last executing test programs: 2m20.783196048s ago: executing program 0 (id=279): r0 = open(&(0x7f0000000040)='./file0\x00', 0x140, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x47}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8081}, 0x20) (async) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000440)=0x68) (async) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='gfs2\x00', 0x80480, &(0x7f0000000540)='][&%[\x00') connect$unix(r0, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x400, 0x70bd2d, 0xae3, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) (async) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x48011) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000880), r0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000bc0)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x1000, 0x7, {{0x7, 0x4, 0x2, 0x22, 0x1c, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@noop, @lsrr={0x83, 0x7, 0x40, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x1, 0x80, 0xf9e5, 0x3, {{0x36, 0x4, 0x2, 0x6, 0xd8, 0x66, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x54, 0x69, 0x3, 0x0, [{@empty, 0x5}, {@private=0xa010102, 0xdf11}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x2}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@multicast2}, {@empty, 0x3b62}, {@private=0xa010101, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x3}]}, @generic={0x88, 0x3, "c7"}, @timestamp_prespec={0x44, 0x2c, 0x97, 0x3, 0x4, [{@broadcast, 0x8d}, {@loopback, 0x7adf}, {@local, 0x7fffffff}, {@local, 0x2}, {@empty, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0x69, 0x1, 0x3, [{@rand_addr=0x64010101, 0x8}, {@local}, {@local, 0x7}, {@local, 0xc}, {@private=0xa010100, 0xb}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e40)={'ip6gre0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x8, 0x6, 0x45, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x2, 0xb40e}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2b, 0x1, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8000, 0x1, 0xffff, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x0, 0x8, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x401, 0xc}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'sit0\x00', 0x0, 0x7, 0x20, 0x8, 0x1, {{0xe, 0x4, 0x2, 0x1b, 0x38, 0x64, 0x0, 0xf8, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x20, 0xe3, 0x0, 0xc, [0x34b, 0x5, 0x7, 0xd6, 0x9, 0x9, 0x7]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001240)={'ip6_vti0\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x5, 0x0, 0x11, @empty, @private1, 0x40, 0x10, 0x8, 0x10001}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x0, 0x3, {{0x13, 0x4, 0x2, 0x5, 0x4c, 0x66, 0x0, 0xc, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0xd, 0x1, [{0x6, 0x7, "a3536a77f0"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xfd, [@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, @empty, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}}) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002640)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002600)={&(0x7f0000001c40)={0x98c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x7, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8487}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x27ec}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x41c0}, 0x1) 2m20.706456089s ago: executing program 0 (id=282): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="23000000010006", 0x7) syz_clone(0x8003200, &(0x7f0000000300)="7d8eb62ef4830f831f965a85a8f0d6186c9b6fc4908356a84c4bb95297bcca90dd02e4678721877a5f83e30fb784395e65729debf7ffe2c908cb9168c6e4e4d1988c7889ced417cb1fd748a0d59bb444762551ea9a4e95fe37ed7d3f7eec8b32fc23397a09f4ada238293ff7569d27bb9cdaecc1f0", 0x75, &(0x7f0000000480), &(0x7f00000003c0), &(0x7f0000000400)="67748247e89a1b1f52deebbae0ac8fec44858fb1bc9c455ab6304802fc9b8b3ebc681fa4872be26c69fef0df892f7153c173039a2b66d5926389e5b7dfafc08b120236109052f927d05b99b137b64b80286e8c868d92caeebd846cf29592aa057e64aa0719a8526b8500a993506ea8190e8e7222166fd508fb26") ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x80000001, 0x1, 0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000020000000900010073797a300000000064000000090a010400000000000000000200fffc08000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004780100000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000004c010380480100800800034000000002"], 