000000040001002d7dc200"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 156.14746ms ago: executing program 4 (id=2358): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ff0000000000003ced1f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a358c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x0, 0x101, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0xee01, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 99.771091ms ago: executing program 3 (id=2359): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private=0xa050100, @dev={0xac, 0x14, 0x14, 0x34}}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x51, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r2 = io_uring_setup(0x6f95, &(0x7f0000001240)={0x0, 0x2dfc, 0x2, 0x0, 0x20000002}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$unix(r4, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="e44d8e", 0x3}], 0x1, 0x0, 0x0, 0x20000080}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="828c06", 0x3}], 0x1, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="eb32", 0x2}], 0x1, 0x0, 0x0, 0xc0}}], 0x3, 0x80cc) recvmsg$qrtr(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1, 0x0, 0x0, 0x50}, 0x1c, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0xfffffffffffffffc, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 99.284253ms ago: executing program 4 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf90, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e2, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfc6) 168.715µs ago: executing program 1 (id=2361): mmap(&(0x7f0000741000/0x4000)=nil, 0x4000, 0x3000001, 0x40010, 0xffffffffffffffff, 0x42772000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010000305000000000004000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaabb0000080003000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x1d, &(0x7f00000008c0)=0x1, 0x4) 0s ago: executing program 1 (id=2362): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) gettid() ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000140)={@my=0x1, 0x1}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000080), 0x10) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=2363): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/18, 0x12, 0x9, 0x7}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000100)={&(0x7f0000000380)=""/207, 0xcf, 0x0, 0x8}) ioctl$COMEDI_BUFINFO(r6, 0xc02c640e, &(0x7f0000000180)={0x8001, 0x4, 0x8, 0x82, 0x1, 0x800, 0x7}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x10010, r3, 0x10000000) r9 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x201, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r12}}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="7968ed572559af28cfca6d080950cdaafe219e46dad68592230a23f14dec3ab0e85abf19cba159aa5436500a9eb539ff9e8d9df66bd412e12421af72b89501a4e020cda26dc115eedf0738dd1a28086b57cbdec3a1be7958c7ab6401fc21d0ac22389fafdc9f33ae", 0x68, 0x40000, 0x1, {0x0, r12}}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYBLOB="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", @ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32=r0, @ANYRES16=r5, @ANYRES8=r5], 0x0) kernel console output (not intermixed with test programs): em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 205.862070][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 205.862088][ T40] audit: type=1400 audit(1756441041.940:785): avc: denied { name_bind } for pid=11251 comm="syz.3.1612" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 205.903677][T11254] Invalid option length (722) for dns_resolver key [ 206.062469][T11262] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1615'. [ 206.253259][ T56] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 206.256103][ T56] em28xx 6-1:0.0: board has no eeprom [ 206.318443][ T56] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 206.321118][ T56] em28xx 6-1:0.0: dvb set to bulk mode. [ 206.323326][ T6160] em28xx 6-1:0.0: Binding DVB extension [ 206.330529][ T56] usb 6-1: USB disconnect, device number 21 [ 206.333077][ T56] em28xx 6-1:0.0: Disconnecting em28xx [ 206.359894][ T6160] em28xx 6-1:0.0: Registering input extension [ 206.364549][ T56] em28xx 6-1:0.0: Closing input extension [ 206.378522][ T56] em28xx 6-1:0.0: Freeing device [ 206.378971][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1620'. [ 206.424636][T11276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1621'. [ 206.962812][T11285] trusted_key: encrypted_key: key user:syz not found [ 207.104054][T11289] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1625'. [ 207.326636][ T5977] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [] on [ 207.958371][ T56] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 208.108390][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 208.111999][ T56] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 208.115224][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.119129][ T56] usb 5-1: config 0 has no interface number 1 [ 208.124365][ T56] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 208.127814][ T56] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 208.131099][ T56] usb 5-1: Product: syz [ 208.132675][ T56] usb 5-1: Manufacturer: syz [ 208.134480][ T56] usb 5-1: SerialNumber: syz [ 208.138748][ T56] usb 5-1: config 0 descriptor?? [ 208.515753][ T56] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 208.518818][ T56] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 208.525481][ T56] usb 5-1: USB disconnect, device number 25 [ 208.662740][ T141] hid_parser_main: 22 callbacks suppressed [ 208.662755][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.668848][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.671886][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.674543][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.677712][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.680683][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.683515][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.686039][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.688733][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.691383][ T141] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.721442][ T141] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [] on [ 209.105577][ T40] audit: type=1400 audit(1756441045.180:786): avc: denied { mounton } for pid=11348 comm="syz.0.1644" path="/proc/983/cgroup" dev="proc" ino=36688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 209.117030][ T40] audit: type=1400 audit(1756441045.180:787): avc: denied { remount } for pid=11348 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 209.248384][ T141] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 209.726594][ T141] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 209.738426][ T141] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.749195][ T141] usb 9-1: config 0 descriptor?? [ 209.815395][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1647'. [ 209.819624][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'. [ 210.137417][T11376] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1656'. [ 210.173116][T11378] netlink: 'syz.1.1657': attribute type 4 has an invalid length. [ 210.361348][ T141] usb 9-1: Cannot set autoneg [ 210.363066][ T141] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 210.368647][ T141] usb 9-1: USB disconnect, device number 13 [ 210.515074][ T40] audit: type=1400 audit(1756441046.590:788): avc: denied { shutdown } for pid=11383 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.912198][T11394] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1665'. [ 211.041017][T11400] tipc: Started in network mode [ 211.043353][T11400] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 211.051138][T11400] tipc: Enabled bearer , priority 10 [ 211.330356][ T6160] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 211.478390][ T6160] usb 6-1: Using ep0 maxpacket: 16 [ 211.482215][ T6160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.490425][ T6160] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 211.494233][ T6160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.496895][ T6160] usb 6-1: Product: syz [ 211.498489][ T6160] usb 6-1: Manufacturer: syz [ 211.500005][ T6160] usb 6-1: SerialNumber: syz [ 211.503435][ T6160] usb 6-1: config 0 descriptor?? [ 211.512429][ T6160] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 211.515689][ T6160] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 211.878601][ T56] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 212.042030][ T56] usb 9-1: config 0 has no interfaces? [ 212.048472][ T56] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 212.052460][ T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.055900][ T56] usb 9-1: Product: syz [ 212.058013][ T56] usb 9-1: Manufacturer: syz [ 212.060760][ T56] usb 9-1: SerialNumber: syz [ 212.066616][ T56] usb 9-1: config 0 descriptor?? [ 212.110944][ T6160] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 212.180727][ T56] tipc: Node number set to 4269801488 [ 212.294919][T11406] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.355613][ T6039] usb 9-1: USB disconnect, device number 14 [ 212.523280][ T6160] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 212.527086][ T6160] em28xx 6-1:0.0: board has no eeprom [ 212.589006][T11424] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 212.592233][T11424] binder: 11423:11424 ioctl 4018620d 200000000100 returned -1 [ 212.598763][ T6160] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 212.602256][ T6160] em28xx 6-1:0.0: dvb set to bulk mode. [ 212.608771][ T2298] em28xx 6-1:0.0: Binding DVB extension [ 212.614199][ T6160] usb 6-1: USB disconnect, device number 22 [ 212.624849][ T6160] em28xx 6-1:0.0: Disconnecting em28xx [ 212.629892][T11427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1675'. [ 212.638326][ T56] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 212.655697][ T2298] em28xx 6-1:0.0: Registering input extension [ 212.659649][ T6160] em28xx 6-1:0.0: Closing input extension [ 212.675392][ T6160] em28xx 6-1:0.0: Freeing device [ 212.793532][ T56] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.797887][ T56] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 212.801676][ T56] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.806876][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 212.811652][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 212.822499][ T56] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.826059][ T56] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.830204][ T56] usb 8-1: Product: syz [ 212.831694][ T56] usb 8-1: Manufacturer: syz [ 212.877167][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 212.879220][ T56] cdc_wdm 8-1:1.0: skipping garbage [ 212.890784][ T56] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 212.893586][ T56] cdc_wdm 8-1:1.0: Unknown control protocol [ 212.959836][T11437] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1679'. [ 213.098483][ C3] cdc_wdm 8-1:1.0: unknown notification 116 received: index 13617 len 0 [ 213.206560][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 213.252656][T11452] bond0: (slave syz_tun): Releasing backup interface [ 213.303362][ T141] usb 8-1: USB disconnect, device number 20 [ 214.028952][ T842] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 214.168342][ T6039] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 214.189555][ T842] usb 5-1: config 0 has no interfaces? [ 214.193253][ T842] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 214.196626][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.200223][ T842] usb 5-1: Product: syz [ 214.201636][ T842] usb 5-1: Manufacturer: syz [ 214.203172][ T842] usb 5-1: SerialNumber: syz [ 214.207558][ T842] usb 5-1: config 0 descriptor?? [ 214.318410][ T6039] usb 8-1: Using ep0 maxpacket: 16 [ 214.323730][ T6039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 214.330677][ T6039] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.335272][ T6039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.338958][ T6039] usb 8-1: Product: syz [ 214.341049][ T6039] usb 8-1: Manufacturer: syz [ 214.343409][ T6039] usb 8-1: SerialNumber: syz [ 214.347982][ T6039] usb 8-1: config 0 descriptor?? [ 214.353217][ T6039] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.357492][ T6039] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 214.473506][ T842] usb 5-1: USB disconnect, device number 26 [ 214.590198][ T141] hid_parser_main: 6 callbacks suppressed [ 214.590224][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.595987][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.599387][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.603210][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.606730][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.611125][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.614380][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.617645][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.621081][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.624251][ T141] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 214.639856][ T141] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [] on [ 214.688750][T11486] fido_id[11486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.760097][T11490] syzkaller0: entered promiscuous mode [ 214.762533][T11490] syzkaller0: entered allmulticast mode [ 214.766847][ T8966] syzkaller0: tun_net_xmit 48 [ 214.960256][ T6039] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 215.008637][T11494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1695'. [ 215.138359][ T56] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 215.321762][ T56] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 215.326096][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.333429][ T56] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 215.337443][ T56] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 215.341838][ T56] usb 6-1: Manufacturer: syz [ 215.346364][ T56] usb 6-1: config 0 descriptor?? [ 215.381048][ T6039] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 215.383915][ T6039] em28xx 8-1:0.0: board has no eeprom [ 215.418383][ T56] rc_core: IR keymap rc-hauppauge not found [ 215.420974][ T56] Registered IR keymap rc-empty [ 215.426401][ T56] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 215.439833][ T56] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 215.452064][ T6039] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 215.455767][ T6039] em28xx 8-1:0.0: dvb set to bulk mode. [ 215.473037][ T842] em28xx 8-1:0.0: Binding DVB extension [ 215.492427][ T6039] usb 8-1: USB disconnect, device number 21 [ 215.510890][ T6039] em28xx 8-1:0.0: Disconnecting em28xx [ 215.554442][ T842] em28xx 8-1:0.0: Registering input extension [ 215.556709][ T6039] em28xx 8-1:0.0: Closing input extension [ 215.564666][ T6039] em28xx 8-1:0.0: Freeing device [ 