last executing test programs: 16.970527527s ago: executing program 3 (id=490): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000257000/0x1000)=nil}) mmap(&(0x7f0000257000/0x3000)=nil, 0x3000, 0x1000002, 0x20010, r0, 0x9dd20000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 16.920172113s ago: executing program 3 (id=492): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0xdb, 0x1140) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) open(0x0, 0x0, 0x157) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x94) 16.804138394s ago: executing program 3 (id=498): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2c00000000000000000000000700000083178fe0000001ac1414aaac14142dac1414aa0a0101028202000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe00000020000000078000000000000000000000007000000890f9b64010100e0000002ac1414aa9404000044540593ac1414aa00000009ac14141100000002ac1414aa00000001ac1e0101000003ffe0000001000000000a01010200000006e000000100000ddc64010100fffffffae00000010000000f0a010100000000020014000000000000000000000002000000860c0000000000001100000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000ac1614aa02a095001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001e00000010000000014000000000000000000000001000000020000000000000014000000000000000000000002000000040000000000000014"], 0x180}}], 0x1, 0x4000000) 16.45827318s ago: executing program 3 (id=510): syz_emit_ethernet(0x7c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6710000000462f82fe8000000000000000000000000000aaff020000000000000000000000600001042065580000000301ff0c0008"], 0x0) 10.110941147s ago: executing program 3 (id=510): syz_emit_ethernet(0x7c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6710000000462f82fe8000000000000000000000000000aaff020000000000000000000000600001042065580000000301ff0c0008"], 0x0) 3.323565253s ago: executing program 0 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c6173740000000004000280080003400000010514"], 0xe4}}, 0x20050800) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000014280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000002c0)=[0x85f8], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000102000001000000090000000005001b0001"], 0x24}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3.046199589s ago: executing program 0 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040044}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000002) 2.978456464s ago: executing program 0 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x4400, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 2.977638584s ago: executing program 0 (id=706): read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0xfffffdce) 2.910523716s ago: executing program 0 (id=707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x1500}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100feffffffffdb7525017c0000040042800c00018006000600800a00000c0002800800178004"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) ioctl$VHOST_VDPA_GET_DEVICE_ID(r5, 0x8004af70, &(0x7f0000000380)) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x8a241, 0x0) pwritev(r6, &(0x7f0000000240)=[{&(0x7f0000000040)="af", 0x1}], 0x1, 0x4, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) 2.446243866s ago: executing program 3 (id=510): syz_emit_ethernet(0x7c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6710000000462f82fe8000000000000000000000000000aaff020000000000000000000000600001042065580000000301ff0c0008"], 0x0) 1.61230554s ago: executing program 0 (id=719): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203000211000000000000000000000003000800800000007800000000000000000002000000000005000600000000000a00000000000000fc02000000000000000000050000000000000000000000000200010000000000000009000000004005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 1.434072277s ago: executing program 32 (id=719): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203000211000000000000000000000003000800800000007800000000000000000002000000000005000600000000000a00000000000000fc02000000000000000000050000000000000000000000000200010000000000000009000000004005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 1.289579249s ago: executing program 1 (id=724): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\a', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.130359496s ago: executing program 2 (id=727): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x8000, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x15, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/53, 0x35) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2, @ANYRESOCT=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.129524503s ago: executing program 1 (id=728): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x8000000000000000]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000001200)=[{0x0}], 0x1, 0x9, 0x6a76) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0x2000000000000202, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca44"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x10) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000020061504edc5df4515b62c3c18ef1eaf405e8b44d03f078651aa1306062665bd38162a4a29f1679eee1898c32476153b7fe9737eed278f8b5efa42339f21645758dfcb20f180bb0a26adb1256c9e6"]) syz_usb_connect(0x4, 0x698, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x12, 0x8f, 0x62, 0x40, 0x1210, 0x3, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x686, 0x3, 0xb, 0x6b, 0x20, 0x79, "", [{{0x9, 0x4, 0xca, 0x3, 0xd, 0x80, 0xdd, 0xab, 0x2, [@hid_hid={0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xda4}}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x81, 0x40, 0x68}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x71, 0x7, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x7f, 0x9, [@generic={0x13, 0x24, "65a885a55a0b6fb64f01cd6a5c97144a98"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0xfc, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x10}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x2, 0x0, 0x80, [@generic={0xc4, 0xe, "686798456174262177f0279052a43540811580912bd376eb27745240bd7e9a263f19e07cd6af22672e78503e1ebaeff58d55eeb88c59da1fbe28915e02a0a74d1d88835cc99691be5ce4e55c32af95ad03e24cdde4904ca84a7b56a4e9d51894f2c4edd3d4c83ac18f080a41a1a8acf22dac5d29f49e1a9a066547b95ae0ee710141113226cbe0b567483fc95a627e3fc65da1a49476560f86ed6043957b609b61b41c090657752894fc536de97761bff3d1ab17c7dc05ca8baf2ebaaa74720d5977"}, @generic={0xd6, 0xb, "cc35ba05d1a6f9d32cd402c758c23c9394dd5422f0d3d4851845f1a5ae66647c8ec756a237b0de7e5780c4302009ae81645e36ef06705bafc82b20d416369ebbca3b480400433eca42e627146479eaa5d4d384a4ff984f32ad2051e24dc6e03bf30437f8c6d6bbccda9764ffcfda5b047a6f48656814d0aeb19b27845bed4bf9af86ffd3aa7fb9d401edb7de916bf3462c5a3ed2742302ed75485be0275ef44d4e60b770166b14ddce8f55addab6c127a1f4cd3a69ac8cd63c2b4354aa8756924279400403fc33710b7b10dc9f60f483ccc765ef"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x4, 0x7, 0x6, [@generic={0xc0, 0xf, "c9256bca3959fa8fce7a9920b5ad38436d7147eac5956b2e998afa44f55d39629b73dfc7a27d86dd5fff57a4585f409614821129a5d6721bcfae261c6fe1ec08e03684d863ef7b7f21d718ddfb738088efe4ba8c61487700ae125b0fb56bbe9d7209b8f888dc45ae58f84f0c153acb463e4f416b55378058f7dbafdca697c59e5217f51c7dbbbb9e37330a97009aa66a4ff6c94d732ebc909c64c042f0dbfffd13e7511a6362dd00085c1bd77ffe7412f639837fa01bd2cb4fd2468d0cdf"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x2, 0x2, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xe}, @generic={0x95, 0xe, "2882dcae921b99758295bed874959533c2527a969caa45af82791191752196e2c9c39f57dc7828f814845c19d396644d5f9b39d4bfdcf8c99e1b2ffc4b9ab0cb019306e642acfcb1e19ca040f4460bd005d38870e58de26649035cfe4e82794bdf90cabb3d659745368cfa4f3507eaec8d2c60372b9e1ac467875dfae5e6bc7369763249cf757dd06f75e0addbc44cb89769cd"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ef, 0x1, 0x7, 0x80}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xd, 0x10, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xd9, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x9, 0xb, 0x2, [@generic={0x3b, 0xd, "16c33e93d50bc9017dd072b79f236561e6df110dbe44910639e174e2b70b49ec8053fc3af36a3064f683f76c511d6bf80280a363a00de9c3ca"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0xfc, 0x0, [@generic={0x56, 0x9, "c03797d4ddd299b6b20020c9afbe1f8a233d8efe1ee47298bd6b576787be626e8a650dd49e7a3145253252b577965260cdba9e5b9b9975132fa0460a3dc7ce27174097aae0903974b00b059820f6b68dd518bfe5"}, @generic={0x3b, 0x2, "b1a3390943b33b176f8a22187ff341ccf71a5613b3a653c8e8e0fa04d1bf5edaff2a675d478e2c65fa56ffc4f9d049f15d3201d54c77661c8c"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x9, 0xe6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x22, 0x17}]}}]}}, {{0x9, 0x4, 0x9d, 0x8, 0x7, 0x82, 0x75, 0x2b, 0x3, [@hid_hid={0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb62}}], [{{0x9, 0x5, 0x5, 0xc, 0x20, 0x3, 0x81, 0x5, [@generic={0x5e, 0xa, "f394b1c0c0114e66d7f3a8fb47b77f6a973c83e17bd8737f468c29abda86ec0ad816e1c29c7d6bfdea9e79a31f0278b5f2114d73c417a94b4ed7fd3e2fcf1a9f398a68835b934ea611a9187d29a68f71c5f45b8cf7e7f1303ac28c40"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x3, 0x7f, 0xa4}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x80, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0x1046}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9f, 0x200}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x5, 0xbb, 0xc, [@generic={0x61, 0x1b, "bccdac4fdfd7ca9343f603f2622744ff5c59f28764136631d37fa560179a8c965ed3da54fdc40d99edb7b1d0bbf423a6107392bb32a7b28aebb0f86135d9fba1f2273153a61d9a4ecc7b03dfbe896b230aa1e155a1759c82ceadd8e4936b96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xdb6a}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x33, 0x4, 0xd6}}]}}, {{0x9, 0x4, 0x29, 0x4, 0x2, 0x6d, 0x1e, 0x50, 0x6, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x40, 0x2, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8e, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}, @generic={0xbc, 0x8, "5693b66a969ee6e4bf7bf1d4663a52f9e45adacd889114bcb87e55b6bcaf69a4d887bbdf1bacd3173bf1a128233a6e1f8ae98c55e7502e43b4abbe1b1995fd1af928712aba49f0ad636ed27d11cf8804aac0b4ea604daa1ba310b090316fc17d6023605b7dd4d81d859d5302b74647fd0fb6a7cd7b2eaa4891fb72590bf119ae048135fc0e5c0caa0e01bf3b83e245ee2c9e392012d13ae49dc6db4ace3696acd56a757fb2b685694a19d2cad13b4c1ecb1a72ce19c6bfa52ff0"}]}}]}}]}}]}}, &(0x7f0000002300)={0xa, &(0x7f0000002040)={0xa, 0x6, 0x110, 0x9, 0x5d, 0x81, 0xff, 0x80}, 0x8, &(0x7f0000002080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x419}}, {0x7c, &(0x7f0000002140)=@string={0x7c, 0x3, "821ecde5eb07441d91bce78f2f0e05f02148757a7fad6b39b6afc210f220f046ddaffcf8c3c0ffe75370a50545f67c2f026ccbac712101098c6ccbdd4b8ce369491f0d6bef8b7144864d13001c9a62f48ff6d36d63d69513b1502668d34db7b398aa8421d7089d42544659f585c5e0f32ae045c2b5a0495ffe99"}}, {0xdd, &(0x7f00000021c0)=@string={0xdd, 0x3, "90a9c3916db7b6160f075d9020e4058b937c03ac74605b359c565ac31cdcdf406d93987699f990221e6560028c31a22b8e9dd934499686bb1e12c7c96d4dd27c939203bc5d0750093ff1fb85586278c4ab2683ccc4dcda28089a445c2ecf1015ca7c056642b4d9e878394e837b2497fc5191bd7b03745080d2a6774aa8e91356b5ca803bcd084b6ca51391c945415b26b0ea8aebe09ef22e965409350907d4c86bc363a8eb0ca0161b1077bb49d5d14146eb5b3b5a53f044e40b57e9208e9c8a3299980ab191309df3ddf3a71ed630e7be37d2b12228a70ac7fb42"}}, {0x71, &(0x7f00000010c0)=@string={0x71, 0x3, "b2658bb45b5d6edc57107fee521ee52a3570180e1cdc0f68e89c3e50927a09103b895ac7c7a039cc529e4429ebeff9d88592e6f8889f0ea00a19eb95e83a0fc621e28b8c947771521c3b3523608bab3541f3a5877b5a96a90f5b7a70b6b3a4d4f741a416e589bf321b0537e2392ad9"}}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) write$cgroup_subtree(r1, &(0x7f0000001140)={[{0x2d, 'hugetlb'}, {0x2b, 'rdma'}, {0x2d, 'cpuset'}, {0x6, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'rlimit'}, {0x2d, 'net'}, {0x2b, 'memory'}, {0x2d, 'devices'}]}, 0x47) 949.745899ms ago: executing program 4 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x4400, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) (fail_nth: 6) 525.41207ms ago: executing program 1 (id=729): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203000211000000000000000000000003000800800000007800000000000000000002000000000005000600000000000a00000000000000fc02000000000000000000180000000000000000000000000200010000000000000009000000004005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 524.962749ms ago: executing program 1 (id=730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8001, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000055000107000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="010000000000000000000000200000000000000100000000"], 0x38}}, 0x4000000) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000380)) ppoll(&(0x7f0000000040)=[{r1, 0x12c2}], 0x1, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) timer_create(0x6, &(0x7f0000001440)={0x0, 0x33, 0x1, @thr={&(0x7f00000000c0)="81d251fe3351c91b1892012edbe0786b25c0ba13551f8a7144fc2eb2fd44334f6d48c8692614f6cf2e3462394ae4758c7250e4691a2e714ad3e2a49f4dcba39153f5", &(0x7f0000000440)="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"}}, &(0x7f0000001480)=0x0) timer_settime(r5, 0x1, &(0x7f00000014c0)={{}, {0x77359400}}, &(0x7f0000001500)) close_range(r1, r4, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) sendmsg$inet(r7, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002540)={r7, &(0x7f00000001c0)="cfbf543dade76acf47a9087c13f2dfcbe174b36118b532ee52caeae1a9ca409b794244c737df744854d4b2b74c0ce16f4401872fd7074b4fa762e04bbd77858562cbcbe4b5da87c1b86a16fb2864e4ae3cc5e7c287e1790a2a9dd9560bee1f4b769f0383b970", &(0x7f0000001540)=""/4096}, 0x20) 440.75152ms ago: executing program 2 (id=731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) 439.645224ms ago: executing program 1 (id=732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, 0x0, 0x40008c4) 439.430929ms ago: executing program 2 (id=733): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) accept4(r1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x80) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x9082}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r0, 0xd0b05000) 437.525548ms ago: executing program 1 (id=734): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) (async) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) (async) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x8001}) syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(r2, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002440)={0x50, 0x0, r6, {0x7, 0x2d, 0x4, 0x200000, 0x5383, 0x7, 0xfffffff8, 0x800, 0x0, 0x0, 0x4, 0x8}}, 0x50) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r4, &(0x7f0000000100)={r3, r4}) write$cgroup_int(r1, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/118, 0xfffffffffffffffc}) (async) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/118, 0xfffffffffffffffc}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x3}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x3}) 354.140715ms ago: executing program 4 (id=720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x4400, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) (fail_nth: 6) 260.08611ms ago: executing program 2 (id=735): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2c00000000000000000000000700000083178fe0000001ac1414aaac14142dac1414aa0a0101028202000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe00000020000000078000000000000000000000007000000890f9b64010100e0000002ac1414aa9404000044540593ac1414aa00000009ac14141100000002ac1414aa00000001ac1e0101000003ffe0000001000000000a01010200000006e000000100000ddc64010100fffffffae00000010000000f0a010100000000020014000000000000000000000002000000860c0000000000001100000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000ac1614aa000095001c0002a0000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001e00000010000000014000000000000000000000001000000020000000000000014000000000000000000000002000000040000000000000014"], 0x180}}], 0x1, 0x4000000) 188.666536ms ago: executing program 2 (id=736): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32], 0x5c}}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32], 0x5c}}, 0x0) (async) socket$inet6(0xa, 0x80003, 0x1) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) 0s ago: executing program 2 (id=737): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x8000000000000000]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000001200)=[{0x0}], 0x1, 0x9, 0x6a76) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x6, 