0x224}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) r3 = syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x22140000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3], 0x1}, 0x58) 2m19.988321994s ago: executing program 0 (id=287): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x80000000}, 0x19a) (async) write(r0, &(0x7f0000000040)="240000001a005f0400f9f407000904018020002000000000000000000800020000000045", 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d0000008500000015000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 32) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 2m18.487610317s ago: executing program 0 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f00000015c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000001600)='./bus\x00', &(0x7f0000001640), 0x8, &(0x7f0000001680)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000016c0)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='.\x00', 0x0, 0x0) r7 = mq_open(&(0x7f0000001780)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b80)='./proc\x00', 0x1ed) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001dc0)={'ip6_vti0\x00', &(0x7f0000001d40)={'syztnl1\x00', r2, 0x29, 0x51, 0x7, 0x9, 0x40, @mcast2, @private1, 0x40, 0x10, 0x280000, 0x5}}) mount(0x0, &(0x7f0000001bc0)='./proc\x00', &(0x7f0000001c00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001c40)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents(r6, 0x0, 0x58) openat(0xffffffffffffff9c, &(0x7f0000001740)='./file2\x00', 0x18d042, 0x15) getdents64(r6, 0x0, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000580)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0xfac, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xfce) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) mount(&(0x7f0000000100)=@md={'/dev/md', @named={'_syz', 0x0, '1'}}, &(0x7f0000000140)='./mnt\x00', &(0x7f00000000c0)='esdfs\x00', 0x40000, &(0x7f0000000280)='ecryptfs_sig=0123456789abcdef\x00s\xbaUq\x84-/\x8e\xfb\xaf^\n\xe0\xde\xab\xa2\xf0\x02/K\xa6M\xe7&\x18\x98G\x93\xcd\xb0\xbbS\xce\xfd\xe0&%F\xfbjdg\x91\x91\"\xf1\xde\xf8\xd4\xba\x06\xd3\x87\x80\xc5\xa2\xcf\xadg8 \xfd\x15\x9f\xc7Fs\xbd\x90\xad>tE\x93\xb3\x96AW\x9aW\x01\xe8\x17r]O T\xce\x1f\xf9\xf7\r\x94\xa9.\xf5K\x88\x01I\x93\xfa\x1c:>\x99\x0fE\xc9i\xf8\xc6\xc0\xa8\x9e:\x15Me\x86z\xb8\x00\x01U \xa2\xd2\r\xadf\xcf\xd0\xe7\x1e\xff\xff\x18\x17\xc6u') 2m18.019391965s ago: executing program 0 (id=311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x59) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x20000000}], {0x95, 0x0, 0x9}}, &(0x7f0000000100)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x0, 0x10, &(0x7f0000000340), 0x85}, 0x52) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x303}, "e1091d9abca8a10c", "60b8d9b429db61cce77ede61f8abbb9052ba09245ed69f0d41de5b35fdafd4fa", "b328b2de", "14c1c641eb15a067"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000003c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000400)=0x2100e6d4, 0x4) 2m17.6966315s ago: executing program 0 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x8, 0x400000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='270', 0x3) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d737461ca69633a312c00"]) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./proc\x00', 0x0, 0x92) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390500000000000000f9ff000000", @ANYRES32=0x0, @ANYBLOB="10100000105000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) 2m17.658502499s ago: executing program 32 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x8, 0x400000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='270', 0x3) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d737461ca69633a312c00"]) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./proc\x00', 0x0, 0x92) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390500000000000000f9ff000000", @ANYRES32=0x0, @ANYBLOB="10100000105000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) 14.970801898s ago: executing program 4 (id=2025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_io_uring_setup(0x17c8, &(0x7f0000000040)={0x0, 0x15961, 0x8000, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x1) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$CDROMRESET(r2, 0x5312) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000200)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r4, r3, 0x2) 14.883226061s