216.592428][ T40] audit: type=1400 audit(1756441052.670:789): avc: denied { ioctl } for pid=11505 comm="syz.0.1697" path="socket:[38770]" dev="sockfs" ino=38770 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 217.198329][ T56] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 217.349984][ T56] usb 8-1: config 0 has no interfaces? [ 217.353712][ T56] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 217.356614][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.359366][ T56] usb 8-1: Product: syz [ 217.360789][ T56] usb 8-1: Manufacturer: syz [ 217.362321][ T56] usb 8-1: SerialNumber: syz [ 217.365729][ T56] usb 8-1: config 0 descriptor?? [ 217.666502][ T5977] usb 8-1: USB disconnect, device number 22 [ 217.934254][ T141] usb 6-1: USB disconnect, device number 23 [ 218.576527][ T55] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 218.730270][ T55] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.733170][ T55] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.736586][ T55] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.739552][ T55] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 218.742952][ T55] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 218.747740][ T55] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.750991][ T55] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.753634][ T55] usb 8-1: Product: syz [ 218.754955][ T55] usb 8-1: Manufacturer: syz [ 218.761549][ T55] cdc_wdm 8-1:1.0: skipping garbage [ 218.763276][ T55] cdc_wdm 8-1:1.0: skipping garbage [ 218.767673][ T55] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 218.770615][ T55] cdc_wdm 8-1:1.0: Unknown control protocol [ 219.208381][ T6039] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 219.335777][ T55] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [] on [ 219.369917][ T6039] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 219.372987][ T6039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.377390][ T6039] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.380345][ T6039] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.383002][ T6039] usb 6-1: Manufacturer: syz [ 219.388381][ T6039] usb 6-1: config 0 descriptor?? [ 219.448560][ T6039] rc_core: IR keymap rc-hauppauge not found [ 219.451737][ T6039] Registered IR keymap rc-empty [ 219.459096][ T6039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 219.464599][ T6039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 219.778455][ T2298] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 219.929839][ T2298] usb 5-1: config 0 has no interfaces? [ 219.934304][ T2298] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 219.938358][ T2298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.941612][ T2298] usb 5-1: Product: syz [ 219.943138][ T2298] usb 5-1: Manufacturer: syz [ 219.944818][ T2298] usb 5-1: SerialNumber: syz [ 219.948090][ T2298] usb 5-1: config 0 descriptor?? [ 220.215298][ T2298] usb 5-1: USB disconnect, device number 27 [ 221.220646][ T2298] usb 8-1: USB disconnect, device number 23 [ 222.161233][T11607] tipc: Started in network mode [ 222.163375][T11607] tipc: Node identity 2e03ecf3a17c, cluster identity 4711 [ 222.166203][T11607] tipc: Enabled bearer , priority 0 [ 222.170990][T11607] syzkaller0: entered promiscuous mode [ 222.173289][ T842] usb 6-1: USB disconnect, device number 24 [ 222.178297][T11607] syzkaller0: entered allmulticast mode [ 222.181288][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 222.223037][T11607] tipc: Resetting bearer [ 222.234793][T11606] tipc: Resetting bearer [ 222.273606][T11606] tipc: Disabling bearer [ 223.321201][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1735'. [ 223.358578][ T5976] Bluetooth: hci1: Malformed LE Event: 0x1b [ 223.370147][T11635] syzkaller0: entered promiscuous mode [ 223.372102][T11635] syzkaller0: entered allmulticast mode [ 223.375073][ T8968] syzkaller0: tun_net_xmit 48 [ 223.379013][T11635] syzkaller0: create flow: hash 1941880324 index 1 [ 223.424846][T11635] syzkaller0: delete flow: hash 1941880324 index 1 [ 223.438120][T11629] usb 1-1: USB disconnect, device number 2 [ 223.578553][ T2298] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 223.742369][ T2298] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 223.746416][ T2298] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.752933][ T2298] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 223.757438][ T2298] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 223.762040][ T2298] usb 9-1: Manufacturer: syz [ 223.767505][ T2298] usb 9-1: config 0 descriptor?? [ 223.818642][ T2298] rc_core: IR keymap rc-hauppauge not found [ 223.821448][ T2298] Registered IR keymap rc-empty [ 223.824395][ T2298] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 223.832719][ T2298] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input28 [ 225.472818][T11667] SELinux: policydb magic number 0xf97cff00 does not match expected magic number 0xf97cff8c [ 225.476846][T11667] SELinux: failed to load policy [ 225.480111][T11667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1746'. [ 225.705719][T11689] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 225.880001][T11700] syzkaller0: entered promiscuous mode [ 225.882030][T11700] syzkaller0: entered allmulticast mode [ 225.885058][ T8964] syzkaller0: tun_net_xmit 48 [ 225.888685][T11700] syzkaller0: create flow: hash 1941880324 index 1 [ 225.922033][T11700] syzkaller0: delete flow: hash 1941880324 index 1 [ 225.978542][ T56] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 226.150022][ T56] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 226.153236][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.161884][ T56] usb 6-1: config 0 descriptor?? [ 226.588377][ T56] usbhid 6-1:0.0: can't add hid device: -71 [ 226.590468][ T56] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 226.598441][ T56] usb 6-1: USB disconnect, device number 25 [ 227.387664][ T5976] Bluetooth: hci2: Malformed LE Event: 0x1b [ 227.675389][ T56] usb 9-1: USB disconnect, device number 15 [ 227.786933][T11736] netlink: 'syz.4.1765': attribute type 10 has an invalid length. [ 227.837354][ T55] hid_parser_main: 22 callbacks suppressed [ 227.837374][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.848049][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.853516][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.857378][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.864563][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.868086][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.872759][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.878121][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.881123][T11750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1770'. [ 227.882039][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.887811][ T55] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 227.903606][ T55] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [] on [ 227.908106][ T5976] Bluetooth: hci3: Malformed LE Event: 0x1b [ 227.943607][T11753] fido_id[11753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.960133][T11757] syz.0.1773: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 227.966436][T11757] CPU: 3 UID: 0 PID: 11757 Comm: syz.0.1773 Not tainted syzkaller #0 PREEMPT(full) [ 227.966459][T11757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.966470][T11757] Call Trace: [ 227.966476][T11757] [ 227.966484][T11757] dump_stack_lvl+0x16c/0x1f0 [ 227.966512][T11757] warn_alloc+0x248/0x3a0 [ 227.966532][T11757] ? __pfx_warn_alloc+0x10/0x10 [ 227.966548][T11757] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.966574][T11757] ? kasan_save_stack+0x42/0x60 [ 227.966590][T11757] ? kasan_save_stack+0x33/0x60 [ 227.966606][T11757] ? kasan_save_track+0x14/0x30 [ 227.966621][T11757] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 227.966645][T11757] ? __vb2_queue_alloc+0x8c6/0x1280 [ 227.966665][T11757] ? vb2_core_create_bufs+0x559/0xab0 [ 227.966689][T11757] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 227.966711][T11757] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 227.966746][T11757] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 227.966776][T11757] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 227.966808][T11757] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 227.966832][T11757] vmalloc_user_noprof+0x9e/0xe0 [ 227.966854][T11757] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 227.966879][T11757] vb2_vmalloc_alloc+0x135/0x3f0 [ 227.966904][T11757] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 227.966927][T11757] __vb2_queue_alloc+0x8c6/0x1280 [ 227.966961][T11757] vb2_core_create_bufs+0x559/0xab0 [ 227.966988][T11757] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 227.967018][T11757] ? __mutex_trylock_common+0xe9/0x250 [ 227.967048][T11757] vb2_create_bufs+0x5e8/0x840 [ 227.967074][T11757] ? __pfx_vb2_create_bufs+0x10/0x10 [ 227.967094][T11757] ? v4l_sanitize_colorspace+0x213/0x400 [ 227.967120][T11757] vb2_ioctl_create_bufs+0x244/0x3e0 [ 227.967142][T11757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.967165][T11757] vidioc_create_bufs+0x7d/0xf0 [ 227.967186][T11757] v4l_create_bufs+0x159/0x270 [ 227.967214][T11757] __video_do_ioctl+0xb3d/0xfc0 [ 227.967235][T11757] ? __might_fault+0xe3/0x190 [ 227.967254][T11757] ? __pfx___video_do_ioctl+0x10/0x10 [ 227.967280][T11757] video_usercopy+0x4cd/0x1720 [ 227.967299][T11757] ? __pfx___video_do_ioctl+0x10/0x10 [ 227.967316][T11757] ? selinux_kernel_read_file+0x60/0x130 [ 227.967341][T11757] ? __pfx_video_usercopy+0x10/0x10 [ 227.967376][T11757] v4l2_ioctl+0x1ba/0x250 [ 227.967391][T11757] ? __pfx_v4l2_ioctl+0x10/0x10 [ 227.967417][T11757] __x64_sys_ioctl+0x18b/0x210 [ 227.967445][T11757] do_syscall_64+0xcd/0x4c0 [ 227.967467][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.967485][T11757] RIP: 0033:0x7f71f8f8ebe9 [ 227.967499][T11757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.967516][T11757] RSP: 002b:00007f71f9e6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.967532][T11757] RAX: ffffffffffffffda RBX: 00007f71f91b5fa0 RCX: 00007f71f8f8ebe9 [ 227.967544][T11757] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003 [ 227.967554][T11757] RBP: 00007f71f9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 227.967563][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.967573][T11757] R13: 00007f71f91b6038 R14: 00007f71f91b5fa0 R15: 00007ffc8fd0ead8 [ 227.967596][T11757] [ 227.967604][T11757] Mem-Info: [ 228.002782][T11763] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 228.004383][T11757] active_anon:10806 inactive_anon:0 isolated_anon:0 [ 228.004383][T11757] active_file:16684 inactive_file:41190 isolated_file:0 [ 228.004383][T11757] unevictable:1768 dirty:288 writeback:0 [ 228.004383][T11757] slab_reclaimable:7932 slab_unreclaimable:75124 [ 228.004383][T11757] mapped:25706 shmem:2399 pagetables:1670 [ 228.004383][T11757] sec_pagetables:307 bounce:0 [ 228.004383][T11757] kernel_misc_reclaimable:0 [ 228.004383][T11757] free:441719 free_pcp:18956 free_cma:0 [ 228.113977][T11757] Node 0 active_anon:43472kB inactive_anon:0kB active_file:66736kB inactive_file:164364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102632kB dirty:1144kB writeback:0kB shmem:6060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15408kB pagetables:6560kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 228.127198][T11757] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.137148][T11757] Node 0 DMA free:15296kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 228.146262][T11757] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 228.148322][T11757] Node 0 DMA32 free:158012kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43472kB inactive_anon:0kB active_file:66736kB inactive_file:164364kB unevictable:3536kB writepending:1144kB present:2080628kB managed:1263488kB mlocked:0kB bounce:0kB free_pcp:48396kB local_pcp:10048kB free_cma:0kB [ 228.159929][T11757] lowmem_reserve[]: 0 0 0 0 0 [ 228.161638][T11757] Node 1 Normal free:1593568kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:27168kB local_pcp:4208kB free_cma:0kB [ 228.175425][T11757] lowmem_reserve[]: 0 0 0 0 0 [ 228.177016][T11757] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 228.182262][T11757] Node 0 DMA32: 1458*4kB (UME) 751*8kB (UME) 428*16kB (UME) 517*32kB (UME) 187*64kB (UME) 128*128kB (UME) 22*256kB (UME) 30*512kB (UME) 20*1024kB (UME) 16*2048kB (UME) 5*4096kB (M) = 158304kB [ 228.189288][T11757] Node 1 Normal: 9*4kB (UME) 16*8kB (UME) 18*16kB (UME) 13*32kB (ME) 34*64kB (UME) 10*128kB (UME) 8*256kB (UME) 10*512kB (UME) 7*1024kB (UM) 7*2048kB (UM) 381*4096kB (UM) = 1593572kB [ 228.195976][T11757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.200270][T11757] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 228.203797][T11757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.206772][T11757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 228.210618][T11757] 60295 total pagecache pages [ 228.212893][T11757] 0 pages in swap cache [ 228.214430][T11757] Free swap = 124996kB [ 228.216145][T11757] Total swap = 124996kB [ 228.217592][T11757] 1048443 pages RAM [ 228.219747][T11757] 0 pages HighMem/MovableOnly [ 228.222425][T11757] 283258 pages reserved [ 228.224354][T11757] 0 pages cma reserved [ 228.325028][T11780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1781'. [ 228.425037][ T56] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [] on [ 228.470663][T11786] fido_id[11786]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.534507][ T40] audit: type=1400 audit(1756441064.610:790): avc: denied { map } for pid=11789 comm="syz.0.1786" path="/383/file0/net_prio.prioidx" dev="9p" ino=35913964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.727443][T11803] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 228.746947][T11805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1791'. [ 228.818907][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 228.828806][T11813] can0: slcan on ptm0. [ 228.857464][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1795'. [ 228.861337][T11815] FAULT_INJECTION: forcing a failure. [ 228.861337][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 228.866774][T11815] CPU: 3 UID: 0 PID: 11815 Comm: syz.3.1795 Not tainted syzkaller #0 PREEMPT(full) [ 228.866799][T11815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.866809][T11815] Call Trace: [ 228.866815][T11815] [ 228.866822][T11815] dump_stack_lvl+0x16c/0x1f0 [ 228.866869][T11815] should_fail_ex+0x512/0x640 [ 228.866894][T11815] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 228.866921][T11815] should_failslab+0xc2/0x120 [ 228.866954][T11815] __kmalloc_cache_noprof+0x6a/0x3e0 [ 228.866980][T11815] ? ipcomp_init_state+0xb4/0x330 [ 228.867003][T11815] ipcomp_init_state+0xb4/0x330 [ 228.867023][T11815] ipcomp4_init_state+0xca/0xa90 [ 228.867044][T11815] __xfrm_init_state+0x6fe/0x1c10 [ 228.867063][T11815] ? try_to_merge_one_page+0x572/0x21a0 [ 228.867091][T11815] xfrm_add_sa+0x2ec8/0x5c50 [ 228.867113][T11815] ? cap_capable+0xb3/0x250 [ 228.867133][T11815] ? __pfx_xfrm_add_sa+0x10/0x10 [ 228.867155][T11815] ? __nla_parse+0x40/0x60 [ 228.867176][T11815] ? __pfx_xfrm_add_sa+0x10/0x10 [ 228.867193][T11815] xfrm_user_rcv_msg+0x58e/0xc00 [ 228.867223][T11815] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 228.867242][T11815] ? stack_trace_save+0x8e/0xc0 [ 228.867266][T11815] ? __pfx_stack_trace_save+0x10/0x10 [ 228.867311][T11815] ? __pfx___might_resched+0x10/0x10 [ 228.867332][T11815] ? rcu_is_watching+0x12/0xc0 [ 228.867353][T11815] ? trace_contention_end+0xdd/0x130 [ 228.867370][T11815] netlink_rcv_skb+0x155/0x420 [ 228.867390][T11815] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 228.867407][T11815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.867424][T11815] ? __pfx___mutex_lock+0x10/0x10 [ 228.867467][T11815] xfrm_netlink_rcv+0x71/0x90 [ 228.867491][T11815] netlink_unicast+0x5aa/0x870 [ 228.867512][T11815] ? __pfx_netlink_unicast+0x10/0x10 [ 228.867531][T11815] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 228.867556][T11815] netlink_sendmsg+0x8d1/0xdd0 [ 228.867580][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.867608][T11815] ____sys_sendmsg+0xa98/0xc70 [ 228.867632][T11815] ? copy_msghdr_from_user+0x10a/0x160 [ 228.867650][T11815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.867683][T11815] ___sys_sendmsg+0x134/0x1d0 [ 228.867704][T11815] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.867749][T11815] __sys_sendmsg+0x16d/0x220 [ 228.867769][T11815] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.867805][T11815] do_syscall_64+0xcd/0x4c0 [ 228.867827][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.867844][T11815] RIP: 0033:0x7f975dd8ebe9 [ 228.867860][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.867876][T11815] RSP: 002b:00007f975eb8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.867892][T11815] RAX: ffffffffffffffda RBX: 00007f975dfb5fa0 RCX: 00007f975dd8ebe9 [ 228.867904][T11815] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 228.867914][T11815] RBP: 00007f975eb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 228.867925][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.867935][T11815] R13: 00007f975dfb6038 R14: 00007f975dfb5fa0 R15: 00007fffa2897eb8 [ 228.867959][T11815] [ 229.008787][T11812] can0 (unregistered): slcan off ptm0. [ 229.209684][T11836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1801'. [ 229.255129][T11840] netlink: 'syz.1.1803': attribute type 29 has an invalid length. [ 229.285443][ T40] audit: type=1326 audit(1756441065.360:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.294103][ T40] audit: type=1326 audit(1756441065.360:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.302983][ T40] audit: type=1326 audit(1756441065.360:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.311936][ T40] audit: type=1326 audit(1756441065.360:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.321062][ T40] audit: type=1326 audit(1756441065.360:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.332087][ T40] audit: type=1326 audit(1756441065.370:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.342063][ T40] audit: type=1326 audit(1756441065.370:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.352030][ T40] audit: type=1326 audit(1756441065.370:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.358142][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 229.362024][ T40] audit: type=1326 audit(1756441065.370:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.3.1805" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f975dd8ebe9 code=0x7ffc0000 [ 229.471383][ T56] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 229.480180][ T5976] Bluetooth: hci1: Malformed LE Event: 0x1b [ 229.586158][ T6039] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [] on [ 229.622165][ T56] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.624928][ T56] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.629131][ T56] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.632510][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.635976][ T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.641544][ T56] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.644481][ T56] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.646993][ T56] usb 9-1: Product: syz [ 229.648542][ T56] usb 9-1: Manufacturer: syz [ 229.654845][ T56] cdc_wdm 9-1:1.0: skipping garbage [ 229.657249][ T56] cdc_wdm 9-1:1.0: skipping garbage [ 229.660896][ T56] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 229.663185][ T56] cdc_wdm 9-1:1.0: Unknown control protocol [ 229.736346][T11875] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 229.772551][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1817'. [ 229.815212][T11878] kvm: Disabled LAPIC found during irq injection [ 229.869234][T11880] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1817'. [ 229.888510][ T55] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 230.040347][ T55] usb 6-1: config 0 has no interfaces? [ 230.043690][ T55] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.046809][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.050027][ T55] usb 6-1: Product: syz [ 230.051639][ T55] usb 6-1: Manufacturer: syz [ 230.053266][ T55] usb 6-1: SerialNumber: syz [ 230.056606][ T55] usb 6-1: config 0 descriptor?? [ 230.326010][ T141] usb 6-1: USB disconnect, device number 26 [ 230.462505][ T55] usb 9-1: USB disconnect, device number 16 [ 230.915605][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1822'. [ 230.921330][T11894] FAULT_INJECTION: forcing a failure. [ 230.921330][T11894] name failslab, interval 1, probability 0, space 0, times 0 [ 230.927036][T11894] CPU: 0 UID: 0 PID: 11894 Comm: syz.1.1822 Not tainted syzkaller #0 PREEMPT(full) [ 230.927065][T11894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.927077][T11894] Call Trace: [ 230.927083][T11894] [ 230.927090][T11894] dump_stack_lvl+0x16c/0x1f0 [ 230.927117][T11894] should_fail_ex+0x512/0x640 [ 230.927141][T11894] should_failslab+0xc2/0x120 [ 230.927205][T11894] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 230.927228][T11894] ? xfrm_state_alloc+0x23/0x5c0 [ 230.927257][T11894] xfrm_state_alloc+0x23/0x5c0 [ 230.927282][T11894] ipcomp4_init_state+0x31c/0xa90 [ 230.927306][T11894] __xfrm_init_state+0x6fe/0x1c10 [ 230.927327][T11894] ? try_to_merge_one_page+0x572/0x21a0 [ 230.927358][T11894] xfrm_add_sa+0x2ec8/0x5c50 [ 230.927384][T11894] ? cap_capable+0xb3/0x250 [ 230.927405][T11894] ? __pfx_xfrm_add_sa+0x10/0x10 [ 230.927427][T11894] ? __nla_parse+0x40/0x60 [ 230.927457][T11894] ? __pfx_xfrm_add_sa+0x10/0x10 [ 230.927476][T11894] xfrm_user_rcv_msg+0x58e/0xc00 [ 230.927499][T11894] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 230.927518][T11894] ? stack_trace_save+0x8e/0xc0 [ 230.927542][T11894] ? __pfx_stack_trace_save+0x10/0x10 [ 230.927596][T11894] ? __pfx___might_resched+0x10/0x10 [ 230.927619][T11894] ? rcu_is_watching+0x12/0xc0 [ 230.927641][T11894] ? trace_contention_end+0xdd/0x130 [ 230.927661][T11894] netlink_rcv_skb+0x155/0x420 [ 230.927726][T11894] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 230.927745][T11894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.927763][T11894] ? __pfx___mutex_lock+0x10/0x10 [ 230.927802][T11894] xfrm_netlink_rcv+0x71/0x90 [ 230.927828][T11894] netlink_unicast+0x5aa/0x870 [ 230.927853][T11894] ? __pfx_netlink_unicast+0x10/0x10 [ 230.927874][T11894] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 230.927902][T11894] netlink_sendmsg+0x8d1/0xdd0 [ 230.927927][T11894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.927957][T11894] ____sys_sendmsg+0xa98/0xc70 [ 230.927986][T11894] ? copy_msghdr_from_user+0x10a/0x160 [ 230.928006][T11894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.928072][T11894] ___sys_sendmsg+0x134/0x1d0 [ 230.928095][T11894] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.928146][T11894] __sys_sendmsg+0x16d/0x220 [ 230.928165][T11894] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.928202][T11894] do_syscall_64+0xcd/0x4c0 [ 230.928225][T11894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.928243][T11894] RIP: 0033:0x7fa833f8ebe9 [ 230.928258][T11894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.928275][T11894] RSP: 002b:00007fa834db0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.928292][T11894] RAX: ffffffffffffffda RBX: 00007fa8341b5fa0 RCX: 00007fa833f8ebe9 [ 230.928304][T11894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 230.928315][T11894] RBP: 00007fa834db0090 R08: 0000000000000000 R09: 0000000000000000 [ 230.928325][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.928335][T11894] R13: 00007fa8341b6038 R14: 00007fa8341b5fa0 R15: 00007fffa6cc62d8 [ 230.928361][T11894] [ 230.951312][T11896] netlink: 'syz.0.1823': attribute type 5 has an invalid length. [ 231.090206][T11896] ip6erspan0: entered promiscuous mode [ 231.300714][T11923] tipc: Enabling of bearer rejected, failed to enable media [ 231.317690][T11934] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 231.429234][ T6039] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 231.518363][ T5977] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 231.591877][ T6039] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.594681][ T6039] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.598084][ T6039] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.601626][ T6039] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 231.605362][ T6039] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 231.610417][ T6039] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.613640][ T6039] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.617174][ T6039] usb 9-1: Product: syz [ 231.619081][ T6039] usb 9-1: Manufacturer: syz [ 231.625637][ T6039] cdc_wdm 9-1:1.0: skipping garbage [ 231.627341][ T6039] cdc_wdm 9-1:1.0: skipping garbage [ 231.630623][ T6039] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 231.633325][ T6039] cdc_wdm 9-1:1.0: Unknown control protocol [ 231.670880][ T5977] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.673843][ T5977] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.677854][ T5977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.684122][ T5977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 231.687613][ T5977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 231.693135][ T5977] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.696273][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.699319][ T5977] usb 6-1: Product: syz [ 231.700634][ T5977] usb 6-1: Manufacturer: syz [ 231.707079][ T5977] cdc_wdm 6-1:1.0: skipping garbage [ 231.709253][ T5977] cdc_wdm 6-1:1.0: skipping garbage [ 231.714191][ T5977] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 231.716283][ T5977] cdc_wdm 6-1:1.0: Unknown control protocol [ 232.502278][T11978] fuse: Bad value for 'group_id' [ 232.504226][T11978] fuse: Bad value for 'group_id' [ 232.600591][T11980] FAULT_INJECTION: forcing a failure. [ 232.600591][T11980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.606211][T11980] CPU: 3 UID: 0 PID: 11980 Comm: syz.3.1847 Not tainted syzkaller #0 PREEMPT(full) [ 232.606235][T11980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.606247][T11980] Call Trace: [ 232.606254][T11980] [ 232.606263][T11980] dump_stack_lvl+0x16c/0x1f0 [ 232.606287][T11980] should_fail_ex+0x512/0x640 [ 232.606312][T11980] _copy_to_user+0x32/0xd0 [ 232.606337][T11980] simple_read_from_buffer+0xcb/0x170 [ 232.606359][T11980] proc_fail_nth_read+0x197/0x240 [ 232.606381][T11980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.606404][T11980] ? rw_verify_area+0xcf/0x6c0 [ 232.606430][T11980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.606450][T11980] vfs_read+0x1e4/0xcf0 [ 232.606472][T11980] ? __pfx___mutex_lock+0x10/0x10 [ 232.606492][T11980] ? __pfx_vfs_read+0x10/0x10 [ 232.606516][T11980] ? __fget_files+0x20e/0x3c0 [ 232.606545][T11980] ksys_read+0x12a/0x250 [ 232.606562][T11980] ? __pfx_ksys_read+0x10/0x10 [ 232.606589][T11980] do_syscall_64+0xcd/0x4c0 [ 232.606610][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.606629][T11980] RIP: 0033:0x7f975dd8d5fc [ 232.606645][T11980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.606661][T11980] RSP: 002b:00007f975eb8d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.606679][T11980] RAX: ffffffffffffffda RBX: 00007f975dfb5fa0 RCX: 00007f975dd8d5fc [ 232.606690][T11980] RDX: 000000000000000f RSI: 00007f975eb8d0a0 RDI: 0000000000000005 [ 232.606700][T11980] RBP: 00007f975eb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 232.606711][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.606721][T11980] R13: 00007f975dfb6038 R14: 00007f975dfb5fa0 R15: 00007fffa2897eb8 [ 232.606745][T11980] [ 232.968474][ T56] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 234.120353][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 234.121157][ T5977] usb 9-1: USB disconnect, device number 17 [ 234.122730][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 234.128163][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 234.461613][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.465848][ T56] usb 5-1: no configurations [ 234.467414][ T56] usb 5-1: can't read configurations, error -22 [ 234.571876][T12010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12010 comm=syz.4.1858 [ 235.156521][ T141] usb 6-1: USB disconnect, device number 27 [ 235.499370][T12031] __nla_validate_parse: 4 callbacks suppressed [ 235.499381][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 235.579965][ T56] hid_parser_main: 38 callbacks suppressed [ 235.579980][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.584495][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.586621][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.589587][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.592475][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.594748][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.596800][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.601181][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.603943][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.606522][ T56] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 235.611992][ T56] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [] on [ 235.647328][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 235.654447][T12056] fido_id[12056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.738432][ T141] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 235.784526][T12068] dns_resolver: Unsupported server list version (0) [ 235.790249][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.795409][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.909709][ T141] usb 8-1: config 0 has no interfaces? [ 235.912033][ T141] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.915964][ T141] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.921870][ T141] usb 8-1: config 0 descriptor?? [ 235.948320][ T6062] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 236.098378][ T6062] usb 6-1: Using ep0 maxpacket: 16 [ 236.102467][ T6062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.109484][ T6062] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.114283][ T6062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.117561][ T6062] usb 6-1: Product: syz [ 236.120094][ T6062] usb 6-1: Manufacturer: syz [ 236.122206][ T6062] usb 6-1: SerialNumber: syz [ 236.128292][ T6062] usb 6-1: config 0 descriptor?? [ 236.131379][ T2298] usb 8-1: USB disconnect, device number 24 [ 236.136768][ T6062] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 236.140963][ T6062] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 236.301632][ T6039] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [] on [ 236.346367][T12083] fido_id[12083]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.359834][T12085] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.402659][T12087] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.742479][ T6062] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 237.179947][ T6062] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 237.182492][ T6062] em28xx 6-1:0.0: board has no eeprom [ 237.227033][T12120] syzkaller0: entered promiscuous mode [ 237.228828][T12120] syzkaller0: entered allmulticast mode [ 237.231909][ T8968] syzkaller0: tun_net_xmit 48 [ 237.233970][T12120] syzkaller0: create flow: hash 1941880324 index 1 [ 237.258359][ T6062] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 237.261771][ T6062] em28xx 6-1:0.0: dvb set to bulk mode. [ 237.264273][ T141] em28xx 6-1:0.0: Binding DVB extension [ 237.268806][T12119] syzkaller0: delete flow: hash 1941880324 index 1 [ 237.274146][ T6062] usb 6-1: USB disconnect, device number 28 [ 237.278821][ T6062] em28xx 6-1:0.0: Disconnecting em28xx [ 237.297392][ T141] em28xx 6-1:0.0: Registering input extension [ 237.300303][ T6062] em28xx 6-1:0.0: Closing input extension [ 237.321093][ T6062] em28xx 6-1:0.0: Freeing device [ 237.708038][T12128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1896'. [ 239.127595][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 239.127612][ T40] audit: type=1400 audit(1756441075.200:832): avc: denied { accept } for pid=12143 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 239.139787][T12141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1900'. [ 239.192617][T12154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1904'. [ 239.309750][ T40] audit: type=1400 audit(1756441075.390:833): avc: denied { append } for pid=12165 comm="syz.3.1909" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.358670][T12166] support for the xor transformation has been removed. [ 239.521541][ T40] audit: type=1400 audit(1756441075.600:834): avc: denied { accept } for pid=12177 comm="syz.4.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.751523][T12182] syzkaller0: entered promiscuous mode [ 239.753569][T12182] syzkaller0: entered allmulticast mode [ 239.757153][ T8968] syzkaller0: tun_net_xmit 48 [ 239.761249][T12182] syzkaller0: create flow: hash 1941880324 index 1 [ 239.803475][T12181] syzkaller0: delete flow: hash 1941880324 index 1 [ 241.408524][ T5987] Bluetooth: hci4: command 0x206a tx timeout [ 241.414534][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 241.756685][T12207] fuse: Unknown parameter 'goup_id' [ 241.774067][T12209] tc_dump_action: action bad kind [ 242.283649][ T40] audit: type=1400 audit(1756441078.360:835): avc: denied { map } for pid=12242 comm="syz.1.1934" path="socket:[40524]" dev="sockfs" ino=40524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 242.452196][T12250] fuse: Bad value for 'user_id' [ 242.454825][T12250] fuse: Bad value for 'user_id' [ 242.459598][T12248] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 242.569015][T12252] tc_dump_action: action bad kind [ 242.713230][T12262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1941'. [ 242.746381][ T40] audit: type=1400 audit(1756441078.820:836): avc: denied { getopt } for pid=12266 comm="syz.1.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.746420][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1943'. [ 242.759542][T12267] binder: 12266:12267 ioctl aead 0 returned -22 [ 242.770735][T12269] fuse: Unknown parameter 'rootmo [ 242.770735][T12269] ­:gõÁNÿyÆ—9dM' [ 242.836986][T12275] tc_dump_action: action bad kind [ 242.971564][ T6039] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 243.058769][ T6062] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.108277][ T6039] usb 8-1: device descriptor read/64, error -71 [ 243.237886][ T6062] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 243.241936][ T6062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.247791][ T6062] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 243.252480][ T6062] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 243.255820][ T6062] usb 5-1: Manufacturer: syz [ 243.260315][ T6062] usb 5-1: config 0 descriptor?? [ 243.318332][ T6062] rc_core: IR keymap rc-hauppauge not found [ 243.321063][ T6062] Registered IR keymap rc-empty [ 243.324368][ T6062] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 243.331686][ T6062] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 243.348628][ T6039] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 243.488636][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 243.489448][ T5327] Bluetooth: hci4: command 0x206a tx timeout [ 243.496271][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 243.509503][ T6039] usb 8-1: device descriptor read/64, error -71 [ 243.569245][T12311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1958'. [ 243.614636][T12314] vivid-003: ================= START STATUS ================= [ 243.617433][T12314] vivid-003: Radio HW Seek Mode: Bounded [ 243.621901][T12314] vivid-003: Radio Programmable HW Seek: false [ 243.622087][ T6039] usb usb8-port1: attempt power cycle [ 243.622643][T12314] [ 243.628111][T12314] vivid-003: RDS Rx I/O Mode: Block I/O [ 243.630729][T12314] vivid-003: Generate RBDS Instead of RDS: false [ 243.633481][T12314] vivid-003: RDS Reception: true [ 243.635582][T12314] vivid-003: RDS Program Type: 0 inactive [ 243.638394][T12314] vivid-003: RDS PS Name: inactive [ 243.641887][T12314] vivid-003: RDS Radio Text: inactive [ 243.644526][T12314] vivid-003: RDS Traffic Announcement: false inactive [ 243.647378][T12314] vivid-003: RDS Traffic Program: false inactive [ 243.650191][T12314] vivid-003: RDS Music: false inactive [ 243.652790][T12314] vivid-003: ================== END STATUS ================== [ 243.849781][T12322] syzkaller0: entered promiscuous mode [ 243.851548][T12322] syzkaller0: entered allmulticast mode [ 243.854538][ T8966] syzkaller0: tun_net_xmit 48 [ 243.978288][ T6039] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 244.011622][ T6039] usb 8-1: device descriptor read/8, error -71 [ 244.258361][ T6039] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 244.279898][ T6039] usb 8-1: device descriptor read/8, error -71 [ 244.348360][ T54] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 244.398570][ T6039] usb usb8-port1: unable to enumerate USB device [ 244.494237][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 244.519303][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 244.527259][ T54] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.532248][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.535852][ T54] usb 6-1: Product: syz [ 244.537657][ T54] usb 6-1: Manufacturer: syz [ 244.540294][ T54] usb 6-1: SerialNumber: syz [ 244.545945][ T54] usb 6-1: config 0 descriptor?? [ 244.551456][ T54] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 244.555097][ T54] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 244.698442][ T5987] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 244.699917][ T5327] Bluetooth: hci2: command 0x206a tx timeout [ 245.165760][ T54] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 245.585473][ T5327] Bluetooth: hci4: command 0x206a tx timeout [ 245.589361][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 245.598119][ T54] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 245.604532][ T54] em28xx 6-1:0.0: board has no eeprom [ 245.668475][ T54] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 245.671582][ T54] em28xx 6-1:0.0: dvb set to bulk mode. [ 245.678728][ T842] em28xx 6-1:0.0: Binding DVB extension [ 245.686267][ T54] usb 6-1: USB disconnect, device number 29 [ 245.691394][ T54] em28xx 6-1:0.0: Disconnecting em28xx [ 245.715584][ T842] em28xx 6-1:0.0: Registering input extension [ 245.719574][ T54] em28xx 6-1:0.0: Closing input extension [ 245.757677][ T54] em28xx 6-1:0.0: Freeing device [ 245.801935][T12327] tc_dump_action: action bad kind [ 245.857821][ T56] usb 5-1: USB disconnect, device number 30 [ 245.897488][T12332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1966'. [ 246.004861][T12345] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 246.036074][ T2298] hid-generic 07FF:18000:0003.0014: item fetching failed at offset 0/4 [ 246.042252][ T2298] hid-generic 07FF:18000:0003.0014: probe with driver hid-generic failed with error -22 [ 246.242961][T12368] FAULT_INJECTION: forcing a failure. [ 246.242961][T12368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.247685][T12368] CPU: 3 UID: 0 PID: 12368 Comm: syz.1.1980 Not tainted syzkaller #0 PREEMPT(full) [ 246.247707][T12368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.247715][T12368] Call Trace: [ 246.247720][T12368] [ 246.247725][T12368] dump_stack_lvl+0x16c/0x1f0 [ 246.247744][T12368] should_fail_ex+0x512/0x640 [ 246.247761][T12368] _copy_from_user+0x2e/0xd0 [ 246.247778][T12368] copy_msghdr_from_user+0x98/0x160 [ 246.247793][T12368] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 246.247813][T12368] ___sys_sendmsg+0xfe/0x1d0 [ 246.247826][T12368] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.247856][T12368] __sys_sendmsg+0x16d/0x220 [ 246.247869][T12368] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.247891][T12368] do_syscall_64+0xcd/0x4c0 [ 246.247910][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.247923][T12368] RIP: 0033:0x7fa833f8ebe9 [ 246.247934][T12368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.247945][T12368] RSP: 002b:00007fa834db0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.247957][T12368] RAX: ffffffffffffffda RBX: 00007fa8341b5fa0 RCX: 00007fa833f8ebe9 [ 246.247964][T12368] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 246.247971][T12368] RBP: 00007fa834db0090 R08: 0000000000000000 R09: 0000000000000000 [ 246.247982][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.247989][T12368] R13: 00007fa8341b6038 R14: 00007fa8341b5fa0 R15: 00007fffa6cc62d8 [ 246.248003][T12368] [ 246.304637][ C3] vkms_vblank_simulate: vblank timer overrun [ 246.340603][ T40] audit: type=1400 audit(1756441082.420:837): avc: granted { setsecparam } for pid=12369 comm="syz.4.1981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 246.378394][ T55] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 246.459291][ T54] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.555500][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 246.562367][ T40] audit: type=1400 audit(1756441082.640:838): avc: denied { mounton } for pid=12383 comm="syz.4.1986" path="/270/file0" dev="hugetlbfs" ino=42435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 246.564382][T12384] overlayfs: maximum fs stacking depth exceeded [ 246.573679][ T55] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 246.581599][ T55] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.585563][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.590138][ T55] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.594393][ T55] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.602983][ T55] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.607375][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.611348][ T54] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.615278][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.621596][ T54] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.625606][ T54] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.630881][ T54] usb 5-1: Manufacturer: syz [ 246.632764][ T40] audit: type=1400 audit(1756441082.710:839): avc: denied { read } for pid=12385 comm="syz.4.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 246.635476][ T54] usb 5-1: config 0 descriptor?? [ 246.711869][ T54] rc_core: IR keymap rc-hauppauge not found [ 246.714596][ T54] Registered IR keymap rc-empty [ 246.718507][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 246.725653][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 246.748294][ T5977] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 246.820248][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.823282][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.827801][ T55] usb 8-1: usb_control_msg returned -32 [ 246.829760][ T55] usbtmc 8-1:16.0: can't read capabilities [ 246.898817][ T5977] usb 6-1: Using ep0 maxpacket: 16 [ 246.902931][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.907755][ T5977] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.910859][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.913891][ T5977] usb 6-1: Product: syz [ 246.915600][ T5977] usb 6-1: Manufacturer: syz [ 246.917401][ T5977] usb 6-1: SerialNumber: syz [ 246.920411][ T5977] usb 6-1: config 0 descriptor?? [ 246.925641][ T5977] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 246.929579][ T5977] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 247.149727][ T40] audit: type=1400 audit(1756441083.230:840): avc: denied { read write } for pid=12365 comm="syz.0.1979" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.159914][ T40] audit: type=1400 audit(1756441083.230:841): avc: denied { open } for pid=12365 comm="syz.0.1979" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.171551][ T40] audit: type=1400 audit(1756441083.230:842): avc: denied { ioctl } for pid=12365 comm="syz.0.1979" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.187912][ T40] audit: type=1400 audit(1756441083.260:843): avc: denied { bpf } for pid=12347 comm="syz.3.1972" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.199467][T12393] usbtmc 8-1:16.0: INDICATOR_PULSE returned 0 [ 247.204357][ T40] audit: type=1400 audit(1756441083.270:844): avc: denied { write } for pid=12347 comm="syz.3.1972" name="usbtmc0" dev="devtmpfs" ino=3442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 247.533300][ T40] audit: type=1400 audit(1756441083.610:845): avc: denied { ioctl } for pid=12379 comm="syz.1.1984" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.533467][ T5977] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 247.620324][T12395] syzkaller0: entered promiscuous mode [ 247.622344][T12395] syzkaller0: entered allmulticast