0x2000000000000202, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca44"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x10) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000020061504edc5df4515b62c3c18ef1eaf405e8b44d03f078651aa1306062665bd38162a4a29f1679eee1898c32476153b7fe9737eed278f8b5efa42339f21645758dfcb20f180bb0a26adb1256c9e6"]) syz_usb_connect(0x4, 0x695, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x12, 0x8f, 0x62, 0x40, 0x1210, 0x3, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x683, 0x3, 0xb, 0x6b, 0x20, 0x79, "", [{{0x9, 0x4, 0xca, 0x3, 0xd, 0x80, 0xdd, 0xab, 0x2, [@hid_hid={0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xda4}}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x81, 0x40, 0x68}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x71, 0x7, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x7f, 0x9, [@generic={0x13, 0x24, "65a885a55a0b6fb64f01cd6a5c97144a98"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0xfc, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x10}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x2, 0x0, 0x80, [@generic={0xc4, 0xe, "686798456174262177f0279052a43540811580912bd376eb27745240bd7e9a263f19e07cd6af22672e78503e1ebaeff58d55eeb88c59da1fbe28915e02a0a74d1d88835cc99691be5ce4e55c32af95ad03e24cdde4904ca84a7b56a4e9d51894f2c4edd3d4c83ac18f080a41a1a8acf22dac5d29f49e1a9a066547b95ae0ee710141113226cbe0b567483fc95a627e3fc65da1a49476560f86ed6043957b609b61b41c090657752894fc536de97761bff3d1ab17c7dc05ca8baf2ebaaa74720d5977"}, @generic={0xd6, 0xb, "cc35ba05d1a6f9d32cd402c758c23c9394dd5422f0d3d4851845f1a5ae66647c8ec756a237b0de7e5780c4302009ae81645e36ef06705bafc82b20d416369ebbca3b480400433eca42e627146479eaa5d4d384a4ff984f32ad2051e24dc6e03bf30437f8c6d6bbccda9764ffcfda5b047a6f48656814d0aeb19b27845bed4bf9af86ffd3aa7fb9d401edb7de916bf3462c5a3ed2742302ed75485be0275ef44d4e60b770166b14ddce8f55addab6c127a1f4cd3a69ac8cd63c2b4354aa8756924279400403fc33710b7b10dc9f60f483ccc765ef"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x4, 0x7, 0x6, [@generic={0xc0, 0xf, "c9256bca3959fa8fce7a9920b5ad38436d7147eac5956b2e998afa44f55d39629b73dfc7a27d86dd5fff57a4585f409614821129a5d6721bcfae261c6fe1ec08e03684d863ef7b7f21d718ddfb738088efe4ba8c61487700ae125b0fb56bbe9d7209b8f888dc45ae58f84f0c153acb463e4f416b55378058f7dbafdca697c59e5217f51c7dbbbb9e37330a97009aa66a4ff6c94d732ebc909c64c042f0dbfffd13e7511a6362dd00085c1bd77ffe7412f639837fa01bd2cb4fd2468d0cdf"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x2, 0x2, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xe}, @generic={0x92, 0xe, "2882dcae921b99758295bed874959533c2527a969caa45af82791191752196e2c9c39f57dc7828f814845c19d396644d5f9b39d4bfdcf8c99e1b2ffc4b9ab0cb019306e642acfcb1e19ca040f4460bd005d38870e58de26649035cfe4e82794bdf90cabb3d659745368cfa4f3507eaec8d2c60372b9e1ac467875dfae5e6bc7369763249cf757dd06f75e0addbc44cb8"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ef, 0x1, 0x7, 0x80}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xd, 0x10, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xd9, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x9, 0xb, 0x2, [@generic={0x3b, 0xd, "16c33e93d50bc9017dd072b79f236561e6df110dbe44910639e174e2b70b49ec8053fc3af36a3064f683f76c511d6bf80280a363a00de9c3ca"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0xfc, 0x0, [@generic={0x56, 0x9, "c03797d4ddd299b6b20020c9afbe1f8a233d8efe1ee47298bd6b576787be626e8a650dd49e7a3145253252b577965260cdba9e5b9b9975132fa0460a3dc7ce27174097aae0903974b00b059820f6b68dd518bfe5"}, @generic={0x3b, 0x2, "b1a3390943b33b176f8a22187ff341ccf71a5613b3a653c8e8e0fa04d1bf5edaff2a675d478e2c65fa56ffc4f9d049f15d3201d54c77661c8c"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x9, 0xe6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x22, 0x17}]}}]}}, {{0x9, 0x4, 0x9d, 0x8, 0x7, 0x82, 0x75, 0x2b, 0x3, [@hid_hid={0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb62}}], [{{0x9, 0x5, 0x5, 0xc, 0x20, 0x3, 0x81, 0x5, [@generic={0x5e, 0xa, "f394b1c0c0114e66d7f3a8fb47b77f6a973c83e17bd8737f468c29abda86ec0ad816e1c29c7d6bfdea9e79a31f0278b5f2114d73c417a94b4ed7fd3e2fcf1a9f398a68835b934ea611a9187d29a68f71c5f45b8cf7e7f1303ac28c40"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x3, 0x7f, 0xa4}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x80, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0x1046}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9f, 0x200}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x5, 0xbb, 0xc, [@generic={0x61, 0x1b, "bccdac4fdfd7ca9343f603f2622744ff5c59f28764136631d37fa560179a8c965ed3da54fdc40d99edb7b1d0bbf423a6107392bb32a7b28aebb0f86135d9fba1f2273153a61d9a4ecc7b03dfbe896b230aa1e155a1759c82ceadd8e4936b96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xdb6a}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x33, 0x4, 0xd6}}]}}, {{0x9, 0x4, 0x29, 0x4, 0x2, 0x6d, 0x1e, 0x50, 0x6, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x40, 0x2, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8e, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}, @generic={0xbc, 0x8, "5693b66a969ee6e4bf7bf1d4663a52f9e45adacd889114bcb87e55b6bcaf69a4d887bbdf1bacd3173bf1a128233a6e1f8ae98c55e7502e43b4abbe1b1995fd1af928712aba49f0ad636ed27d11cf8804aac0b4ea604daa1ba310b090316fc17d6023605b7dd4d81d859d5302b74647fd0fb6a7cd7b2eaa4891fb72590bf119ae048135fc0e5c0caa0e01bf3b83e245ee2c9e392012d13ae49dc6db4ace3696acd56a757fb2b685694a19d2cad13b4c1ecb1a72ce19c6bfa52ff0"}]}}]}}]}}]}}, &(0x7f0000002300)={0xa, &(0x7f0000002040)={0xa, 0x6, 0x110, 0x9, 0x5d, 0x81, 0xff, 0x80}, 0x8, &(0x7f0000002080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000020c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x419}}, {0x7c, &(0x7f0000002140)=@string={0x7c, 0x3, "821ecde5eb07441d91bce78f2f0e05f02148757a7fad6b39b6afc210f220f046ddaffcf8c3c0ffe75370a50545f67c2f026ccbac712101098c6ccbdd4b8ce369491f0d6bef8b7144864d13001c9a62f48ff6d36d63d69513b1502668d34db7b398aa8421d7089d42544659f585c5e0f32ae045c2b5a0495ffe99"}}, {0xdd, &(0x7f00000021c0)=@string={0xdd, 0x3, "90a9c3916db7b6160f075d9020e4058b937c03ac74605b359c565ac31cdcdf406d93987699f990221e6560028c31a22b8e9dd934499686bb1e12c7c96d4dd27c939203bc5d0750093ff1fb85586278c4ab2683ccc4dcda28089a445c2ecf1015ca7c056642b4d9e878394e837b2497fc5191bd7b03745080d2a6774aa8e91356b5ca803bcd084b6ca51391c945415b26b0ea8aebe09ef22e965409350907d4c86bc363a8eb0ca0161b1077bb49d5d14146eb5b3b5a53f044e40b57e9208e9c8a3299980ab191309df3ddf3a71ed630e7be37d2b12228a70ac7fb42"}}, {0x71, &(0x7f00000010c0)=@string={0x71, 0x3, "b2658bb45b5d6edc57107fee521ee52a3570180e1cdc0f68e89c3e50927a09103b895ac7c7a039cc529e4429ebeff9d88592e6f8889f0ea00a19eb95e83a0fc621e28b8c947771521c3b3523608bab3541f3a5877b5a96a90f5b7a70b6b3a4d4f741a416e589bf321b0537e2392ad9"}}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) write$cgroup_subtree(r1, &(0x7f0000001140)={[{0x2d, 'hugetlb'}, {0x2b, 'rdma'}, {0x2d, 'cpuset'}, {0x6, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'rlimit'}, {0x2d, 'net'}, {0x2b, 'memory'}, {0x2d, 'devices'}]}, 0x47) kernel console output (not intermixed with test programs): 8] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.877902][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.088806][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 54.088817][ T40] audit: type=1400 audit(1775351015.004:92): avc: denied { module_request } for pid=5926 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.123452][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 54.184985][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 54.210249][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.212458][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.215695][ T5926] bridge_slave_0: entered allmulticast mode [ 54.218395][ T5926] bridge_slave_0: entered promiscuous mode [ 54.223521][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.226290][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.228564][ T5926] bridge_slave_1: entered allmulticast mode [ 54.231813][ T5926] bridge_slave_1: entered promiscuous mode [ 54.297595][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.307709][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.407685][ T5926] team0: Port device team_slave_0 added [ 54.412047][ T5926] team0: Port device team_slave_1 added [ 54.445247][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.448867][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.451838][ T5927] bridge_slave_0: entered allmulticast mode [ 54.455791][ T5927] bridge_slave_0: entered promiscuous mode [ 54.468267][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.470555][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.472927][ T5927] bridge_slave_1: entered allmulticast mode [ 54.475807][ T5927] bridge_slave_1: entered promiscuous mode [ 54.484671][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 54.499493][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.502317][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.512545][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.522358][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.525326][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.533460][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.557948][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.573671][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.577823][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 54.629943][ T5927] team0: Port device team_slave_0 added [ 54.640621][ T5927] team0: Port device team_slave_1 added [ 54.696282][ T5926] hsr_slave_0: entered promiscuous mode [ 54.698812][ T5926] hsr_slave_1: entered promiscuous mode [ 54.713447][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.715964][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.718179][ T5936] bridge_slave_0: entered allmulticast mode [ 54.720783][ T5936] bridge_slave_0: entered promiscuous mode [ 54.730958][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.733254][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.742206][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.746155][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.748372][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.750617][ T5936] bridge_slave_1: entered allmulticast mode [ 54.753550][ T5936] bridge_slave_1: entered promiscuous mode [ 54.773653][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.776673][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.787601][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.832141][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.835899][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.838484][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.840798][ T5939] bridge_slave_0: entered allmulticast mode [ 54.844078][ T5939] bridge_slave_0: entered promiscuous mode [ 54.847636][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.849888][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.852540][ T5939] bridge_slave_1: entered allmulticast mode [ 54.855922][ T5939] bridge_slave_1: entered promiscuous mode [ 54.872940][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.897542][ T5927] hsr_slave_0: entered promiscuous mode [ 54.900293][ T5927] hsr_slave_1: entered promiscuous mode [ 54.902464][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 54.904270][ T5927] Cannot create hsr debugfs directory [ 54.925841][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.941760][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.973207][ T5936] team0: Port device team_slave_0 added [ 54.983927][ T5936] team0: Port device team_slave_1 added [ 55.008616][ T5939] team0: Port device team_slave_0 added [ 55.029340][ T5939] team0: Port device team_slave_1 added [ 55.063899][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.066718][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.076612][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.106457][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.108655][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.116547][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.120579][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.122761][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.130646][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.152560][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.155562][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.163444][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.191893][ T5939] hsr_slave_0: entered promiscuous mode [ 55.194202][ T5939] hsr_slave_1: entered promiscuous mode [ 55.196510][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 55.198371][ T5939] Cannot create hsr debugfs directory [ 55.250612][ T5936] hsr_slave_0: entered promiscuous mode [ 55.253770][ T5936] hsr_slave_1: entered promiscuous mode [ 55.257157][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 55.259661][ T5936] Cannot create hsr debugfs directory [ 55.371823][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.378101][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.398451][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.406598][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.488749][ T5927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.501708][ T5927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.507429][ T5927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.514198][ T5927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.584295][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.590944][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.597615][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.602791][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.681436][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.689332][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.696041][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.701091][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.730048][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.781515][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.789906][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.792365][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.798165][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.826123][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.830575][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.833700][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.844048][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.864996][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.868095][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.880135][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.883141][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.893403][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.915639][ T5938] Bluetooth: hci0: command tx timeout [ 55.915784][ T5940] Bluetooth: hci1: command tx timeout [ 55.916555][ T5942] Bluetooth: hci2: command tx timeout [ 55.923000][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.923453][ T63] Bluetooth: hci3: command tx timeout [ 55.925397][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.926772][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.933029][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.971344][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.993615][ T40] audit: type=1400 audit(1775351016.904:93): avc: denied { sys_module } for pid=5926 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.025310][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.032230][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.034636][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.056459][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.058846][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.103377][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.138980][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.153487][ T5926] veth0_vlan: entered promiscuous mode [ 56.160763][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.166114][ T5926] veth1_vlan: entered promiscuous mode [ 56.191182][ T5939] veth0_vlan: entered promiscuous mode [ 56.198284][ T5939] veth1_vlan: entered promiscuous mode [ 56.207528][ T5926] veth0_macvtap: entered promiscuous mode [ 56.217698][ T5926] veth1_macvtap: entered promiscuous mode [ 56.221614][ T5927] veth0_vlan: entered promiscuous mode [ 56.231200][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.243472][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.249254][ T5927] veth1_vlan: entered promiscuous mode [ 56.259323][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.272622][ T5939] veth0_macvtap: entered promiscuous mode [ 56.276575][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.279536][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.288653][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.291515][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.298148][ T5939] veth1_macvtap: entered promiscuous mode [ 56.304098][ T5936] veth0_vlan: entered promiscuous mode [ 56.316813][ T5936] veth1_vlan: entered promiscuous mode [ 56.330450][ T5927] veth0_macvtap: entered promiscuous mode [ 56.340634][ T5927] veth1_macvtap: entered promiscuous mode [ 56.346662][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.361614][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.379887][ T5936] veth0_macvtap: entered promiscuous mode [ 56.387301][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.398505][ T83] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.406098][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.414878][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.418526][ T5936] veth1_macvtap: entered promiscuous mode [ 56.427146][ T83] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.429930][ T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.435411][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.438890][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.450346][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.453429][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.470318][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.474071][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.497504][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.498815][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.500018][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.508787][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.518814][ T40] audit: type=1400 audit(1775351017.434:94): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.520554][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.533435][ T40] audit: type=1400 audit(1775351017.444:95): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzkaller.V9WsjH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.542530][ T40] audit: type=1400 audit(1775351017.454:96): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.546314][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.551420][ T40] audit: type=1400 audit(1775351017.454:97): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzkaller.V9WsjH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.563327][ T40] audit: type=1400 audit(1775351017.454:98): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzkaller.V9WsjH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.583251][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.583980][ T40] audit: type=1400 audit(1775351017.474:99): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.587478][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.595704][ T40] audit: type=1400 audit(1775351017.474:100): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.606352][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.608001][ T40] audit: type=1400 audit(1775351017.484:101): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="gadgetfs" ino=9281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.611188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.624436][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.628581][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.635430][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.689321][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.691943][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.709478][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.712703][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.729497][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.732763][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.759549][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.762146][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.930607][ T6025] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 56.942793][ T6025] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.300963][ T6061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.910195][ T6094] FAULT_INJECTION: forcing a failure. [ 57.910195][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.928322][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.0.26 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.928353][ T6094] Tainted: [L]=SOFTLOCKUP [ 57.928359][ T6094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.928368][ T6094] Call Trace: [ 57.928407][ T6094] [ 57.928414][ T6094] dump_stack_lvl+0x100/0x190 [ 57.928450][ T6094] should_fail_ex.cold+0x5/0xa [ 57.928475][ T6094] _copy_from_user+0x2e/0xd0 [ 57.928496][ T6094] copy_msghdr_from_user+0x9f/0x4f0 [ 57.928517][ T6094] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 57.928547][ T6094] ___sys_sendmsg+0x106/0x1e0 [ 57.928568][ T6094] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.928614][ T6094] __sys_sendmsg+0x170/0x220 [ 57.928638][ T6094] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.928676][ T6094] do_syscall_64+0x106/0xf80 [ 57.928704][ T6094] ? clear_bhb_loop+0x40/0x90 [ 57.928725][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.928742][ T6094] RIP: 0033:0x7f3ee859c819 [ 57.928757][ T6094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.928774][ T6094] RSP: 002b:00007f3ee9518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.928821][ T6094] RAX: ffffffffffffffda RBX: 00007f3ee8815fa0 RCX: 00007f3ee859c819 [ 57.928832][ T6094] RDX: 00000000000080a4 RSI: 0000200000000e00 RDI: 0000000000000004 [ 57.928842][ T6094] RBP: 00007f3ee9518090 R08: 0000000000000000 R09: 0000000000000000 [ 57.928852][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.928861][ T6094] R13: 00007f3ee8816038 R14: 00007f3ee8815fa0 R15: 00007ffe952699f8 [ 57.928884][ T6094] [ 58.005774][ T63] Bluetooth: hci3: command tx timeout [ 58.005798][ T5940] Bluetooth: hci0: command tx timeout [ 58.090685][ T6105] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 58.354676][ T1329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.479195][ T6112] netlink: 220 bytes leftover after parsing attributes in process `syz.2.32'. [ 58.482555][ T6112] netlink: 'syz.2.32': attribute type 2 has an invalid length. [ 58.517864][ T1329] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 58.520824][ T1329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.526775][ T1329] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 58.529994][ T1329] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 58.532563][ T1329] usb 5-1: Manufacturer: syz [ 58.541064][ T1329] usb 5-1: config 0 descriptor?? [ 58.604754][ T1329] rc_core: IR keymap rc-hauppauge not found [ 58.607435][ T1329] Registered IR keymap rc-empty [ 58.611661][ T1329] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 58.619041][ T1329] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 58.747313][ C2] igorplugusb 5-1:0.0: Error: urb status = -32 [ 58.762676][ T5981] usb 5-1: USB disconnect, device number 2 [ 58.764744][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.881425][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 58.924611][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 58.939218][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.942745][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.947144][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.950881][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.956457][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.960461][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.966736][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.970464][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.986102][ T9] usb 6-1: config 0 descriptor?? [ 59.151267][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 59.151279][ T40] audit: type=1400 audit(1775351020.064:191): avc: denied { unlink } for pid=6156 comm="rm" name=7265736F6C762E636F6E662E61504EDC5DF4515B62C3C18EF1EAF42E6C696E6B dev="tmpfs" ino=2188 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.199569][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 59.208759][ T9] usb 6-1: USB disconnect, device number 2 [ 59.233287][ T9] usblp0: removed [ 59.313916][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 59.323402][ T6172] xfrm1: entered promiscuous mode [ 59.327002][ T6172] xfrm1: entered allmulticast mode [ 59.508636][ T40] audit: type=1400 audit(1775351020.424:192): avc: denied { create } for pid=6186 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.518513][ T40] audit: type=1400 audit(1775351020.444:193): avc: denied { write } for pid=6186 comm="syz.0.56" path="socket:[7146]" dev="sockfs" ino=7146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.614249][ T6194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 59.686530][ T6198] FAULT_INJECTION: forcing a failure. [ 59.686530][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 59.691880][ T6198] CPU: 3 UID: 0 PID: 6198 Comm: syz.2.61 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.691918][ T6198] Tainted: [L]=SOFTLOCKUP [ 59.691924][ T6198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.691938][ T6198] Call Trace: [ 59.691944][ T6198] [ 59.691951][ T6198] dump_stack_lvl+0x100/0x190 [ 59.691987][ T6198] should_fail_ex.cold+0x5/0xa [ 59.692017][ T6198] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 59.692044][ T6198] should_failslab+0xc2/0x120 [ 59.692069][ T6198] __kmalloc_noprof+0xe0/0x850 [ 59.692099][ T6198] ? rcu_is_watching+0x12/0xc0 [ 59.692129][ T6198] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 59.692155][ T6198] genl_family_rcv_msg_doit+0xc7/0x300 [ 59.692178][ T6198] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 59.692201][ T6198] ? genl_get_cmd+0x3ef/0x720 [ 59.692226][ T6198] ? kasan_save_track+0x14/0x30 [ 59.692251][ T6198] ? __kasan_slab_alloc+0x89/0x90 [ 59.692266][ T6198] ? __radix_tree_lookup+0x217/0x2b0 [ 59.692297][ T6198] genl_rcv_msg+0x560/0x800 [ 59.692320][ T6198] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.692340][ T6198] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 59.692373][ T6198] ? __lock_acquire+0x4a5/0x2630 [ 59.692397][ T6198] netlink_rcv_skb+0x159/0x420 [ 59.692415][ T6198] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.692436][ T6198] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.692463][ T6198] ? netlink_deliver_tap+0x1ae/0xcc0 [ 59.692493][ T6198] genl_rcv+0x28/0x40 [ 59.692508][ T6198] netlink_unicast+0x5aa/0x870 [ 59.692538][ T6198] ? __pfx_netlink_unicast+0x10/0x10 [ 59.692574][ T6198] netlink_sendmsg+0x8b0/0xda0 [ 59.692597][ T6198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.692621][ T6198] ? __might_fault+0x50/0x140 [ 59.692654][ T6198] ____sys_sendmsg+0x9e1/0xb70 [ 59.692671][ T6198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.692734][ T6198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.692763][ T6198] ___sys_sendmsg+0x190/0x1e0 [ 59.692785][ T6198] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.692835][ T6198] __sys_sendmsg+0x170/0x220 [ 59.692861][ T6198] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.692901][ T6198] do_syscall_64+0x106/0xf80 [ 59.692928][ T6198] ? clear_bhb_loop+0x40/0x90 [ 59.692950][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.692969][ T6198] RIP: 0033:0x7fef5999c819 [ 59.692986][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.693005][ T6198] RSP: 002b:00007fef5a92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.693024][ T6198] RAX: ffffffffffffffda RBX: 00007fef59c15fa0 RCX: 00007fef5999c819 [ 59.693035][ T6198] RDX: 00000000000080a4 RSI: 0000200000000e00 RDI: 0000000000000004 [ 59.693045][ T6198] RBP: 00007fef5a92d090 R08: 0000000000000000 R09: 0000000000000000 [ 59.693056][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.693065][ T6198] R13: 00007fef59c16038 R14: 00007fef59c15fa0 R15: 00007fffda153a88 [ 59.693089][ T6198] [ 59.694594][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 59.714704][ T40] audit: type=1400 audit(1775351020.614:194): avc: denied { map_read map_write } for pid=6201 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.737911][ T6199] delete_channel: no stack [ 59.738723][ T40] audit: type=1400 audit(1775351020.614:195): avc: denied { unlink } for pid=6199 comm="syz.3.62" name="#1" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.832087][ T40] audit: type=1400 audit(1775351020.634:196): avc: denied { mount } for pid=6199 comm="syz.3.62" name="/" dev="overlay" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.839853][ T40] audit: type=1400 audit(1775351020.644:197): avc: denied { create } for pid=6199 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 59.847353][ T40] audit: type=1400 audit(1775351020.644:198): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.854404][ T40] audit: type=1400 audit(1775351020.644:199): avc: denied { bind } for pid=6199 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 59.860930][ T40] audit: type=1400 audit(1775351020.644:200): avc: denied { watch_mount watch_reads } for pid=6199 comm="syz.3.62" path="/21/bus" dev="overlay" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.869280][ T6206] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 59.875093][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 59.876439][ T6208] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 59.879060][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 59.882823][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.67'. [ 59.885561][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 59.892640][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.896875][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 59.901267][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.908175][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 59.911975][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.919270][ T9] usb 6-1: config 0 descriptor?? [ 59.922502][ T6116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.962357][ T6217] --map-set only usable from mangle table [ 59.968010][ T6220] xt_hashlimit: size too large, truncated to 1048576 [ 60.030585][ T6230] FAULT_INJECTION: forcing a failure. [ 60.030585][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 60.036559][ T6230] CPU: 2 UID: 0 PID: 6230 Comm: syz.2.73 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.036584][ T6230] Tainted: [L]=SOFTLOCKUP [ 60.036588][ T6230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.036597][ T6230] Call Trace: [ 60.036602][ T6230] [ 60.036609][ T6230] dump_stack_lvl+0x100/0x190 [ 60.036644][ T6230] should_fail_ex.cold+0x5/0xa [ 60.036667][ T6230] should_failslab+0xc2/0x120 [ 60.036686][ T6230] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 60.036712][ T6230] ? __alloc_skb+0x140/0x710 [ 60.036740][ T6230] __alloc_skb+0x140/0x710 [ 60.036760][ T6230] ? __alloc_skb+0x5b7/0x710 [ 60.036781][ T6230] ? __pfx___alloc_skb+0x10/0x10 [ 60.036810][ T6230] netlbl_cipsov4_list+0x12e/0x1480 [ 60.036838][ T6230] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 60.036870][ T6230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 60.036890][ T6230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 60.036916][ T6230] genl_family_rcv_msg_doit+0x214/0x300 [ 60.036938][ T6230] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 60.036963][ T6230] ? genl_get_cmd+0x3ef/0x720 [ 60.036986][ T6230] ? kasan_save_track+0x14/0x30 [ 60.037006][ T6230] ? __kasan_slab_alloc+0x89/0x90 [ 60.037020][ T6230] ? __radix_tree_lookup+0x217/0x2b0 [ 60.037046][ T6230] genl_rcv_msg+0x560/0x800 [ 60.037066][ T6230] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.037086][ T6230] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 60.037116][ T6230] ? __lock_acquire+0x4a5/0x2630 [ 60.037139][ T6230] netlink_rcv_skb+0x159/0x420 [ 60.037156][ T6230] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.037177][ T6230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 60.037203][ T6230] ? netlink_deliver_tap+0x1ae/0xcc0 [ 60.037231][ T6230] genl_rcv+0x28/0x40 [ 60.037247][ T6230] netlink_unicast+0x5aa/0x870 [ 60.037276][ T6230] ? __pfx_netlink_unicast+0x10/0x10 [ 60.037312][ T6230] netlink_sendmsg+0x8b0/0xda0 [ 60.037332][ T6230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.037356][ T6230] ? __might_fault+0x50/0x140 [ 60.037389][ T6230] ____sys_sendmsg+0x9e1/0xb70 [ 60.037407][ T6230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.037435][ T6230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.037466][ T6230] ___sys_sendmsg+0x190/0x1e0 [ 60.037487][ T6230] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.037528][ T6230] __sys_sendmsg+0x170/0x220 [ 60.037548][ T6230] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.037586][ T6230] do_syscall_64+0x106/0xf80 [ 60.037613][ T6230] ? clear_bhb_loop+0x40/0x90 [ 60.037633][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.037649][ T6230] RIP: 0033:0x7fef5999c819 [ 60.037692][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.037705][ T6230] RSP: 002b:00007fef5a92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.037722][ T6230] RAX: ffffffffffffffda RBX: 00007fef59c15fa0 RCX: 00007fef5999c819 [ 60.037732][ T6230] RDX: 00000000000080a4 RSI: 0000200000000e00 RDI: 0000000000000004 [ 60.037741][ T6230] RBP: 00007fef5a92d090 R08: 0000000000000000 R09: 0000000000000000 [ 60.037750][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.037759][ T6230] R13: 00007fef59c16038 R14: 00007fef59c15fa0 R15: 00007fffda153a88 [ 60.037780][ T6230] [ 60.167746][ T5940] Bluetooth: hci3: command tx timeout [ 60.185748][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.375651][ C1] usblp0: nonzero read bulk status received: -71 [ 60.378127][ T6116] usblp0: error -71 reading from printer [ 60.380475][ C1] usblp0: nonzero read bulk status received: -71 [ 60.386089][ T53] usb 6-1: USB disconnect, device number 3 [ 60.389382][ T53] usblp0: removed [ 60.447474][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 60.464847][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.483092][ T5998] IPVS: starting estimator thread 0... [ 60.542917][ T6280] Bluetooth: MGMT ver 1.23 [ 60.575574][ T6275] IPVS: using max 44 ests per chain, 105600 per kthread [ 60.586929][ T6284] capability: warning: `syz.0.94' uses deprecated v2 capabilities in a way that may be insecure [ 60.624642][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 60.631699][ T24] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 60.636623][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 60.641722][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.646198][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 60.649745][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 60.652922][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.657471][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.660385][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.759485][ T6296] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 60.868265][ T24] usb 8-1: usb_control_msg returned -32 [ 60.870069][ T24] usbtmc 8-1:16.0: can't read capabilities [ 61.040227][ T6309] mmap: syz.2.105 (6309) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.041198][ T5940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 61.048007][ T5940] Bluetooth: hci2: Injecting HCI hardware error event [ 61.051930][ T5940] Bluetooth: hci2: hardware error 0x00 [ 61.146074][ T6313] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.107'. [ 61.309714][ T6323] Zero length message leads to an empty skb [ 61.515141][ T63] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 61.518414][ T63] Bluetooth: hci1: Injecting HCI hardware error event [ 61.521569][ T63] Bluetooth: hci1: hardware error 0x00 [ 61.896686][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 61.900751][ T6350] netlink: 27 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.234643][ T5938] Bluetooth: hci3: command tx timeout [ 62.235345][ T5942] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 62.240684][ T5942] Bluetooth: hci0: Injecting HCI hardware error event [ 62.244661][ T5938] Bluetooth: hci0: hardware error 0x00 [ 62.537947][ T9] IPVS: starting estimator thread 0... [ 62.589469][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 62.593216][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 62.597113][ T6400] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 62.599603][ T6400] UDF-fs: Scanning with blocksize 512 failed [ 62.602265][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 62.605962][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 62.608971][ T6400] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 62.611360][ T6400] UDF-fs: Scanning with blocksize 1024 failed [ 62.613604][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 62.617025][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 62.620303][ T6400] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 62.622757][ T6400] UDF-fs: Scanning with blocksize 2048 failed [ 62.624570][ T6396] IPVS: using max 44 ests per chain, 105600 per kthread [ 62.627860][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 62.631016][ T6400] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 62.634200][ T6400] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 62.636941][ T6400] UDF-fs: Scanning with blocksize 4096 failed [ 62.638908][ T6400] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 62.863869][ T6414] "syz.2.135" (6414) uses obsolete ecb(arc4) skcipher [ 62.986923][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 63.103296][ T6433] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 63.126166][ T5940] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 63.133943][ T6436] ======================================================= [ 63.133943][ T6436] WARNING: The mand mount option has been deprecated and [ 63.133943][ T6436] and is ignored by this kernel. Remove the mand [ 63.133943][ T6436] option from the mount to silence this warning. [ 63.133943][ T6436] ======================================================= [ 63.189787][ T6436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.247126][ T9] usb 8-1: USB disconnect, device number 2 [ 63.286320][ T6446] syzkaller0: entered promiscuous mode [ 63.288734][ T6446] syzkaller0: entered allmulticast mode [ 63.392936][ T6463] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 63.567708][ T6471] __nla_validate_parse: 1 callbacks suppressed [ 63.567725][ T6471] netlink: 56 bytes leftover after parsing attributes in process `syz.3.155'. [ 63.570219][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.571676][ T6471] netlink: 'syz.3.155': attribute type 32 has an invalid length. [ 63.594706][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 63.602570][ T6471] bond1: Setting coupled_control to off (0) [ 63.605462][ T6471] bond1: entered promiscuous mode [ 63.609868][ T6471] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 63.612108][ T6471] pim6reg0: linktype set to 778 [ 63.713413][ T6478] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 63.810197][ T6493] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 63.854077][ T6497] bond1 (unregistering): Released all slaves [ 63.895964][ T6505] SET target dimension over the limit! [ 63.979198][ T6510] capability: warning: `syz.1.169' uses 32-bit capabilities (legacy support in use) [ 64.162784][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 64.196530][ T6531] team0 (unregistering): Port device team_slave_0 removed [ 64.202192][ T6531] team0 (unregistering): Port device team_slave_1 removed [ 64.202820][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 64.202832][ T40] audit: type=1400 audit(1775351025.114:296): avc: denied { create } for pid=6534 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 64.217753][ T40] audit: type=1400 audit(1775351025.134:297): avc: denied { getopt } for pid=6534 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 64.229902][ T40] audit: type=1400 audit(1775351025.144:298): avc: denied { set_context_mgr } for pid=6534 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.238458][ T40] audit: type=1400 audit(1775351025.144:299): avc: denied { map } for pid=6534 comm="syz.2.179" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.316362][ T5938] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 64.355131][ T40] audit: type=1400 audit(1775351025.274:300): avc: denied { read append } for pid=6553 comm="syz.1.185" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.362498][ T40] audit: type=1400 audit(1775351025.274:301): avc: denied { open } for pid=6553 comm="syz.1.185" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 64.478282][ T40] audit: type=1400 audit(1775351025.394:302): avc: denied { mount } for pid=6560 comm="syz.1.188" name="/" dev="ramfs" ino=11924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 64.524522][ T887] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.540598][ T6570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.544256][ T40] audit: type=1400 audit(1775351025.454:303): avc: denied { bind } for pid=6569 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.551012][ T40] audit: type=1400 audit(1775351025.454:304): avc: denied { listen } for pid=6569 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.558243][ T40] audit: type=1400 audit(1775351025.454:305): avc: denied { accept } for pid=6569 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.704553][ T887] usb 8-1: Using ep0 maxpacket: 16 [ 64.708963][ T887] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.712780][ T887] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.717094][ T887] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.721257][ T887] usb 8-1: config 1 interface 0 has no altsetting 0 [ 64.726288][ T887] usb 8-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 64.729138][ T887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.732186][ T887] usb 8-1: Product: syz [ 64.733870][ T887] usb 8-1: Manufacturer: syz [ 64.736890][ T887] usb 8-1: SerialNumber: syz [ 64.802471][ T6584] SELinux: failed to load policy [ 64.813346][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 64.951238][ T887] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 65.004005][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 65.080092][ T6657] netlink: 'syz.1.206': attribute type 29 has an invalid length. [ 65.082765][ T6657] netlink: 'syz.1.206': attribute type 21 has an invalid length. [ 65.092000][ T6657] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.171714][ T5995] usb 8-1: USB disconnect, device number 3 [ 65.178085][ T5995] usblp0: removed [ 65.294361][ T6674] befs: (nbd2): unable to read superblock [ 65.306825][ T6674] program syz.2.208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.426398][ T6687] tmpfs: Bad value for 'mpol' [ 65.465832][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 65.588467][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 65.684303][ T6704] all: renamed from bridge_slave_0 (while UP) [ 65.725975][ T6708] comedi comedi3: dt2817: I/O port conflict (0x20d00,5) [ 65.812048][ T6717] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.823818][ T6717] x_tables: duplicate underflow at hook 1 [ 65.895845][ T6727] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 65.898620][ T6727] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 65.901254][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 65.917707][ T6730] netlink: 750 bytes leftover after parsing attributes in process `syz.2.231'. [ 65.992399][ T6740] xt_l2tp: invalid flags combination: 8 [ 66.013541][ T6745] sctp: [Deprecated]: syz.1.236 (pid 6745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.013541][ T6745] Use struct sctp_sack_info instead [ 66.060318][ T6748] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 66.091511][ T6748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.121906][ T6748] vlan2: entered allmulticast mode [ 66.124247][ T6748] macsec0: entered allmulticast mode [ 66.126634][ T6748] veth1_macvtap: entered allmulticast mode [ 66.129494][ T6748] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 66.291121][ T6767] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 66.303524][ T6767] ftl_cs: FTL header not found. [ 66.390877][ T6783] kernel read not supported for file /file1 (pid: 6783 comm: syz.1.247) [ 66.533919][ T6798] bridge0: entered promiscuous mode [ 66.538407][ T6798] macvlan2: entered promiscuous mode [ 66.688966][ T6821] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.702433][ T6824] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.725458][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 66.739291][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 66.740897][ T83] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.749286][ T83] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.752612][ T83] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.755657][ T83] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.935268][ T6854] kvm: kvm [6846]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 67.401271][ T6886] ntfs3(loop1): try to read out of volume at offset 0x0 [ 67.433336][ T6886] macvlan0: entered promiscuous mode [ 67.435988][ T6886] macvlan0: entered allmulticast mode [ 67.438404][ T6886] veth1_vlan: entered allmulticast mode [ 67.637549][ T6907] xt_hashlimit: size too large, truncated to 1048576 [ 67.717332][ T6918] ntfs3(loop2): try to read out of volume at offset 0x0 [ 67.736120][ T6918] macvlan0: entered promiscuous mode [ 67.737987][ T6918] macvlan0: entered allmulticast mode [ 67.739694][ T6918] veth1_vlan: entered allmulticast mode [ 67.866753][ T6266] libceph: mon0 (1)[c::]:6789 connect error [ 67.869515][ T6266] libceph: mon0 (1)[c::]:6789 connect error [ 67.895007][ T6937] 9pnet_fd: Insufficient options for proto=fd [ 67.908465][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 67.949072][ T6944] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.976380][ T6950] ntfs3(loop0): try to read out of volume at offset 0x0 [ 68.046283][ T6951] can0: slcan on ttyS0. [ 68.102794][ T6957] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 68.122851][ T6953] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 68.124789][ T6952] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 68.135787][ T6266] libceph: mon0 (1)[c::]:6789 connect error [ 68.165480][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 68.327107][ T5728] can0 (unregistered): slcan off ttyS0. [ 68.328926][ T6965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1076 sclass=netlink_route_socket pid=6965 comm=syz.3.310 [ 68.449932][ T6968] evm: overlay not supported [ 68.654814][ T6266] libceph: mon0 (1)[c::]:6789 connect error [ 68.659268][ T6989] __nla_validate_parse: 9 callbacks suppressed [ 68.659284][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 68.666733][ T6989] kAFS: Can only specify source 'none' with -o dyn [ 68.673933][ T6989] overlayfs: conflicting options: nfs_export=on,index=off [ 68.675184][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 68.675374][ T6931] ceph: No mds server is up or the cluster is laggy [ 68.675378][ T6938] ceph: No mds server is up or the cluster is laggy [ 68.797264][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.287167][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 69.337149][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 69.337172][ T40] audit: type=1400 audit(1775351030.254:377): avc: denied { mounton } for pid=7013 comm="syz.3.326" path="/52/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.383781][ T40] audit: type=1400 audit(1775351030.294:378): avc: denied { search } for pid=7015 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.392774][ T40] audit: type=1400 audit(1775351030.294:379): avc: denied { read write } for pid=7015 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 69.401180][ T40] audit: type=1400 audit(1775351030.294:380): avc: denied { open } for pid=7015 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 69.409209][ T7017] trusted_key: syz.3.327 sent an empty control message without MSG_MORE. [ 69.409221][ T40] audit: type=1400 audit(1775351030.294:381): avc: denied { lock } for pid=7015 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 69.411883][ T40] audit: type=1400 audit(1775351030.294:382): avc: denied { read } for pid=7015 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 69.475734][ T7017] XFS (loop3): SB validate failed with error -5. syzkaller syzkaller login: [ 69.627013][ T7026] FAULT_INJECTION: forcing a failure. [ 69.627013][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 69.631056][ T7026] CPU: 2 UID: 0 PID: 7026 Comm: syz.2.