ago: executing program 4 (id=2026): io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x7eb1, &(0x7f0000000000)={0x0, 0xdd26, 0x40000, 0x0, 0x24f}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140)=[@ioring_restriction_register_op={0x0, 0xe}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_op={0x1, 0x11}, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_op={0x1, 0xc016e5c143714651}], 0x5) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0x685e) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0xffffffff, 0x2800002, 0x11, r0, 0x337b4217) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x80, 0x240) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)) r3 = dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) chdir(&(0x7f0000000340)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r3, 0xe, 0x1, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex, r3, 0xe, 0x14, r3, @void, @value=r3, @void, @void, r5}, 0x20) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000580)={@rand_addr, @dev, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r6, 0xe98b8779d30ef2f4, 0x5, 0x0, 0x867, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x1, 0x4, 0x5}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f00000006c0), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x2f, 0x2, 0x20}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x5, 0x10, [0x3b, 0x1b, 0x35, 0x2f, 0x3a, 0x28, 0x20, 0x1d, 0x7, 0x2f, 0x5, 0x33, 0x11, 0x24, 0x28, 0x3f], 0x1, 0x1}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x28}, {0x3, '\vT'}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="a1243e6dd684", 0xfff, 0xd, [0x35, 0x1b, 0x3, 0x2b, 0x18, 0xd, 0x7, 0x0, 0x1a, 0x11, 0x30, 0x22, 0x5, 0x33, 0xc, 0x23], 0x0, 0x6, 0x6}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x3, 0x3, 0x4, 0x1, 0xa85196f4434440f5, 0x4], 0x0, 0x6}}}, @common=@icmp={{0x28}, {0x8, "5fc0", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000bc0)=0x0) r8 = geteuid() mount$fuseblk(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x4000, &(0x7f0000000c00)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@dont_measure}, {@audit}, {@euid_lt={'euid<', r8}}]}}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000cc0)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) setsockopt(r9, 0x7ff, 0x0, &(0x7f0000000d40)="06cbda57e967da66b2746aeb5b01f8dab403d092ba0e4fa636f472100b9a58658f9b6ff81dd5ef55942fd779313c5b7087d40215727309897b3c0941d05d01232c4fd350df7fa15d59d1fec470db0ad4ac93f583eba76cd2ebe06716857effd0473a614b4834c34caab8d2d1673939fec1332aee148cee42b7ea16996a23daaf95770648a5e27c8ac7d52a13d959edd6a3", 0x91) openat2$dir(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x8000, 0x8, 0x4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'syztnl0\x00', r6, 0x29, 0x1, 0x8, 0x5bd, 0x42, @loopback, @private2, 0x8000, 0x10, 0x4, 0x5}}) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000f40), &(0x7f0000000f80)=0x8) socket$inet_udp(0x2, 0x2, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x6, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}]}, &(0x7f0000001000)='GPL\x00', 0x2, 0xa2, &(0x7f0000001040)=""/162, 0x41000, 0x7d, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000001100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x5, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001180)=[r2, r2, r3, r3], &(0x7f00000011c0)=[{0x0, 0x3, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r10, 0x0, 0xd3, 0x69, &(0x7f00000012c0)="7791b89a933db4903c87e67829013ac309337ee3a9f1e6efc9baa4707df78e2eeb2507de370d60c7b183f257edc3b80c71764d622c62d9a37f63f185324321f1bbdfc233e5ac5e2230db05ed0b657c0f428e9f74e289666c5915d4d40f557d5e4763716e2958156599b7016b1e640f4effdaa76db229027d6eccde98496bb082424a2b4fadc3132582338d7b396ac30c46ac2889a95caa833b09c52f206f1a9ad7e0b2da29678cc1b4df655352223184079868f215b3d8b0a65abe1be3b282fec1f87031642def4a5f1bddd0b53f735255221f", &(0x7f00000013c0)=""/105, 0xfffffffa, 0x0, 0xb2, 0x1f, &(0x7f0000001440)="f704d567810b35ce318b7d613526be93357d35b3a8d1cbd82e720fb39e272c6a1290e2070dce028c8d53e9ebb32d20e1122671da681c0e3d57c83f44baa2354ca4ad085c63ed2a5d18001b2b0314d31432f73b01a58ea550d0bd87d5e646198ea2baf982d9110f6a129ad1e41347d1a82f0b7c3e92878e8f8216427d3d4c1fe65ae259043dc49411416949864a0bc22ae6ebf9b4f207087978918b174ddbbb5070d428f81caf455dcdb16b226c66aceb805a", &(0x7f0000001500)="cb13768e5f900046d5225957bd7be41580b3b94438830d03a738762c01ce3d", 0x1, 0x0, 0x1}, 