last executing test programs: 51.891163101s ago: executing program 3 (id=2208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) umount2(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xd) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 51.826469183s ago: executing program 3 (id=2210): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{0x0, 0x12}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000000)={0x3, 0x0, 0x2c0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00009e9000/0x2000)=nil, &(0x7f0000be3000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000cc3000/0x1000)=nil, &(0x7f0000c1f000/0x4000)=nil, &(0x7f0000914000/0x4000)=nil, &(0x7f0000000380)="580b2df0cd7516579ad5671c6251111e4e02bd42832fe1b6e56b403fcc6cfe45b6fbac4ca71712bc112ab4a00acf6ec26774612a2506643e7f478b08816b092194fdde1be16ee91b146208ba45e05a48a7e09fadde7fdfa6b367d77ad69b897b0dd8195104f7349c26595a2c860698be61baac1c61baba60fa158acc3d2c89236332cd051095d30126c24d98fb0a03a8fafc71f74daf0e8da84aa1356f519bf83dd7890c6f65269c4f77439eb3e8fe4e9352622ab8410a3927c2bdc2805d30b8bea84eecc22a691995ee5b0be1db0a9e11387a909423b3ba58575b55e9c0f3088a4cdb52e33b7953b2ee056e81d544f289fb028ff275bfa8b85f11e8c6a590516536015bc8d69a3ffa7ea2ee39d6f4485b9895867d1394659d400598c2ac42075809696e5e22f0e9d9059c3134412466e71a11ecebae5cc27e85bf9e1883fda523f03d38fb8d4f3e58e778a585a40e38144ce1a819f8bb51c5cebc813de8ca0cdeb2de05d6a377e30b324cb3ff34be77a5b30848438ba81bae0a2728465d19e0f986b62738d066d949d292b9eee3972af46c82eec465b85e50c35bd0468f628ba42ff08b158327088ace5fb5363dd6fb9f9b3c85472442b1a0f0315ddbac2c2477f3b212454283273a4e0bc5cf47ee2cfaf0eb02ddb95ff4f647d58abad5c90e755265ff192ceda06c7e4c695bc28b3ebef7464988bb99379c65b09ebe04c4d8c360a0c61e132a6c5a9e99a74670d587d0a8cf9bdd4365bbe58baa255386112527ddf31eb7decb589511e7e4af5921308ea8742751f508e74c3765754a6d2fd34006dbf94d0c3d2fc579f5a80c44571c6ef5c0115d679902be711044e3eae96744423caf1e304f55262dea1fd34e06190e9bf56134b85a5c4f4c72191ffe79757351ffaf5f5648b94663aa32f8b41f81545bb0db2d9c0ee621d5da1324f8052c28d387645dad81cdc1597da0b0a1d70a6c44dcce0af429da7061483551bfb8e3d3b8ed407d7cc0680bfb1db864746b8edf230f13cd00a37e3dc51a49f2596a515fc8f5fc97b1bb85b644dfd195be7ec30be749b2af28b995eb0eb3bcbbf7bac9164703b6aeaf58e8aee0046387bd53572b268b5907284d512f186019047629942f1e9491c6475dfba941978b005d25235da16d87426a9924b0f167d1a5a262ac7c69fa5763cb48bad651a6e64a8f5fb9cf4395ce6f0db4f58fd662bc4d9d96bd536f5188e7f8a69480605f491bd73345ffd9c8bac3b296ec952cc5adcc15565f22780a538424a23462ec7ea65a44656090843eeb5ebc18c63f0501c3b5f55942729294ac697cdb66ce997b60b833311a78097ba05c18fe469b7ddaba897badb5bc4a49b37181d8350dbd15486a0f365d97dc0131cc25986f72322463157e546414964b47e433d9ed50cf7e092c89835ebde2b6ba6150100b4811152660f74923f2fc725e35d63044644bc3e9f991f25a6552cc4bdbf160f8d9e03ee010b4e2ca4add39d09c8b5087a03add3060f2a323841b21724b253b54427fcb5161c96c9a75c2a187b32f0b06a2fc5ac29331e120a3c3b38313fc02e42086f065ea0e67231a6f09b4e1997a0f93287ea82d22256665220b2fcb4db48c202a85b2cf2dfc5a22f2f880998e0a2bfe7d107406ed45e50796a05b488c0cee6bc761c9148a17a5666b7e8bf89becde3f34ad0e070d12c73832a3f113037f99d8dede5e4ba29a755cb5b899d0ac6e2573869dae098f94bc50b1ac7e6bccde28817fd63547e385aaaf978c618714deded21d651c1735ffa9c0c47179e4f21afac22be3a30231b5ab3245461367e31dd165c6b2c5c73801b668cfca7d535eb1a1a6ad8114a8b275c612539349c89c5a6cf4f699a2547b42c1ee5af106d13f098e4dbb83cf89cb4402eb7a17b82406abf2982251600fe08d7781bf7450af6dc5f71455b815ba4efbf767a67a62326be5b1c524e977233e66924aa6c910dd2feba927f441821e56b75485fab4d17628485ecdb7b68510f55059fb907a3beb33b2bb1c654eb6176999c24f02ee03279046e24012adab587444e6e8fc39ed99ad917bb4a1f0faab9dca65368aba8beab997fff93728f9367ee79a4e256f7c4c66990452393369c35fefb7355a0530a30d00401400253179ac44162eed83ea1da0db1de3d4e01a127078723c5471dbf6bf59e9943d8b9cd7334c2db5ade6a22c6629b94f40803b4075edbe00b1823cfe2b94be5ebbf6eb24df100ca213845f6f600bcd9e1859ae20a8df56573aa2d53aab2c595dcbc4b0590d2a02e4a23479083412f303ad48b15859038073f41eaa26e0b12a42d73eb1a7aca8604a34f255549363be910305f92b0508b1708377659b2eb78be30525a275c1793c70a66dfff7b27c8bdd9809184e7c8fc51c9d182e6af63955b77728e1e7f8893d86028601002a756769307898bac0985e56f1b11b8713bc25a4334a1e1dd004308841b986d99e45b82a7eeaf82632d80a8d47a6090a5792978162ad3a570844f64ed5b64dbcaffb6c0775c93abb9051ab81ad797b86097e1a5291e2e8282538b1a4e04684de755831c7729bd63e71a8a8e26e47b74e9b8c9d3fecee8acbd5323e70ac30ed08dd54163e34f03dcea989bfa32e750b744d3fdeea033571e42052a01bc9b386c754a5ef84416fc6e20eb95c472bb59c5c260578b9b67310e95a0f6b4f3e717109d88157d7c3ebe7641c72bab3dd7ebaf1aeff58b42aa659746dc6f70b618948a5a4bc044667d5ae6eb9c464b6885e9106a3a415ad2ef919f8dcf4118491edc89c30ee4daa6f8de230e2f0f1e30065b96ce5db3a8c52a89bd62153e20420028e4a72bce319e5b56874d525892b3c132fae22fc126fe103fbed778cd49b0782913cbd12aefdd018c5a3f0cb93f93cd9dddd03923b7eb52122ae00773aa7bb9a1228178533bc438c8e86f28b6e3b5f6c313d76755269f06bd154260cf7ce52ea941de8a0ded67255b1eaba8d679975ddd3fb081d681664656aea12bfb8ad271992ac4f6b22b2cb1e48e25c928ef58ca4a946213d3a2c0fde46f92e3c6e0a2dcde20386df55b83af1b485d718101dd17a709d9d96e013ceae10c7742915ce383ded1bfd7b9e710ed9c60254c41e31ad36c3f3d2fe1ad00b182ebc98bba907eb0167c61896a8c3f5e05272fc5c6806a33b13a94e5a3024e921348ed8433a25d655b94cd0a36d3e914cd3a0dfd2c3657c869dbc02fea0e93e882a2aed11952f993c0be22baddaab78f952777c3ca971b436ed887512c92625b200be2d2d51967f3dd908536afb6cf74edce2465ece2b58d62225e53c29660661a95e8a2313b0f4e545cf832e9fd054e892042c31993e755cf5ebb07f224184adacba2eb1db3d50c39983f77525dee09e21fa3cbe416527a2a09c2a6abeb395b3466e1a0d376e3c10831e9f5305acc8e61db8a2d71fdd52e41c7e8f241e41a7c5bd8ab81689bd4dbf834df1b3d414030b7dba5134cd444344b23b5adb66a2a77fbee755f5dfe7e434fe1899c1835b3fd2fa3d75f502d4bd875e8dcc91505f3605caac8267aba6771445eb2ba532f410d185510193f718a39047674c285898e4ebc14167d7de24efc42b4278064508beedf6e4ef52c71d8e2a42ae87405a09a591f22e6b8ec13a5e7cd21d76c3bd39b307e2e2ae1e1152fb38aabee38df64d149225fd352963ee2de72194e2c8560f1c6fd57e84134e4fc3239367cc969e81d44fd5099101cda1c10699b3fd5e7cf25a49519d86c2aa17162ea09c1533f4dbff024d22727665fc0039cbb8225e27013f233939f9884896da6d4efa93f1bcf5189a3a44c499a672c7e602041e6efa919758af781720afff9a21bb8c6a59ca387a6ef6907a09e1f45ed6f001a67d8e31c1ef611a7ae3ea6b8c8e7b2056d3ee933a85cc2979e40030a19f8be56c21498b51eb8ba1c592857d21e7b2e2820bb900a32198f97a17612f5590ac44e2eb9a6671abed160585088c5bb2b7fe4092d65120eca98f9f9859b31ff5f15b45300350e9f704ee8ad494647672252078a7e8a65be796ba26e844e7a7b5857a6250cc889ae83304d0f88edf74cba4239382b29597479ac38f1943e78cce06be15a642177b26c652463b7281d7ae8f0ec6c785a1a45a087ecbd7582a55ef36f307109feb29dce5948140a1bed3225fb0f54cc42d62e982c45c0c383c7b203dd12933c210ddab9f67755dd71bcebdd2b28441b07f3e4413de29f25d00c233a4b2019037aad79c68324ebb6e0997fe731b6c653123e5085d7c28b252277c10ad1b735b80b679573e6e0098c15314be1e1b098a62f0500e7543b74f4fd33da434a396571fbd0c20dbea2e485ba57307cb071f498d41e62f92420be46dedc159cb51bfc4ee16231b291f85a26c163a7e82bdec958f3a55b3a48656367a0c79bb5e51c6ab9bf878e039984d1d01e778ef1cd2a3bae8b0735b299adbae1d7ea4a00d1d2ad98a70838e2b89155737d112ce7d8dff6fafe7a96d5532e00875d1fea9cc06d2830138a9863db69cdd295462ffae1981fd5eb47e4ed91bbde42ecfa6f5b742794b5be09d386807d7ab5cfc600f880968c8b5965fb2b4316843fe98216770d01100330ac98fe299a0d40a742e63d0bae5f56b37ad24bedba8b4b86e4262b79579936671471f41560470482d94ca0a410d2f519851b39b0207a60a893a17c33d89041bfa49ff868c63674eeaf4f8309ffd60909a2b02b155f3103cb97c64097284ae7a4f31484a0d26f650f97b3c792124ad57289cef44a30385d30eb6c563efde3621e025e1556a19dbb49bf42c9ee15c7fac3f1910dab4afaf4c56782533ffbd3e205a5b60712e20e43a78315c9e4eaf012aab5d2d1dcb216f0a56c60329c2bd03bf99dfad5ce006756deb4423ca45adba2a5c1f4041639fe1c5d109e77a106a4d85f89cb153aa144cc4a29a4a184ac42be1f32738fbf8201a93e8cb66ce9db0aadf30bd2605fb6cdbc4d647b076369896a2d865d10dad70f9fe5f636456d8ca85e1951392b83f1b49738b90a213ace13dc1c95bcae39e633dadc44dd29c3474cf402f43f01b115fdfc1d9460cca477e3a835a3e5cddb07ec167101d99aa322f350a6736943400106219d4b8ef7f75d7b6d260578ec472bf781dcd0a2957ec7da564d080da5e443bc4d8e8ccd5e16d79412771ee9a250db969aff24028cf34387c3cb860f5fa09fc0b55c05e442c53484b7f078aeea37c138dd2fbd2fcad5d129e184ec6874ca26e8e8645d449c116584c3d154d8434b3178182e6a7a27590f049b3a23d59d88f81a0c93ec026b91eca53fdf954c54c2f5831ca6942a86743244f9c648153c2115058eba5b748f3cd0d6091889e1259e503e1adc27f13b648ba99ce4c5fa387aa8b9a4e605f127ed8d529395fe3edad76244a19198048e48cf83d1e5e01c4d1bb4ac0390dd3d6dc04fc2966a0e2f82184545e78e340b7dcdb48b1444ce920f67e8488359673ee5390289b6db78cf56fdcb4c9d15b376f85f8083e27197f99e5c8e307a6b297156a641cce3db5841cdc65eb464d12ff90126a71953c7071752688750753a3ea71c8cd95c91668ba114aee1939c5d12568b7b101c39ab04fd5fbca7264864e384c1dd20b69c7b43e0a2a4f28419c3d0b3838a04c792d63f7a2ee4d8ecb1d76124583d1109c88cdb3180d873ecef74163f425775cebae5959c5f46c1393a9fbc5e1f617444ffaf9919f1ee4805aafb2a9e00bb1d1cdf97135faf2605b70cdf1e64a586402e4f6ee8ca006278b506c5748d922e9255b21d5113698c1c2e9ed", 0x1000, r3}, 0x68) 51.556866464s ago: executing program 3 (id=2216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffdf7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x77}}, 0x9, 0x9}, &(0x7f0000000640)=0x90) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x38}}, 0x0) 50.686973407s ago: executing program 3 (id=2221): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x0, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) dup(r2) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000200)="d0f2c13a3028c25f419badebc5eba629dffd4c836f512ca2b57abe2b67a6665aedfeaa392d738e830b94958751bc4b3721b5f33c04933169a3c1dfb5534eee", 0x3f}], 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 50.615761841s ago: executing program 3 (id=2223): r0 = socket(0xa, 0x2, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x50, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0x34}}, 0x20000000) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c041) (async, rerun: 64) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0) (rerun: 64) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000100)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) read$sequencer(r1, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) chdir(&(0x7f0000000180)='./file1\x00') bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) (async) openat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x25) 50.614939261s ago: executing program 3 (id=2225): prctl$PR_SET_PDEATHSIG(0x35, 0x2) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x85000) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x10, 0x1, 0x6}}, 0x14) (async) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x10, 0x1, 0x6}}, 0x14) fsmount(r0, 0x1, 0x9) (async) r3 = fsmount(r0, 0x1, 0x9) openat$cgroup_subtree(r3, &(0x7f0000000000), 0x2, 0x0) 34.546568655s ago: executing program 32 (id=2225): prctl$PR_SET_PDEATHSIG(0x35, 0x2) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x85000) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x10, 0x1, 0x6}}, 0x14) (async) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x10, 0x1, 0x6}}, 0x14) fsmount(r0, 0x1, 0x9) (async) r3 = fsmount(r0, 0x1, 0x9) openat$cgroup_subtree(r3, &(0x7f0000000000), 0x2, 0x0) 31.940247393s ago: executing program 0 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x30, r3, 0x1, 0x10000000, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x800, 0x8}}}}, 0x30}}, 0x2009094) (async) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x50) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg(r5, &(0x7f00000004c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="b8cd7d33a4368d5490c3b2ca3cd378598d7f9a30a3af04b7a00eaa89083a2ff80ce01502dc67a4b15924ac79486e48314c1901a4f204ff7dd874b5368b084d9bfe0b189baf1e95a70f7861653738d17c0526bb3b517ee60f7ba5198d69c30ab43eff9d1bfec56651d90a898aca9a1079092344a149e54d61dba3810952d38e3afc777cd3e1af63436a0e20a77c042bf1805eb35b2444f290717cca1893a05983eb3d6211b95c49", 0xa7}, {&(0x7f0000000300)="2a56db7c43707d757f7c4084319bf7af50e171aaf98472bdff6ce82697c11b756a762a90c0509ba1c2c85a3d87fcfd0b21b14725fc90fad60c7cb3d93ccae1a9e6caac75af2d8e609400fdb2446202988f5cdea9bf548f713bdcbb3456a55c8e5eba899a6188c32c3673a15f44ac0ce97a3ccaf20daeeb4d94aa460d60e31c514c3e374442bc9a4d6efc302683da82eb6fcaadf80f1012d0c4e893d4b9dd9dabdb4ee5dcb805e5a691feb000f28f164e779af83ff7eb9eff53f1775770fff92e849e8da111b346", 0xc7}, {&(0x7f0000000400)="cd8197c51123fcdfe5a78d73743b1785347f0b18436728db3b3d4017894ceacc74a2621f4029585bfc4b12bf6c24c5c2c8261be380e5ece2a18ae7bfc02475cdaa4dd3d801a7bcd480cc6598d44bc5ebbc753d38291e05851513", 0x5a}, {&(0x7f00000005c0)}], 0x4, &(0x7f00000006c0)=[{0xb8, 0x0, 0x8, "012b18f4f88fb77c2df10750bdbe5f08005079d27fea93c3f06cfb549007ab312f42af34f98d10e879d466a8c49de12938accb84d3ded51498ee12cca3271511daa72c46cc49b00d6cfefc7f724408d1df05bb505a5d0fe45e3ec6118b74319709f94a0010f60393802cf19a4f6f35c648eaa104056360dcfff33fba36357ce9e81003f4e312d57190ea0ca30c9ae05563df9704d84ada4837e8550bda63adf14544"}, {0x98, 0x112, 0xede9, "a6b158fde8a19c7c16ac25611418ca7f443b58b2afa245e4e39c8f608759831fd50333f513fd5ae13f5aaf83ce32e5740ffca05aa8da6d177c5d928e5475a0540b7ec4368746346f7998fa9c4818dac5bc4b5f352610ac24adec03f643eeaed4fabb5536035c544c94a73e6b11f76deff9a08923e771f0ba8877a7e277727b770bb706264ba4271b"}, {0xf0, 0x107, 0x6, "741695ead29c87d8791d6cc1af679383f05bb9a4bff384c957ff2022c4fb675bfbe306a5ffa4b4d2a4adeb9e1dfc0a4fbc0a14d1d554aed25834c98e3e6419e69c9c5c7037ff5bc986dc8fd0a60f541513cff7bca8c3967f7576318e29cd7e72dbf6c815c97a9aa48440c558c482b82df38a23d7a398cd88c116e9e5506177a254960be61c1b0db6a52b70afb93487fba0f938ed70264b6660a8723c518aec49cf354bb98d762edf7da496986178a222fe7d54a005b6734ab97d5c9d24660e0813745badece19bad2874d8264b62d80d69ace212b9b7e716c109659a5064de0d"}], 0x240}, 0x4040) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="0000000000000000db86a7ee0000000000000000000066000000000000f8329545ec3a80e1c62e168aee4326bf2e6089e19f4a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r10}, 0x18) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r11}, 0x18) (async) io_uring_setup(0x1de0, &(0x7f00000005c0)={0x0, 0x8000ef90, 0x800, 0x0, 0x119}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000880)=[{r12, 0x8480}], 0x1, 0x2) (async) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x38, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_TYPE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8814) 31.939808647s ago: executing program 0 (id=2461): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setfsgid(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="86ee28350c630cdae25e601b8b7a4dfd6886f47307c028e618e33ebe970988b8ecec83efdadfef27d2b76b3d"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40290000, 0x0, 0xf979, 0xe, 0x7f, 0x0, 0x0, 0x4, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0x2, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3fffb, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.866137282s ago: executing program 0 (id=2462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000000)={0x2, r2, 0x7, 0x8, 0x9, 0x4, 0x5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x7) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000080)={0x200002, r6}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f00000035c0)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x100, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x0, 0x7d889395ab3b5234, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x9}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x4810) close_range(r3, 0xffffffffffffffff, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x698bc1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f0000000040)=0xfe5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syz_tun\x00', 0x6002}) 31.748548331s ago: executing program 0 (id=2463): r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x7, 0x0, 0x0, 0x1, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 31.747697489s ago: executing program 0 (id=2464): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) 31.502541683s ago: executing program 0 (id=2465): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000600)={{0x2, 0x6}, 0x100, './file0\x00'}) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x80) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x4, 0x1}}, 0xfffffc84, 0x7fffffff, &(0x7f0000000840)="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"}) r2 = accept4(r0, 0x0, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000740)) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 15.481858638s ago: executing program 33 (id=2465): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000600)={{0x2, 0x6}, 0x100, './file0\x00'}) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x80) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x4, 0x1}}, 0xfffffc84, 0x7fffffff, &(0x7f0000000840)="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"}) r2 = accept4(r0, 0x0, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000740)) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3.784706102s ago: executing program 4 (id=2915): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x10000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) tkill(r0, 0x16) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x6d, 0x3, 0x5, 0x10, 0xa5}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "7c9337883a"}}, {0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "5398a7890bd5634da3389aa2f392a574635f9c31ad122754a2276fba912de8d1b8d9a3d106934d44f141bc366e9195c2e5f6bfe24e1e97ac5050c1e2848343bc22695562e0aa"}}]}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) 1.294570027s ago: executing program 5 (id=2950): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x401, 0x1c1901) ioctl$BLKDISCARD(r1, 0x80041284, &(0x7f0000000080)=0x800) write$char_usb(r0, &(0x7f0000000000)='-0', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = dup(r5) read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0xfffffdfc) write(r5, &(0x7f00000000c0)="6558c9674df5964e1d2f7a84e8e889a0b9399686ac30a0dad5c9dda4f7961b3d7c47b73df915ff091c30ef2b5fb5bd147e7a2d7b808c44c4", 0x38) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) 1.294227197s ago: executing program 2 (id=2951): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007c9"], 0x0, 0x52, 0x0, 0x1}, 0x28) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async, rerun: 32) r1 = socket$inet(0x10, 0x3, 0x0) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) (async) r3 = semget$private(0x0, 0x4, 0x29b) semop(r3, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@can={0xc, {{0x3}, 0x2, 0x1, 0x0, 0x0, "d834adffdd23ae03"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x9c7, 0x798, 0xc1, 0x216]}) (async) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000b80)={0x2d7, 0x2, 0x0, {{0x500, 0x196, 0x0, 0x0, {0x0, 0xfffffffc}, 0x2910000, 0xfffffffc, 0x0, 0x0, 0x4e, '\x04\xa8\x06\x13C\xba\xeb\x02\xc7n\xd6\xcaev{evoo~\x059\xc6\x00\x05\x00\x00\xe2rv\x1c\x14\xbeB\xd0\x1f\x83\xb2\xd79\x14\x01\x03_?