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.631074][ T7026] Tainted: [L]=SOFTLOCKUP [ 69.631078][ T7026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.631084][ T7026] Call Trace: [ 69.631088][ T7026] [ 69.631093][ T7026] dump_stack_lvl+0x100/0x190 [ 69.631118][ T7026] should_fail_ex.cold+0x5/0xa [ 69.631142][ T7026] should_failslab+0xc2/0x120 [ 69.631162][ T7026] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 69.631190][ T7026] ? __alloc_skb+0x140/0x710 [ 69.631213][ T7026] __alloc_skb+0x140/0x710 [ 69.631226][ T7026] ? __alloc_skb+0x5b7/0x710 [ 69.631240][ T7026] ? __pfx___alloc_skb+0x10/0x10 [ 69.631285][ T7026] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 69.631305][ T7026] netlink_alloc_large_skb+0x69/0x150 [ 69.631324][ T7026] netlink_sendmsg+0x680/0xda0 [ 69.631337][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.631353][ T7026] ? __might_fault+0x50/0x140 [ 69.631372][ T7026] ____sys_sendmsg+0x9e1/0xb70 [ 69.631383][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.631401][ T7026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.631417][ T7026] ___sys_sendmsg+0x190/0x1e0 [ 69.631430][ T7026] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.631456][ T7026] __sys_sendmsg+0x170/0x220 [ 69.631472][ T7026] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.631495][ T7026] do_syscall_64+0x106/0xf80 [ 69.631513][ T7026] ? clear_bhb_loop+0x40/0x90 [ 69.631526][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.631537][ T7026] RIP: 0033:0x7fef5999c819 [ 69.631547][ T7026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.631556][ T7026] RSP: 002b:00007fef5a92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.631567][ T7026] RAX: ffffffffffffffda RBX: 00007fef59c15fa0 RCX: 00007fef5999c819 [ 69.631573][ T7026] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 69.631579][ T7026] RBP: 00007fef5a92d090 R08: 0000000000000000 R09: 0000000000000000 [ 69.631585][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.631590][ T7026] R13: 00007fef59c16038 R14: 00007fef59c15fa0 R15: 00007fffda153a88 [ 69.631610][ T7026] [ 69.909395][ T7039] futex_wake_op: syz.2.334 tries to shift op by 32; fix this program [ 70.258097][ T40] audit: type=1400 audit(1775351031.174:383): avc: denied { validate_trans } for pid=7053 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.258373][ T7054] devpts: Bad value for 'max' [ 70.361138][ T7059] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 70.364361][ T40] audit: type=1400 audit(1775351031.274:384): avc: denied { mounton } for pid=7058 comm="syz.3.343" path="/62/file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 70.384857][ T40] audit: type=1400 audit(1775351031.304:385): avc: denied { getopt } for pid=7058 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.417264][ T40] audit: type=1400 audit(1775351031.334:386): avc: denied { map } for pid=6997 comm="syz.0.320" path="socket:[14281]" dev="sockfs" ino=14281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 70.481050][ T7066] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.527607][ T6998] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 70.558214][ T7070] input: syz0 as /devices/virtual/input/input6 [ 70.586070][ T7070] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.599617][ T7074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.635941][ T7077] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.351'. [ 70.903570][ T7095] /dev/sg0: Can't lookup blockdev [ 70.980687][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 71.022096][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 71.026792][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 71.094786][ T7122] FAULT_INJECTION: forcing a failure. [ 71.094786][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 71.098956][ T7122] CPU: 3 UID: 0 PID: 7122 Comm: syz.0.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.098973][ T7122] Tainted: [L]=SOFTLOCKUP [ 71.098977][ T7122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.098983][ T7122] Call Trace: [ 71.098988][ T7122] [ 71.098992][ T7122] dump_stack_lvl+0x100/0x190 [ 71.099017][ T7122] should_fail_ex.cold+0x5/0xa [ 71.099032][ T7122] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 71.099046][ T7122] should_failslab+0xc2/0x120 [ 71.099059][ T7122] __kmalloc_noprof+0xe0/0x850 [ 71.099078][ T7122] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 71.099093][ T7122] genl_family_rcv_msg_doit+0xc7/0x300 [ 71.099106][ T7122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 71.099123][ T7122] ? bpf_lsm_capable+0x9/0x10 [ 71.099134][ T7122] ? security_capable+0x80/0x260 [ 71.099152][ T7122] genl_rcv_msg+0x560/0x800 [ 71.099165][ T7122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.099177][ T7122] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.099195][ T7122] ? __lock_acquire+0x4a5/0x2630 [ 71.099208][ T7122] netlink_rcv_skb+0x159/0x420 [ 71.099218][ T7122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.099231][ T7122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.099246][ T7122] ? netlink_deliver_tap+0x1ae/0xcc0 [ 71.099268][ T7122] genl_rcv+0x28/0x40 [ 71.099277][ T7122] netlink_unicast+0x5aa/0x870 [ 71.099297][ T7122] ? __pfx_netlink_unicast+0x10/0x10 [ 71.099332][ T7122] netlink_sendmsg+0x8b0/0xda0 [ 71.099346][ T7122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.099362][ T7122] ? __might_fault+0x50/0x140 [ 71.099382][ T7122] ____sys_sendmsg+0x9e1/0xb70 [ 71.099393][ T7122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.099411][ T7122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.099428][ T7122] ___sys_sendmsg+0x190/0x1e0 [ 71.099441][ T7122] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.099469][ T7122] __sys_sendmsg+0x170/0x220 [ 71.099485][ T7122] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.099509][ T7122] do_syscall_64+0x106/0xf80 [ 71.099526][ T7122] ? clear_bhb_loop+0x40/0x90 [ 71.099539][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.099550][ T7122] RIP: 0033:0x7f3ee859c819 [ 71.099559][ T7122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.099568][ T7122] RSP: 002b:00007f3ee9518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.099579][ T7122] RAX: ffffffffffffffda RBX: 00007f3ee8815fa0 RCX: 00007f3ee859c819 [ 71.099585][ T7122] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 71.099591][ T7122] RBP: 00007f3ee9518090 R08: 0000000000000000 R09: 0000000000000000 [ 71.099596][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.099602][ T7122] R13: 00007f3ee8816038 R14: 00007f3ee8815fa0 R15: 00007ffe952699f8 [ 71.099616][ T7122] [ 71.257669][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 71.345980][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.372'. [ 71.349186][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.372'. [ 71.354390][ T7147] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 71.366842][ T7147] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 71.385060][ T7152] FAULT_INJECTION: forcing a failure. [ 71.385060][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 71.389339][ T7152] CPU: 3 UID: 0 PID: 7152 Comm: syz.0.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.389356][ T7152] Tainted: [L]=SOFTLOCKUP [ 71.389360][ T7152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.389366][ T7152] Call Trace: [ 71.389371][ T7152] [ 71.389375][ T7152] dump_stack_lvl+0x100/0x190 [ 71.389398][ T7152] should_fail_ex.cold+0x5/0xa [ 71.389414][ T7152] should_failslab+0xc2/0x120 [ 71.389426][ T7152] __kmalloc_cache_noprof+0x7a/0x6f0 [ 71.389441][ T7152] ? netlbl_mgmt_add_common+0x53/0x1890 [ 71.389458][ T7152] ? __pfx___nla_validate_parse+0x10/0x10 [ 71.389477][ T7152] netlbl_mgmt_add_common+0x53/0x1890 [ 71.389493][ T7152] ? trace_kmalloc+0x101/0x130 [ 71.389507][ T7152] netlbl_mgmt_add+0x241/0x3a0 [ 71.389523][ T7152] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.389538][ T7152] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 71.389555][ T7152] genl_family_rcv_msg_doit+0x214/0x300 [ 71.389569][ T7152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 71.389585][ T7152] ? bpf_lsm_capable+0x9/0x10 [ 71.389596][ T7152] ? security_capable+0x80/0x260 [ 71.389633][ T7152] genl_rcv_msg+0x560/0x800 [ 71.389647][ T7152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.389658][ T7152] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.389675][ T7152] ? __lock_acquire+0x4a5/0x2630 [ 71.389688][ T7152] netlink_rcv_skb+0x159/0x420 [ 71.389698][ T7152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.389710][ T7152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.389726][ T7152] ? netlink_deliver_tap+0x1ae/0xcc0 [ 71.389743][ T7152] genl_rcv+0x28/0x40 [ 71.389753][ T7152] netlink_unicast+0x5aa/0x870 [ 71.389772][ T7152] ? __pfx_netlink_unicast+0x10/0x10 [ 71.389794][ T7152] netlink_sendmsg+0x8b0/0xda0 [ 71.389806][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.389822][ T7152] ? __might_fault+0x50/0x140 [ 71.389842][ T7152] ____sys_sendmsg+0x9e1/0xb70 [ 71.389853][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.389871][ T7152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.389888][ T7152] ___sys_sendmsg+0x190/0x1e0 [ 71.389901][ T7152] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.389939][ T7152] __sys_sendmsg+0x170/0x220 [ 71.389957][ T7152] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.389981][ T7152] do_syscall_64+0x106/0xf80 [ 71.389998][ T7152] ? clear_bhb_loop+0x40/0x90 [ 71.390010][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.390021][ T7152] RIP: 0033:0x7f3ee859c819 [ 71.390030][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.390040][ T7152] RSP: 002b:00007f3ee9518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.390051][ T7152] RAX: ffffffffffffffda RBX: 00007f3ee8815fa0 RCX: 00007f3ee859c819 [ 71.390057][ T7152] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 71.390063][ T7152] RBP: 00007f3ee9518090 R08: 0000000000000000 R09: 0000000000000000 [ 71.390068][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.390074][ T7152] R13: 00007f3ee8816038 R14: 00007f3ee8815fa0 R15: 00007ffe952699f8 [ 71.390087][ T7152] [ 71.399097][ T7154] netlink: 232 bytes leftover after parsing attributes in process `syz.2.375'. [ 71.464610][ T7156] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 71.524540][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.620777][ T7179] FAULT_INJECTION: forcing a failure. [ 71.620777][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 71.628318][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.3.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.628336][ T7179] Tainted: [L]=SOFTLOCKUP [ 71.628340][ T7179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.628346][ T7179] Call Trace: [ 71.628350][ T7179] [ 71.628355][ T7179] dump_stack_lvl+0x100/0x190 [ 71.628377][ T7179] should_fail_ex.cold+0x5/0xa [ 71.628393][ T7179] should_failslab+0xc2/0x120 [ 71.628405][ T7179] __kmalloc_cache_noprof+0x7a/0x6f0 [ 71.628419][ T7179] ? netlbl_mgmt_add_common+0xdb4/0x1890 [ 71.628437][ T7179] ? __asan_memset+0x23/0x50 [ 71.628453][ T7179] netlbl_mgmt_add_common+0xdb4/0x1890 [ 71.628469][ T7179] ? trace_kmalloc+0x101/0x130 [ 71.628482][ T7179] netlbl_mgmt_add+0x241/0x3a0 [ 71.628497][ T7179] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.628513][ T7179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 71.628530][ T7179] genl_family_rcv_msg_doit+0x214/0x300 [ 71.628543][ T7179] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 71.628559][ T7179] ? bpf_lsm_capable+0x9/0x10 [ 71.628571][ T7179] ? security_capable+0x80/0x260 [ 71.628587][ T7179] genl_rcv_msg+0x560/0x800 [ 71.628601][ T7179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.628612][ T7179] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.628629][ T7179] ? __lock_acquire+0x4a5/0x2630 [ 71.628643][ T7179] netlink_rcv_skb+0x159/0x420 [ 71.628652][ T7179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.628665][ T7179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.628680][ T7179] ? netlink_deliver_tap+0x1ae/0xcc0 [ 71.628698][ T7179] genl_rcv+0x28/0x40 [ 71.628707][ T7179] netlink_unicast+0x5aa/0x870 [ 71.628726][ T7179] ? __pfx_netlink_unicast+0x10/0x10 [ 71.628748][ T7179] netlink_sendmsg+0x8b0/0xda0 [ 71.628760][ T7179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.628776][ T7179] ? __might_fault+0x50/0x140 [ 71.628796][ T7179] ____sys_sendmsg+0x9e1/0xb70 [ 71.628807][ T7179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.628825][ T7179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.628842][ T7179] ___sys_sendmsg+0x190/0x1e0 [ 71.628855][ T7179] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.628882][ T7179] __sys_sendmsg+0x170/0x220 [ 71.628898][ T7179] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.628921][ T7179] do_syscall_64+0x106/0xf80 [ 71.628938][ T7179] ? clear_bhb_loop+0x40/0x90 [ 71.628951][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.628962][ T7179] RIP: 0033:0x7f888999c819 [ 71.628972][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.628981][ T7179] RSP: 002b:00007f888a77a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.628991][ T7179] RAX: ffffffffffffffda RBX: 00007f8889c15fa0 RCX: 00007f888999c819 [ 71.628998][ T7179] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 71.629004][ T7179] RBP: 00007f888a77a090 R08: 0000000000000000 R09: 0000000000000000 [ 71.629009][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.629015][ T7179] R13: 00007f8889c16038 R14: 00007f8889c15fa0 R15: 00007ffe02cf3f58 [ 71.629028][ T7179] [ 71.674744][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 71.736522][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.745214][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.748242][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.750810][ T9] usb 6-1: Product: syz [ 71.752207][ T9] usb 6-1: Manufacturer: syz [ 71.753692][ T9] usb 6-1: SerialNumber: syz [ 71.763894][ T9] usb 6-1: config 0 descriptor?? [ 71.768398][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 71.771282][ T9] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 71.988862][ T7211] FAULT_INJECTION: forcing a failure. [ 71.988862][ T7211] name failslab, interval 1, probability 0, space 0, times 0 [ 71.992769][ T7211] CPU: 1 UID: 0 PID: 7211 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.992785][ T7211] Tainted: [L]=SOFTLOCKUP [ 71.992788][ T7211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.992794][ T7211] Call Trace: [ 71.992798][ T7211] [ 71.992803][ T7211] dump_stack_lvl+0x100/0x190 [ 71.992826][ T7211] should_fail_ex.cold+0x5/0xa [ 71.992841][ T7211] should_failslab+0xc2/0x120 [ 71.992854][ T7211] __kmalloc_cache_noprof+0x7a/0x6f0 [ 71.992870][ T7211] ? netlbl_mgmt_add_common+0xdb4/0x1890 [ 71.992887][ T7211] ? __asan_memset+0x23/0x50 [ 71.992904][ T7211] netlbl_mgmt_add_common+0xdb4/0x1890 [ 71.992920][ T7211] ? trace_kmalloc+0x101/0x130 [ 71.992933][ T7211] netlbl_mgmt_add+0x241/0x3a0 [ 71.992948][ T7211] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.992964][ T7211] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 71.992981][ T7211] genl_family_rcv_msg_doit+0x214/0x300 [ 71.992999][ T7211] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 71.993015][ T7211] ? bpf_lsm_capable+0x9/0x10 [ 71.993027][ T7211] ? security_capable+0x80/0x260 [ 71.993044][ T7211] genl_rcv_msg+0x560/0x800 [ 71.993057][ T7211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.993069][ T7211] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 71.993085][ T7211] ? __lock_acquire+0x4a5/0x2630 [ 71.993099][ T7211] netlink_rcv_skb+0x159/0x420 [ 71.993109][ T7211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.993121][ T7211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.993136][ T7211] ? netlink_deliver_tap+0x1ae/0xcc0 [ 71.993154][ T7211] genl_rcv+0x28/0x40 [ 71.993164][ T7211] netlink_unicast+0x5aa/0x870 [ 71.993182][ T7211] ? __pfx_netlink_unicast+0x10/0x10 [ 71.993204][ T7211] netlink_sendmsg+0x8b0/0xda0 [ 71.993216][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.993232][ T7211] ? __might_fault+0x50/0x140 [ 71.993252][ T7211] ____sys_sendmsg+0x9e1/0xb70 [ 71.993263][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.993281][ T7211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.993298][ T7211] ___sys_sendmsg+0x190/0x1e0 [ 71.993311][ T7211] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.993338][ T7211] __sys_sendmsg+0x170/0x220 [ 71.993354][ T7211] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.993377][ T7211] do_syscall_64+0x106/0xf80 [ 71.993394][ T7211] ? clear_bhb_loop+0x40/0x90 [ 71.993406][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.993417][ T7211] RIP: 0033:0x7fef6b79c819 [ 71.993426][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.993436][ T7211] RSP: 002b:00007fef699ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.993446][ T7211] RAX: ffffffffffffffda RBX: 00007fef6ba15fa0 RCX: 00007fef6b79c819 [ 71.993452][ T7211] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 71.993458][ T7211] RBP: 00007fef699ee090 R08: 0000000000000000 R09: 0000000000000000 [ 71.993464][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.993470][ T7211] R13: 00007fef6ba16038 R14: 00007fef6ba15fa0 R15: 00007ffd0ff53e28 [ 71.993483][ T7211] [ 72.091244][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 72.149458][ T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 72.155310][ T9] em28xx 6-1:0.0: board has no eeprom [ 72.214533][ T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 72.217235][ T9] em28xx 6-1:0.0: dvb set to bulk mode. [ 72.220195][ T5929] em28xx 6-1:0.0: Binding DVB extension [ 72.229705][ T9] usb 6-1: USB disconnect, device number 4 [ 72.233076][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 72.246800][ T5929] em28xx 6-1:0.0: Registering input extension [ 72.249315][ T9] em28xx 6-1:0.0: Closing input extension [ 72.265701][ T9] em28xx 6-1:0.0: Freeing device [ 72.402094][ T7232] 8021q: VLANs not supported on caif0 [ 72.424728][ T5929] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.453339][ T7234] FAULT_INJECTION: forcing a failure. [ 72.453339][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 72.457553][ T7234] CPU: 3 UID: 0 PID: 7234 Comm: syz.0.