0x50) 14.821074161s ago: executing program 4 (id=2027): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x40042, 0x1) mount$afs(&(0x7f0000000800), &(0x7f0000000840)='./dev/sda1\x00', &(0x7f0000000880), 0x215081, &(0x7f00000008c0)={[{@flock_openafs}], [{@seclabel}, {@obj_user={'obj_user', 0x3d, '@$(+%\\+-%'}}, {@subj_type={'subj_type', 0x3d, 'proc\x00'}}]}) file_getattr(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x18, 0x1000) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="000403000000000000f0", @ANYRES64]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x1, 0x0) timer_create(0x2, 0x0, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x1004, 0x1) r3 = io_uring_setup(0x2f09, &(0x7f0000000700)={0x0, 0xa86c, 0x400, 0x3, 0x11e}) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x100000, 0x43) creat(&(0x7f00000007c0)='./file0\x00', 0xef0b669fef2c8e9d) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x900, 0x0, 0x0, &(0x7f0000000500)={0x1f}, &(0x7f0000000540)={0x0, 0x3938700}, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000002c0)={@id={0x2, 0x0, @c}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x56202326, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001540)='Q', 0x1}], 0x1}}], 0x2, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002a80)=0x40) 13.898808911s ago: executing program 4 (id=2028): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x2210088, &(0x7f0000000980)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000a00)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x4a8e) write$cgroup_pressure(r2, &(0x7f0000000a80)={'full', 0x20, 0x1, 0x20, 0x6}, 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) r6 = syz_clone(0x4000, &(0x7f0000000100)="8412eb6698fb065be20d67231e4c9344394c6c5a3311a5e0718008669a3d0b6943f6fe7e5de16f8b6eeee365614690ec03617d923cbfcb9f3f7ac0a60e7c295bcab7ef6bd747fc13ce6076087c2933854a92cf901020eed3ef69634e05632aa497676815b69fb60e08fbcaab893a1cc57fd4aec7ae5a6f2ea288121114fd23c178174e18020af54ec206e24c08858cc6712300bebd66c395bfcf4f23303ce7d8a484f601eda4affcc18b084509adab6fb8bdf121912015ec85fb16e1799fe0d6423dc357d0bd978973ec2c2cbe23687be3e3ff6480ad6dbf7a5268331eb2fc09fb0c463e9fc8", 0xe6, &(0x7f0000000200), &(0x7f00000003c0), &(0x7f00000004c0)="8b4032017978f860aae4873c1fab5fd624a784dfa01cfe9542f26061db83eb0bfcf46bfa018ff0bd97ba25def2d8a7c2c8fd39bf509ac1fde9e7e2af11bfe81921e532a961befb4d0cb259dc95b2cda7d2a0b2a14ea173b194c092d8ea1354853a38c63553722b69531a8a2c408ff6acd48c728a3d1f4feedb2a76c218b898a11499593a7dd81fdbc454191bfb4f4cb8541e4c3564ace2f9abc9bb130bc875616c204e5fb05c52afb5936453917cc8e206a9") sched_setaffinity(r6, 0x8, &(0x7f0000000580)=0x7) syz_emit_ethernet(0xee, &(0x7f00000002c0)={@random="e91fde41f8ff", @remote, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "c3bee9", 0xb4, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x21, 0x3, '\x00', [@jumbo, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x2e, 0x6, 0x4, 0x3, 0x4, 0x10, 0x4, [@local, @mcast1, @private1]}, @dstopts={0x32}, @srh={0x88, 0x6, 0x4, 0x3, 0x9, 0x0, 0x6897, [@loopback, @loopback, @remote]}], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x1, @mcast2, 0x7}}}}}}, &(0x7f0000000280)={0x0, 0x2, [0xca1, 0x266, 0x6b, 0xa8f]}) syz_emit_ethernet(0x2ca, &(0x7f00000005c0)={@empty, @local, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "7b9943", 0x294, 0x11, 0x0, @local, @mcast2, {[@routing={0x2f, 0x8, 0x1, 0x6, 0x0, [@mcast1, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x21, 0x0, '\x00', [@pad1]}, @srh={0xc0c923b05cd608fe, 0x2, 0x4, 0x1, 0x0, 0x20, 0x91b6, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x29, 0xa, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x1, [0x6, 0xad3, 0xbf9, 0x2, 0x9, 0x5, 0xfffffffffffffffe, 0x800, 0x2]}}]}, @hopopts={0x85, 0x2, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x200}, @jumbo={0xc2, 0x4, 0x36}]}, @routing={0xc, 0x10, 0x1, 0x1e, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @fragment={0x2b, 0x0, 0x33, 0x1, 0x0, 0xd, 0x67}, @routing={0x2, 0x8, 0x0, 0xd8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @fragment={0x67, 0x0, 0x7, 0x1, 0x0, 0x1, 0x64}], {0x4e20, 0x4e22, 0xc4, 0x0, @gue={{0x1, 0x1, 0x0, 0x0, 0x0, @void}, "860eb0d467fcb002859ccf2fb6aaf76c4fe278f38c4d3fe8a1b07bee533e50f9ed184ef06aa21d74fbcf09b3d6f4fb002a98cd4d711df79669bdd7baef53c661b273d64e142ba06829ca13ad5a58dad24fefa62da7ee02460a275da2eda2621acf08430c37f1d140cb913a6423b506ef8483e5faab23da488f9295756c94216d80b295710e781efb44540e64369b7ba978ed1f03db43c30740655d20245a1474fae07d938b83ca98ab822e819447a45f902184d128281dc3"}}}}}}}, &(0x7f00000008c0)={0x0, 