[\x02\x83/\xb0\x99kx\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00\xec\x88\xce\x1e\x9e\xf2-\t\xe4{H6j\x88\x93\xa6B\x0e\xf6\xa2d847\\\x9f:\xbb\xd8`\xacy(}f\x00m\'\x91,\x04m{r\xebQw\x00,\x92Mf\xb3\xa7\x12\x9d(f\xb1q\x14\x1d4N\xf0\xcf\aA\xab\x8by\xf3\xb2\xd5\xdb+JD^\xf0#\xc0\x1b\xf3?\xf5\x98\xe2\xa64E\xcd\x0e\x0f\x95\xefO\x10``\xa1\x05\xec\x7fP\xd2aQ\x16\x89( 4\x95\xa40z\x89d\x97\x12\xe4\xfe>\xd2\x98\xa1\xa9\xe6n9Lg', 0x3, '\x00\x00@', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x2d7) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x20007}]}}]}, 0xa4}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01b, 0x2}) 1.243110355s ago: executing program 2 (id=2952): r0 = socket(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r4, &(0x7f0000000180)=""/195, 0xc3, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setns(r3, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) setns(r6, 0x24020000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.242657207s ago: executing program 5 (id=2953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async, rerun: 32) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000003c0)=""/57) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20004055) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x290441, 0x0) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c55}, 0x4008840) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0xb, 0x801, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '(\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.242528585s ago: executing program 5 (id=2954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x28, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffe, 0x5, 0x6}}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x28, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffe, 0x5, 0x6}}]}, 0x28}}, 0x0) (async) 1.168150454s ago: executing program 2 (id=2955): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1f, 0x50, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.167996427s ago: executing program 2 (id=2956): r0 = io_uring_setup(0x26d5, &(0x7f0000000240)={0x0, 0xca6a, 0x48, 0xfffffffe, 0x4e}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034223e10ac052334717400c2f9712d576b090212000100000000090445000000b004a730e0a09fdfb65948ed7b23aa6a119670c9df322e6519373c63fffff2d8d4ca017052f4d547d1d0d4decd358d15168d9fd2a3"], 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='syscall\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 1.067284365s ago: executing program 5 (id=2957): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0) r1 = fsopen(&(0x7f0000001400)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r2, 0x5392, &(0x7f0000000040)=@copyright={0x1, 0x0, 0x9, 0x4}) 995.245102ms ago: executing program 5 (id=2959): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x410001fe, 0x4) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000440)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 557.927985ms ago: executing program 2 (id=2966): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 557.628282ms ago: executing program 4 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) readv(r6, &(0x7f0000000340)=[{&(0x7f0000000280)=""/180, 0xb4}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2215000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 388.152268ms ago: executing program 1 (id=2968): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) 387.688178ms ago: executing program 1 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 280.264343ms ago: executing program 2 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x8, 0x1, 0x0, 0x5, 0xcc7, 0x8, 0x7, 0xe, 0x100, 0x4be, 0x1, 0x8, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff7]}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r2}, './file0/file1\x00'}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0x6000004, 0x0, 0x0, 0xa, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe4c) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r7, 0xb) shmat(r7, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000000100000008000d00", @ANYRES32, @ANYBLOB="080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="399890399458810775da9c98168e85f129174534bd94db1c"], 0x2c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x8c, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_VERSION={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="10005e80040001000800020000000000"], 0x2c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 279.887452ms ago: executing program 1 (id=2971): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000680)={0xfff, 0x4, 0x4, 0xffffffff, &(0x7f0000000580)=[{}, {}, {}, {}]}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0x4, 0x4, 0xa, 0x2006, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x80011, r1, 0x3e4f6000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) close_range(r3, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000500)={0x40, 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r4, 0xd, 0x0, 0x800, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) 205.282667ms ago: executing program 1 (id=2972): r0 = socket(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r4, &(0x7f0000000180)=""/195, 0xc3, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setns(r3, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) socket$pppoe(0x18, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) setns(r6, 0x24020000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 200.077641ms ago: executing program 4 (id=2973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_elf64(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0xd, 0x0, 0x7, 0x2, 0x0, 0x1c000000, 0xe3, 0x40, 0x1fb, 0x0, 0x1, 0x38, 0x0, 0x7, 0x3, 0x4}}, 0x40) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=ANY=[], 0x818}, 0x1, 0x0, 0x0, 0x44001}, 0x850) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140001000000000000000000021fc800", @ANYRES32=r3, @ANYBLOB="080002007f00000014000600060000000180"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x1f8, 0x111, 0x4b4, 0x1f8, 0xd4feffff, 0x308, 0x20a, 0x278, 0x308, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1f8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x4e23], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff000000, 0xffffffff], 0x4e20, 0x1ff, 0x4e21, 0x4e21, 0x8, 0x33f, 0x5, 0x25, 0x10000}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 119.892502ms ago: executing program 4 (id=2974): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 117.282107ms ago: executing program 1 (id=2975): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x8, 0x7, 0x4, 0x0, 0x7, 0x8, 0x4, 0x4, 0x2, 0x9, 0xa, 0x8, 0x0, 0xf, 0x2, 0x0, 0x2, 0x1, 0x0, '\x00', 0xf0, 0x405a8f79}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_int(r3, 0x29, 0x2, 0x0, &(0x7f0000000180)) ioctl$sock_ifreq(r3, 0x8925, &(0x7f0000000100)={'netpci0\x00', @ifru_flags=0x1000}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7e920f73", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000004c80)="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", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 55.815761ms ago: executing program 4 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"2400dd7e0ac1299c1b7a1a46f2cb27b6", 0x0, 0x0, {0x3ff, 0xd07}, {0x1, 0x8}, 0x1, [0x80, 0x1b605795, 0x8, 0x8, 0x2128, 0x9, 0xfffffffffffffff7, 0x5, 0xfa2d, 0x2, 0x1, 0xb774, 0x4, 0xfffffffffffffff9, 0x9, 0x8]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000006c0)={{r0}, r2, 0x4, @inherit={0x50, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x6, {0x13, 0xa3, 0x4, 0x5, 0x1}, [0xb3]}}, @devid=r3}) sysinfo(&(0x7f0000000000)=""/196) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x3}, @IFLA_BOND_ARP_IP_TARGET={0x30, 0x8, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @private=0xa010101, @broadcast, @broadcast]}]}}}]}, 0x6c}}, 0x0) 55.550737ms ago: executing program 5 (id=2977): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xfffffffb, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x2200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10001}, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0), 0xf, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="b3415a109b109ed2", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x1, @void, @val, @void, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x1f, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x3}, 0x8) shutdown(r6, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) r7 = eventfd2(0x8, 0x80801) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0xa, 0x1000, 0x7d, 0x80}) statx(r7, 0xfffffffffffffffd, 0x1000, 0x20, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000200)={0x6, 0x3, 0x1, {0x78056a18, 0x748e2058, 0xd, 0xfffffff8}}) lseek(r0, 0x101, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087016c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x2) 1.409031ms ago: executing program 1 (id=2978): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) unshare(0x36040800) listen(r0, 0x3) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e130100c900", @ANYRESOCT=r0], 0x16) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "35fcb26cd925343afaceba97481fe9ba33927856cfd7ad8962e3ec60ce8e82c0cd1c29efee7e815b8292b139746fc0d09d668d29eae9e23a2edc47ad0e45677ae0cb25fe3fabfe7a32747482411e7e7ec3224021908e7eee19630eff3b52a777a7ef25a487354ce23169441a2e5007348fb984fa9e431ab101d329aa67ce6aa3cc159972a70cb0454b40d148a754da96fe4efc3d1bd0e0"}, 0x9b) (rerun: 32) 0s ago: executing program 4 (id=2979): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000467000/0x2000)=nil, 0x2000, 0x300000a, 0x41813, r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 156.680241][ T6083] usb 5-1: SerialNumber: syz [ 156.683534][ T6083] usb 5-1: config 0 descriptor?? [ 156.824052][T13075] overlayfs: failed to resolve './file0/file1': -2 [ 156.826913][T13075] overlayfs: failed to clone lowerpath [ 156.830641][ T6018] IPVS: starting estimator thread 0... [ 156.898590][ T6016] usb 5-1: USB disconnect, device number 2 [ 156.923484][T13076] IPVS: using max 29 ests per chain, 69600 per kthread [ 156.981041][T13086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2114'. [ 157.090828][T13051] ceph: No mds server is up or the cluster is laggy [ 157.150335][T13094] program syz.3.2116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.449646][T13113] tipc: Started in network mode [ 157.451266][T13113] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.453961][T13113] tipc: Enabled bearer , priority 10 [ 157.469898][T13068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.472235][T13068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.479706][T13068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.481816][T13068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.486781][T13068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.488818][T13068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.492091][T13068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.536241][T13118] batadv0: entered promiscuous mode [ 157.539377][T13117] batadv0: left promiscuous mode [ 157.576748][ T40] audit: type=1400 audit(1761585625.496:41162): avc: denied { map } for pid=13122 comm="syz.2.2126" path="/proc/1449/net/pfkey" dev="proc" ino=4026533425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 157.578654][T13123] tipc: Started in network mode [ 157.589188][T13123] tipc: Node identity 4, cluster identity 4711 [ 157.591221][T13123] tipc: Node number set to 4 [ 157.633017][T13126] ceph: No source [ 158.330282][ T40] audit: type=1326 audit(1761585626.246:41163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdaf8efc9 code=0x7ffc0000 [ 158.332558][T13153] xfrm0 speed is unknown, defaulting to 1000 [ 158.338424][ T40] audit: type=1326 audit(1761585626.246:41164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdaf8efc9 code=0x7ffc0000 [ 158.338497][ T40] audit: type=1326 audit(1761585626.246:41165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8cdaf8efc9 code=0x7ffc0000 [ 158.344710][T13154] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2131'. [ 158.464144][T13126] orangefs_mount: mount request failed with -4 [ 158.583639][ T6083] tipc: Node number set to 2886997162 [ 158.753526][ T5945] Bluetooth: hci0: command 0x0406 tx timeout [ 158.878822][T13173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2135'. [ 158.914861][T13176] loop3: detected capacity change from 0 to 7 [ 158.917629][T13176] Dev loop3: unable to read RDB block 7 [ 158.919396][T13176] loop3: unable to read partition table [ 158.921283][T13176] loop3: partition table beyond EOD, truncated [ 158.923273][T13176] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 158.980684][T13176] rdma_rxe: rxe_newlink: failed to add lo [ 158.983363][T13176] netlink: 'syz.0.2136': attribute type 4 has an invalid length. [ 158.990642][T13176] netlink: 'syz.0.2136': attribute type 4 has an invalid length. [ 159.023035][T13184] netlink: 'syz.0.2138': attribute type 4 has an invalid length. [ 159.090394][T13191] xt_l2tp: v2 tid > 0xffff: 16462212 [ 159.121767][T13193] netlink: 'syz.0.2141': attribute type 2 has an invalid length. [ 159.125375][T13194] netlink: 'syz.0.2141': attribute type 2 has an invalid length. [ 159.473856][ T29] vhci_hcd: vhci_device speed not set [ 159.528661][T13217] use of bytesused == 0 is deprecated and will be removed in the future, [ 159.531672][T13217] use the actual size instead. [ 159.553487][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 159.556014][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 159.706410][T13235] input: syz0 as /devices/virtual/input/input16 [ 160.074964][T13252] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13252 comm=syz.1.2161 [ 160.079461][T13252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13252 comm=syz.1.2161 [ 160.234630][T13260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.279250][T13260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.352707][T13265] bridge7: entered promiscuous mode [ 160.355313][T13265] bridge7: entered allmulticast mode [ 160.414556][T13269] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 160.426046][T13269] SELinux: Context  is not valid (left unmapped). [ 160.600101][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 160.600112][ T40] audit: type=1400 audit(1761585628.516:41295): avc: denied { write } for pid=13297 comm="syz.2.2177" name="cec2" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.611141][ T40] audit: type=1400 audit(1761585628.516:41296): avc: denied { wake_alarm } for pid=13297 comm="syz.2.2177" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.618953][ T40] audit: type=1400 audit(1761585628.526:41297): avc: denied { execmem } for pid=13298 comm="syz.3.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 160.627998][ T40] audit: type=1400 audit(1761585628.546:41298): avc: denied { ioctl } for pid=13297 comm="syz.2.2177" path="socket:[41871]" dev="sockfs" ino=41871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.636773][ T40] audit: type=1400 audit(1761585628.556:41299): avc: denied { bind } for pid=13297 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.643597][ T40] audit: type=1400 audit(1761585628.556:41300): avc: denied { write } for pid=13297 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.761261][ T40] audit: type=1400 audit(1761585628.676:41301): avc: denied { create } for pid=13306 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.771114][ T40] audit: type=1400 audit(1761585628.686:41302): avc: denied { create } for pid=13306 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.777368][ T40] audit: type=1400 audit(1761585628.686:41303): avc: denied { getopt } for pid=13306 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.789749][ T40] audit: type=1400 audit(1761585628.706:41304): avc: denied { mount } for pid=13301 comm="syz.1.2179" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.798570][T13308] overlayfs: failed to clone upperpath [ 160.833480][ T5945] Bluetooth: hci0: command 0x0406 tx timeout [ 160.864274][T13317] __nla_validate_parse: 9 callbacks suppressed [ 160.864286][T13317] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2182'. [ 161.122682][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2195'. [ 161.122853][T13347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.187528][T13359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2194'. [ 161.192009][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2194'. [ 161.196087][T13359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2194'. [ 161.198864][T13359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2194'. [ 161.222659][T13347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.279787][T13363] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2199'. [ 161.338526][T13347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.418293][T13347] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.497510][T13373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=13373 comm=syz.2.2202 [ 161.548420][ T8723] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.556842][ T8723] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.564640][ T8723] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.573935][ T8723] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.611901][T13389] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 161.618039][T13389] 9pnet_fd: p9_fd_create_tcp (13389): problem connecting socket to 127.0.0.1 [ 161.633743][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 161.635650][ T5945] Bluetooth: hci1: command 0x0419 tx timeout [ 161.779193][T13401] program syz.0.2213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.782778][T13401] ata1.00: invalid transfer count 0 [ 162.214348][ T5946] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 