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.457570][ T7234] Tainted: [L]=SOFTLOCKUP [ 72.457574][ T7234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.457580][ T7234] Call Trace: [ 72.457584][ T7234] [ 72.457588][ T7234] dump_stack_lvl+0x100/0x190 [ 72.457636][ T7234] should_fail_ex.cold+0x5/0xa [ 72.457652][ T7234] should_failslab+0xc2/0x120 [ 72.457665][ T7234] __kmalloc_cache_noprof+0x7a/0x6f0 [ 72.457679][ T7234] ? netlbl_mgmt_add_common+0x10fe/0x1890 [ 72.457700][ T7234] netlbl_mgmt_add_common+0x10fe/0x1890 [ 72.457719][ T7234] netlbl_mgmt_add+0x241/0x3a0 [ 72.457735][ T7234] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 72.457750][ T7234] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 72.457766][ T7234] genl_family_rcv_msg_doit+0x214/0x300 [ 72.457780][ T7234] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 72.457796][ T7234] ? bpf_lsm_capable+0x9/0x10 [ 72.457808][ T7234] ? security_capable+0x80/0x260 [ 72.457837][ T7234] genl_rcv_msg+0x560/0x800 [ 72.457851][ T7234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.457863][ T7234] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 72.457880][ T7234] ? __lock_acquire+0x4a5/0x2630 [ 72.457893][ T7234] netlink_rcv_skb+0x159/0x420 [ 72.457903][ T7234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 72.457923][ T7234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.457938][ T7234] ? netlink_deliver_tap+0x1ae/0xcc0 [ 72.457956][ T7234] genl_rcv+0x28/0x40 [ 72.457966][ T7234] netlink_unicast+0x5aa/0x870 [ 72.457985][ T7234] ? __pfx_netlink_unicast+0x10/0x10 [ 72.458007][ T7234] netlink_sendmsg+0x8b0/0xda0 [ 72.458019][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.458035][ T7234] ? __might_fault+0x50/0x140 [ 72.458055][ T7234] ____sys_sendmsg+0x9e1/0xb70 [ 72.458072][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.458099][ T7234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.458130][ T7234] ___sys_sendmsg+0x190/0x1e0 [ 72.458143][ T7234] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.458174][ T7234] __sys_sendmsg+0x170/0x220 [ 72.458190][ T7234] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.458214][ T7234] do_syscall_64+0x106/0xf80 [ 72.458231][ T7234] ? clear_bhb_loop+0x40/0x90 [ 72.458244][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.458255][ T7234] RIP: 0033:0x7f3ee859c819 [ 72.458265][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.458275][ T7234] RSP: 002b:00007f3ee9518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.458285][ T7234] RAX: ffffffffffffffda RBX: 00007f3ee8815fa0 RCX: 00007f3ee859c819 [ 72.458292][ T7234] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004 [ 72.458298][ T7234] RBP: 00007f3ee9518090 R08: 0000000000000000 R09: 0000000000000000 [ 72.458303][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.458309][ T7234] R13: 00007f3ee8816038 R14: 00007f3ee8815fa0 R15: 00007ffe952699f8 [ 72.458323][ T7234] [ 72.575284][ T5929] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 72.579465][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.583192][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.587762][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.591777][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.597334][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.601868][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.606368][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.610193][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.615098][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.618807][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.622550][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.627080][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.632009][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.635922][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.640393][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.644405][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.650527][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.655245][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.659038][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.662834][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.667030][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.670166][ T5929] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.672941][ T5929] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.676377][ T5929] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.680157][ T5929] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 72.683010][ T5929] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 72.685689][ T5929] usb 8-1: Product: syz [ 72.687042][ T5929] usb 8-1: Manufacturer: syz [ 72.688519][ T5929] usb 8-1: SerialNumber: syz [ 72.691399][ T5929] usb 8-1: config 0 descriptor?? [ 72.698673][ T5929] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 72.823231][ T7259] FAULT_INJECTION: forcing a failure. [ 72.823231][ T7259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.828707][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.1.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.828726][ T7259] Tainted: [L]=SOFTLOCKUP [ 72.828729][ T7259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.828736][ T7259] Call Trace: [ 72.828770][ T7259] [ 72.828774][ T7259] dump_stack_lvl+0x100/0x190 [ 72.828799][ T7259] should_fail_ex.cold+0x5/0xa [ 72.828815][ T7259] _copy_to_user+0x32/0xd0 [ 72.828829][ T7259] simple_read_from_buffer+0xcb/0x170 [ 72.828843][ T7259] proc_fail_nth_read+0x1af/0x230 [ 72.828860][ T7259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.828877][ T7259] ? rw_verify_area+0xce/0x6d0 [ 72.828892][ T7259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.828907][ T7259] vfs_read+0x1e4/0xb30 [ 72.828919][ T7259] ? __pfx_vfs_read+0x10/0x10 [ 72.828928][ T7259] ? __fget_files+0x215/0x3d0 [ 72.828942][ T7259] ? __fget_files+0x21f/0x3d0 [ 72.828957][ T7259] ksys_read+0x12a/0x250 [ 72.828967][ T7259] ? __pfx_ksys_read+0x10/0x10 [ 72.828981][ T7259] do_syscall_64+0x106/0xf80 [ 72.828998][ T7259] ? clear_bhb_loop+0x40/0x90 [ 72.829012][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.829022][ T7259] RIP: 0033:0x7fef6b75d04e [ 72.829032][ T7259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.829041][ T7259] RSP: 002b:00007fef699edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.829052][ T7259] RAX: ffffffffffffffda RBX: 00007fef699ee6c0 RCX: 00007fef6b75d04e [ 72.829058][ T7259] RDX: 000000000000000f RSI: 00007fef699ee0a0 RDI: 0000000000000003 [ 72.829064][ T7259] RBP: 00007fef699ee090 R08: 0000000000000000 R09: 0000000000000000 [ 72.829070][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.829075][ T7259] R13: 00007fef6ba16038 R14: 00007fef6ba15fa0 R15: 00007ffd0ff53e28 [ 72.829089][ T7259] [ 72.914844][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.922345][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.938156][ T887] usb 8-1: USB disconnect, device number 4 [ 72.943452][ T887] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 72.975557][ T7269] qnx6: unable to set blocksize [ 73.035295][ T7271] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 73.038700][ T7278] bond2: Removing last arp target with arp_interval on [ 73.061584][ T7271] bond1: entered promiscuous mode [ 73.063574][ T7271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.089881][ T7271] syzkaller0: entered promiscuous mode [ 73.091649][ T7271] syzkaller0: entered allmulticast mode [ 73.901884][ T7311] __nla_validate_parse: 8 callbacks suppressed [ 73.901895][ T7311] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.434'. [ 73.910983][ T7309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.433'. [ 73.993158][ T7323] wireguard: wg0: Could not create IPv4 socket [ 74.058626][ T7327] netlink: 'syz.3.437': attribute type 2 has an invalid length. [ 74.061912][ T7327] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 74.461278][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 74.560591][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 74.560609][ T40] audit: type=1400 audit(1775351035.474:406): avc: denied { bind } for pid=7339 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.741489][ T40] audit: type=1400 audit(1775351035.654:407): avc: denied { execute } for pid=7345 comm="syz.3.448" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.749666][ T40] audit: type=1400 audit(1775351035.654:408): avc: denied { write } for pid=7345 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 74.756757][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 74.825736][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 74.826342][ T7356] input: syz1 as /devices/virtual/input/input9 [ 74.897742][ T40] audit: type=1400 audit(1775351035.814:409): avc: denied { read } for pid=7363 comm="syz.2.455" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.906076][ T40] audit: type=1400 audit(1775351035.814:410): avc: denied { open } for pid=7363 comm="syz.2.455" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.944314][ T40] audit: type=1400 audit(1775351035.854:411): avc: denied { remount } for pid=7366 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.132407][ T7380] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.164373][ T40] audit: type=1400 audit(1775351036.074:412): avc: denied { getopt } for pid=7384 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.177692][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 75.187633][ T40] audit: type=1400 audit(1775351036.104:413): avc: denied { load_policy } for pid=7386 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.199382][ T7387] SELinux: failed to load policy [ 75.417657][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.467'. [ 75.673825][ T40] audit: type=1400 audit(1775351036.584:414): avc: denied { write } for pid=7419 comm="syz.0.479" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.767177][ T7430] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 75.872903][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 75.932037][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 75.953930][ T7450] cgroup: fork rejected by pids controller in /syz3 [ 76.015179][ T7488] netlink: 'syz.0.495': attribute type 8 has an invalid length. [ 76.017960][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 76.024171][ T7488] bond0: entered promiscuous mode [ 76.026143][ T7488] bond_slave_0: entered promiscuous mode [ 76.028137][ T7488] bond_slave_1: entered promiscuous mode [ 76.030958][ T7488] gretap0: entered promiscuous mode [ 76.033190][ T7488] veth0_to_batadv: entered promiscuous mode [ 76.036458][ T7488] hsr1: entered promiscuous mode [ 76.097549][ T10] cfg80211: failed to load regulatory.db [ 76.411311][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.415646][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.435968][ T40] audit: type=1400 audit(1775351037.354:415): avc: denied { mount } for pid=7542 comm="syz.2.509" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 76.463974][ T7544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7544 comm=syz.2.509 [ 76.481124][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.483932][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.543001][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.554528][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.614976][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.619489][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.622392][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.628695][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.632389][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.656488][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.660632][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.670228][ T7566] Failed to initialize the IGMP autojoin socket (err -2) [ 76.745366][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.750489][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.948771][ T7566] chnl_net:caif_netlink_parms(): no params data found [ 76.994552][ T1329] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 76.997759][ T1147] bridge_slave_1: left allmulticast mode [ 76.999652][ T1147] bridge_slave_1: left promiscuous mode [ 77.005842][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.013872][ T1147] bridge_slave_0: left allmulticast mode [ 77.015789][ T1147] bridge_slave_0: left promiscuous mode [ 77.017658][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.164545][ T1329] usb 7-1: Using ep0 maxpacket: 8 [ 77.174743][ T1329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.177922][ T1329] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.180679][ T1329] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 77.194517][ T1329] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 77.198019][ T1329] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.200820][ T1329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.208215][ T1329] hub 7-1:1.0: bad descriptor, ignoring hub [ 77.210129][ T1329] hub 7-1:1.0: probe with driver hub failed with error -5 [ 77.218671][ T1329] cdc_wdm 7-1:1.0: skipping garbage [ 77.220351][ T1329] cdc_wdm 7-1:1.0: skipping garbage [ 77.228561][ T1329] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 77.230467][ T1329] cdc_wdm 7-1:1.0: Unknown control protocol [ 77.369834][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.375590][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.380645][ T1147] bond0 (unregistering): Released all slaves [ 77.386478][ T1147] bond1 (unregistering): Released all slaves [ 77.521173][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.525519][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.528566][ T7566] bridge_slave_0: entered allmulticast mode [ 77.531880][ T7566] bridge_slave_0: entered promiscuous mode [ 77.582310][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.585538][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.588237][ T7566] bridge_slave_1: entered allmulticast mode [ 77.591970][ T7566] bridge_slave_1: entered promiscuous mode [ 77.683047][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.701119][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.768231][ T7566] team0: Port device team_slave_0 added [ 77.791928][ T7566] team0: Port device team_slave_1 added [ 77.798303][ T1147] hsr_slave_0: left promiscuous mode [ 77.800752][ T1147] hsr_slave_1: left promiscuous mode [ 77.803289][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.806523][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.810091][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.813045][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.822611][ T1147] veth1_macvtap: left promiscuous mode [ 77.825262][ T1147] veth0_macvtap: left promiscuous mode [ 77.827301][ T1147] veth1_vlan: left