mode [ 247.628680][ T8963] syzkaller0: tun_net_xmit 48 [ 247.658325][ T5987] Bluetooth: hci4: command 0x206a tx timeout [ 247.965046][ T5977] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 247.968496][ T5977] em28xx 6-1:0.0: board has no eeprom [ 248.039184][ T5977] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 248.042907][ T5977] em28xx 6-1:0.0: dvb set to bulk mode. [ 248.045491][ T29] em28xx 6-1:0.0: Binding DVB extension [ 248.067262][ T5977] usb 6-1: USB disconnect, device number 30 [ 248.071247][ T5977] em28xx 6-1:0.0: Disconnecting em28xx [ 248.144141][ T29] em28xx 6-1:0.0: Registering input extension [ 248.146974][ T5977] em28xx 6-1:0.0: Closing input extension [ 248.216031][ T5977] em28xx 6-1:0.0: Freeing device [ 248.496985][ T40] audit: type=1400 audit(1756441084.570:846): avc: denied { read write } for pid=5972 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.530694][ T5987] Bluetooth: hci2: command 0x206a tx timeout [ 248.534338][ T5327] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 249.049311][ T5977] usb 8-1: USB disconnect, device number 29 [ 249.688085][ T54] usb 5-1: USB disconnect, device number 31 [ 249.728856][ T5987] Bluetooth: hci4: command 0x206a tx timeout [ 249.839668][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 249.841874][ T1116] ata1: failed to read log page 10h (errno=-5) [ 249.843924][ T1116] ata1.00: exception Emask 0x1 SAct 0x2000000 SErr 0x0 action 0x0 [ 249.846554][ T1116] ata1.00: irq_stat 0x40000000 [ 249.848372][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 249.850634][ T1116] ata1.00: cmd 61/38:c8:66:0c:10/00:00:00:00:00/40 tag 25 ncq dma 28672 out [ 249.850634][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 249.856375][ T1116] ata1.00: status: { DRDY } [ 249.858753][ T1116] ata1.00: configured for UDMA/100 [ 249.860735][ T1116] ata1: EH complete [ 249.870005][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1997'. [ 249.874086][T12419] FAULT_INJECTION: forcing a failure. [ 249.874086][T12419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.880430][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.1.1997 Not tainted syzkaller #0 PREEMPT(full) [ 249.880448][T12419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.880457][T12419] Call Trace: [ 249.880461][T12419] [ 249.880466][T12419] dump_stack_lvl+0x16c/0x1f0 [ 249.880487][T12419] should_fail_ex+0x512/0x640 [ 249.880505][T12419] _copy_to_user+0x32/0xd0 [ 249.880526][T12419] simple_read_from_buffer+0xcb/0x170 [ 249.880542][T12419] proc_fail_nth_read+0x197/0x240 [ 249.880559][T12419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.880576][T12419] ? rw_verify_area+0xcf/0x6c0 [ 249.880597][T12419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.880613][T12419] vfs_read+0x1e4/0xcf0 [ 249.880629][T12419] ? __pfx___mutex_lock+0x10/0x10 [ 249.880645][T12419] ? __pfx_vfs_read+0x10/0x10 [ 249.880663][T12419] ? __fget_files+0x20e/0x3c0 [ 249.880684][T12419] ksys_read+0x12a/0x250 [ 249.880697][T12419] ? __pfx_ksys_read+0x10/0x10 [ 249.880715][T12419] do_syscall_64+0xcd/0x4c0 [ 249.880732][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.880746][T12419] RIP: 0033:0x7fa833f8d5fc [ 249.880758][T12419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.880805][T12419] RSP: 002b:00007fa834db0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.880818][T12419] RAX: ffffffffffffffda RBX: 00007fa8341b5fa0 RCX: 00007fa833f8d5fc [ 249.880827][T12419] RDX: 000000000000000f RSI: 00007fa834db00a0 RDI: 0000000000000004 [ 249.880835][T12419] RBP: 00007fa834db0090 R08: 0000000000000000 R09: 0000000000000000 [ 249.880843][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.880850][T12419] R13: 00007fa8341b6038 R14: 00007fa8341b5fa0 R15: 00007fffa6cc62d8 [ 249.880868][T12419] [ 249.988318][ T141] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 250.002317][T12428] FAULT_INJECTION: forcing a failure. [ 250.002317][T12428] name failslab, interval 1, probability 0, space 0, times 0 [ 250.006542][T12428] CPU: 2 UID: 0 PID: 12428 Comm: syz.4.1999 Not tainted syzkaller #0 PREEMPT(full) [ 250.006559][T12428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.006565][T12428] Call Trace: [ 250.006570][T12428] [ 250.006575][T12428] dump_stack_lvl+0x16c/0x1f0 [ 250.006591][T12428] should_fail_ex+0x512/0x640 [ 250.006607][T12428] should_failslab+0xc2/0x120 [ 250.006621][T12428] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 250.006633][T12428] ? skb_clone+0x190/0x3f0 [ 250.006648][T12428] skb_clone+0x190/0x3f0 [ 250.006660][T12428] netlink_deliver_tap+0xabd/0xd30 [ 250.006677][T12428] netlink_unicast+0x64c/0x870 [ 250.006692][T12428] ? __pfx_netlink_unicast+0x10/0x10 [ 250.006705][T12428] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 250.006722][T12428] netlink_sendmsg+0x8d1/0xdd0 [ 250.006738][T12428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.006756][T12428] ____sys_sendmsg+0xa98/0xc70 [ 250.006772][T12428] ? copy_msghdr_from_user+0x10a/0x160 [ 250.006784][T12428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.006806][T12428] ___sys_sendmsg+0x134/0x1d0 [ 250.006819][T12428] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.006848][T12428] __sys_sendmsg+0x16d/0x220 [ 250.006861][T12428] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.006891][T12428] do_syscall_64+0xcd/0x4c0 [ 250.006909][T12428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.006923][T12428] RIP: 0033:0x7fdd43b8ebe9 [ 250.006936][T12428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.006952][T12428] RSP: 002b:00007fdd44a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.006963][T12428] RAX: ffffffffffffffda RBX: 00007fdd43db5fa0 RCX: 00007fdd43b8ebe9 [ 250.006971][T12428] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 250.006977][T12428] RBP: 00007fdd44a67090 R08: 0000000000000000 R09: 0000000000000000 [ 250.006983][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.006990][T12428] R13: 00007fdd43db6038 R14: 00007fdd43db5fa0 R15: 00007ffd36abf898 [ 250.007004][T12428] [ 250.017668][ T5987] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 250.063367][T12434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2002'. [ 250.065545][ T5987] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 250.150515][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 250.153371][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'. [ 250.158504][ T141] usb 8-1: Using ep0 maxpacket: 16 [ 250.162264][ T141] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.162942][ T8965] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.168502][ T141] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.171889][ T8965] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.172231][ T141] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.175671][ T8960] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.181691][ T141] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 250.188461][ T141] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.193779][ T141] usb 8-1: config 0 descriptor?? [ 250.205133][T12447] netlink: 'syz.4.2007': attribute type 1 has an invalid length. [ 250.210469][T12447] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2007'. [ 250.418389][ T2298] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 250.428695][ T842] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 250.578440][ T2298] usb 6-1: Using ep0 maxpacket: 8 [ 250.582516][ T2298] usb 6-1: config 0 interface 0 has no altsetting 0 [ 250.582671][ T842] usb 5-1: config 0 has no interfaces? [ 250.585594][ T2298] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 250.590458][ T842] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 250.591466][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.595489][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.601270][ T2298] usb 6-1: config 0 descriptor?? [ 250.601530][ T842] usb 5-1: Product: syz [ 250.604855][ T842] usb 5-1: Manufacturer: syz [ 250.606731][ T842] usb 5-1: SerialNumber: syz [ 250.612556][ T141] hid_parser_main: 22 callbacks suppressed [ 250.612579][ T141] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 250.618099][ T141] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 250.621881][ T141] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 250.622511][ T842] usb 5-1: config 0 descriptor?? [ 250.629589][ T141] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 250.632117][ T141] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 250.642544][ T141] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 250.681917][ T141] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 250.685071][ T141] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 250.807800][T12413] random: crng reseeded on system resumption [ 250.823515][T10307] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 250.824861][ T55] usb 8-1: USB disconnect, device number 30 [ 250.831240][T10307] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 250.841981][T10307] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 250.847037][T10307] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 250.895546][ T56] usb 5-1: USB disconnect, device number 32 [ 251.015153][ T2298] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 251.294614][ T2298] usb 6-1: USB disconnect, device number 31 [ 251.391373][T12474] syzkaller0: entered promiscuous mode [ 251.394560][T12474] syzkaller0: entered allmulticast mode [ 251.442093][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 251.442122][ T40] audit: type=1400 audit(1756441087.520:912): avc: denied { create } for pid=12475 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.444711][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 251.452483][ T40] audit: type=1400 audit(1756441087.520:913): avc: denied { write } for pid=12475 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.452509][ T40] audit: type=1400 audit(1756441087.520:914): avc: denied { nlmsg_write } for pid=12475 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.545354][ T40] audit: type=1400 audit(1756441087.620:915): avc: denied { create } for pid=12479 comm="syz.4.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.555003][ T40] audit: type=1400 audit(1756441087.630:916): avc: denied { ioctl } for pid=12479 comm="syz.4.2017" path="socket:[44066]" dev="sockfs" ino=44066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.580337][ T40] audit: type=1400 audit(1756441087.660:917): avc: denied { create } for pid=12477 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.591062][ T40] audit: type=1400 audit(1756441087.660:918): avc: denied { ioctl } for pid=12477 comm="syz.0.2016" path="socket:[44067]" dev="sockfs" ino=44067 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.731443][ T5327] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 251.738493][ T5327] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.946557][ T40] audit: type=1400 audit(1756441088.020:919): avc: denied { read write } for pid=12490 comm="syz.1.2018" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 251.955329][ T40] audit: type=1400 audit(1756441088.020:920): avc: denied { open } for pid=12490 comm="syz.1.2018" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 252.052785][T12493] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2018'. [ 252.056923][ T40] audit: type=1400 audit(1756441088.130:921): avc: denied { mounton } for pid=12490 comm="syz.1.2018" path="/508/file0" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.620008][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 252.620012][ T5327] Bluetooth: hci4: command 0x206a tx timeout [ 253.385940][T12491] netlink: 'syz.1.2018': attribute type 29 has an invalid length. [ 253.749239][T12512] netlink: 'syz.0.2026': attribute type 10 has an invalid length. [ 253.905047][T12530] syzkaller0: entered promiscuous mode [ 253.906954][T12530] syzkaller0: entered allmulticast mode [ 253.911670][ T8968] syzkaller0: tun_net_xmit 48 [ 255.488401][ T5327] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.492440][ T5976] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 255.984917][T12549] netlink: 'syz.0.2037': attribute type 10 has an invalid length. [ 256.183309][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 256.206321][T12568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2041'. [ 256.308342][T12574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2043'. [ 256.453388][T12580] syzkaller0: entered promiscuous mode [ 256.456274][T12580] syzkaller0: entered allmulticast mode [ 257.084850][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 257.084863][ T40] audit: type=1400 audit(1756441093.160:980): avc: denied { read write } for pid=12588 comm="syz.0.2049" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 257.097060][ T40] audit: type=1400 audit(1756441093.160:981): avc: denied { open } for pid=12588 comm="syz.0.2049" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 257.158253][ T40] audit: type=1400 audit(1756441093.230:982): avc: denied { map_create } for pid=12591 comm="syz.0.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.167195][ T40] audit: type=1400 audit(1756441093.230:983): avc: denied { map_read map_write } for pid=12591 comm="syz.0.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 258.373040][ T5327] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.373112][ T5976] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 258.523457][ T40] audit: type=1400 audit(1756441094.600:984): avc: denied { write } for pid=12594 comm="syz.4.2051" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.531270][ T40] audit: type=1400 audit(1756441094.600:985): avc: denied { read } for pid=12594 comm="syz.4.2051" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.540634][ T40] audit: type=1400 audit(1756441094.620:986): avc: denied { create } for pid=12599 comm="syz.0.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.547798][ T40] audit: type=1400 audit(1756441094.620:987): avc: denied { execmem } for pid=12599 comm="syz.0.