0x3, [0x36b, 0x2b7, 0xb52, 0xa3d]}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002aad7000fddbdf251b0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x800) 12.918519765s ago: executing program 4 (id=2034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0xeeee0000, 0x0, 0xf, 0xc, 0x0, 0x7, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x2, 0x200000, 0xb, 0xff, 0xb, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x10, 0x89, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0xff, 0x47, 0x8, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x11}, {0x1000, 0x0, 0xb, 0x0, 0x8, 0x6, 0x42, 0x0, 0xff, 0x8, 0x5}, {0xdddd1000, 0xeeef0000, 0x3, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x100000, 0x1, 0xd, 0x0, 0x4, 0x1, 0x0, 0x8, 0xc}, {0x1, 0x7}, {0xd000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x1, 0x40]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000680)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) 11.9114057s ago: executing program 4 (id=2038): syz_io_uring_setup(0x2cc7, &(0x7f0000000080)={0x0, 0x8550, 0xc00, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000600)={0x81, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x8}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000500)=@x86={0x6, 0x5, 0xc3, 0x0, 0x7ff, 0x5, 0x1, 0x9, 0x1, 0x3, 0x5, 0x5, 0x0, 0x8, 0x8, 0x84, 0xc, 0xf, 0x7, '\x00', 0xfd, 0x180000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x8, 0x0, 0x0, 0x214}, [@alu={0x7, 0x1, 0xb, 0x0, 0x8, 0x10}]}, &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r7], 0x84}}, 0x20008040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x58, &(0x7f00000001c0)}, 0x10) setrlimit(0x40000000000008, &(0x7f00000006c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.820674313s ago: executing program 33 (id=2038): syz_io_uring_setup(0x2cc7, &(0x7f0000000080)={0x0, 0x8550, 0xc00, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000600)={0x81, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x8}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000500)=@x86={0x6, 0x5, 0xc3, 0x0, 0x7ff, 0x5, 0x1, 0x9, 0x1, 0x3, 0x5, 0x5, 0x0, 0x8, 0x8, 0x84, 0xc, 0xf, 0x7, '\x00', 0xfd, 0x180000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x8, 0x0, 0x0, 0x214}, [@alu={0x7, 0x1, 0xb, 0x0, 0x8, 0x10}]}, &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r7], 0x84}}, 0x20008040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x58, &(0x7f00000001c0)}, 0x10) setrlimit(0x40000000000008, &(0x7f00000006c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.664921277s ago: executing program 5 (id=2119): socket$inet_icmp(0x2, 0x2, 0x1) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x2, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0x3baa}, &(0x7f0000000300)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x2, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0x3baa}, &(0x7f0000000300)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r3, 0x101, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 3.60037795s ago: executing program 5 (id=2121): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xf, 0x3, &(0x7f0000000180)={0xa, "4b2e4e7a9054ce6d537165ba0c887e5173798704f3ed956a7120d0e11a664d9ec7"}}) (async, rerun: 32) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async, rerun: 32) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000001c0)) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.525955498s ago: executing program 5 (id=2122): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60cedd0000083a0000000000000000000000000000000000ff0200000000000000000000000000018f009078204a00009315b0f152773c41452fcf4f110d1d795aeb565899196c01c437ec31f2e34d55"], 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000100)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000140)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b0", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback={0x3ec}, 0xb578}}}, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000380)={0xfffffff5, 0x4}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xa2242, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0)={0x2, 0x3}, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl(r5, 0x10000, &(0x7f0000000300)) 3.298980449s ago: executing program 5 (id=2124): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r2, &(0x7f0000000280)='+b', 0x2) 3.236607355s ago: executing program 5 (id=2127): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000200)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20, 0x25, 0x0, 0x1, 0xfffffffc, 'syz1\x00', &(0x7f0000000340)=['\xcc\xaf\x18\xed\xe7LQ\x80\xc8u%\xc1\x1e\xc1N\x1f\x12>c\x0fP\xf8\xefM\x10\xbb\xbe\x8d\xbcr\xaa\xf1o\x99\x85A\x00\x90\xe2\xa6r&\x16\x16\x05\xad\\\xc8\x02\xe9&\x83\xec\x81^N}N\xb9\xa2\xfd\xc9\x92\n\xe4:v'], 0x43}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 3.128545463s ago: executing program 5 (id=2131): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000480)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='\x00') pread64(r1, &(0x7f000001a240)=""/4096, 0x1000, 0xfffffff7) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x8) 1.693708508s ago: executing program 1 (id=2145): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001080)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xe, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) accept4$unix(r0, &(0x7f00000007c0), &(0x7f0000000840)=0x6e, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000000700)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000780)='source', 0x0, 0x0) io_uring_enter(r4, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000340)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1a, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x4}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x21c0, 0x103) sendmsg$nl_route_sched(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x0, 0x8b}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.595967115s ago: executing program 1 (id=2146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) listxattr(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f0000000080)=""/82, 0x52}}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffff7, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000240)="f3d348e367f20f5fbd0a000000ea8300ae000f2153660f38ded9670f01c866b80500000066b9420000000f01d9b849008ed83e6664f30f09baa000b80000ef", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.431496654s ago: executing program 1 (id=2148): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000400)={0x8, @output={0x1000, 0x1, {0x3}, 0x200, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) r1 = syz_ublk_setup_io_uring(0x28a4, &(0x7f0000000040)={0x0, 0xbf66, 0x100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f0000000280)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000000340), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000380)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r1}, &(0x7f0000000c40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000000ec0)={0x2e, 0x0, 0x0, r8, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000f40)) 1.37774098s ago: executing program 1 (id=2150): r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000180)='bpf_lsm_task_setrlimit\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000340)="3e362e660f3881a6f3ffff7fc4e143af7de6e60fbaac07c7fa7e520d0fc7b38000c0fe66b8a8008ec8c4e2d9a622660f3882a005000000c744240000000000c744240205000000660f68f50f011c240f01cac4e1fa7f1dfeab0000", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000a40)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='1', 0x1) write$FUSE_INIT(r4, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 811.920679ms ago: executing program 3 (id=2157): r0 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x13, 0x1, 0x2, 0x25dfdbfd, {0x7, 0x0, 0x0, r6, 0x20004, 0x9118}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 810.321361ms ago: executing program 3 (id=2158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x2, &(0x7f0000001c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f00000001c0)=""/116, 0x74}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/82, 0x52}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/170, 0xaa}, {&(0x7f0000001580)=""/225, 0xe1}, {&(0x7f0000001680)=""/190, 0xbe}, {&(0x7f0000001740)=""/102, 0x66}], 0xa, &(0x7f0000001880)=""/95, 0x5f}, 0xfffffb85}, {{&(0x7f0000001900)=@xdp, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/240, 0xf0}, {&(0x7f0000001a80)=""/98, 0x62}, {&(0x7f0000001b00)=""/8, 0x8}], 0x3}, 0x7f}], 0x3, 0x10000, &(0x7f0000001c80)={r1, r2+60000000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) 694.060469ms ago: executing program 