162.218053][ T5946] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 162.700175][T13421] bridge5: entered promiscuous mode [ 162.702422][T13421] bridge5: entered allmulticast mode [ 162.831061][T13429] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2222'. [ 162.837869][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 162.930095][T13437] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2224'. [ 163.632271][T13461] fuse: Bad value for 'group_id' [ 163.634491][T13461] fuse: Bad value for 'group_id' [ 163.745373][T13469] pimreg: entered allmulticast mode [ 164.388629][T13494] netlink: 'syz.2.2243': attribute type 4 has an invalid length. [ 164.403318][T13494] netlink: 'syz.2.2243': attribute type 4 has an invalid length. [ 164.526733][T13510] mac80211_hwsim hwsim3 : renamed from wlan1 [ 164.779955][T13531] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 164.787602][T13534] overlay: ./file0 is not a directory [ 164.795990][T13531] 8021q: adding VLAN 0 to HW filter on device bond7 [ 164.912697][ T5946] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 164.973504][T13553] bridge6: entered promiscuous mode [ 165.026948][T13558] hpfs: Bad magic ... probably not HPFS [ 165.533329][ T6016] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 165.677117][T13573] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 165.703806][T13573] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 165.705121][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.708466][T13573] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 165.711937][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.719418][ T6016] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.724525][ T6016] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.728166][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.733426][ T6016] usb 7-1: config 0 descriptor?? [ 165.757970][T13574] gretap1: entered promiscuous mode [ 165.764219][T13574] bond2: (slave gretap1): making interface the new active one [ 165.767855][T13574] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 165.778882][T13574] macvlan2: entered promiscuous mode [ 165.780631][T13574] macvlan2: entered allmulticast mode [ 165.782850][T13574] bond2: entered promiscuous mode [ 165.785500][T13574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.791230][T13574] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 165.797947][T13574] bond2: left promiscuous mode [ 165.808864][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 165.808876][ T40] audit: type=1400 audit(1761585633.726:41378): avc: denied { write } for pid=13576 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.850159][ T40] audit: type=1400 audit(1761585633.766:41379): avc: denied { ioctl } for pid=13579 comm="syz.1.2274" path="socket:[46246]" dev="sockfs" ino=46246 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 165.850582][T13580] netlink: 'syz.1.2274': attribute type 10 has an invalid length. [ 165.861501][T13580] macvlan0: entered promiscuous mode [ 165.864146][T13580] macvlan0: entered allmulticast mode [ 165.867917][T13580] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 165.911568][ T40] audit: type=1400 audit(1761585633.826:41380): avc: denied { setopt } for pid=13585 comm="syz.1.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.918153][ T40] audit: type=1400 audit(1761585633.826:41381): avc: denied { write } for pid=13585 comm="syz.1.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.924732][ T40] audit: type=1400 audit(1761585633.826:41382): avc: denied { ioctl } for pid=13585 comm="syz.1.2275" path="socket:[46251]" dev="sockfs" ino=46251 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.960863][ T40] audit: type=1400 audit(1761585633.876:41383): avc: denied { bind } for pid=13590 comm="syz.1.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.962497][T13593] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 165.967815][ T40] audit: type=1400 audit(1761585633.876:41384): avc: denied { setopt } for pid=13590 comm="syz.1.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.981647][T13593] dummy0: left allmulticast mode [ 165.982366][ T40] audit: type=1400 audit(1761585633.896:41385): avc: denied { write } for pid=13594 comm="syz.0.2279" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.987081][T13593] dummy0: entered promiscuous mode [ 165.995545][T13593] dummy0: entered allmulticast mode [ 165.996326][T13593] team0: Port device dummy0 added [ 166.002122][T13597] tty tty20: ldisc open failed (-12), clearing slot 19 [ 166.002884][T13593] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 166.007702][T13593] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.016272][T13593] dummy0: left promiscuous mode [ 166.017971][T13593] dummy0: left allmulticast mode [ 166.020674][T13593] team0: Failed to send options change via netlink (err -105) [ 166.023127][T13593] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.026560][T13593] team0: Port device dummy0 removed [ 166.030104][T13593] dummy0: entered allmulticast mode [ 166.030800][T13600] __nla_validate_parse: 4 callbacks suppressed [ 166.030809][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 166.032118][T13593] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.047515][T13600] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2280'. [ 166.147894][T13608] nf_ct_set_timeout: 1 callbacks suppressed [ 166.147905][T13608] No such timeout policy "syz1" [ 166.156363][ T6016] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 166.195547][ T40] audit: type=1400 audit(1761585634.106:41386): avc: denied { mount } for pid=13614 comm="syz.1.2284" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 166.275829][ T5946] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 166.278591][ T5946] Bluetooth: hci1: Injecting HCI hardware error event [ 166.281469][ T5946] Bluetooth: hci1: hardware error 0x00 [ 166.325661][T13622] xfrm0 speed is unknown, defaulting to 1000 [ 166.387936][ T40] audit: type=1400 audit(1761585634.306:41387): avc: denied { read } for pid=13627 comm="syz.0.2290" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 166.441902][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 166.452864][T13630] bridge0: entered promiscuous mode [ 166.455155][T13630] macsec2: entered allmulticast mode [ 166.456836][T13630] bridge0: entered allmulticast mode [ 166.459218][T13630] bridge0: port 3(macsec2) entered blocking state [ 166.461350][T13630] bridge0: port 3(macsec2) entered disabled state [ 166.465480][T13630] bridge0: left allmulticast mode [ 166.467233][T13630] bridge0: left promiscuous mode [ 166.503072][T13632] SELinux: truncated policydb string identifier [ 166.505823][T13632] SELinux: failed to load policy [ 166.507960][T13632] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 166.623378][T13642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2294'. [ 166.671773][T13646] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 166.679951][T13646] mac80211_hwsim hwsim3 : left allmulticast mode [ 166.685213][T13646] mac80211_hwsim hwsim3 : entered allmulticast mode [ 166.687879][T13646] bond0: (slave ): Enslaving as an active interface with an up link [ 166.692628][T13644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.700538][T13647] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2296'. [ 166.794340][T13647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.799627][T13647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.804280][T13647] bond0 (unregistering): Released all slaves [ 166.924883][T13649] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 166.927219][T13649] overlayfs: failed to set xattr on upper [ 166.929077][T13649] overlayfs: ...falling back to redirect_dir=nofollow. [ 166.932576][T13649] overlayfs: ...falling back to index=off. [ 166.934802][T13649] overlayfs: ...falling back to uuid=null. [ 166.936711][T13649] overlayfs: ...falling back to xino=off. [ 166.938722][T13649] overlayfs: conflicting lowerdir path [ 166.987589][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'. [ 167.233762][T13657] overlayfs: failed to clone upperpath [ 167.253340][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.274137][T13660] bond0: (slave syz_tun): Releasing backup interface [ 167.276881][T13660] syz_tun: left allmulticast mode [ 167.278994][T13660] team0: left allmulticast mode [ 167.280700][T13660] bridge0: port 3(team0) entered disabled state [ 167.286949][T13660] bond0: (slave dummy0): Releasing backup interface [ 167.290031][T13660] dummy0: left allmulticast mode [ 167.293445][T13660] : left promiscuous mode [ 167.295656][T13660] bridge0: port 1() entered disabled state [ 167.300055][T13660] bridge_slave_1: left promiscuous mode [ 167.302442][T13660] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.309416][T13660] bond0: (slave bond_slave_0): Releasing backup interface [ 167.315564][T13660] bond0: (slave bond_slave_1): Releasing backup interface [ 167.318786][T13660] team_slave_0: left promiscuous mode [ 167.321641][T13660] team0: Port device team_slave_0 removed [ 167.325319][T13660] team_slave_1: left promiscuous mode [ 167.328736][T13660] team0: Port device team_slave_1 removed [ 167.331620][T13660] net_ratelimit: 2 callbacks suppressed [ 167.331632][T13660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.403389][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 167.433730][T13663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2301'. [ 167.564778][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.568006][ T34] usb 5-1: no configurations [ 167.570029][ T34] usb 5-1: can't read configurations, error -22 [ 167.694182][T13679] overlayfs: failed to clone upperpath [ 167.726442][T13683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2305'. [ 167.788720][T13685] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2305'. [ 167.929182][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.934501][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.938903][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.942401][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.944886][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.963972][T13688] xfrm0 speed is unknown, defaulting to 1000 [ 168.124573][T13688] chnl_net:caif_netlink_parms(): no params data found [ 168.145156][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 168.222480][ T6083] usb 7-1: USB disconnect, device number 14 [ 168.396677][ T5946] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 168.432107][T13688] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.434661][T13688] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.437080][T13688] bridge_slave_0: entered allmulticast mode [ 168.439875][T13688] bridge_slave_0: entered promiscuous mode [ 168.443636][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.446651][T13688] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.449445][T13688] bridge_slave_1: entered allmulticast mode [ 168.454437][T13688] bridge_slave_1: entered promiscuous mode [ 168.489606][T13688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.496540][T13688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.557672][T13688] team0: Port device team_slave_0 added [ 168.561093][T13688] team0: Port device team_slave_1 added [ 168.628304][T13688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.631016][T13688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.642001][T13688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.646596][T13688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.648880][T13688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.648896][T13688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.694997][T13688] hsr_slave_0: entered promiscuous mode [ 168.696133][T13735] delete_channel: no stack [ 168.698427][T13688] hsr_slave_1: entered promiscuous mode [ 168.700535][T13688] debugfs: 'hsr0' already exists in 'hsr' [ 168.702318][T13688] Cannot create hsr debugfs directory [ 168.740280][T13739] hugetlbfs: Bad value for 'uid' [ 168.741888][T13739] hugetlbfs: Bad value for 'uid' [ 168.929192][ T13] dvmrp0 (unregistering): left allmulticast mode [ 168.939683][ T13] bond3 (unregistering): (slave geneve2): Releasing active interface [ 168.961536][ T13] bridge0 (unregistering): left promiscuous mode [ 169.036380][ T13] bond1 (unregistering): (slave bridge1): Releasing active interface [ 169.177120][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 169.353012][ T34] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 169.356255][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 169.359730][ T34] usb 7-1: Product: syz [ 169.361608][ T34] usb 7-1: Manufacturer: syz [ 169.363688][ T34] usb 7-1: SerialNumber: syz [ 169.367739][ T34] usb 7-1: config 0 descriptor?? [ 169.372323][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 169.375195][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 169.381368][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.385076][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 169.387866][ T34] usb 7-1: media controller created [ 169.404025][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.435882][ T13] bond0 (unregistering): (slave bond2): Releasing backup interface [ 169.438790][ T13] bond2 (unregistering): left allmulticast mode [ 169.442094][ T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 169.447157][ T13] bond0 (unregistering): (slave ): Releasing backup interface [ 169.450176][ T13] mac80211_hwsim hwsim3 : left allmulticast mode [ 169.458996][ T13] bond0 (unregistering): Released all slaves [ 169.466826][ T13] bond1 (unregistering): Released all slaves [ 169.548233][ T13] bond2 (unregistering): Released all slaves [ 169.556421][ T13] bond3 (unregistering): Released all slaves [ 169.636485][ T34] cxusb: set interface failed [ 169.638353][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 169.650070][ T13] bond4 (unregistering): Released all slaves [ 169.656217][ T13] bond5 (unregistering): Released all slaves [ 169.686489][ T34] DVB: Unable to find symbol mt352_attach() [ 169.688528][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 169.697354][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 169.700506][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 169.757332][ T13] bond6 (unregistering): (slave veth13): Releasing active interface [ 169.762606][ T13] bond6 (unregistering): Released all slaves [ 169.765284][ T34] rc_core: IR keymap rc-dvico-mce not found [ 169.765298][ T34] Registered IR keymap rc-empty [ 169.766662][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 169.774082][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input18 [ 169.778484][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 169.780666][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 169.784425][ T34] usb 7-1: USB disconnect, device number 15 [ 169.798974][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 169.873832][ T13] tipc: Disabling bearer [ 169.880060][ T13] tipc: Left network mode [ 170.107373][ T5946] Bluetooth: hci4: command tx timeout [ 170.300710][T13688] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.305148][T13688] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.309728][T13688] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.323460][T13688] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.432282][T13688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.447757][T13688] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.462267][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.465388][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.471423][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.474463][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.479259][T13781] IPVS: dh: FWM 3 0x00000003 - no destination available [ 170.483158][ C2] IPVS: dh: FWM 3 0x00000003 - no destination available [ 170.494799][ T13] hsr_slave_0: left promiscuous mode [ 170.498046][ T13] hsr_slave_1: left promiscuous mode [ 170.517115][ T13] pimreg (unregistering): left allmulticast mode [ 171.222397][ C1] bridge0: port 3(dummy0) entered learning state [ 171.746321][T13784] xfrm0 speed is unknown, defaulting to 1000 [ 171.865041][T13688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.887720][T13688] veth0_vlan: entered promiscuous mode [ 171.891145][T13688] veth1_vlan: entered promiscuous mode [ 171.915505][T13688] veth0_macvtap: entered promiscuous mode [ 171.920106][T13688] veth1_macvtap: entered promiscuous mode [ 171.925366][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 171.925375][ T40] audit: type=1400 audit(1761585639.575:41425): avc: denied { read } for pid=13804 comm="syz.2.2338" lport=43626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.931964][T13688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.944007][T13688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.953104][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.955922][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.960427][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.964714][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.986890][ T40] audit: type=1400 audit(1761585639.631:41426): avc: denied { write } for pid=13806 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.006331][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.008940][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.028175][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.031597][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.045256][ T40] audit: type=1400 audit(1761585639.678:41427): avc: denied { mounton } for pid=13688 comm="syz-executor" path="/syzkaller.oFag3B/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 172.052514][ T40] audit: type=1400 audit(1761585639.678:41428): avc: denied { mount } for pid=13688 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 172.061437][ T40] audit: type=1400 audit(1761585639.678:41429): avc: denied { mounton } for pid=13688 comm="syz-executor" path="/syzkaller.oFag3B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 172.070383][ T40] audit: type=1400 audit(1761585639.687:41430): avc: denied { mounton } for pid=13688 comm="syz-executor" path="/syzkaller.oFag3B/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=46801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 172.079490][ T40] audit: type=1400 audit(1761585639.687:41431): avc: denied { unmount } for pid=13688 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.085669][ T40] audit: type=1400 audit(1761585639.687:41432): avc: denied { mounton } for pid=13688 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 172.093039][ T40] audit: type=1400 audit(1761585639.697:41433): avc: denied { mounton } for pid=13688 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 172.100670][ T40] audit: type=1400 audit(1761585639.697:41434): avc: denied { mount } for pid=13688 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 172.234930][T13830] overlayfs: failed to resolve './file0': -2 [ 172.331358][ T5946] Bluetooth: hci4: command tx timeout [ 173.376090][T13854] netlink: 'syz.2.2351': attribute type 12 has an invalid length. [ 173.387440][ T13] IPVS: stop unused estimator thread 0... [ 173.560672][T13864] kvm: apic: phys broadcast and lowest prio [ 173.567095][T13860] random: crng reseeded on system resumption [ 173.574163][T13860] __nla_validate_parse: 1 callbacks suppressed [ 173.574172][T13860] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2353'. [ 173.597458][T13860] vxcan1: tx address claim with dlc 0 [ 173.723519][T13867] netlink: 'syz.0.2355': attribute type 13 has an invalid length. [ 173.841740][T13873] xt_TCPMSS: Only works on TCP SYN packets [ 173.845922][T13873] netlink: 'syz.0.2357': attribute type 1 has an invalid length. [ 173.864970][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.867753][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 173.867788][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 173.872335][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 173.875938][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 173.983793][T13882] new mount options do not match the existing superblock, will be ignored [ 173.990331][T13882] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 174.076722][T13888] : renamed from bridge_slave_0 [ 174.169956][T13897] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 174.449792][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 174.453629][T13923] chnl_net:caif_netlink_parms(): no params data found [ 174.505625][T13924] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2370'. [ 174.555687][ T5946] Bluetooth: hci4: command tx timeout [ 174.598355][ T6083] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 174.781355][ T6083] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.784209][ T6083] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.787387][ T6083] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.790221][ T6083] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.793852][ T6083] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.800134][ T6083] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.804103][ T6083] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.807451][ T6083] usb 6-1: Product: syz [ 174.809222][ T6083] usb 6-1: Manufacturer: syz [ 174.814114][ T6083] cdc_wdm 6-1:1.0: skipping garbage [ 174.816285][ T6083] cdc_wdm 6-1:1.0: skipping garbage [ 174.819495][ T6083] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 174.822207][ T6083] cdc_wdm 6-1:1.0: Unknown control protocol [ 174.830724][T13931] syzkaller1: entered promiscuous mode [ 175.094162][T13947] bond3: entered allmulticast mode [ 175.166733][T13952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23305 sclass=netlink_route_socket pid=13952 comm=syz.0.2380 [ 175.221990][ T10] usb 6-1: USB disconnect, device number 5 [ 175.241550][T13962] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 175.398859][T13973] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2386'. [ 175.610298][T13982] overlayfs: failed to resolve './file0:xino=auto': -2 [ 175.613598][T13982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.653704][T13984] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2390'. [ 175.742120][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048468400: rx timeout, send abort [ 175.743082][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 175.823045][T13991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.159153][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.273342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035946800: rx timeout, send abort [ 176.279289][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048468400: abort rx timeout. Force session deactivation [ 176.330229][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 176.334561][ T34] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 511 [ 176.337659][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 176.341505][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.344292][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.346783][ T34] usb 6-1: Product: ဇ [ 176.348118][ T34] usb 6-1: Manufacturer: ఉ [ 176.349558][ T34] usb 6-1: SerialNumber: ૒䥉渁ⷖꅸ溃샜啛橴쨒髣ெ쓀뿢뵾憩 [ 176.354360][T13993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.461698][T14001] xfrm0 speed is unknown, defaulting to 1000 [ 176.506979][T14002] overlayfs: statfs failed on './file0' [ 176.780385][ T5946] Bluetooth: hci4: command tx timeout [ 176.787697][T13993] Invalid source name [ 176.789352][T13993] UBIFS error (pid: 13993): cannot open "ubifs", error -22 [ 176.792737][ T34] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 12 proto 3 vid 0x0525 pid 0xA4A8 [ 176.810602][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035946800: abort rx timeout. Force session deactivation [ 176.811494][ T34] usb 6-1: USB disconnect, device number 6 [ 176.829745][ T34] usblp0: removed [ 176.836839][T14013] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 177.064960][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035944000: rx timeout, send abort [ 177.067627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054474400: rx timeout, send abort [ 177.070710][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035944000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.075723][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054474400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.117404][T14021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.122329][T14021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.205236][T14024] befs: (nullb0): No write support. Marking filesystem read-only [ 177.210440][T14024] befs: (nullb0): invalid magic header [ 177.243291][T14026] x_tables: duplicate underflow at hook 2 [ 177.321132][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 177.321144][ T40] audit: type=1400 audit(1761585644.616:41479): avc: denied { watch } for pid=14027 comm="syz.2.2404" path="/554/file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.330138][ T40] audit: type=1400 audit(1761585644.616:41480): avc: denied { watch_sb } for pid=14027 comm="syz.2.2404" path="/554/file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.366756][T14032] efs: device does not support 512 byte blocks [ 177.368951][T14032] device does not support 512 byte blocks [ 177.368951][T14032] [ 177.373301][T14032] netlink: 'syz.1.2405': attribute type 10 has an invalid length. [ 177.376830][ T40] audit: type=1400 audit(1761585644.672:41481): avc: denied { create } for pid=14031 comm="syz.1.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.384223][ T40] audit: type=1400 audit(1761585644.672:41482): avc: denied { bind } for pid=14031 comm="syz.1.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 177.440770][T14037] netlink: 'syz.1.2407': attribute type 10 has an invalid length. [ 177.444759][T14037] openvswitch: netlink: Flow key attr not present in new flow. [ 178.180284][T14071] netlink: 'syz.1.2419': attribute type 2 has an invalid length. [ 178.254894][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.438646][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 178.442040][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.445095][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 178.449055][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 178.453759][ T34] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 178.456771][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.459741][ T34] usb 5-1: Product: syz [ 178.461091][ T34] usb 5-1: Manufacturer: syz [ 178.462530][ T34] usb 5-1: SerialNumber: syz [ 178.465605][ T34] usb 5-1: config 0 descriptor?? [ 178.688528][ T34] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 178.903246][ T34] usb 5-1: USB disconnect, device number 5 [ 178.985896][T14083] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.992648][ T40] audit: type=1400 audit(1761585646.178:41483): avc: denied { create } for pid=14082 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.054905][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.060000][T14085] __nla_validate_parse: 3 callbacks suppressed [ 179.060011][T14085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2425'. [ 179.060384][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.062183][T14085] erspan0: entered promiscuous mode [ 179.065666][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.072687][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.075809][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.096355][T14091] xfrm0 speed is unknown, defaulting to 1000 [ 179.099427][ T40] audit: type=1400 audit(1761585646.281:41484): avc: denied { mount } for pid=14096 comm="syz.2.2427" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 179.100857][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.102707][T14099] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.103407][T14099] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.104179][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.106704][ T40] audit: type=1400 audit(1761585646.281:41485): avc: denied { mounton } for pid=14096 comm="syz.2.2427" path="/556/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 179.111867][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.126817][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.129630][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.129822][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.134819][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.137578][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.140914][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.141026][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.147490][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.150923][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.153946][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.155355][ T40] audit: type=1400 audit(1761585646.337:41486): avc: denied { read } for pid=14096 comm="syz.2.2427" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 179.157157][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.164650][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.167525][ T40] audit: type=1400 audit(1761585646.337:41487): avc: denied { open } for pid=14096 comm="syz.2.2427" path="/556/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 179.173370][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.180169][T14099] overlayfs: maximum fs stacking depth exceeded [ 179.184234][T14097] overlayfs: failed to resolve 'audit': -2 [ 179.184665][ T40] audit: type=1400 audit(1761585646.337:41488): avc: denied { read } for pid=14096 comm="syz.2.2427" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 179.231413][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 179.234327][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 179.251341][T14091] chnl_net:caif_netlink_parms(): no params data found [ 179.314322][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.316595][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.317764][T14120] xt_hashlimit: max too large, truncated to 1048576 [ 179.318792][T14091] bridge_slave_0: entered allmulticast mode [ 179.325690][T14091] bridge_slave_0: entered promiscuous mode [ 179.330193][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.332541][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.334877][T14091] bridge_slave_1: entered allmulticast mode [ 179.338069][T14091] bridge_slave_1: entered promiscuous mode [ 179.372980][T14127] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 179.375657][T14127] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 179.382697][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.387626][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.425057][T14091] team0: Port device team_slave_0 added [ 179.429347][T14091] team0: Port device team_slave_1 added [ 179.470608][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.472978][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.481231][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.486019][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.488181][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.496161][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.537960][T14091] hsr_slave_0: entered promiscuous mode [ 179.540295][T14091] hsr_slave_1: entered promiscuous mode [ 179.542403][T14091] debugfs: 'hsr0' already exists in 'hsr' [ 179.544139][T14091] Cannot create hsr debugfs directory [ 179.643324][T14139] netlink: 'syz.1.2439': attribute type 1 has an invalid length. [ 179.718236][T14141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2439'. [ 179.719195][T14091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.726558][T14091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.730868][T14091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.735769][T14091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.772999][T14139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.788769][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.791106][T14091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.793450][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.795662][T14091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.817844][T14155] binder_alloc: 14154: pid 14154 spamming oneway? 1 buffers allocated for a total size of 4096 [ 179.828667][T14091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.836807][T14091] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.843583][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.844524][T14155] binder: 14154:14155 ioctl ae01 0 returned -22 [ 179.850732][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.896978][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.899357][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.906635][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.908818][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.031800][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.107527][T14181] tipc: Started in network mode [ 180.109638][T14181] tipc: Node identity 2afa8013d04e, cluster identity 4711 [ 180.112346][T14181] tipc: Enabled bearer , priority 0 [ 180.115791][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2445'. [ 180.125751][T14180] tipc: Resetting bearer [ 180.238066][T14189] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 181.184599][ T6083] tipc: Node number set to 4206133267 [ 181.241334][ T5946] Bluetooth: hci0: command tx timeout [ 181.320644][T14180] tipc: Disabling bearer [ 181.327923][T14193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.369521][T14207] bond0: entered allmulticast mode [ 181.371116][T14207] bond_slave_0: entered allmulticast mode [ 181.372904][T14207] bond_slave_1: entered allmulticast mode [ 181.396542][T14091] veth0_vlan: entered promiscuous mode [ 181.401494][T14091] veth1_vlan: entered promiscuous mode [ 181.420627][T14091] veth0_macvtap: entered promiscuous mode [ 181.424553][T14091] veth1_macvtap: entered promiscuous mode [ 181.435128][T14091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.443384][T14091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.448640][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 181.449477][ T8721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.457564][ T8721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.461122][ T8721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.463972][ T8721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.465269][T14222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2457'. [ 181.504355][ T8721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.508165][ T8721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.524317][ T8721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.529187][ T8721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.568742][T14238] fuse: Bad value for 'group_id' [ 181.570415][T14238] fuse: Bad value for 'group_id' [ 181.623740][ T842] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 181.804783][ T842] usb 6-1: Using ep0 maxpacket: 32 [ 181.809307][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.813308][ T842] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.817312][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.821205][ T842] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.825154][ T842] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.830631][ T842] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.834288][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.840256][ T842] usb 6-1: config 0 descriptor?? [ 182.061276][ T842] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 182.456972][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.459754][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.676517][T14258] netlink: 'syz.4.2467': attribute type 1 has an invalid length. [ 182.926275][T14260] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.929791][T14260] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 182.932739][T14260] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.935201][T14260] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 182.966582][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 182.966593][ T40] audit: type=1400 audit(1761585649.900:41515): avc: denied { mount } for pid=14261 comm="syz.4.2469" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 182.975619][ T40] audit: type=1400 audit(1761585649.900:41516): avc: denied { lock } for pid=14261 comm="syz.4.2469" path="socket:[49735]" dev="sockfs" ino=49735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 182.983258][ T40] audit: type=1400 audit(1761585649.900:41517): avc: denied { search } for pid=14261 