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 258.573405][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2053'. [ 258.650242][ T40] audit: type=1400 audit(1756441094.730:988): avc: denied { mount } for pid=12609 comm="syz.1.2057" name="/" dev="9p" ino=35913823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 258.659857][ T40] audit: type=1400 audit(1756441094.730:989): avc: denied { add_name } for pid=12609 comm="syz.1.2057" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.778625][T12620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2060'. [ 258.906139][T12627] syzkaller0: entered promiscuous mode [ 258.908018][T12627] syzkaller0: entered allmulticast mode [ 259.419477][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2063'. [ 259.419496][T12632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2063'. [ 259.515863][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2064'. [ 260.618557][ T5976] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 260.618842][ T5327] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.632137][ T5976] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 260.896734][T12649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2069'. [ 260.940890][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.943309][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.026534][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 261.215488][T12683] netlink: 'syz.0.2080': attribute type 1 has an invalid length. [ 261.259052][T12685] __nla_validate_parse: 2 callbacks suppressed [ 261.259065][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2082'. [ 261.266019][T12685] netlink: 'syz.0.2082': attribute type 7 has an invalid length. [ 261.347468][ T6559] syz_tun (unregistering): left promiscuous mode [ 261.360780][ T5987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.366696][ T5987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.372736][ T5987] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.377477][ T5987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.383792][ T5987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.516526][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2087'. [ 261.637597][T12690] chnl_net:caif_netlink_parms(): no params data found [ 261.719819][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.722682][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.725439][T12690] bridge_slave_0: entered allmulticast mode [ 261.729256][T12690] bridge_slave_0: entered promiscuous mode [ 261.733708][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.736449][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.739891][T12690] bridge_slave_1: entered allmulticast mode [ 261.742808][T12690] bridge_slave_1: entered promiscuous mode [ 261.744815][T12712] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 261.750093][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 261.782473][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.792300][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.834418][T12690] team0: Port device team_slave_0 added [ 261.841096][T12690] team0: Port device team_slave_1 added [ 261.876315][T12690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.879731][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.887758][T12690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.893412][T12690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.895828][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.904145][T12690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.947693][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 262.000386][T12690] hsr_slave_0: entered promiscuous mode [ 262.005044][T12690] hsr_slave_1: entered promiscuous mode [ 262.008611][T12690] debugfs: 'hsr0' already exists in 'hsr' [ 262.011194][T12690] Cannot create hsr debugfs directory [ 262.218759][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.240456][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.249900][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.253048][ T8966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.262473][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.264862][ T8965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.388971][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 262.388987][ T40] audit: type=1400 audit(1756441098.470:1115): avc: denied { read } for pid=12731 comm="syz.1.2093" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 262.402093][ T40] audit: type=1400 audit(1756441098.470:1116): avc: denied { open } for pid=12731 comm="syz.1.2093" path="net:[4026533260]" dev="nsfs" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 262.425059][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.497192][ T40] audit: type=1400 audit(1756441098.570:1117): avc: denied { ioctl } for pid=12741 comm="syz.1.2094" path="socket:[42794]" dev="sockfs" ino=42794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.598280][T12690] veth0_vlan: entered promiscuous mode [ 262.603553][T12690] veth1_vlan: entered promiscuous mode [ 262.625842][T12690] veth0_macvtap: entered promiscuous mode [ 262.631196][ T40] audit: type=1400 audit(1756441098.710:1118): avc: denied { create } for pid=12751 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.632273][T12690] veth1_macvtap: entered promiscuous mode [ 262.649489][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.659396][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.667057][ T40] audit: type=1400 audit(1756441098.740:1119): avc: denied { read write } for pid=12753 comm="syz.1.2096" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.675971][ T40] audit: type=1400 audit(1756441098.740:1120): avc: denied { open } for pid=12753 comm="syz.1.2096" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.684608][ T40] audit: type=1400 audit(1756441098.750:1121): avc: denied { ioctl } for pid=12753 comm="syz.1.2096" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.729741][ T8965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.732713][ T8965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.750859][ T8960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.753555][ T8960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.760881][ T40] audit: type=1400 audit(1756441098.840:1122): avc: denied { mounton } for pid=12690 comm="syz-executor" path="/syzkaller.rekN2u/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 262.772380][ T40] audit: type=1400 audit(1756441098.840:1123): avc: denied { mount } for pid=12690 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.780266][ T40] audit: type=1400 audit(1756441098.840:1124): avc: denied { mount } for pid=12690 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 262.898340][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.900769][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.903375][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.906469][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.915929][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.917418][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2103'. [ 262.918584][ T54] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 262.919515][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.927218][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.930722][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.933468][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.936283][ T29] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 262.941333][ T29] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [] on [ 262.996706][T12781] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 263.008384][ T5976] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 263.010313][ T5987] Bluetooth: hci3: command 0x0401 tx timeout [ 263.014452][T12779] fido_id[12779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.015950][ T5976] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 263.058743][ T54] usb 6-1: device descriptor read/64, error -71 [ 263.117016][T12793] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 263.219827][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 263.223219][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2113'. [ 263.230717][T12810] geneve2: entered promiscuous mode [ 263.232476][T12810] geneve2: entered allmulticast mode [ 263.259780][T12813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2115'. [ 263.283492][T12815] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 263.294764][T12820] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 263.299465][ T54] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 263.428496][ T54] usb 6-1: device descriptor read/64, error -71 [ 263.533924][T12830] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2121'. [ 263.538163][T12830] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2121'. [ 263.543155][ T54] usb usb6-port1: attempt power cycle [ 263.878362][ T54] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 263.899587][ T54] usb 6-1: device descriptor read/8, error -71 [ 264.113369][T12857] No buffer was provided with the request [ 264.169682][ T54] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 264.188983][ T54] usb 6-1: device descriptor read/8, error -71 [ 264.194388][T12869] 9pnet_virtio: no channels available for device syz [ 264.299486][ T54] usb usb6-port1: unable to enumerate USB device [ 264.464733][T12883] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 264.468713][T12882] [U] J"—e:ÀÆ" [ 264.688607][ T5976] Bluetooth: hci2: command 0x206a tx timeout [ 264.691221][ T5327] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 264.953807][T12916] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 265.088337][ T5327] Bluetooth: hci3: command 0x0401 tx timeout [ 265.148366][ T5837] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 265.258385][ T5327] Bluetooth: hci0: command tx timeout [ 265.299954][ T5837] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 265.303320][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.308797][ T5837] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 265.312463][ T5837] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 265.315849][ T5837] usb 9-1: Manufacturer: syz [ 265.320491][ T5837] usb 9-1: config 0 descriptor?? [ 265.378333][ T5837] rc_core: IR keymap rc-hauppauge not found [ 265.381209][ T5837] Registered IR keymap rc-empty [ 265.385063][ T5837] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 265.391654][ T5837] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input35 [ 266.028590][T12949] kvm: user requested TSC rate below hardware speed [ 266.035975][T12949] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 266.134297][ T29] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [] on [ 266.166383][T12960] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 266.809352][T12982] __nla_validate_parse: 10 callbacks suppressed [ 266.809365][T12982] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2175'. [ 266.851310][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2176'. [ 267.104301][T12996] vlan1: entered promiscuous mode [ 267.106439][T12996] vlan1: entered allmulticast mode [ 267.110463][T12996] hsr_slave_1: entered allmulticast mode [ 267.192812][T12998] syzkaller0: entered promiscuous mode [ 267.194897][T12998] syzkaller0: entered allmulticast mode [ 267.343700][ T5987] Bluetooth: hci0: command tx timeout [ 267.732010][ T5327] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 268.530676][ T5327] Bluetooth: hci3: command 0x0401 tx timeout [ 268.531594][ T5976] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 269.086607][ T29] usb 9-1: USB disconnect, device number 18 [ 269.148267][ T40] kauditd_printk_skb: 270 callbacks suppressed [ 269.148286][ T40] audit: type=1400 audit(1756441105.220:1395): avc: denied { read write } for pid=13014 comm="syz.0.2185" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 269.163089][ T40] audit: type=1400 audit(1756441105.230:1396): avc: denied { open } for pid=13014 comm="syz.0.2185" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 269.176361][ T40] audit: type=1400 audit(1756441105.240:1397): avc: denied { mount } for pid=13014 comm="syz.0.2185" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 269.182001][T13017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2186'. [ 269.184364][ T40] audit: type=1400 audit(1756441105.250:1398): avc: denied { create } for pid=13016 comm="syz.3.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.196565][ T40] audit: type=1400 audit(1756441105.250:1399): avc: denied { write } for pid=13016 comm="syz.3.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.205126][ T40] audit: type=1400 audit(1756441105.250:1400): avc: denied { nlmsg_write } for pid=13016 comm="syz.3.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.215823][ T40] audit: type=1400 audit(1756441105.290:1401): avc: denied { read } for pid=13014 comm="syz.0.2185" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 269.223677][ T40] audit: type=1400 audit(1756441105.290:1402): avc: denied { open } for pid=13014 comm="syz.0.2185" path="/489/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 269.236349][ T40] audit: type=1400 audit(1756441105.310:1403): avc: denied { unmount } for pid=5985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 269.248851][T13024] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 269.251977][ T40] audit: type=1400 audit(1756441105.330:1404): avc: denied { read } for pid=13023 comm="syz.4.2189" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.327936][T13039] kAFS: unparsable volume name [ 269.330199][T13039] kAFS: unparsable volume name [ 269.331891][T13039] kAFS: unparsable volume name [ 269.333498][T13039] kAFS: unparsable volume name [ 269.334964][T13039] kAFS: unparsable volume name [ 269.336492][T13039] kAFS: unparsable volume name [ 269.344474][T13039] kAFS: unparsable volume name [ 269.346290][T13039] kAFS: unparsable volume name [ 269.347940][T13039] kAFS: unparsable volume name [ 269.353630][T13039] kAFS: unparsable volume name [ 269.408729][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 269.478845][T13054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2197'. [ 269.648421][ T5837] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 269.649785][T13071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.657174][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 269.736628][T13084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2208'. [ 269.800716][ T5837] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 269.803792][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.809251][ T5837] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 269.813769][ T5837] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 269.817511][ T5837] usb 6-1: Manufacturer: syz [ 269.822965][ T5837] usb 6-1: config 0 descriptor?? [ 269.832093][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2210'. [ 269.878289][ T5837] rc_core: IR keymap rc-hauppauge not found [ 269.881378][ T5837] Registered IR keymap rc-empty [ 269.885427][ T5837] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 269.891448][T13098] lo speed is unknown, defaulting to 1000 [ 269.893192][T13098] lo speed is unknown, defaulting to 1000 [ 269.898754][T13098] lo speed is unknown, defaulting to 1000 [ 269.899992][ T5837] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 270.045613][ T2298] hid_parser_main: 22 callbacks suppressed [ 270.045626][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.052333][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.055911][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.059776][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.060224][T13098] infiniband sz1: set active [ 270.063022][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.065029][ T54] lo speed is unknown, defaulting to 1000 [ 270.065753][T13098] infiniband sz1: added lo [ 270.067051][T13098] sz1: rxe_create_cq: returned err = -12 [ 270.067179][T13098] infiniband sz1: Couldn't create