promiscuous mode [ 77.829044][ T1147] veth0_vlan: left promiscuous mode [ 77.959849][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 77.971864][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 78.075160][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.077759][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.086263][ T7566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.095504][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.101128][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.112824][ T7566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.208384][ T7566] hsr_slave_0: entered promiscuous mode [ 78.210654][ T7566] hsr_slave_1: entered promiscuous mode [ 78.214623][ T7566] debugfs: 'hsr0' already exists in 'hsr' [ 78.216542][ T7566] Cannot create hsr debugfs directory [ 78.254616][ T59] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 78.418087][ T59] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.421801][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.426026][ T59] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 78.430226][ T59] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.433889][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.441635][ T7639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.452308][ T59] hub 6-1:1.0: bad descriptor, ignoring hub [ 78.455317][ T59] hub 6-1:1.0: probe with driver hub failed with error -5 [ 78.459830][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 78.461618][ T59] cdc_wdm 6-1:1.0: skipping garbage [ 78.714634][ T63] Bluetooth: hci3: command tx timeout [ 78.783977][ T7651] IPVS: Error during creation of socket; terminating [ 78.890698][ T7566] netdevsim netdevsim3 netdevsim0: renamed from eth2 [ 78.900536][ T7566] netdevsim netdevsim3 netdevsim1: renamed from eth3 [ 78.908063][ T7566] netdevsim netdevsim3 netdevsim2: renamed from eth4 [ 78.915899][ T7566] netdevsim netdevsim3 netdevsim3: renamed from eth5 [ 79.083623][ T7566] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.096134][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.099324][ T6632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.112823][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.115787][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.321387][ T7566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.414861][ T7566] veth0_vlan: entered promiscuous mode [ 79.419871][ T7566] veth1_vlan: entered promiscuous mode [ 79.476005][ T7566] veth0_macvtap: entered promiscuous mode [ 79.491558][ T7566] veth1_macvtap: entered promiscuous mode [ 79.555945][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.572394][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.580508][ T7566] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 79.590163][ T7566] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 79.597246][ T7566] wireguard: wg0: Could not create IPv4 socket [ 79.601395][ T7566] wireguard: wg1: Could not create IPv4 socket [ 79.606108][ T7566] wireguard: wg2: Could not create IPv4 socket [ 79.706711][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 79.706730][ T40] audit: type=1400 audit(1775351040.624:429): avc: denied { bpf } for pid=7668 comm="syz.0.536" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.719067][ T40] audit: type=1400 audit(1775351040.624:430): avc: denied { ioctl } for pid=7668 comm="syz.0.536" path="socket:[18416]" dev="sockfs" ino=18416 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.734073][ T40] audit: type=1400 audit(1775351040.624:431): avc: denied { connect } for pid=7668 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.740386][ T40] audit: type=1400 audit(1775351040.644:432): avc: denied { perfmon } for pid=7668 comm="syz.0.536" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.865332][ T7679] __nla_validate_parse: 4 callbacks suppressed [ 79.865346][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 79.870076][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 79.882396][ T7679] nbd: must specify at least one socket [ 79.975256][ T40] audit: type=1400 audit(1775351040.894:433): avc: denied { mount } for pid=7688 comm="syz.0.540" name="/" dev="pstore" ino=5315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 79.982468][ T40] audit: type=1400 audit(1775351040.894:434): avc: denied { remount } for pid=7688 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 79.993062][ T40] audit: type=1400 audit(1775351040.894:435): avc: denied { mounton } for pid=7688 comm="syz.0.540" path="/156/file0" dev="pstore" ino=5315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 80.003385][ T40] audit: type=1400 audit(1775351040.914:436): avc: denied { connect } for pid=7688 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 80.240908][ T40] audit: type=1400 audit(1775351041.154:437): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 80.402396][ T40] audit: type=1400 audit(1775351041.314:438): avc: denied { watch } for pid=7712 comm="syz.0.542" path="/158/file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.661106][ T7740] kernel profiling enabled (shift: 63) [ 80.663621][ T7740] profiling shift: 63 too large [ 80.669964][ T7587] cdc_wdm 7-1:1.0: Error autopm - -16 [ 80.670298][ T1329] usb 7-1: USB disconnect, device number 2 [ 80.676290][ T59] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 80.678442][ T59] cdc_wdm 6-1:1.0: Unknown control protocol [ 80.680753][ T7636] cdc_wdm 7-1:1.0: Error autopm - -16 [ 80.726974][ T59] usb 6-1: USB disconnect, device number 5 [ 80.731435][ T7744] JFS: discard option not supported on device [ 80.737265][ T7744] Mount JFS Failure: -5 [ 80.818352][ T7744] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 80.848759][ T7754] netlink: 'syz.2.552': attribute type 6 has an invalid length. [ 80.853415][ T7754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.959526][ T7761] netlink: 'syz.0.553': attribute type 29 has an invalid length. [ 80.964882][ T7764] netlink: 'syz.0.553': attribute type 29 has an invalid length. [ 80.969165][ T7761] netlink: 500 bytes leftover after parsing attributes in process `syz.0.553'. [ 81.090170][ T7780] program syz.0.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.228108][ T7794] syzkaller0: entered promiscuous mode [ 81.229932][ T7794] syzkaller0: entered allmulticast mode [ 81.233754][ T7794] tipc: Started in network mode [ 81.235677][ T7794] tipc: Node identity 86fdca2105f7, cluster identity 4711 [ 81.238183][ T7794] tipc: Enabled bearer , priority 0 [ 81.241611][ T7793] tipc: Resetting bearer [ 81.250073][ T7793] tipc: Disabling bearer [ 81.370128][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7816 comm=syz.0.569 [ 81.374037][ T7816] netlink: 596 bytes leftover after parsing attributes in process `syz.0.569'. [ 81.690434][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.575'. [ 81.718600][ T7849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7849 comm=syz.1.575 [ 81.721228][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 81.724436][ T7849] overlayfs: missing 'lowerdir' [ 81.727360][ T7842] gfs2: gfs2 mount does not exist [ 81.729965][ T7842] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 81.732839][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 81.741413][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.575'. [ 81.745932][ T7842] Malformed UNC in devname [ 81.745932][ T7842] [ 81.748086][ T7842] CIFS: VFS: Malformed UNC in devname [ 81.858374][ T7873] erspan0: entered promiscuous mode [ 81.894621][ T7871] 9p: Could not find request transport: v [ 81.967990][ T7887] loop2: detected capacity change from 0 to 7 [ 81.973936][ T7887] Dev loop2: unable to read RDB block 7 [ 81.980380][ T7887] loop2: AHDI p1 p2 p3 [ 81.981856][ T7887] loop2: partition table partially beyond EOD, truncated [ 81.986336][ T7887] loop2: p1 start 1601398130 is beyond EOD, truncated [ 81.988547][ T7887] loop2: p2 start 1702059890 is beyond EOD, truncated [ 82.027685][ T7887] erspan0: entered promiscuous mode [ 82.151886][ T7901] program syz.0.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.225000][ T1116] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 82.227908][ T1116] ata1.00: irq_stat 0x40000000 [ 82.229839][ T1116] ata1.00: failed command: ZAC MANAGEMENT OUT [ 82.236279][ T1116] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 82.236279][ T1116] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 82.242593][ T1116] ata1.00: status: { DRDY ERR } [ 82.245982][ T1116] ata1.00: error: { ABRT } [ 82.247806][ T1116] ata1.00: device reported invalid CHS sector 0 [ 82.386909][ T7918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.503668][ T7932] binder: 7931:7932 ioctl c0306201 2000000003c0 returned -14 [ 82.536830][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.601'. [ 82.794682][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.946297][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.950877][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.953717][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.964691][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 82.968254][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.968895][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.971757][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.975707][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 82.985538][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 82.989288][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.992569][ T10] usb 5-1: Product: syz [ 82.996934][ T10] usb 5-1: Manufacturer: syz [ 83.000682][ T10] usb 5-1: SerialNumber: syz [ 83.021243][ T7970] Failed to initialize the IGMP autojoin socket (err -2) [ 83.129137][ T7987] befs: (loop1): No write support. Marking filesystem read-only [ 83.132608][ T7987] befs: (loop1): unable to read superblock [ 83.223392][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 83.473432][ T8017] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.490842][ T8019] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.527593][ T8024] netlink: 'syz.2.618': attribute type 10 has an invalid length. [ 83.931565][ T8060] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 83.939720][ T8060] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.118264][ T8077] random: crng reseeded on system resumption [ 84.130128][ C2] ata1: illegal qc_active transition (00000000->00008000) [ 84.182325][ T8082] bpf: Bad value for 'uid' [ 84.404685][ T5929] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 84.459155][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 84.468293][ T1116] ata1.00: configured for UDMA/100 [ 84.571414][ T5929] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 84.575084][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.579085][ T5929] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 84.579125][ T8077] syz.1.628 (8077) used greatest stack depth: 19104 bytes left [ 84.582408][ T5929] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 84.587736][ T5929] usb 7-1: Manufacturer: syz [ 84.591242][ T5929] usb 7-1: config 0 descriptor?? [ 84.654663][ T5929] rc_core: IR keymap rc-hauppauge not found [ 84.656635][ T5929] Registered IR keymap rc-empty [ 84.662208][ T5929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 84.667612][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 84.709894][ T8110] Device name not specified. [ 84.709894][ T8110] [ 84.742246][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 84.742258][ T40] audit: type=1400 audit(1775351045.654:462): avc: denied { create } for pid=8112 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 84.777504][ T8113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.783313][ T40] audit: type=1400 audit(1775351045.694:463): avc: denied { getopt } for pid=8112 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 84.783537][ T8113] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 84.799740][ T40] audit: type=1400 audit(1775351045.714:464): avc: denied { write } for pid=8112 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.899947][ T7970] netdevsim netdevsim3 netdevsim0: renamed from eth2 [ 84.915946][ T7970] netdevsim netdevsim3 netdevsim1: renamed from eth3 [ 84.923504][ T7970] netdevsim netdevsim3 netdevsim2: renamed from eth4 [ 84.934964][ T7970] netdevsim netdevsim3 netdevsim3: renamed from eth5 [ 84.970472][ T40] audit: type=1400 audit(1775351045.884:465): avc: denied { setopt } for pid=8079 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.007674][ T40] audit: type=1400 audit(1775351045.924:466): avc: denied { bind } for pid=8079 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.034570][ T63] Bluetooth: hci3: command tx timeout [ 85.083113][ T5929] usb 7-1: USB disconnect, device number 4 [ 85.138568][ T7970] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 85.150808][ T7970] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 85.163351][ T7970] wireguard: wg0: Could not create IPv4 socket [ 85.166737][ T7970] wireguard: wg1: Could not create IPv4 socket [ 85.169894][ T7970] wireguard: wg2: Could not create IPv4 socket [ 85.635605][ T8165] cgroup2: Unknown parameter 'euid' [ 85.668841][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.671133][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 85.741745][ T10] usb 5-1: USB disconnect, device number 3 [ 85.961602][ T8204] random: crng reseeded on system resumption [ 86.022643][ T8204] bpf: Bad value for 'uid' [ 86.064727][ T53] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 86.066769][ T8215] cgroup2: Unknown parameter 'euid' [ 86.098490][ T40] audit: type=1400 audit(1775351047.014:467): avc: denied { getopt } for pid=8217 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.228654][ T53] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.232706][ T53] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.237197][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 86.241514][ T53] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 86.244956][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.250007][ T8185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.254240][ T53] hub 7-1:1.0: bad descriptor, ignoring hub [ 86.256322][ T53] hub 7-1:1.0: probe with driver hub failed with error -5 [ 86.269506][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 86.271307][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 86.292133][ T53] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 86.300740][ T53] cdc_wdm 7-1:1.0: Unknown control protocol [ 86.547738][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.549861][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.552466][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 86.554474][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 86.556388][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 86.667815][ T53] usb 7-1: USB disconnect, device number 5 [ 87.220478][ T8282] cgroup2: Unknown parameter 'euid' [ 87.338381][ T8300] openvswitch: netlink: Missing valid actions attribute. [ 87.340593][ T8300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.975324][ T53] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 88.146127][ T53] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.150618][ T53] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.153431][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 88.157778][ T53] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 88.160604][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.167957][ T8319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.174075][ T53] hub 5-1:1.0: bad descriptor, ignoring hub [ 88.178818][ T53] hub 5-1:1.0: probe with driver hub failed with error -5 [ 88.182018][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 88.183697][ T53] cdc_wdm 5-1:1.0: skipping garbage [ 88.195210][ T53] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 88.197103][ T53] cdc_wdm 5-1:1.0: Unknown control protocol [ 88.297451][ T40] audit: type=1400 audit(1775351049.214:468): avc: denied { mac_admin } for pid=8346 comm="syz.1.674" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.304135][ T8348] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 88.309406][ T40] audit: type=1400 audit(1775351049.224:469): avc: denied { relabelto } for pid=8346 comm="syz.1.674" name="174" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 88.319987][ T40] audit: type=1400 audit(1775351049.224:470): avc: denied { associate } for pid=8346 comm="syz.1.674" name="174" dev="tmpfs" ino=931 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 88.335732][ T40] audit: type=1400 audit(1775351049.244:471): avc: denied { remove_name } for pid=5927 comm="syz-executor" name="binderfs" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 88.366194][ T8352] __nla_validate_parse: 6 callbacks suppressed [ 88.366209][ T8352] netlink: 168 bytes leftover after parsing attributes in process `syz.1.675'. [ 88.461079][ T8366] FAULT_INJECTION: forcing a failure. [ 88.461079][ T8366] name failslab, interval 1, probability 0, space 0, times 0 [ 88.466603][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.2.