comm="syz.4.2469" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.990781][ T40] audit: type=1400 audit(1761585649.900:41518): avc: denied { search } for pid=14261 comm="syz.4.2469" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.998399][ T40] audit: type=1400 audit(1761585649.910:41519): avc: denied { setattr } for pid=14261 comm="syz.4.2469" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.011625][T14264] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2470'. [ 183.016688][T14264] ksmbd: Unknown IPC event: 3, ignore. [ 183.020357][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'. [ 183.027547][ T40] audit: type=1400 audit(1761585649.956:41520): avc: denied { create } for pid=14263 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.033960][ T40] audit: type=1400 audit(1761585649.956:41521): avc: denied { getopt } for pid=14263 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.082610][T14266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14266 comm=syz.4.2471 [ 183.142720][T14271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2473'. [ 183.168786][ T40] audit: type=1400 audit(1761585650.087:41522): avc: denied { read write } for pid=14272 comm="syz.4.2474" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.176394][ T40] audit: type=1400 audit(1761585650.087:41523): avc: denied { open } for pid=14272 comm="syz.4.2474" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.307488][T14276] syzkaller1: entered promiscuous mode [ 183.309413][T14276] syzkaller1: entered allmulticast mode [ 183.451526][ T5946] Bluetooth: hci0: command tx timeout [ 184.202527][ T40] audit: type=1400 audit(1761585651.060:41524): avc: denied { ioctl } for pid=14285 comm="syz.4.2478" path="socket:[52237]" dev="sockfs" ino=52237 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.204262][T14286] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 184.215280][T14286] cramfs: wrong magic [ 184.581907][ T29] usb 6-1: USB disconnect, device number 7 [ 184.586565][ T29] usblp0: removed [ 184.608377][T14291] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 184.611901][T14291] tmpfs: Unknown parameter 'mpor?relat' [ 184.682883][T14295] o2cb: This node has not been configured. [ 184.685003][T14295] o2cb: Cluster check failed. Fix errors before retrying. [ 184.687291][T14295] (syz.1.2482,14295,1):user_dlm_register:674 ERROR: status = -22 [ 184.689820][T14295] (syz.1.2482,14295,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 184.695562][T14295] __nla_validate_parse: 7 callbacks suppressed [ 184.695609][T14295] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2482'. [ 185.276646][T14332] batman_adv: batadv0: Adding interface: dummy0 [ 185.279179][T14332] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.290086][T14332] batman_adv: batadv0: Interface activated: dummy0 [ 185.301810][T14332] batadv0: mtu less than device minimum [ 185.304444][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.308624][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.312451][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.316512][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.320292][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.324428][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.328098][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.332395][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.336355][T14332] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.469833][T14342] lo: entered allmulticast mode [ 185.476191][T14342] tunl0: entered allmulticast mode [ 185.479114][T14342] gre0: entered allmulticast mode [ 185.481432][T14342] gretap0: entered allmulticast mode [ 185.486060][T14342] erspan0: entered allmulticast mode [ 185.489945][T14342] ip_vti0: entered allmulticast mode [ 185.492313][T14342] ip6_vti0: entered allmulticast mode [ 185.494730][T14342] sit0: entered allmulticast mode [ 185.496969][T14342] ip6tnl0: entered allmulticast mode [ 185.499310][T14342] ip6gre0: entered allmulticast mode [ 185.501945][T14342] syz_tun: entered allmulticast mode [ 185.505856][T14342] ip6gretap0: entered allmulticast mode [ 185.509333][T14342] bridge0: entered allmulticast mode [ 185.511627][T14342] vcan0: entered allmulticast mode [ 185.513922][T14342] bond0: entered allmulticast mode [ 185.515958][T14342] bond_slave_0: entered allmulticast mode [ 185.517905][T14342] bond_slave_1: entered allmulticast mode [ 185.522897][T14342] team0: entered allmulticast mode [ 185.524861][T14342] team_slave_0: entered allmulticast mode [ 185.527100][T14342] team_slave_1: entered allmulticast mode [ 185.529889][T14342] dummy0: entered allmulticast mode [ 185.532162][T14342] nlmon0: entered allmulticast mode [ 185.535015][T14342] caif0: entered allmulticast mode [ 185.536465][ T6016] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 185.537422][T14342] batadv0: entered allmulticast mode [ 185.542060][T14342] vxcan0: entered allmulticast mode [ 185.544400][T14342] vxcan1: entered allmulticast mode [ 185.546665][T14342] veth0: entered allmulticast mode [ 185.550247][T14342] veth1: entered allmulticast mode [ 185.553451][T14342] wg0: entered allmulticast mode [ 185.555554][T14342] wg1: entered allmulticast mode [ 185.557928][T14342] wg2: entered allmulticast mode [ 185.559963][T14342] veth0_to_bridge: entered allmulticast mode [ 185.564045][T14342] veth1_to_bridge: entered allmulticast mode [ 185.568257][T14342] veth0_to_bond: entered allmulticast mode [ 185.572834][T14342] veth1_to_bond: entered allmulticast mode [ 185.576601][T14342] veth0_to_team: entered allmulticast mode [ 185.581031][T14342] veth1_to_team: entered allmulticast mode [ 185.585070][T14342] veth0_to_batadv: entered allmulticast mode [ 185.588504][T14342] batadv_slave_0: entered allmulticast mode [ 185.595602][T14342] veth1_to_batadv: entered allmulticast mode [ 185.599807][T14342] batadv_slave_1: entered allmulticast mode [ 185.605029][T14342] xfrm0: entered allmulticast mode [ 185.607961][T14342] veth0_to_hsr: entered allmulticast mode [ 185.613628][T14342] hsr_slave_0: entered allmulticast mode [ 185.616297][T14342] veth1_to_hsr: entered allmulticast mode [ 185.620174][T14342] hsr_slave_1: entered allmulticast mode [ 185.623011][T14342] hsr0: entered allmulticast mode [ 185.625270][T14342] veth1_virt_wifi: entered allmulticast mode [ 185.628784][T14342] veth0_virt_wifi: entered allmulticast mode [ 185.632269][T14342] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 185.635459][T14342] veth1_vlan: entered allmulticast mode [ 185.639063][T14342] veth0_vlan: entered allmulticast mode [ 185.642427][T14342] vlan0: entered allmulticast mode [ 185.645377][T14342] vlan1: entered allmulticast mode [ 185.647564][T14342] macvlan0: entered allmulticast mode [ 185.649862][T14342] macvlan1: entered allmulticast mode [ 185.652126][T14342] ipvlan0: entered allmulticast mode [ 185.654644][T14342] ipvlan1: entered allmulticast mode [ 185.656535][T14342] veth1_macvtap: entered allmulticast mode [ 185.659998][T14342] veth0_macvtap: entered allmulticast mode [ 185.663820][T14342] macvtap0: entered allmulticast mode [ 185.669248][T14342] macsec0: entered allmulticast mode [ 185.671453][T14342] geneve0: entered allmulticast mode [ 185.674005][T14342] geneve1: entered allmulticast mode [ 185.676109][ T5946] Bluetooth: hci0: command tx timeout [ 185.677139][T14342] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 185.681248][T14342] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 185.684224][T14342] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 185.688452][T14342] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 185.692693][T14342] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 185.695658][T14342] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 185.699410][T14342] syztnl2: entered allmulticast mode [ 185.709865][ T6016] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 185.716585][ T6016] usb 6-1: config 1 has no interface number 0 [ 185.719389][ T6016] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 185.724556][ T6016] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 185.728355][ T6016] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.737372][ T6016] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 185.741451][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.745191][ T6016] usb 6-1: Product: syz [ 185.746799][ T6016] usb 6-1: Manufacturer: syz [ 185.748734][ T6016] usb 6-1: SerialNumber: syz [ 185.753058][T14333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.755728][T14333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.759101][ T6016] usb 6-1: Expected 3 endpoints, found: 2 [ 185.845594][T14357] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 185.849475][T14357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2502'. [ 185.970276][T14376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14376 comm=syz.4.2509 [ 185.975023][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.977873][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.980460][T14376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14376 comm=syz.4.2509 [ 185.984904][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.006298][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.022285][T14376] 9pnet_fd: Insufficient options for proto=fd [ 186.076168][T14376] hfsplus: unable to find HFS+ superblock [ 186.186315][T14383] new mount options do not match the existing superblock, will be ignored [ 186.190210][T14383] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 186.495516][T14398] random: crng reseeded on system resumption [ 186.757120][T14403] binder: 14402:14403 ioctl c0306201 200000000080 returned -14 [ 186.760643][T14403] binder_alloc: 14402: binder_alloc_buf, no vma [ 186.849176][ T24] usb 6-1: USB disconnect, device number 8 [ 187.028866][T14406] netlink: 'syz.1.2517': attribute type 3 has an invalid length. [ 187.036724][T14406] vxfs: unable to read disk superblock at 1 [ 187.039130][T14406] vxfs: unable to read disk superblock at 8 [ 187.041033][T14406] vxfs: can't find superblock. [ 187.219841][T14414] fuse: Bad value for 'rootmode' [ 187.220415][T14415] fuse: Bad value for 'rootmode' [ 187.225816][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2521'. [ 187.655659][ C1] bridge0: port 3(dummy0) entered forwarding state [ 187.658182][ C1] bridge0: topology change detected, propagating [ 187.665537][T14422] pim6reg1: entered promiscuous mode [ 187.667429][T14422] pim6reg1: entered allmulticast mode [ 187.690354][T14424] tipc: Started in network mode [ 187.692562][T14424] tipc: Node identity 0a33b56808a8, cluster identity 4711 [ 187.695810][T14424] tipc: Enabled bearer , priority 0 [ 187.700604][T14426] tipc: Enabling of bearer rejected, already enabled [ 187.705258][T14424] syzkaller0: entered promiscuous mode [ 187.707876][T14424] syzkaller0: entered allmulticast mode [ 187.720861][T14423] tipc: Resetting bearer [ 187.733021][T14423] tipc: Disabling bearer [ 187.835548][T14434] Failed to get privilege flags for destination (handle=0x2:0x10) [ 187.878312][T14441] Cannot find add_set index 0 as target [ 187.884533][T14437] batadv_slave_1: entered promiscuous mode [ 187.889476][T14437] batman_adv: batadv0: Adding interface: macsec1 [ 187.892324][T14437] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.902220][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.905915][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.908919][T14437] batman_adv: batadv0: Interface activated: macsec1 [ 187.910803][ T5946] Bluetooth: hci0: command tx timeout [ 187.980792][T14446] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.987342][T14446] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 188.120064][ T29] Process accounting resumed [ 188.140241][T14458] Process accounting resumed [ 188.187683][ T5946] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 188.212813][T14465] hfsplus: unable to find HFS+ superblock [ 188.241026][T14471] ip6t_srh: unknown srh invflags 51E8 [ 188.246957][T14467] hugetlbfs: Bad value for 'uid' [ 188.248545][T14467] hugetlbfs: Bad value for 'uid' [ 188.250894][T14467] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2538'. [ 188.254299][T14471] loop2: detected capacity change from 0 to 7 [ 188.295949][T14479] input: syz1 as /devices/virtual/input/input19 [ 188.369334][T14484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2541'. [ 188.413595][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'. [ 188.442128][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 188.442138][ T40] audit: type=1400 audit(1761585655.016:41543): avc: denied { read } for pid=14488 comm="syz.1.2545" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 188.452915][ T40] audit: type=1400 audit(1761585655.016:41544): avc: denied { open } for pid=14488 comm="syz.1.2545" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 188.462635][ T40] audit: type=1400 audit(1761585655.016:41545): avc: denied { execute } for pid=14488 comm="syz.1.2545" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.472708][ T40] audit: type=1400 audit(1761585655.016:41546): avc: denied { ioctl } for pid=14488 comm="syz.1.2545" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.530643][ T40] audit: type=1400 audit(1761585656.035:41547): avc: denied { shutdown } for pid=14499 comm="syz.1.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.926411][T14527] xfrm0 speed is unknown, defaulting to 1000 [ 190.090854][ T40] audit: type=1400 audit(1761585656.559:41548): avc: denied { ioctl } for pid=14538 comm="syz.4.2559" path="socket:[55385]" dev="sockfs" ino=55385 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 190.165594][T14546] SELinux: policydb string length 14080 does not match expected length 8 [ 190.165722][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 190.171718][T14546] SELinux: failed to load policy [ 190.195729][T14547] xfrm1: entered promiscuous mode [ 190.197966][T14547] xfrm1: entered allmulticast mode [ 190.459902][T14574] dlm: Unknown command passed to DLM device : 255 [ 190.459902][T14574] [ 190.667154][T14590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 190.669426][T14590] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.672880][T14590] vhci_hcd vhci_hcd.0: Device attached [ 190.675560][T14591] vhci_hcd: unknown pdu 1 [ 190.680978][ T1148] vhci_hcd: stop threads [ 190.682551][ T1148] vhci_hcd: release socket [ 190.684301][ T1148] vhci_hcd: disconnect device [ 190.799585][T14599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2571'. [ 190.960959][ T40] audit: type=1400 audit(1761585657.382:41549): avc: denied { name_connect } for pid=14607 comm="syz.2.2574" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 190.962366][T14608] net_ratelimit: 32 callbacks suppressed [ 190.962375][T14608] netlink: zone id is out of range [ 190.969590][ T40] audit: type=1400 audit(1761585657.382:41550): avc: denied { getopt } for pid=14607 comm="syz.2.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.974376][T14608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.178360][T14615] ufs: You didn't specify the type of your ufs filesystem [ 191.178360][T14615] [ 191.178360][T14615] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 191.178360][T14615] [ 191.178360][T14615] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 191.189628][T14615] ufs: ufstype=old is supported read-only [ 191.252790][ T40] audit: type=1400 audit(1761585657.644:41551): avc: denied { write } for pid=14616 comm="syz.4.2578" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 191.436283][ T40] audit: type=1400 audit(1761585657.822:41552): avc: denied { map } for pid=14633 comm="syz.4.2583" path="socket:[54513]" dev="sockfs" ino=54513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.465695][T14634] bond1 (unregistering): Released all slaves [ 191.478425][T14623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'. [ 191.664272][ T5945] Bluetooth: hci0: command 0x0405 tx timeout [ 191.750245][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.776481][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.780446][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.784950][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.793230][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.794080][T14654] syzkaller0: entered promiscuous mode [ 191.798373][T14654] syzkaller0: entered allmulticast mode [ 191.835377][T14651] xfrm0 speed is unknown, defaulting to 1000 [ 191.992647][T14651] chnl_net:caif_netlink_parms(): no params data found [ 192.059458][T14651] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.061902][T14651] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.064336][T14651] bridge_slave_0: entered allmulticast mode [ 192.067699][T14651] bridge_slave_0: entered promiscuous mode [ 192.071108][T14651] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.073505][T14651] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.076112][T14651] bridge_slave_1: entered allmulticast mode [ 192.079080][T14651] bridge_slave_1: entered promiscuous mode [ 192.109268][T14667] atomic_op ffff8880563c0198 conn xmit_atomic 0000000000000000 [ 192.122509][T14651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.127268][T14651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.137945][T14669] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 192.157699][T14669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.182006][T14669] bond1: (slave gretap1): making interface the new active one [ 192.185407][T14669] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 192.190076][T14651] team0: Port device team_slave_0 added [ 192.193521][T14651] team0: Port device team_slave_1 added [ 192.219122][T14672] overlayfs: failed to resolve './file1': -2 [ 192.248482][T14651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.250755][T14651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.259098][T14651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.265279][T14651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.267522][T14651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.276784][T14651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.318268][T14651] hsr_slave_0: entered promiscuous mode [ 192.321334][T14651] hsr_slave_1: entered promiscuous mode [ 192.323521][T14651] debugfs: 'hsr0' already exists in 'hsr' [ 192.325757][T14651] Cannot create