ib_mad CQ [ 270.067331][T13098] infiniband sz1: Couldn't open port 1 [ 270.068557][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.084757][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.086969][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.090853][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.093741][ T2298] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 270.096839][T13098] RDS/IB: sz1: added [ 270.098137][ T2298] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [] on [ 270.098731][T13098] smc: adding ib device sz1 with port count 1 [ 270.110774][T13098] smc: ib device sz1 port 1 has pnetid [ 270.114572][T13098] lo speed is unknown, defaulting to 1000 [ 270.118259][ T54] lo speed is unknown, defaulting to 1000 [ 270.168122][T13110] fido_id[13110]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.288826][T13098] lo speed is unknown, defaulting to 1000 [ 270.293541][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 270.299374][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 270.303269][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 270.397071][T13120] syzkaller0: entered promiscuous mode [ 270.404655][T13120] syzkaller0: entered allmulticast mode [ 270.408318][T13098] lo speed is unknown, defaulting to 1000 [ 271.493888][ T5327] Bluetooth: hci0: command 0x0419 tx timeout [ 271.812557][ T5327] Bluetooth: hci4: command 0x206a tx timeout [ 271.815454][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 272.339348][T13098] lo speed is unknown, defaulting to 1000 [ 272.413399][ T54] usb 6-1: USB disconnect, device number 36 [ 272.554495][T13098] lo speed is unknown, defaulting to 1000 [ 272.575406][T13147] pim6reg: entered allmulticast mode [ 272.588861][T13147] bridge0: entered allmulticast mode [ 272.687511][T13154] bond0: entered promiscuous mode [ 272.690025][T13154] bond_slave_0: entered promiscuous mode [ 272.692060][T13154] bond_slave_1: entered promiscuous mode [ 272.694156][T13154] dummy0: entered promiscuous mode [ 272.703103][T13154] bond0: entered allmulticast mode [ 272.705046][T13154] bond_slave_0: entered allmulticast mode [ 272.707302][T13154] bond_slave_1: entered allmulticast mode [ 272.711451][T13154] dummy0: entered allmulticast mode [ 272.930273][T13170] dummy0: entered allmulticast mode [ 273.299708][ T29] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 273.366605][T13211] __nla_validate_parse: 15 callbacks suppressed [ 273.366627][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2250'. [ 273.456108][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2253'. [ 273.475124][ T29] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 273.489602][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.493734][ T29] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 273.496583][ T29] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 273.500064][ T29] usb 8-1: Manufacturer: syz [ 273.505526][ T29] usb 8-1: config 0 descriptor?? [ 273.597012][ T5985] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 273.603899][ T29] rc_core: IR keymap rc-hauppauge not found [ 273.606183][ T29] Registered IR keymap rc-empty [ 273.608265][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 273.608282][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.608289][ T5985] Call Trace: [ 273.608293][ T5985] [ 273.608298][ T5985] dump_stack_lvl+0x16c/0x1f0 [ 273.608336][ T5985] dump_header+0x101/0x930 [ 273.608351][ T5985] oom_kill_process+0x272/0xa40 [ 273.608363][ T5985] ? __lock_acquire+0x62e/0x1ce0 [ 273.608382][ T5985] out_of_memory+0x350/0x1700 [ 273.608397][ T5985] ? __pfx_out_of_memory+0x10/0x10 [ 273.608413][ T5985] mem_cgroup_out_of_memory+0x118/0x130 [ 273.608435][ T5985] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 273.608454][ T5985] ? do_raw_spin_unlock+0x172/0x230 [ 273.608469][ T5985] try_charge_memcg+0x72b/0xd50 [ 273.608484][ T5985] ? __pfx_try_charge_memcg+0x10/0x10 [ 273.608499][ T5985] ? find_held_lock+0x2b/0x80 [ 273.608516][ T5985] charge_memcg+0x8a/0x230 [ 273.608528][ T5985] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 273.608568][ T5985] __read_swap_cache_async+0x43e/0x5a0 [ 273.608601][ T5985] ? __pfx___read_swap_cache_async+0x10/0x10 [ 273.608619][ T5985] ? swp_swap_info+0xce/0x130 [ 273.608632][ T5985] ? __pfx_swp_swap_info+0x10/0x10 [ 273.608649][ T5985] swap_cluster_readahead+0x3eb/0x710 [ 273.608670][ T5985] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 273.608687][ T5985] ? css_rstat_updated+0x1c2/0x510 [ 273.608711][ T5985] ? get_vma_policy+0x242/0x3c0 [ 273.608726][ T5985] swapin_readahead+0x13a/0xd60 [ 273.608747][ T5985] ? __pfx_swapin_readahead+0x10/0x10 [ 273.608766][ T5985] ? __filemap_get_folio+0x32b/0xc30 [ 273.608802][ T5985] ? swap_cache_get_folio+0x1df/0x450 [ 273.608820][ T5985] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 273.608837][ T5985] ? __pfx_get_swap_device+0x10/0x10 [ 273.608849][ T5985] ? do_swap_page+0x125/0x6490 [ 273.608866][ T5985] do_swap_page+0x635/0x6490 [ 273.608882][ T5985] ? __lock_acquire+0x62e/0x1ce0 [ 273.608904][ T5985] ? __pfx_do_swap_page+0x10/0x10 [ 273.608920][ T5985] ? __pfx_default_wake_function+0x10/0x10 [ 273.608934][ T5985] ? __lock_acquire+0x62e/0x1ce0 [ 273.608953][ T5985] ? rcu_is_watching+0x12/0xc0 [ 273.608967][ T5985] ? ___pte_offset_map+0x2ad/0x4f0 [ 273.608983][ T5985] __handle_mm_fault+0x1719/0x2a50 [ 273.609005][ T5985] ? __pfx___handle_mm_fault+0x10/0x10 [ 273.609026][ T5985] ? lock_vma_under_rcu+0x1eb/0x530 [ 273.609047][ T5985] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 273.609063][ T5985] ? get_timespec64+0x147/0x240 [ 273.609083][ T5985] handle_mm_fault+0x589/0xd10 [ 273.609100][ T5985] ? __bpf_trace_exceptions+0x1/0x40 [ 273.609120][ T5985] do_user_addr_fault+0x60c/0x1370 [ 273.609132][ T5985] ? rcu_is_watching+0x12/0xc0 [ 273.609147][ T5985] exc_page_fault+0x5c/0xb0 [ 273.609167][ T5985] asm_exc_page_fault+0x26/0x30 [ 273.609178][ T5985] RIP: 0033:0x7f71f8fc14a8 [ 273.609188][ T5985] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 273.609199][ T5985] RSP: 002b:00007ffc8fd0edf0 EFLAGS: 00010293 [ 273.609208][ T5985] RAX: 0000000000000000 RBX: 0000000000000585 RCX: 00007f71f8fc14a5 [ 273.609215][ T5985] RDX: 00007ffc8fd0ee30 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.609222][ T5985] RBP: 00007ffc8fd0ee9c R08: 0000000000000000 R09: 0000000000000000 [ 273.609228][ T5985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 273.609235][ T5985] R13: 00000000000927c0 R14: 0000000000042b9a R15: 00007ffc8fd0eef0 [ 273.609249][ T5985] [ 273.609265][ T5985] memory: usage 302260kB, limit 307200kB, failcnt 2295 [ 273.782802][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 273.789709][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input37 [ 273.796312][ T5985] memory+swap: usage 221876kB, limit 9007199254740988kB, failcnt 0 [ 273.805665][ T5985] kmem: usage 217232kB, limit 9007199254740988kB, failcnt 0 [ 273.808859][ T5985] Memory cgroup stats for /syz0: [ 273.809196][ T5985] cache 0 [ 273.812869][ T5985] rss 0 [ 273.814244][ T5985] rss_huge 0 [ 273.816012][ T5985] shmem 0 [ 273.817663][ T5985] mapped_file 0 [ 273.820145][ T5985] dirty 0 [ 273.866614][ T5985] writeback 0 [ 273.868039][ T5985] workingset_refault_anon 77 [ 273.870396][ T5985] workingset_refault_file 67 [ 273.872286][ T5985] swap 221184 [ 273.879483][ T5985] swapcached 0 [ 273.880813][ T5985] pgpgin 141743 [ 273.882103][ T5985] pgpgout 141743 [ 273.883407][ T5985] pgfault 185821 [ 273.884770][ T5985] pgmajfault 115 [ 273.886149][ T5985] inactive_anon 0 [ 273.887567][ T5985] active_anon 0 [ 273.889176][ T5985] inactive_file 0 [ 273.890516][ T5985] active_file 0 [ 273.891877][ T5985] unevictable 0 [ 273.893140][ T5985] hierarchical_memory_limit 314572800 [ 273.895006][ T5985] hierarchical_memsw_limit 9223372036854771712 [ 273.900239][ T5985] total_cache 0 [ 273.901743][ T5985] total_rss 0 [ 273.902961][ T5985] total_rss_huge 0 [ 273.904249][ T5985] total_shmem 0 [ 273.908143][ T5985] total_mapped_file 0 [ 273.913272][ T5985] total_dirty 0 [ 273.918894][ T5985] total_writeback 0 [ 273.920155][ T5985] total_workingset_refault_anon 77 [ 273.921807][ T5985] total_workingset_refault_file 67 [ 273.923682][ T5985] total_swap 221184 [ 273.924991][ T5985] total_swapcached 0 [ 273.926360][ T5985] total_pgpgin 141743 [ 273.927685][ T5985] total_pgpgout 141743 [ 273.929936][ T5985] total_pgfault 185821 [ 273.931609][ T5985] total_pgmajfault 115 [ 273.933204][ T5985] total_inactive_anon 0 [ 273.934788][ T5985] total_active_anon 0 [ 273.936129][ T5985] total_inactive_file 0 [ 273.937479][ T5985] total_active_file 0 [ 273.939293][ T5985] total_unevictable 0 [ 273.940598][ T5985] anon_cost 0 [ 273.941680][ T5985] file_cost 0 [ 273.942775][ T5985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2229,pid=13148,uid=0 [ 273.950258][ T5985] Memory cgroup out of memory: Killed process 13149 (syz.0.2229) total-vm:102092kB, anon-rss:992kB, file-rss:23720kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 274.113723][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'. [ 274.168961][ T40] kauditd_printk_skb: 227 callbacks suppressed [ 274.168973][ T40] audit: type=1400 audit(1756441110.250:1632): avc: denied { read } for pid=13274 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.189201][ T40] audit: type=1400 audit(1756441110.260:1633): avc: denied { prog_load } for pid=13278 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 274.196045][ T40] audit: type=1400 audit(1756441110.260:1634): avc: denied { bpf } for pid=13278 comm="syz.4.2264" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.204077][ T40] audit: type=1400 audit(1756441110.260:1635): avc: denied { create } for pid=13278 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.223138][ T40] audit: type=1400 audit(1756441110.300:1636): avc: denied { sys_module } for pid=13275 comm="syz.1.2263" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.238311][ T40] audit: type=1400 audit(1756441110.300:1637): avc: denied { module_request } for pid=13275 comm="syz.1.2263" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 274.431741][ T40] audit: type=1400 audit(1756441110.510:1638): avc: denied { append } for pid=13286 comm="syz.0.2257" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.440839][ T40] audit: type=1400 audit(1756441110.510:1639): avc: denied { open } for pid=13286 comm="syz.0.2257" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.449748][ T56] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [] on [ 274.450475][ T40] audit: type=1400 audit(1756441110.510:1640): avc: denied { ioctl } for pid=13286 comm="syz.0.2257" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.462208][ T40] audit: type=1400 audit(1756441110.510:1641): avc: denied { relabelfrom } for pid=13288 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 274.521099][T13292] fido_id[13292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 274.531694][ T5984] Bluetooth: hci0: command 0x0419 tx timeout [ 274.535766][ T5327] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 274.611985][T13302] 9pnet_fd: p9_fd_create_tcp (13302): problem connecting socket to 127.0.0.1 [ 274.732063][ T842] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [] on [ 274.920380][ T56] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 275.048499][ T56] usb 9-1: device descriptor read/64, error -71 [ 275.051952][T13324] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 275.135369][T13327] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 275.168469][ T5987] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 275.168732][ T5327] Bluetooth: hci2: command 0x206a tx timeout [ 275.173485][ T5987] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 275.199180][T13329] fuse: Bad value for 'fd' [ 275.298286][ T56] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 275.429117][ T56] usb 9-1: device descriptor read/64, error -71 [ 275.540835][ T56] usb usb9-port1: attempt power cycle [ 275.601293][T13344] syzkaller0: entered promiscuous mode [ 275.603941][T13344] syzkaller0: entered allmulticast mode [ 275.608146][ T8966] syzkaller0: tun_net_xmit 48 [ 275.898589][ T56] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 275.919441][ T56] usb 9-1: device descriptor read/8, error -71 [ 276.158541][ T56] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 276.180129][ T56] usb 9-1: device descriptor read/8, error -71 [ 276.208384][ T5976] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 276.213552][ T5976] Bluetooth: hci4: command 0x206a tx timeout [ 276.299742][ T56] usb usb9-port1: unable to enumerate USB device [ 277.249482][ T5976] Bluetooth: hci2: command 0x206a tx timeout [ 277.249519][ T5987] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 277.258415][ T5987] Bluetooth: hci3: command 0x0401 tx timeout [ 277.368797][ T29] usb 8-1: USB disconnect, device number 31 [ 277.575551][T13369] fuse: Bad value for 'fd' [ 277.605578][T13371] overlayfs: conflicting options: userxattr,redirect_dir=on [ 277.730875][T13381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2296'. [ 277.767655][T13386] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 277.996333][T13403] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2305'. [ 278.009913][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2306'. [ 278.029639][T13408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2307'. [ 278.161957][T13422] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2312'. [ 278.288129][T13430] binder: BINDER_SET_CONTEXT_MGR already set [ 278.291606][T13430] binder: 13428:13430 ioctl 4018620d 2000000000c0 returned -16 [ 278.305307][T13430] binder_alloc: binder_alloc_mmap_handler: 13428 200000ffd000-200001000000 already mapped failed -16 [ 278.312679][T13429] binder_alloc: 13428: binder_alloc_buf, no vma [ 278.316000][T13429] binder: 13428:13429 ioctl c0306201 200000000240 returned -11 [ 278.358631][T13443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2317'. [ 278.652221][T13472] wireguard0: entered promiscuous mode [ 278.654675][T13472] wireguard0: entered allmulticast mode [ 278.693808][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 278.747163][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 278.798529][T13478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2326'. [ 278.815199][T13476] team_slave_0 (unregistering): left promiscuous mode [ 278.819849][T13476] team0: Port device team_slave_0 removed [ 278.826724][T13477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.830752][T13477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.843764][T13477] bond0: (slave batadv0): Releasing backup interface [ 278.846977][T13477] batadv0 (unregistering): left promiscuous mode [ 278.849873][T13477] batadv0 (unregistering): left allmulticast mode [ 278.965119][T13437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.969472][ T5976] Bluetooth: hci3: Opcode 0x206a failed: -112 [ 278.972544][T13437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.974767][T13437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.976719][T13437] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 278.982245][T13437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.986074][T13437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.991377][T13437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.035686][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 279.074171][T13489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2330'. [ 279.089867][T13491] netlink: 'syz.0.2332': attribute type 10 has an invalid length. [ 279.093203][T13491] bond0: (slave wlan1): Opening slave failed [ 279.186195][T13501] syzkaller0: entered promiscuous mode [ 279.188957][T13501] syzkaller0: entered allmulticast mode [ 279.192341][ T8960] syzkaller0: tun_net_xmit 48 [ 279.221975][ T40] kauditd_printk_skb: 174 callbacks suppressed [ 279.221987][ T40] audit: type=1400 audit(1756441115.300:1816): avc: denied { block_suspend } for pid=13503 comm="syz.0.2336" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.283345][ T40] audit: type=1400 audit(1756441115.360:1817): avc: denied { write } for pid=13505 comm="syz.4.2338" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.323574][ T40] audit: type=1400 audit(1756441115.400:1818): avc: denied { create } for pid=13506 comm="syz.0.