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.466629][ T8366] Tainted: [L]=SOFTLOCKUP [ 88.466633][ T8366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.466641][ T8366] Call Trace: [ 88.466685][ T8366] [ 88.466690][ T8366] dump_stack_lvl+0x100/0x190 [ 88.466912][ T8366] should_fail_ex.cold+0x5/0xa [ 88.466989][ T8366] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 88.467133][ T8366] should_failslab+0xc2/0x120 [ 88.467222][ T8366] __kmalloc_noprof+0xe0/0x850 [ 88.467247][ T8366] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 88.467264][ T8366] ? cred_has_capability.isra.0+0x186/0x300 [ 88.467452][ T8366] genl_family_rcv_msg_doit+0xc7/0x300 [ 88.467469][ T8366] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 88.467490][ T8366] ? bpf_lsm_capable+0x9/0x10 [ 88.467505][ T8366] ? security_capable+0x80/0x260 [ 88.467523][ T8366] ? ns_capable+0xd2/0xf0 [ 88.467567][ T8366] genl_rcv_msg+0x560/0x800 [ 88.467584][ T8366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.467599][ T8366] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 88.467627][ T8366] netlink_rcv_skb+0x159/0x420 [ 88.467641][ T8366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.467656][ T8366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.467677][ T8366] ? netlink_deliver_tap+0x1ae/0xcc0 [ 88.467700][ T8366] genl_rcv+0x28/0x40 [ 88.467712][ T8366] netlink_unicast+0x5aa/0x870 [ 88.467736][ T8366] ? __pfx_netlink_unicast+0x10/0x10 [ 88.467764][ T8366] netlink_sendmsg+0x8b0/0xda0 [ 88.467780][ T8366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.467800][ T8366] ? __might_fault+0x50/0x140 [ 88.467826][ T8366] ____sys_sendmsg+0x9e1/0xb70 [ 88.467841][ T8366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.467863][ T8366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.467886][ T8366] ___sys_sendmsg+0x190/0x1e0 [ 88.467903][ T8366] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.467941][ T8366] __sys_sendmsg+0x170/0x220 [ 88.467961][ T8366] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.467992][ T8366] do_syscall_64+0x106/0xf80 [ 88.468107][ T8366] ? clear_bhb_loop+0x40/0x90 [ 88.468125][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.468139][ T8366] RIP: 0033:0x7fef5999c819 [ 88.468156][ T8366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.468169][ T8366] RSP: 002b:00007fef5a92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.468209][ T8366] RAX: ffffffffffffffda RBX: 00007fef59c15fa0 RCX: 00007fef5999c819 [ 88.468218][ T8366] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001a [ 88.468226][ T8366] RBP: 00007fef5a92d090 R08: 0000000000000000 R09: 0000000000000000 [ 88.468234][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.468242][ T8366] R13: 00007fef59c16038 R14: 00007fef59c15fa0 R15: 00007fffda153a88 [ 88.468260][ T8366] [ 88.800013][ T8393] 9pnet_virtio: no channels available for device syz [ 88.816162][ T830] usb 5-1: USB disconnect, device number 4 [ 89.102866][ T8407] Invalid ELF header magic: != ELF [ 89.359223][ T8416] vlan2: entered allmulticast mode [ 89.361183][ T8416] bond0: entered allmulticast mode [ 89.362804][ T8416] bond_slave_0: entered allmulticast mode [ 89.366400][ T8416] bond_slave_1: entered allmulticast mode [ 89.368240][ T8416] dummy0: entered allmulticast mode [ 89.463171][ T8429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.681411][ T8447] FAULT_INJECTION: forcing a failure. [ 89.681411][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 89.685378][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.1.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.685395][ T8447] Tainted: [L]=SOFTLOCKUP [ 89.685398][ T8447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.685405][ T8447] Call Trace: [ 89.685441][ T8447] [ 89.685445][ T8447] dump_stack_lvl+0x100/0x190 [ 89.685804][ T8447] should_fail_ex.cold+0x5/0xa [ 89.685942][ T8447] should_failslab+0xc2/0x120 [ 89.686069][ T8447] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 89.686087][ T8447] ? __alloc_skb+0x140/0x710 [ 89.686277][ T8447] __alloc_skb+0x140/0x710 [ 89.686291][ T8447] ? __alloc_skb+0x5b7/0x710 [ 89.686304][ T8447] ? __pfx___alloc_skb+0x10/0x10 [ 89.686322][ T8447] netlink_alloc_large_skb+0x69/0x150 [ 89.686342][ T8447] netlink_sendmsg+0x680/0xda0 [ 89.686355][ T8447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.686371][ T8447] ? __might_fault+0x50/0x140 [ 89.686391][ T8447] ____sys_sendmsg+0x9e1/0xb70 [ 89.686402][ T8447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.686420][ T8447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.686437][ T8447] ___sys_sendmsg+0x190/0x1e0 [ 89.686450][ T8447] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.686478][ T8447] __sys_sendmsg+0x170/0x220 [ 89.686494][ T8447] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.686513][ T8447] ? rcu_is_watching+0x12/0xc0 [ 89.686568][ T8447] do_syscall_64+0x106/0xf80 [ 89.686769][ T8447] ? clear_bhb_loop+0x40/0x90 [ 89.686788][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.686803][ T8447] RIP: 0033:0x7fef6b79c819 [ 89.686816][ T8447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.686830][ T8447] RSP: 002b:00007fef699ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.686873][ T8447] RAX: ffffffffffffffda RBX: 00007fef6ba15fa0 RCX: 00007fef6b79c819 [ 89.686880][ T8447] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000003 [ 89.686886][ T8447] RBP: 00007fef699ee090 R08: 0000000000000000 R09: 0000000000000000 [ 89.686892][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.686898][ T8447] R13: 00007fef6ba16038 R14: 00007fef6ba15fa0 R15: 00007ffd0ff53e28 [ 89.686912][ T8447] [ 89.813565][ T8453] netlink: 180 bytes leftover after parsing attributes in process `syz.0.701'. [ 89.919138][ T8468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.922097][ T8468] IPv6: NLM_F_CREATE should be set when creating new route [ 90.007489][ T8469] openvswitch: netlink: Missing valid actions attribute. [ 90.010004][ T8469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.345375][ T8473] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.220544][ T8497] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 91.223143][ T8497] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 91.230262][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.236203][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.239538][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.243393][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.246978][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.337250][ T8502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.717'. [ 91.349122][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.369826][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 91.369843][ T40] audit: type=1400 audit(1775351052.284:479): avc: denied { getopt } for pid=8496 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.369892][ T8495] Failed to initialize the IGMP autojoin socket (err -2) [ 91.426694][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.497587][ T8509] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.504114][ T8509] binder: 8507:8509 ioctl c018620c 200000000240 returned -22 [ 91.546746][ T40] audit: type=1400 audit(1775351052.454:480): avc: denied { read } for pid=8514 comm="syz.2.722" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.554624][ T40] audit: type=1400 audit(1775351052.454:481): avc: denied { open } for pid=8514 comm="syz.2.722" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.560252][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.561895][ T40] audit: type=1400 audit(1775351052.464:482): avc: denied { execute } for pid=8514 comm="syz.2.722" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.587244][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.595872][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.600138][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.603057][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.637723][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.671526][ T8512] Failed to initialize the IGMP autojoin socket (err -2) [ 91.753943][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.770039][ T8534] netlink: 'syz.2.727': attribute type 25 has an invalid length. [ 91.849658][ T40] audit: type=1400 audit(1775351052.764:483): avc: denied { relabelfrom } for pid=8512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.858461][ T40] audit: type=1400 audit(1775351052.764:484): avc: denied { relabelto } for pid=8512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.978138][ T12] bridge_slave_1: left allmulticast mode [ 91.980021][ T12] bridge_slave_1: left promiscuous mode [ 91.981970][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.986471][ T12] bridge_slave_0: left allmulticast mode [ 91.988339][ T12] bridge_slave_0: left promiscuous mode [ 91.990260][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.144442][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.149192][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.152093][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.155147][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.157992][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.175538][ T12] gretap0 (unregistering): left promiscuous mode [ 92.325156][ T12] bond0 (unregistering): left promiscuous mode [ 92.327765][ T12] bond_slave_0: left promiscuous mode [ 92.330243][ T12] bond_slave_1: left promiscuous mode [ 92.334163][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.345025][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.348643][ T12] bond0 (unregistering): Released all slaves [ 92.353114][ T12] bond1 (unregistering): Released all slaves [ 92.372910][ T8541] Failed to initialize the IGMP autojoin socket (err -2) [ 92.428448][ T40] audit: type=1400 audit(1775351053.344:485): avc: denied { lock } for pid=8554 comm="syz.1.734" path="socket:[25605]" dev="sockfs" ino=25605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 92.442689][ T40] audit: type=1400 audit(1775351053.354:486): avc: denied { append } for pid=8559 comm="syz.2.733" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.464739][ T40] audit: type=1400 audit(1775351053.354:487): avc: denied { ioctl } for pid=8559 comm="syz.2.733" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.492464][ T12] tipc: Left network mode [ 92.660155][ T40] audit: type=1400 audit(1775351053.574:488): avc: denied { write } for pid=8569 comm="syz.2.736" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.675279][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.680150][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.683787][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.687151][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.690986][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.715897][ T8572] Failed to initialize the IGMP autojoin socket (err -2) [ 92.749472][ T12] veth0_to_batadv: left promiscuous mode [ 92.763481][ T12] hsr_slave_0: left promiscuous mode [ 92.771894][ T12] hsr_slave_1: left promiscuous mode [ 92.774797][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.777848][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.781594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.784951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.790645][ T12] veth1_macvtap: left promiscuous mode [ 92.793039][ T12] veth0_macvtap: left promiscuous mode [ 92.795209][ T12] veth1_vlan: left promiscuous mode [ 93.035526][ T8584] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 93.040183][ T8584] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 93.043463][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: kbnepd aPNÜ]ôQ[ Tainted: G L syzkaller #0 PREEMPT(full) [ 93.047850][ T8584] Tainted: [L]=SOFTLOCKUP [ 93.049579][ T8584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.053353][ T8584] RIP: 0010:klist_put+0x4d/0x1d0 [ 93.055247][ T8584] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d [ 93.062785][ T8584] RSP: 0018:ffffc90004e37970 EFLAGS: 00010202 [ 93.065145][ T8584] RAX: dffffc0000000000 RBX: ffff8880352b1860 RCX: ffffffff82b90fdd [ 93.068098][ T8584] RDX: 000000000000000b RSI: ffffffff8b870295 RDI: 0000000000000058 [ 93.071089][ T8584] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 93.074110][ T8584] R10: 0000000000000000 R11: 000000000000761b R12: 0000000000000000 [ 93.077128][ T8584] R13: 0000000000000001 R14: ffff888026246c68 R15: 0000000000000000 [ 93.080298][ T8584] FS: 0000000000000000(0000) GS:ffff8880d6439000(0000) knlGS:0000000000000000 [ 93.083922][ T8584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.086475][ T8584] CR2: 00007fef59985e40 CR3: 0000000059e4f000 CR4: 0000000000352ef0 [ 93.089589][ T8584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.092585][ T8584] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 93.095598][ T8584] Call Trace: [ 93.096904][ T8584] [ 93.098121][ T8584] device_del+0x1b8/0x9b0 [ 93.100004][ T8584] ? __pfx_device_del+0x10/0x10 [ 93.101991][ T8584] ? netdev_unregister_kobject+0x2da/0x540 [ 93.104212][ T8584] unregister_netdevice_many_notify+0x1817/0x2580 [ 93.106666][ T8584] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 93.109265][ T8584] ? __pfx___mutex_lock+0x10/0x10 [ 93.111235][ T8584] unregister_netdevice_queue+0x30b/0x3c0 [ 93.113449][ T8584] ? rtnl_net_dev_lock+0x137/0x360 [ 93.115371][ T8584] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 93.117782][ T8584] ? rtnl_net_dev_lock+0x28/0x360 [ 93.119793][ T8584] ? rtnl_net_dev_lock+0x146/0x360 [ 93.121760][ T8584] ? rtnl_lock+0x9/0x20 [ 93.123358][ T8584] ? rtnl_net_dev_lock+0x1fe/0x360 [ 93.125325][ T8584] unregister_netdev+0x1f/0x60 [ 93.127584][ T8584] bnep_session+0x2203/0x2dc0 [ 93.129640][ T8584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.132095][ T8584] ? __pfx_bnep_session+0x10/0x10 [ 93.134192][ T8584] ? do_raw_spin_lock+0x128/0x260 [ 93.136239][ T8584] ? __pfx_woken_wake_function+0x10/0x10 [ 93.138545][ T8584] ? rcu_is_watching+0x12/0xc0 [ 93.140525][ T8584] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.142935][ T8584] ? lockdep_hardirqs_on+0x78/0x100 [ 93.145075][ T8584] ? __kthread_parkme+0x18c/0x230 [ 93.147176][ T8584] ? kthread+0x13a/0x450 [ 93.148950][ T8584] ? __pfx_bnep_session+0x10/0x10 [ 93.151025][ T8584] kthread+0x370/0x450 [ 93.152718][ T8584] ? __pfx_kthread+0x10/0x10 [ 93.154654][ T8584] ret_from_fork+0x754/0xd80 [ 93.156539][ T8584] ? __pfx_ret_from_fork+0x10/0x10 [ 93.158659][ T8584] ? __switch_to+0x7b4/0x1120 [ 93.160602][ T8584] ? __pfx_kthread+0x10/0x10 [ 93.162533][ T8584] ret_from_fork_asm+0x1a/0x30 [ 93.164511][ T8584] [ 93.165818][ T8584] Modules linked in: [ 93.167953][ T8584] ---[ end trace 0000000000000000 ]--- [ 93.172500][ T8584] RIP: 0010:klist_put+0x4d/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.174634][ T8584] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 0a 0d [ 93.183501][ T8584] RSP: 0018:ffffc90004e37970 EFLAGS: 00010202 [ 93.186984][ T8584] RAX: dffffc0000000000 RBX: ffff8880352b1860 RCX: ffffffff82b90fdd [ 93.190335][ T8584] RDX: 000000000000000b RSI: ffffffff8b870295 RDI: 0000000000000058 [ 93.193645][ T8584] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 93.197342][ T8584] R10: 0000000000000000 R11: 000000000000761b R12: 0000000000000000 [ 93.200658][ T8584] R13: 0000000000000001 R14: ffff888026246c68 R15: 0000000000000000 [ 93.213169][ T8584] FS: 0000000000000000(0000) GS:ffff8880d6439000(0000) knlGS:0000000000000000 [ 93.216969][ T8584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.219366][ T8584] CR2: 00007fef59985e40 CR3: 000000000e598000 CR4: 0000000000352ef0 [ 93.221862][ T8584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.224318][ T8584] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 93.234537][ T8584] Kernel panic - not syncing: Fatal exception [ 93.237245][ T8584] Kernel Offset: disabled [ 93.238723][ T8584] Rebooting in 86400 seconds..