3 (id=2159): r0 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6, 0x9}, {0x7}, @note={0x62, 0x7f, 0xf1, 0x9, 0xb}}, {0xb, 0x8, 0x0, 0x0, @time={0xffff, 0xfffffff8}, {0x0, 0x3}, {0xfe}, @raw32={[0x0, 0x0, 0xfd35]}}, {0x2, 0x4, 0x0, 0x0, @time={0x100, 0x2}, {0x0, 0x10}, {0x47}, @control={0x0, 0x0, 0x255c}}, {0xa, 0xfb, 0x0, 0xfc, @tick=0xe, {0x3, 0x1}, {0x4}, @raw8={"f0047dd1bb99c93f3bf1ce63"}}], 0x70) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002", @ANYRES16], 0x78) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) 619.244493ms ago: executing program 1 (id=2160): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@gettfilter={0x13, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8c0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x80, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x54, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x54}}, 0x8) 618.456767ms ago: executing program 1 (id=2161): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) pread64$ublk_ch(r1, &(0x7f0000000180), 0x1000, 0xc7cb) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000011c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r1}, &(0x7f0000001180), &(0x7f0000001200)=r2}, 0x20) r3 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x100) r5 = fsopen(&(0x7f0000001300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001340)='source\x00', &(0x7f0000001380)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000013c0)='mount_timeout\x00', &(0x7f0000001400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000012c0)={&(0x7f0000001280)=[0x0, 0x0], 0x2, 0x800}) 486.983703ms ago: executing program 3 (id=2162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) 277.672962ms ago: executing program 2 (id=2163): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x13b) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000200)='./bus\x00') creat(&(0x7f0000000240)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100010000000000040000000000000010000500000000002000000000"], 0x24, 0x0) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000340)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) 192.025392ms ago: executing program 2 (id=2164): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000180)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x2) (async) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x79) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000040)={'lo\x00', @random="01320134b1ff"}) (async) rmdir(&(0x7f0000000380)='./file0/file0\x00') 189.029448ms ago: executing program 2 (id=2165): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r4) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x200, &(0x7f000000bb40)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x2000, &(0x7f000000bd80)={0x0, &(0x7f0000002d00)={0x18, 0x0, 0x8000000000000000, {0x2}}, 0x0, 0x0, 0x0, &(0x7f0000002e00)={0x28, 0xfffffffffffffff5, 0xfffffffffffffffb, {{0x9, 0x8, 0x1, r5}}}, &(0x7f0000000140)={0x60, 0x0, 0x140000000000000, {{0x1, 0x7ffffffffffffffd, 0xb9a8, 0x6, 0x2, 0x6, 0x8, 0x7}}}, &(0x7f0000002ec0)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000002f00)=ANY=[], 0x0, &(0x7f0000003040)={0x78, 0xffffffffffffffda, 0x1, {0x101, 0x5, 0x0, {0x2, 0x5, 0x9, 0x0, 0x5, 0x6, 0x13, 0xfffffffe, 0x1e344bdb, 0x1000, 0x6, 0x0, 0x0, 0x9, 0xb}}}, &(0x7f0000003100)={0x90, 0x0, 0x5, {0x2, 0x0, 0x6, 0x6, 0x3, 0x4, {0x4, 0x6, 0x2, 0x7, 0x0, 0x0, 0x164, 0x10000, 0x6, 0x6000, 0x8, 0xee01, 0x0, 0x80, 0x2}}}, 0x0, 0x0, &(0x7f000000ba00)={0xa0, 0x0, 0x88d, {{0x0, 0x1, 0x7, 0x4, 0x7, 0x3d, {0x0, 0xe16, 0x3, 0xe, 0x8, 0x7, 0x2, 0x4a, 0x0, 0x2000, 0x7f, 0x0, 0x0, 0x3, 0x100}}, {0x0, 0x5}}}, 0x0, 0x0}) write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 84.971146ms ago: executing program 2 (id=2166): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x354, 0xffffffff, 0x118, 0x1f0, 0x118, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @remote, [0xff, 0x0, 0xff000000, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 'nicvf0\x00', 'wlan0\x00', {}, {}, 0x29, 0x2, 0x0, 0x4}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x3, 0x1}, {0x1, 0x5, 0x2}, 0x5}}}, {{@ipv6={@private1, @empty, [0xffffffff, 0xffff00, 0xffffff00, 0xf3e81681cabd7fb5], [0x0, 0xffffffff, 0xff, 0xffffffff], 'syzkaller0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x1, 0x8, 0x1, 0x20}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f00000000c0)="d3", 0x1, 