hsr debugfs directory [ 192.445942][T14651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.533246][T14674] netlink: 'syz.1.2595': attribute type 10 has an invalid length. [ 192.540843][T14674] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 192.577147][T14651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.651214][T14651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.919905][T14651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.923898][T14651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.930265][T14651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.934204][T14651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.962457][T14651] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.965329][T14651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.968207][T14651] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.971003][T14651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.015629][T14651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.030253][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.035814][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.049724][T14651] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.072144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.074407][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.081639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.084546][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.117972][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.152641][T14711] netlink: 'syz.4.2603': attribute type 21 has an invalid length. [ 193.155080][T14711] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.199060][T14651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.234628][T14651] veth0_vlan: entered promiscuous mode [ 193.244083][T14651] veth1_vlan: entered promiscuous mode [ 193.269963][T14651] veth0_macvtap: entered promiscuous mode [ 193.274771][T14651] veth1_macvtap: entered promiscuous mode [ 193.285073][T14651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.291569][T14651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.298147][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.302480][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.308326][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.312608][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.356147][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.359533][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.379516][ T8719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.381995][ T8719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.421053][T14718] netlink: 556 bytes leftover after parsing attributes in process `syz.1.2606'. [ 193.536887][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 193.669674][T14734] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 193.726486][T14736] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 193.739094][T14736] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.777219][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 193.792335][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 193.828139][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 193.828154][ T40] audit: type=1400 audit(1761585660.057:41569): avc: denied { setopt } for pid=14742 comm="syz.2.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.982183][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 193.986250][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2621'. [ 193.989023][T14764] netlink: 'syz.4.2621': attribute type 18 has an invalid length. [ 193.999457][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 194.000735][ T1148] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.009389][ T1148] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.013351][T14764] netlink: 'syz.4.2621': attribute type 18 has an invalid length. [ 194.014219][ T1148] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.021724][ T1148] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.032315][ T40] audit: type=1400 audit(1761585660.244:41570): avc: denied { ioctl } for pid=14758 comm="syz.2.2620" path="socket:[53091]" dev="sockfs" ino=53091 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.034105][T14767] qnx6: unable to read the first superblock [ 194.045258][T14767] qnx6: unable to read the first superblock [ 194.047137][T14767] qnx6: unable to read the first superblock [ 194.102335][T14771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=527 sclass=netlink_route_socket pid=14771 comm=syz.4.2623 [ 194.109277][T14771] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 194.268183][ T40] audit: type=1400 audit(1761585660.468:41571): avc: denied { open } for pid=14790 comm="syz.2.2627" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 194.271538][T14791] sp0: Synchronizing with TNC [ 194.282514][ T40] audit: type=1400 audit(1761585660.468:41572): avc: denied { ioctl } for pid=14790 comm="syz.2.2627" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 194.302591][ T40] audit: type=1400 audit(1761585660.496:41573): avc: denied { connect } for pid=14792 comm="syz.4.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.465692][ T40] audit: type=1400 audit(1761585660.655:41574): avc: denied { read } for pid=14792 comm="syz.4.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.485029][ T40] audit: type=1400 audit(1761585660.665:41575): avc: denied { mounton } for pid=14802 comm="syz.2.2630" path="/10/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.494563][ T40] audit: type=1400 audit(1761585660.674:41576): avc: denied { create } for pid=14802 comm="syz.2.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 194.503416][ T40] audit: type=1400 audit(1761585660.693:41577): avc: denied { sys_admin } for pid=14802 comm="syz.2.2630" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 194.524806][ T40] audit: type=1400 audit(1761585660.712:41578): avc: denied { write } for pid=14792 comm="syz.4.2628" path="socket:[53847]" dev="sockfs" ino=53847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.722472][T14815] pim6reg: tun_chr_ioctl cmd 1074025672 [ 194.724324][T14815] pim6reg: ignored: set checksum enabled [ 195.858194][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.891457][T14832] __nla_validate_parse: 1 callbacks suppressed [ 195.891468][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 195.940193][ T5945] Bluetooth: hci2: command tx timeout [ 195.976655][T14846] xfrm0 speed is unknown, defaulting to 1000 [ 195.991294][T14853] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 196.014247][T14856] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 196.031682][T14856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.062788][T14856] bond2: (slave veth5): Enslaving as an active interface with a down link [ 196.075090][T14856] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 196.077424][T14856] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 196.576550][T14882] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 196.742066][ T6083] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 196.903844][ T6083] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.906828][ T6083] usb 6-1: config 0 has no interface number 0 [ 196.908753][ T6083] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 196.912174][ T6083] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 196.916414][ T6083] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.919205][ T6083] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.922964][ T6083] usb 6-1: config 0 descriptor?? [ 196.925067][T14878] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.929743][ T6083] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.155133][ T6083] usb 6-1: USB disconnect, device number 9 [ 197.393608][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 197.394987][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 197.459190][T14901] xt_CT: No such helper "syz1" [ 197.559286][T14912] IPv6: Can't replace route, no match found [ 197.602874][T14915] gadgetfs: Unknown parameter 'discard' [ 197.785125][T14923] netlink: 'syz.1.2666': attribute type 1 has an invalid length. [ 197.788156][T14923] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2666'. [ 197.976887][T14931] xt_TCPMSS: Only works on TCP SYN packets [ 198.139505][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.142555][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.146358][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.149445][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.152102][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.165035][ T5945] Bluetooth: hci2: command tx timeout [ 198.187873][T12602] syz_tun (unregistering): left promiscuous mode [ 198.191990][T14933] xfrm0 speed is unknown, defaulting to 1000 [ 198.354287][T14933] chnl_net:caif_netlink_parms(): no params data found [ 198.435070][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.445951][T14933] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.447633][T14953] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 198.449004][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.450441][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 198.452658][T14933] bridge_slave_0: entered allmulticast mode [ 198.458601][T14955] new mount options do not match the existing superblock, will be ignored [ 198.459998][T14933] bridge_slave_0: entered promiscuous mode [ 198.467163][T14933] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.469449][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.472654][T14933] bridge_slave_1: entered allmulticast mode [ 198.479051][T14933] bridge_slave_1: entered promiscuous mode [ 198.489876][T14951] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2673'. [ 198.532102][T14951] overlayfs: failed to clone lowerpath [ 198.537624][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.557114][T14964] devpts: Unknown parameter 'max' [ 198.582752][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 198.640826][T14933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.647669][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.657155][T14933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.702876][T14933] team0: Port device team_slave_0 added [ 198.706074][T14933] team0: Port device team_slave_1 added [ 198.769133][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.776950][T14933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.779030][T14933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.786784][T14933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.791093][T14933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.793061][T14933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.793078][T14933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.836894][T14933] hsr_slave_0: entered promiscuous mode [ 198.839229][T14933] hsr_slave_1: entered promiscuous mode [ 198.842022][T14933] debugfs: 'hsr0' already exists in 'hsr' [ 198.843781][T14933] Cannot create hsr debugfs directory [ 198.960065][ T12] bridge_slave_1: left allmulticast mode [ 198.961827][ T12] bridge_slave_1: left promiscuous mode [ 198.966070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.971573][ T12] : left allmulticast mode [ 198.973112][ T12] : left promiscuous mode [ 198.974645][ T12] bridge0: port 1() entered disabled state [ 199.081841][ T12] erspan0 (unregistering): left promiscuous mode [ 199.104906][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 199.271713][ T12] bond1 (unregistering): Released all slaves [ 199.281092][ T12] bond2 (unregistering): Released all slaves [ 199.358710][ T12] bond0 (unregistering): Released all slaves [ 199.366499][ T12] bond3 (unregistering): Released all slaves [ 199.434746][T14933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.446361][ T12] tipc: Left network mode [ 199.446715][T14933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.464809][T14933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.470849][T14933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.555436][T14933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.565782][T14933] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.580377][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.583394][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.594552][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.597588][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.691135][T14999] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2685'. [ 199.697196][ T12] hsr_slave_0: left promiscuous mode [ 199.701512][T15004] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 199.705063][ T12] hsr_slave_1: left promiscuous mode [ 199.707136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.709502][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.715212][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.717620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.733727][ T12] veth1_macvtap: left promiscuous mode [ 199.735708][ T12] veth0_macvtap: left promiscuous mode [ 199.737856][ T12] veth1_vlan: left promiscuous mode [ 199.739677][ T12] veth0_vlan: left promiscuous mode [ 199.754455][T15006] overlayfs: failed to clone lowerpath [ 199.871640][T15009] netlink: 'syz.1.2687': attribute type 10 has an invalid length. [ 199.874275][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2687'. [ 199.962096][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2688'. [ 200.020859][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 200.020870][ T40] audit: type=1400 audit(1761585665.846:41591): avc: denied { append } for pid=15010 comm="syz.4.2688" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 200.305616][ T5945] Bluetooth: hci3: command tx timeout [ 200.388578][ T5945] Bluetooth: hci2: command tx timeout [ 200.432701][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.513002][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.080240][T15004] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 201.128781][T15009] dummy0: entered promiscuous mode [ 201.164181][ T40] audit: type=1400 audit(1761585666.922:41592): avc: denied { getopt } for pid=15016 comm="syz.2.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.187356][T14933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.264767][T15035] geneve2: entered promiscuous mode [ 201.267828][T15035] geneve2: entered allmulticast mode [ 201.377183][T15053] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 201.380702][T14933] veth0_vlan: entered promiscuous mode [ 201.389930][T14933] veth1_vlan: entered promiscuous mode [ 201.406265][T14933] veth0_macvtap: entered promiscuous mode [ 201.409944][T14933] veth1_macvtap: entered promiscuous mode [ 201.422351][T14933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.430893][T14933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.435231][T15058] netlink: 'syz.2.2701': attribute type 1 has an invalid length. [ 201.437364][ T74] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.440601][ T74] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.441766][T15050] netlink: 'syz.4.2697': attribute type 23 has an invalid length. [ 201.458206][T15058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.461213][ T74] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.463837][ T74] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.492726][T15058] bond1: (slave veth3): Enslaving as an active interface with a down link [ 201.510507][T15058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.514077][T15058] bond1: (slave batadv1): making interface the new active one [ 201.516973][T15058] batadv1: entered promiscuous mode [ 201.518759][T15058] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 201.538488][T15058] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.572289][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.574782][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.588393][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.591189][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.592292][T15067] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 201.637646][T15074] __nla_validate_parse: 2 callbacks suppressed [ 201.637661][T15074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2706'. [ 201.641138][T15075] loop2: detected capacity change from 0 to 7 [ 201.643410][T15074] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2706'. [ 201.645658][T15075] Dev loop2: unable to read RDB block 7 [ 201.648933][T15074] netlink: 'syz.1.2706': attribute type 5 has an invalid length. [ 201.652915][T15074] netlink: 'syz.1.2706': attribute type 6 has an invalid length. [ 201.653260][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 201.656040][T15074] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2706'. [ 201.661278][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 201.666635][T15075] loop2: AHDI p1 p2 p3 [ 201.668455][T15075] loop2: partition table partially beyond EOD, truncated [ 201.668479][ T40] audit: type=1400 audit(1761585667.389:41593): avc: denied { bind } for pid=15071 comm="syz.1.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.671929][T15075] loop2: p1 start 1601398130 is beyond EOD, truncated [ 201.680706][T15074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2706'. [ 201.686076][T15075] loop2: p2 start 1702059890 is beyond EOD, truncated [ 201.728962][ T40] audit: type=1400 audit(1761585667.445:41594): avc: denied { read } for pid=15082 comm="syz.4.2707" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.739131][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2709'. [ 201.772755][T15093] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2712'. [ 201.860373][ T5945] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 201.901186][ T40] audit: type=1400 audit(1761585667.604:41595): avc: denied { read } for pid=15108 comm="syz.4.2717" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 201.912254][ T40] audit: type=1400 audit(1761585667.614:41596): avc: denied { setopt } for pid=15104 comm="syz.1.