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.333216][ T40] audit: type=1400 audit(1756441115.400:1819): avc: denied { ioctl } for pid=13506 comm="syz.0.2337" path="socket:[49211]" dev="sockfs" ino=49211 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.360556][ T56] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 279.510169][ T56] usb 6-1: config 0 has no interfaces? [ 279.513828][ T56] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 279.517255][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.520236][ T56] usb 6-1: Product: syz [ 279.521697][ T56] usb 6-1: Manufacturer: syz [ 279.523642][ T56] usb 6-1: SerialNumber: syz [ 279.528612][ T56] usb 6-1: config 0 descriptor?? [ 280.448423][ T5976] Bluetooth: hci2: command 0x206a tx timeout [ 280.943641][T13487] lo speed is unknown, defaulting to 1000 [ 280.951226][T13508] ipip0: entered promiscuous mode [ 280.985899][ T40] audit: type=1400 audit(1756441117.060:1820): avc: denied { read write } for pid=13517 comm="syz.4.2339" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 280.994130][ T40] audit: type=1400 audit(1756441117.060:1821): avc: denied { open } for pid=13517 comm="syz.4.2339" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 281.018410][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 281.018492][ T5987] Bluetooth: hci4: command 0x206a tx timeout [ 281.020259][ T5976] Bluetooth: hci3: command 0x0401 tx timeout [ 281.029669][ T40] audit: type=1400 audit(1756441117.110:1822): avc: denied { create } for pid=13520 comm="syz.3.2340" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 281.037250][ T40] audit: type=1400 audit(1756441117.110:1823): avc: denied { create } for pid=13520 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.045183][ T40] audit: type=1400 audit(1756441117.110:1824): avc: denied { setopt } for pid=13520 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.054682][ T40] audit: type=1400 audit(1756441117.110:1825): avc: denied { ioctl } for pid=13520 comm="syz.3.2340" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47104 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 281.056695][T13523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2341'. [ 281.084983][T13524] QAT: Invalid ioctl -2144835806 [ 281.090829][T13524] netlink: 'syz.3.2340': attribute type 16 has an invalid length. [ 281.093554][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'. [ 281.093563][T13524] netlink: 'syz.3.2340': attribute type 17 has an invalid length. [ 281.135813][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.138949][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.147769][T13531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2344'. [ 281.161387][T13524] dummy0: left allmulticast mode [ 281.225829][T13524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.234809][T13524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.246848][T13534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2345'. [ 281.298569][T13524] geneve2: left promiscuous mode [ 281.300275][T13524] geneve2: left allmulticast mode [ 281.374248][ T56] usb 6-1: USB disconnect, device number 37 [ 281.486494][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2347'. [ 281.944712][T13572] Bluetooth: MGMT ver 1.23 [ 282.195005][T13596] QAT: Invalid ioctl -2144835806 [ 282.199000][T13596] ------------[ cut here ]------------ [ 282.200820][T13596] WARNING: CPU: 2 PID: 13596 at fs/exec.c:118 path_noexec+0x1ca/0x230 [ 282.203432][T13596] Modules linked in: [ 282.205554][T13596] CPU: 2 UID: 0 PID: 13596 Comm: syz.3.2363 Not tainted syzkaller #0 PREEMPT(full) [ 282.211466][T13596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.215001][T13596] RIP: 0010:path_noexec+0x1ca/0x230 [ 282.216696][T13596] Code: ff 83 e3 02 48 89 de e8 b4 6b 85 ff 48 85 db 41 0f 95 c4 e8 38 70 85 ff 44 89 e0 5b 5d 41 5c e9 0c 95 60 09 e8 27 70 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 cb eb ff e9 a8 fe ff ff e8 7f cb eb [ 282.222910][T13596] RSP: 0018:ffffc90005877c70 EFLAGS: 00010283 [ 282.225039][T13596] RAX: 00000000000000bc RBX: ffff888021ffe1e0 RCX: ffffc90025cf1000 [ 282.227931][T13596] RDX: 0000000000080000 RSI: ffffffff82361bd9 RDI: 0000000000000007 [ 282.231299][T13596] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 282.234117][T13596] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000ffd000 [ 282.237340][T13596] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000000000d1 [ 282.241869][T13596] FS: 00007f413a0306c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 282.246025][T13596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.248550][T13596] CR2: 0000001b31f23ffc CR3: 00000000339fa000 CR4: 0000000000352ef0 [ 282.251222][T13596] Call Trace: [ 282.252491][T13596] [ 282.253575][T13596] do_mmap+0xd23/0x1210 [ 282.255369][T13596] ? __pfx_do_mmap+0x10/0x10 [ 282.257460][T13596] ? __pfx_down_write_killable+0x10/0x10 [ 282.260177][T13596] vm_mmap_pgoff+0x29e/0x470 [ 282.262605][T13596] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 282.265453][T13596] ? __fget_files+0x20e/0x3c0 [ 282.267597][T13596] ksys_mmap_pgoff+0x32c/0x5c0 [ 282.269897][T13596] __x64_sys_mmap+0x125/0x190 [ 282.271912][T13596] do_syscall_64+0xcd/0x4c0 [ 282.274041][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.276193][T13594] lo speed is unknown, defaulting to 1000 [ 282.276783][T13596] RIP: 0033:0x7f413918ebe9 [ 282.281434][T13596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.290937][T13596] RSP: 002b:00007f413a030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 282.294357][T13596] RAX: ffffffffffffffda RBX: 00007f41393b5fa0 RCX: 00007f413918ebe9 [ 282.296890][T13596] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 282.299527][T13596] RBP: 00007f4139211e19 R08: 0000000000000005 R09: 0000000000000000 [ 282.302334][T13596] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 282.305512][T13596] R13: 00007f41393b6038 R14: 00007f41393b5fa0 R15: 00007ffc5c807728 [ 282.308395][T13596] [ 282.309575][T13596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.311829][T13596] CPU: 2 UID: 0 PID: 13596 Comm: syz.3.2363 Not tainted syzkaller #0 PREEMPT(full) [ 282.314857][T13596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.318370][T13596] Call Trace: [ 282.319578][T13596] [ 282.321013][T13596] dump_stack_lvl+0x3d/0x1f0 [ 282.322806][T13596] vpanic+0x6e8/0x7a0 [ 282.324502][T13596] ? __pfx_vpanic+0x10/0x10 [ 282.326621][T13596] ? path_noexec+0x1ca/0x230 [ 282.328330][T13596] panic+0xca/0xd0 [ 282.329829][T13596] ? __pfx_panic+0x10/0x10 [ 282.331424][T13596] check_panic_on_warn+0xab/0xb0 [ 282.333558][T13596] __warn+0xf6/0x3c0 [ 282.335222][T13596] ? path_noexec+0x1ca/0x230 [ 282.337190][T13596] report_bug+0x3c3/0x580 [ 282.339365][T13596] ? path_noexec+0x1ca/0x230 [ 282.342190][T13596] handle_bug+0x184/0x210 [ 282.344512][T13596] exc_invalid_op+0x17/0x50 [ 282.346860][T13596] asm_exc_invalid_op+0x1a/0x20 [ 282.349148][T13596] RIP: 0010:path_noexec+0x1ca/0x230 [ 282.351352][T13596] Code: ff 83 e3 02 48 89 de e8 b4 6b 85 ff 48 85 db 41 0f 95 c4 e8 38 70 85 ff 44 89 e0 5b 5d 41 5c e9 0c 95 60 09 e8 27 70 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 cb eb ff e9 a8 fe ff ff e8 7f cb eb [ 282.359975][T13596] RSP: 0018:ffffc90005877c70 EFLAGS: 00010283 [ 282.363036][T13596] RAX: 00000000000000bc RBX: ffff888021ffe1e0 RCX: ffffc90025cf1000 [ 282.367411][T13596] RDX: 0000000000080000 RSI: ffffffff82361bd9 RDI: 0000000000000007 [ 282.370863][T13596] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 282.374312][T13596] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000ffd000 [ 282.377729][T13596] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000000000d1 [ 282.381608][T13596] ? path_noexec+0x1c9/0x230 [ 282.384030][T13596] do_mmap+0xd23/0x1210 [ 282.385955][T13596] ? __pfx_do_mmap+0x10/0x10 [ 282.388049][T13596] ? __pfx_down_write_killable+0x10/0x10 [ 282.390626][T13596] vm_mmap_pgoff+0x29e/0x470 [ 282.392760][T13596] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 282.395158][T13596] ? __fget_files+0x20e/0x3c0 [ 282.397416][T13596] ksys_mmap_pgoff+0x32c/0x5c0 [ 282.399849][T13596] __x64_sys_mmap+0x125/0x190 [ 282.402002][T13596] do_syscall_64+0xcd/0x4c0 [ 282.403965][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.406569][T13596] RIP: 0033:0x7f413918ebe9 [ 282.408350][T13596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.417062][T13596] RSP: 002b:00007f413a030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 282.420578][T13596] RAX: ffffffffffffffda RBX: 00007f41393b5fa0 RCX: 00007f413918ebe9 [ 282.424620][T13596] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 282.428567][T13596] RBP: 00007f4139211e19 R08: 0000000000000005 R09: 0000000000000000 [ 282.432269][T13596] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 282.435581][T13596] R13: 00007f41393b6038 R14: 00007f41393b5fa0 R15: 00007ffc5c807728 [ 282.439169][T13596] [ 282.441519][T13596] Kernel Offset: disabled [ 282.443774][T13596] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:18:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000544e65 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=0000000000000000 RSI=ffffffff8de50328 RDI=ffffffff8c162900 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555568dc3808 CR3=0000000061c58000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8fd0efe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8fd0efe6 00007ffc8fd0efec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71f9012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71f9012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71f9012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71f9012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71f9012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71f9012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b67745962f9fe1c 70b92480b54d3741 3919950ca4bc7f9b 005f5f0000000004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c762fcbd107ebd5c 02cf6ee78b677459 62f9fe1c70b90004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4bc7f9b005f5f00 000000040f000000 0000000200000004 0000000c000b970c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000008 RCX=ffffffff8b8cfbee RDX=1ffff1100607ff02 RSI=ffffffff8b8cfc2d RDI=0000000000000000 RBP=ffff8880303ff800 RSP=ffffc9000608fa18 R8 =0000000000000000 R9 =0000000000000001 R10=000000000000000e R11=0000000000000000 R12=0000000000000001 R13=ffffc9000608fb70 R14=00007fdd43bebfff R15=ffffc9000608fbad RIP=ffffffff81bb8c08 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555568dc3500 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000003c0 CR3=0000000033b3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36abfa00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36abfda6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36abfda6 00007ffd36abfdac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd43c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd43c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd43c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd43c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd43c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdd43c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc900058775e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b111060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f413a0306c0 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31f23ffc CR3=00000000339fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c807c36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5c807c36 00007ffc5c807c3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41393874a8 00007f41393874a0 00007f4139387498 00007f4139387470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4139eed100 00007f4139387460 00007f4139387478 00007f41393874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41393874b8 00007f41393874b0 00007f41393874a8 00007f41393874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8e5c1220 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff816ae581 RDI=fffffbfff1cb8244 RBP=ffffffff8e5c1220 RSP=ffffc900059ceff8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000004 R11=00000000000a9350 R12=ffffffff816ae581 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8221e1d8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa834db06c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa8341b7dac CR3=000000005fd94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 0937000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00430000000008d2 4d00000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000cffffff660000 0000030000000000 00160000000cffff ff52000000000700 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000008ffff ff02000003e60000 0008000400000008 0008000000240000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003c000000540000 00200000006c0000 0080000000940000 00a8000000bc0000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d0000000e40000 0108000001200000 0134000001540000 000f000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030000000000005f 0000000cffffffea 0000000003000000 00000008ffffff9a ZMM25=95cb1c1b95cb1c1b 95cb1c1b95cb1c1b 95cb1c1b95cb1c1b 95cb1c1b95cb1c1b 95cb1c1b95cb1c1b 95cb1c1b95cb1c1b 95cb1c1b95cb1c1b 95cb1c1b95cb1c1b ZMM26=a00e5e79a00e5e79 a00e5e79a00e5e79 a00e5e79a00e5e79 a00e5e79a00e5e79 a00e5e79a00e5e79 a00e5e79a00e5e79 a00e5e79a00e5e79 a00e5e79a00e5e79 ZMM27=95e253b495e253b4 95e253b495e253b4 95e253b495e253b4 95e253b495e253b4 95e253b495e253b4 95e253b495e253b4 95e253b495e253b4 95e253b495e253b4 ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2a0b00002a0b0000 2a0b00002a0b0000 2a0b00002a0b0000 2a0b00002a0b0000 2a0b00002a0b0000 2a0b00002a0b0000 2a0b00002a0b0000 2a0b00002a0b0000