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.004940][T15109] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.006883][T15109] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.009477][T15109] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.011822][T15109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.014451][T15109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.018071][T15109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 202.026891][T15109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.028892][T15109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.033007][T15109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.036034][T15109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.038041][T15109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.042469][T15109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.225222][T15130] NILFS (nbd1): device size too small [ 202.243544][ T40] audit: type=1400 audit(1761585667.932:41597): avc: denied { append } for pid=15132 comm="syz.5.2722" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.324441][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 202.413788][ T74] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x1e [ 202.487148][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 202.492951][ T29] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.496047][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.498622][ T29] usb 9-1: Product: syz [ 202.500022][ T29] usb 9-1: Manufacturer: syz [ 202.501587][ T29] usb 9-1: SerialNumber: syz [ 202.504371][ T29] usb 9-1: config 0 descriptor?? [ 202.596920][ T40] audit: type=1400 audit(1761585668.259:41598): avc: denied { read } for pid=15143 comm="syz.5.2726" name="/" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.609229][ T40] audit: type=1400 audit(1761585668.259:41599): avc: denied { open } for pid=15143 comm="syz.5.2726" path="/3/file0" dev="configfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.626170][T15152] No control pipe specified [ 202.663591][ T40] audit: type=1400 audit(1761585668.315:41600): avc: denied { unmount } for pid=14933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 202.930558][T15177] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2735'. [ 202.937580][T15178] misc userio: The device must be registered before sending interrupts [ 202.950056][ T34] usb 9-1: USB disconnect, device number 2 [ 203.003457][T15185] Bluetooth: MGMT ver 1.23 [ 203.015567][T15187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2738'. [ 203.043489][T15187] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.046023][T15187] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.130781][T15197] nftables ruleset with unbound chain [ 203.451325][T15228] netlink: 'syz.5.2749': attribute type 21 has an invalid length. [ 203.454408][T15228] netlink: 'syz.5.2749': attribute type 4 has an invalid length. [ 203.458508][T15228] netlink: 'syz.5.2749': attribute type 3 has an invalid length. [ 203.516816][T15234] SELinux: failed to load policy [ 203.554079][T15238] netlink: 'syz.1.2755': attribute type 12 has an invalid length. [ 203.556603][T15238] netlink: 'syz.1.2755': attribute type 29 has an invalid length. [ 203.630176][T15243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15243 comm=syz.4.2754 [ 203.660177][ T5998] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 203.827803][T15256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=15256 comm=syz.4.2761 [ 203.846200][T15256] overlayfs: empty lowerdir [ 203.852739][ T5998] usb 7-1: Using ep0 maxpacket: 16 [ 203.855896][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.859327][ T5998] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.863388][ T5998] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 203.866272][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.869946][ T5998] usb 7-1: config 0 descriptor?? [ 203.874076][ T5998] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22 [ 204.058388][T15266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 204.101697][ T10] usb 7-1: USB disconnect, device number 16 [ 204.162781][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.162782][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.238365][ T5946] Bluetooth: hci3: command 0x040f tx timeout [ 204.238383][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.347922][T15287] kvm: pic: level sensitive irq not supported [ 204.348303][T15287] kvm: pic: non byte read [ 204.352362][T15287] kvm: pic: level sensitive irq not supported [ 204.352596][T15287] kvm: pic: non byte read [ 204.358361][T15287] kvm: pic: level sensitive irq not supported [ 204.358592][T15287] kvm: pic: non byte read [ 204.362547][T15287] kvm: pic: level sensitive irq not supported [ 204.362777][T15287] kvm: pic: non byte read [ 204.368721][T15287] kvm: pic: level sensitive irq not supported [ 204.368955][T15287] kvm: pic: non byte read [ 204.372987][T15287] kvm: pic: level sensitive irq not supported [ 204.373219][T15287] kvm: pic: non byte read [ 204.377867][T15287] kvm: pic: level sensitive irq not supported [ 204.378154][T15287] kvm: pic: non byte read [ 204.382112][T15287] kvm: pic: level sensitive irq not supported [ 204.382342][T15287] kvm: pic: non byte read [ 204.386703][T15287] kvm: pic: level sensitive irq not supported [ 204.386961][T15287] kvm: pic: non byte read [ 204.390988][T15287] kvm: pic: level sensitive irq not supported [ 204.391217][T15287] kvm: pic: non byte read [ 204.444142][T15292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=51 sclass=netlink_xfrm_socket pid=15292 comm=syz.5.2771 [ 204.448792][ T5945] Bluetooth: hci0: Unable to find connection with handle 0x00c9 [ 204.452386][T15292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=15292 comm=syz.5.2771 [ 204.457174][T15292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=15292 comm=syz.5.2771 [ 204.460927][T15292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=15292 comm=syz.5.2771 [ 204.465732][T15292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=52 sclass=netlink_xfrm_socket pid=15292 comm=syz.5.2771 [ 204.469574][T15292] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=15292 comm=syz.5.2771 [ 204.610479][T15307] 9pnet_fd: Insufficient options for proto=fd [ 204.675905][T15321] fuse: Bad value for 'user_id' [ 204.676642][T15319] tmpfs: Unknown parameter ' ' [ 204.677505][T15321] fuse: Bad value for 'user_id' [ 204.682362][T15319] overlayfs: workdir and upperdir must reside under the same mount [ 204.830234][T15342] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 204.833531][T15342] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 204.837584][T15342] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 204.840648][T15342] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 204.997241][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 205.028238][T15358] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 205.167789][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 205.171965][ T10] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 205.176241][ T10] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.181487][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 205.182771][T15370] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.185819][ T10] usb 7-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 205.188407][T15370] block device autoloading is deprecated and will be removed. [ 205.191353][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.196466][ T10] usb 7-1: Product: syz [ 205.197844][ T10] usb 7-1: Manufacturer: ь [ 205.199325][ T10] usb 7-1: SerialNumber: syz [ 205.235322][T15369] netlink: 'syz.5.2802': attribute type 9 has an invalid length. [ 205.291640][ T5945] Bluetooth: hci4: unexpected subevent 0x19 length: 24 < 28 [ 205.440441][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 205.440456][ T40] audit: type=1400 audit(1761585670.915:41620): avc: denied { read } for pid=15396 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.461845][T15399] netlink: 'syz.5.2810': attribute type 10 has an invalid length. [ 205.462452][T15400] netlink: 'syz.5.2810': attribute type 10 has an invalid length. [ 205.465249][T15399] macvlan1: entered allmulticast mode [ 205.465266][T15399] veth1_vlan: entered allmulticast mode [ 205.465454][T15399] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 205.476542][T15400] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 205.497871][T15397] exFAT-fs (nullb0): invalid boot record signature [ 205.505005][T15397] exFAT-fs (nullb0): failed to read boot sector [ 205.507659][T15397] exFAT-fs (nullb0): failed to recognize exfat type [ 205.558374][ T40] audit: type=1400 audit(1761585671.027:41621): avc: denied { connect } for pid=15409 comm="syz.4.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.567656][ T40] audit: type=1400 audit(1761585671.027:41622): avc: denied { write } for pid=15409 comm="syz.4.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.593142][ T40] audit: type=1400 audit(1761585671.055:41623): avc: denied { setopt } for pid=15421 comm="syz.4.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.601348][ T40] audit: type=1400 audit(1761585671.055:41624): avc: denied { ioctl } for pid=15421 comm="syz.4.2816" path="socket:[57319]" dev="sockfs" ino=57319 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 205.637807][ T10] usbhid 7-1:1.0: can't add hid device: -71 [ 205.640486][ T10] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 205.645460][ T10] usb 7-1: USB disconnect, device number 17 [ 205.654676][T15429] bond2: option primary_reselect: invalid value (133) [ 205.657607][T15429] bond2 (unregistering): Released all slaves [ 205.830655][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 205.991006][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 206.004529][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.008040][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.011059][ T34] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 206.016220][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.019968][ T34] usb 10-1: config 0 descriptor?? [ 206.061746][T15446] F2FS-fs: Conflicting test_dummy_encryption options [ 206.250122][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 206.252182][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 206.257472][ T34] usb 10-1: USB disconnect, device number 2 [ 206.368118][T15480] SELinux: policydb table sizes (1073872904,0) do not match mine (6,7) [ 206.371648][T15480] SELinux: failed to load policy [ 206.376264][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.376424][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.438775][ T40] audit: type=1400 audit(1761585671.850:41625): avc: denied { write } for pid=15483 comm="syz.5.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 206.462701][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.462720][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 206.485104][T15482] can: request_module (can-proto-0) failed. [ 206.526606][T15491] netlink: zone id is out of range [ 206.528251][T15491] netlink: zone id is out of range [ 206.529976][T15491] netlink: set zone limit has 8 unknown bytes [ 206.532540][ T40] audit: type=1400 audit(1761585671.934:41626): avc: denied { read } for pid=15490 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.620265][ T40] audit: type=1800 audit(1761585672.019:41627): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2843" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 206.632803][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 206.638621][ T40] audit: type=1400 audit(1761585672.037:41628): avc: denied { write } for pid=15496 comm="syz.2.2841" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.669050][ T40] audit: type=1400 audit(1761585672.065:41629): avc: denied { write } for pid=15511 comm="syz.1.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.706481][T15519] netlink: 'syz.5.2844': attribute type 1 has an invalid length. [ 206.725290][T15519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.734079][T15519] bond1: (slave gretap1): making interface the new active one [ 206.737645][T15519] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 206.750699][T15519] xfrm0 speed is unknown, defaulting to 1000 [ 206.779075][ T6018] IPVS: starting estimator thread 0... [ 206.854644][T15531] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 206.881575][T15536] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 206.900265][T15523] IPVS: using max 48 ests per chain, 115200 per kthread [ 207.101102][T15544] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.183983][T15544] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.185532][T15551] binder: BINDER_SET_CONTEXT_MGR already set [ 207.189841][T15551] binder: 15549:15551 ioctl 4018620d 200000000300 returned -16 [ 207.192412][T15551] binder: BINDER_SET_CONTEXT_MGR already set [ 207.194380][T15551] binder: 15549:15551 ioctl 4018620d 200000000300 returned -16 [ 207.263094][T15544] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.342246][T15544] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.519403][ T74] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.528098][ T74] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.566918][ T1150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.583084][ T1150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.745009][ T29] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 207.779795][T15573] __nla_validate_parse: 16 callbacks suppressed [ 207.779826][T15573] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2864'. [ 207.905875][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 207.908866][ T29] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 207.912323][ T29] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.919052][ T29] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.923179][ T29] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.928513][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 207.933332][ T29] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 207.937611][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.940383][ T29] usb 7-1: Product: syz [ 207.941916][ T29] usb 7-1: Manufacturer: syz [ 207.943389][ T29] usb 7-1: SerialNumber: syz [ 207.946500][ T29] usb 7-1: config 0 descriptor?? [ 208.094621][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 208.100583][T15590] overlay: ./file0 is not a directory [ 208.169417][ T29] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 208.181008][ T5330] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 208.185710][ T5330] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 208.192359][ T5330] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 208.197575][ T5330] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 208.343122][T15607] netlink: 'syz.4.2874': attribute type 9 has an invalid length. [ 208.413860][T15612] overlay: filesystem on ./file0 not supported as upperdir [ 208.450983][T15566] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 208.461061][ T6083] usb 7-1: USB disconnect, device number 18 [ 208.600240][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.681038][T15618] bridge0: port 3(veth0_to_bridge) entered blocking state [ 208.683831][T15618] bridge0: port 3(veth0_to_bridge) entered disabled state [ 208.685554][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.686794][ T5946] Bluetooth: hci3: command 0x040f tx timeout [ 208.687890][T15618] veth0_to_bridge: entered promiscuous mode [ 208.687992][T15618] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.688326][T15618] bridge0: port 3(veth0_to_bridge) entered blocking state [ 208.688408][T15618] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 208.734425][T15623] overlay: Bad value for 'xino' [ 208.816160][ T5946] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 208.834846][ T5946] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 208.883634][T15645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=15645 comm=syz.1.2886 [ 209.024922][ T5946] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 209.136551][T15672] hpfs: Bad magic ... probably not HPFS [ 209.301755][T15688] "syz.4.2901" (15688) uses obsolete ecb(arc4) skcipher [ 209.303997][T15701] loop2: detected capacity change from 0 to 7 [ 209.308580][T15701] Dev loop2: unable to read RDB block 7 [ 209.310438][T15701] loop2: AHDI p1 p2 p3 [ 209.312350][T15701] loop2: partition table partially beyond EOD, truncated [ 209.314536][T15701] loop2: p1 start 1601398130 is beyond EOD, truncated [ 209.318403][T15701] loop2: p2 start 1702059890 is beyond EOD, truncated [ 209.352513][T15704] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2905'. [ 209.356818][T15704] overlay: filesystem on ./file0 not supported as upperdir [ 209.572092][T15729] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 209.576309][T15729] netlink: 'syz.1.2913': attribute type 3 has an invalid length. [ 209.579720][T15729] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2913'. [ 209.583582][T15729] NCSI netlink: No device for ifindex 813332851 [ 209.785219][T15738] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2916'. [ 210.179583][T15771] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2925'. [ 210.181627][T15774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.260333][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.858625][T15820] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2934'. [ 210.867861][T15818] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 210.870781][T15818] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 210.874035][T15818] overlayfs: failed to get uuid (79/file0, err=-13); falling back to uuid=null. [ 210.913190][T15822] (syz.2.2936,15822,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 210.914470][ T5946] Bluetooth: hci3: command 0x040f tx timeout [ 210.918007][T15822] (syz.2.2936,15822,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 210.921945][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.996190][T15827] netlink: 'syz.2.2938': attribute type 2 has an invalid length. [ 210.998627][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 211.001941][T15827] netlink: 'syz.2.2938': attribute type 2 has an invalid length. [ 211.004370][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 212.004930][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 212.004941][ T40] audit: type=1400 audit(1761585677.060:41667): avc: granted { setsecparam } for pid=15831 comm="syz.2.2940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 212.010496][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2941'. [ 212.051543][T15840] overlayfs: failed to clone lowerpath [ 212.058606][T15845] overlayfs: failed to resolve './file1': -2 [ 212.061656][T15844] overlayfs: failed to resolve './file1': -2 [ 212.166690][T15868] netlink: 'syz.5.2947': attribute type 8 has an invalid length. [ 212.178122][T15873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=15873 comm=syz.1.2949 [ 212.250570][ T5946] block nbd1: Receive control failed (result -32) [ 212.254281][T15885] overlayfs: failed to clone lowerpath [ 212.427597][T15872] block nbd1: shutting down sockets [ 212.540305][T15921] netlink: 'syz.1.2961': attribute type 10 has an invalid length. [ 212.768775][T15930] binder: BINDER_SET_CONTEXT_MGR already set [ 212.771236][T15930] binder: 15929:15930 ioctl 4018620d 200000000280 returned -16 [ 212.775185][T15930] binder: 15929:15930 ioctl c0306201 200000000080 returned -14 [ 212.947859][ T40] audit: type=1400 audit(1761585677.939:41668): avc: denied { create } for pid=15936 comm="syz.4.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.949203][T15937] netlink: 'syz.4.2967': attribute type 1 has an invalid length. [ 212.956068][ T40] audit: type=1400 audit(1761585677.939:41669): avc: denied { write } for pid=15936 comm="syz.4.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.974485][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:bd:f3:31:9f:80, vlan:0) [ 212.978511][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.982322][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.986194][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:bd:f3:31:9f:80, vlan:0) [ 212.989934][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.993676][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.994332][T15937] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.997488][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:bd:f3:31:9f:80, vlan:0) [ 212.997615][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.013684][T15937] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 213.018603][T15937] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 213.113730][ T40] audit: type=1326 audit(1761585678.098:41670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.1.2969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea7d8efc9 code=0x7ffc0000 [ 213.123629][ T40] audit: type=1326 audit(1761585678.098:41671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.1.2969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea7d8efc9 code=0x7ffc0000 [ 213.130805][ T40] audit: type=1326 audit(1761585678.107:41672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.1.2969" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0ea7d8efc9 code=0x7ffc0000 [ 213.141636][ T40] audit: type=1326 audit(1761585678.107:41673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.1.2969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea7d8efc9 code=0x7ffc0000 [ 213.143404][ T5946] Bluetooth: hci3: command 0x040f tx timeout [ 213.153267][ T40] audit: type=1326 audit(1761585678.107:41674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.1.2969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea7d8efc9 code=0x7ffc0000 [ 213.153316][ T40] audit: type=1326 audit(1761585678.107:41675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.1.2969" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ea7d8efc9 code=0x7ffc0000 [ 213.182719][ T40] audit: type=1400 audit(1761585678.154:41676): avc: denied { write } for pid=15943 comm="syz.2.2970" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 213.285146][T15947] netlink: 'syz.2.2970': attribute type 13 has an invalid length. [ 213.315734][T15951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.521029][ T5946] ================================================================== [ 213.524477][ T5946] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x221/0x240 [ 213.527499][ T5946] Read of size 8 at addr ffff888047eec5a0 by task kworker/u33:7/5946 [ 213.529806][ T13] batadv1: left promiscuous mode [ 213.531526][ T5946] [ 213.531540][ T5946] CPU: 2 UID: 0 PID: 5946 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 213.531564][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.531577][ T5946] Workqueue: hci4 hci_rx_work [ 213.531609][ T5946] Call Trace: [ 213.531616][ T5946] [ 213.531623][ T5946] dump_stack_lvl+0x116/0x1f0 [ 213.531652][ T5946] print_report+0xcd/0x630 [ 213.532144][ T5946] ? __virt_addr_valid+0x81/0x610 [ 213.532171][ T5946] ? __phys_addr+0xe8/0x180 [ 213.532196][ T5946] ? l2cap_sock_new_connection_cb+0x221/0x240 [ 213.532222][ T5946] kasan_report+0xe0/0x110 [ 213.532241][ T5946] ? l2cap_sock_new_connection_cb+0x221/0x240 [ 213.532269][ T5946] l2cap_sock_new_connection_cb+0x221/0x240 [ 213.532296][ T5946] l2cap_connect_cfm+0x4c7/0xf80 [ 213.532319][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 213.532360][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 213.532384][ T5946] le_conn_complete_evt+0x1ba6/0x2150 [ 213.532412][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 213.532436][ T5946] ? hci_event_packet+0x459/0x11c0 [ 213.532463][ T5946] hci_le_conn_complete_evt+0x23c/0x370 [ 213.532490][ T5946] hci_le_meta_evt+0x357/0x5e0 [ 213.532517][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 213.532543][ T5946] hci_event_packet+0x685/0x11c0 [ 213.532566][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 213.532592][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 213.532617][ T5946] ? kcov_remote_start+0x3c9/0x6d0 [ 213.532639][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.532674][ T5946] hci_rx_work+0x2c5/0x16b0 [ 213.532704][ T5946] ? rcu_is_watching+0x12/0xc0 [ 213.532730][ T5946] process_one_work+0x9cf/0x1b70 [ 213.532754][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 213.532776][ T5946] ? assign_work+0x1a0/0x250 [ 213.532794][ T5946] worker_thread+0x6c8/0xf10 [ 213.532816][ T5946] ? __kthread_parkme+0x19e/0x250 [ 213.532842][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 213.532861][ T5946] kthread+0x3c5/0x780 [ 213.532878][ T5946] ? __pfx_kthread+0x10/0x10 [ 213.532895][ T5946] ? rcu_is_watching+0x12/0xc0 [ 213.532917][ T5946] ? __pfx_kthread+0x10/0x10 [ 213.532971][ T5946] ret_from_fork+0x675/0x7d0 [ 213.532988][ T5946] ? __pfx_kthread+0x10/0x10 [ 213.533006][ T5946] ret_from_fork_asm+0x1a/0x30 [ 213.533046][ T5946] [ 213.533053][ T5946] [ 213.626248][ T5946] Allocated by task 5946: [ 213.627619][ T5946] kasan_save_stack+0x33/0x60 [ 213.629504][ T5946] kasan_save_track+0x14/0x30 [ 213.631501][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 213.633488][ T5946] __kmalloc_noprof+0x32f/0x880 [ 213.635489][ T5946] sk_prot_alloc+0x1a8/0x2a0 [ 213.636985][ T5946] sk_alloc+0x36/0xc20 [ 213.638379][ T5946] bt_sock_alloc+0x3b/0x3a0 [ 213.640324][ T5946] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 213.642783][ T5946] l2cap_sock_new_connection_cb+0x101/0x240 [ 213.645256][ T5946] l2cap_connect_cfm+0x4c7/0xf80 [ 213.647313][ T5946] le_conn_complete_evt+0x1ba6/0x2150 [ 213.649579][ T5946] hci_le_conn_complete_evt+0x23c/0x370 [ 213.651686][ T5946] hci_le_meta_evt+0x357/0x5e0 [ 213.653752][ T5946] hci_event_packet+0x685/0x11c0 [ 213.655873][ T5946] hci_rx_work+0x2c5/0x16b0 [ 213.657798][ T5946] process_one_work+0x9cf/0x1b70 [ 213.659520][ T5946] worker_thread+0x6c8/0xf10 [ 213.660999][ T5946] kthread+0x3c5/0x780 [ 213.662280][ T5946] ret_from_fork+0x675/0x7d0 [ 213.664183][ T5946] ret_from_fork_asm+0x1a/0x30 [ 213.666222][ T5946] [ 213.667270][ T5946] Freed by task 15963: [ 213.669009][ T5946] kasan_save_stack+0x33/0x60 [ 213.670761][ T5946] kasan_save_track+0x14/0x30 [ 213.672669][ T5946] __kasan_save_free_info+0x3b/0x60 [ 213.674898][ T5946] __kasan_slab_free+0x5f/0x80 [ 213.676840][ T5946] kfree+0x2b8/0x6d0 [ 213.678263][ T5946] __sk_destruct+0x75f/0x9a0 [ 213.680310][ T5946] sk_destruct+0xc2/0xf0 [ 213.682112][ T5946] __sk_free+0xf4/0x3e0 [ 213.683829][ T5946] sk_free+0x6a/0x90 [ 213.685298][ T5946] l2cap_sock_kill+0x171/0x2d0 [ 213.687328][ T5946] l2cap_sock_cleanup_listen+0x3d/0x2a0 [ 213.689660][ T5946] l2cap_sock_release+0x69/0x250 [ 213.691431][ T5946] __sock_release+0xb3/0x270 [ 213.693280][ T5946] sock_close+0x1c/0x30 [ 213.694568][ T5946] __fput+0x402/0xb70 [ 213.696232][ T5946] task_work_run+0x150/0x240 [ 213.698195][ T5946] do_exit+0x86f/0x2bf0 [ 213.699998][ T5946] do_group_exit+0xd3/0x2a0 [ 213.701928][ T5946] __x64_sys_exit_group+0x3e/0x50 [ 213.704050][ T5946] x64_sys_call+0x150b/0x1730 [ 213.705871][ T5946] do_syscall_64+0xcd/0xfa0 [ 213.707831][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.710343][ T5946] [ 213.711419][ T5946] The buggy address belongs to the object at ffff888047eec000 [ 213.711419][ T5946] which belongs to the cache kmalloc-2k of size 2048 [ 213.717103][ T5946] The buggy address is located 1440 bytes inside of [ 213.717103][ T5946] freed 2048-byte region [ffff888047eec000, ffff888047eec800) [ 213.722222][ T5946] [ 213.722994][ T5946] The buggy address belongs to the physical page: [ 213.725045][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47ee8 [ 213.727791][ T5946] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 213.731231][ T5946] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 213.734200][ T5946] page_type: f5(slab) [ 213.735844][ T5946] raw: 00fff00000000040 ffff88801b442f00 dead000000000100 dead000000000122 [ 213.739332][ T5946] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 213.742346][ T5946] head: 00fff00000000040 ffff88801b442f00 dead000000000100 dead000000000122 [ 213.745272][ T5946] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 213.748823][ T5946] head: 00fff00000000003 ffffea00011fba01 00000000ffffffff 00000000ffffffff [ 213.752390][ T5946] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 213.755689][ T5946] page dumped because: kasan: bad access detected [ 213.757996][ T5946] page_owner tracks the page as allocated [ 213.760540][ T5946] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29, tgid 29 (kworker/1:0), ts 201577358843, free_ts 201533066550 [ 213.768827][ T5946] post_alloc_hook+0x1c0/0x230 [ 213.770783][ T5946] get_page_from_freelist+0x10a3/0x3a30 [ 213.772933][ T5946] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 213.774811][ T5946] alloc_pages_mpol+0x1fb/0x550 [ 213.776335][ T5946] new_slab+0x24a/0x360 [ 213.777658][ T5946] ___slab_alloc+0xdae/0x1a60 [ 213.779110][ T5946] __slab_alloc.constprop.0+0x63/0x110 [ 213.780824][ T5946] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 213.782774][ T5946] kmalloc_reserve+0xef/0x2c0 [ 213.784270][ T5946] __alloc_skb+0x166/0x380 [ 213.785743][ T5946] mld_newpack.isra.0+0x18e/0xa20 [ 213.787338][ T5946] add_grhead+0x299/0x340 [ 213.788789][ T5946] add_grec+0x11b5/0x1720 [ 213.790161][ T5946] mld_ifc_work+0x41f/0xbf0 [ 213.791565][ T5946] process_one_work+0x9cf/0x1b70 [ 213.793089][ T5946] worker_thread+0x6c8/0xf10 [ 213.794500][ T5946] page last free pid 15058 tgid 15057 stack trace: [ 213.796489][ T5946] __free_frozen_pages+0x7df/0x1160 [ 213.798174][ T5946] __put_partials+0x130/0x170 [ 213.799683][ T5946] qlist_free_all+0x4d/0x120 [ 213.801161][ T5946] kasan_quarantine_reduce+0x195/0x1e0 [ 213.802873][ T5946] __kasan_slab_alloc+0x69/0x90 [ 213.804457][ T5946] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 213.806285][ T5946] __alloc_skb+0x2b2/0x380 [ 213.807612][ T5946] rtmsg_ifinfo_build_skb+0x81/0x280 [ 213.809261][ T5946] rtmsg_ifinfo+0x9f/0x1a0 [ 213.810682][ T5946] netif_state_change+0x17f/0x3b0 [ 213.812237][ T5946] do_setlink.constprop.0+0x387d/0x4380 [ 213.813901][ T5946] rtnl_newlink+0x18e0/0x2000 [ 213.815347][ T5946] rtnetlink_rcv_msg+0x95e/0xe90 [ 213.816908][ T5946] netlink_rcv_skb+0x158/0x420 [ 213.818425][ T5946] netlink_unicast+0x5aa/0x870 [ 213.819990][ T5946] netlink_sendmsg+0x8c8/0xdd0 [ 213.821495][ T5946] [ 213.822260][ T5946] Memory state around the buggy address: [ 213.824027][ T5946] ffff888047eec480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.826464][ T5946] ffff888047eec500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.828877][ T5946] >ffff888047eec580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.831394][ T5946] ^ [ 213.833011][ T5946] ffff888047eec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.835496][ T5946] ffff888047eec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.837982][ T5946] ================================================================== [ 213.849980][ T5946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.852290][ T5946] CPU: 3 UID: 0 PID: 5946 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 213.855290][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.858650][ T5946] Workqueue: hci4 hci_rx_work [ 213.860179][ T5946] Call Trace: [ 213.861258][ T5946] [ 213.862214][ T5946] dump_stack_lvl+0x3d/0x1f0 [ 213.863695][ T5946] vpanic+0x640/0x6f0 [ 213.865027][ T5946] panic+0xca/0xd0 [ 213.866185][ T5946] ? __pfx_panic+0x10/0x10 [ 213.867584][ T5946] ? l2cap_sock_new_connection_cb+0x221/0x240 [ 213.869480][ T5946] ? preempt_schedule_common+0x44/0xc0 [ 213.871200][ T5946] ? preempt_schedule_thunk+0x16/0x30 [ 213.872924][ T5946] check_panic_on_warn+0xab/0xb0 [ 213.874542][ T5946] end_report+0x107/0x170 [ 213.875949][ T5946] kasan_report+0xee/0x110 [ 213.877381][ T5946] ? l2cap_sock_new_connection_cb+0x221/0x240 [ 213.879273][ T5946] l2cap_sock_new_connection_cb+0x221/0x240 [ 213.881136][ T5946] l2cap_connect_cfm+0x4c7/0xf80 [ 213.882718][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 213.884429][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 213.886161][ T5946] le_conn_complete_evt+0x1ba6/0x2150 [ 213.887886][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 213.889683][ T5946] ? hci_event_packet+0x459/0x11c0 [ 213.891317][ T5946] hci_le_conn_complete_evt+0x23c/0x370 [ 213.893107][ T5946] hci_le_meta_evt+0x357/0x5e0 [ 213.894638][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 213.896567][ T5946] hci_event_packet+0x685/0x11c0 [ 213.898130][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 213.899764][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 213.901520][ T5946] ? kcov_remote_start+0x3c9/0x6d0 [ 213.903178][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.904969][ T5946] hci_rx_work+0x2c5/0x16b0 [ 213.906495][ T5946] ? rcu_is_watching+0x12/0xc0 [ 213.908121][ T5946] process_one_work+0x9cf/0x1b70 [ 213.909792][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 213.911566][ T5946] ? assign_work+0x1a0/0x250 [ 213.913138][ T5946] worker_thread+0x6c8/0xf10 [ 213.914709][ T5946] ? __kthread_parkme+0x19e/0x250 [ 213.916452][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 213.918129][ T5946] kthread+0x3c5/0x780 [ 213.919460][ T5946] ? __pfx_kthread+0x10/0x10 [ 213.920931][ T5946] ? rcu_is_watching+0x12/0xc0 [ 213.922548][ T5946] ? __pfx_kthread+0x10/0x10 [ 213.924109][ T5946] ret_from_fork+0x675/0x7d0 [ 213.925677][ T5946] ? __pfx_kthread+0x10/0x10 [ 213.927237][ T5946] ret_from_fork_asm+0x1a/0x30 [ 213.928911][ T5946] [ 213.930685][ T5946] Kernel Offset: disabled [ 213.932134][ T5946] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:21:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000000001e RCX=ffffffff819befb1 RDX=ffff88801d6b8000 RSI=ffffffff819bef9f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900001077e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000020efe R13=0000000000000200 R14=ffff8880249a8000 R15=ffffc900001078a8 RIP=ffffffff819befa1 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=0000000043765000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020008 00010004805e0010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a16412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a16412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a16412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a16412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a1641307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a1641315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a165b74a8 00007f6a165b74a0 00007f6a165b7498 00007f6a165b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a1711d100 00007f6a165b7460 00007f6a165b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6a165b74b8 00007f6a165b74b0 00007f6a165b74a8 00007f6a165b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff8b59219a RDX=ffff88805f84c900 RSI=0000000000000001 RDI=0000000000000005 RBP=ffffffff8cf02d00 RSP=ffffc9000390f930 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000005 R14=0000000000000004 R15=0000000000000000 RIP=ffffffff81bd059b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce24f0b0a0 CR3=0000000030b51000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=000000000000000d RCX=ffffffff81b15e47 RDX=ffff8880249a8000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff8cfae855 RSP=ffffc90003186b68 R8 =0000000000000001 R9 =0000000000000000 R10=000000000000000d R11=00000000000a54e2 R12=0000000000000052 R13=0000000000000055 R14=dffffc0000000000 R15=ffffc90003186c38 RIP=ffffffff81b15df0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc90456f98 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000030300 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4c127ff0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc8f612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc8f612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc8f612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc8f612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc8f61307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc8f61315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000079a0 000000000000022c 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8db19af9 RDI=ffffffff8bf06e40 RBP=0000000000000002 RSP=ffffc9000385e360 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=000000000000ff5f R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b605a5d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ea8bc2f98 CR3=000000003b170000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff26af4c60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ea7e12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ea7e12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ea7e12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ea7e12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ea7e1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ea7e1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000