0xc899) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000100)={0x9, 0x4}) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0/file2\x00', 0x400, &(0x7f0000000180)={0x0, 0x0, 0x0, {r0}}, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000000000000870600000000000004"]) 79.561979ms ago: executing program 2 (id=2167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='e:my_read_msr1 msr/read_msr', 0x1b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) creat(&(0x7f0000000240)='./tracing/dynamic_events\x00', 0x21) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x80000) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x61) read(r2, &(0x7f0000000080)=""/4, 0x4) splice(r2, &(0x7f0000000040)=0x10, r3, 0x0, 0x807, 0x0) 76.822805ms ago: executing program 3 (id=2168): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x5, &(0x7f0000000040)=[{0x6, 0x0, 0x4}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x80000001}, {0x2, 0x0, 0x56}, {0x2e, 0x0, 0x8}]}, 0x3, 0xff, 0xfa, 0x0, 0x0, 0x962c, 0x8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r0, 0xc010644a, &(0x7f00000000c0)={r1}) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r0, 0xc010644a, &(0x7f0000000100)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={&(0x7f0000000180)=[r2], 0x1}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000240)={0x0, 0x8, 0x2, '\x00', &(0x7f0000000200)=0x4}) (async) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r0, 0xc0106440, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000280)}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000300)={0x3, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000340)={0xa1bb, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/158, 0x9e}], &(0x7f0000000480)=[0x6, 0x45, 0xff], 0x1}, 0x20) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x450c02, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000540)={0x0, 0x0, 0x8}) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000800)={&(0x7f0000000580)="30caa8261664bf12e16d2b5b2a3e58f7c9b360af268596442ae0d9f6b3b730d064d1b0719dec7a65bf1316c6253165705ea02a2bf2dc124d504d3a774bdad1d875daf766a25ba47d7334a8e76d310be824068678d941854ea07a9caad8b1771946c1f4773e8334384ef115508448d6ba63ba4a27e79e0be3efe3765c8113ada84fb749e67619", &(0x7f0000000640)=""/30, &(0x7f0000000680)="165cc5c74087824ef11bf886ce025a8f011e118d9303d55339c5492df76e58e43ebd200b2b6802a00b8b8bde5908251a82603005e3b89960f2621b65521cdc7a58e9f1bed04b29a091b37d89b7ba2738fddbfd6b5241885688fe7ee6c68a38db60ad16a64e4968221a2b83b47f9fafad7b676124c60c12f31485bcc967fd3180daa7793ae455f9cca9c675563a3b9eb574da8d711a56deabfbf3c1ddfc84b3bdd28135ba594de7c4a4f057", &(0x7f0000000740)="5e1fcf7a92a884a163565d49981e37fb2cd739b08191b658334e392e25bdb2e1cdb1a1cc3ba6959f0934ece886056e4807ba55ff2e91726de5598cc6c0228029c195d027879702d53275e60ad87aa99865d8a587f3051858a416b330f7696cc91ec4628c0a0ccfcf8920adaee5de7c99f2a57c828cd999732ec023d17cada1cf476652f1740730", 0x1, r0, 0x4}, 0x38) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000840)={0x7ff, 0x3, 0x1, 0x8, 0x7fffffff}) (async) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000028c0)={0xffffff80, 0x1, {r7}, {r5}, 0x6, 0x808}) (async) write$binfmt_register(r0, &(0x7f0000002900)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, '/dev/dri/renderD128\x00', 0x3a, '/dev/dri/renderD128\x00', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x43, 0x46, 0x50]}, 0x55) (async) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r4, 0xc0106440, &(0x7f0000002a00)={0x0, 0xff, &(0x7f0000002980)}) (async) sendmsg$nl_generic(r0, &(0x7f0000002e80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e40)={&(0x7f0000002a80)={0x3b4, 0x14, 0x8, 0x70bd2c, 0x25dfdbfd, {0x1}, [@generic="0aca9eb720ccaf29abd8c17a20e3b48b46a33b6a69702eb4329eabeff2fe9d3d9e766eb5df720280112e9f3e5b379c8d7a85d838a5c8457827cc49466b65fb3d21c1ba40edbf125bd3c4e75a14a076f0b0645324a8b010be", @typed={0xc, 0x86, 0x0, 0x0, @u64=0x2}, @generic="9b49c3004cbd90c27f87e83dac507f97ebf11001f558515d460ee5bb500f555d382ef84b19133c41239ad65951495b3a2c57628f88b7c0598d55b41c07552a2810294f7b43c994b0d27d6cde5c38a14a237b6129359805113da74029e14ae683739d7d1a0794b6bf6158de1c889b835e6deb178f24f4bb4962340916c1135ff8759615604c6cc6535831130ace1c8a344be9386bce61d39acb85840e4080e77733057b8af4604cf0f337c0adaef3f006ed8d06f03ca1430ff721ba4af75005a62f94a70a408c7a41ff0d8de1fd295e08e6816cf71fcade214bd152", @nested={0x90, 0x145, 0x0, 0x1, [@typed={0xc, 0x6e, 0x0, 0x0, @u64=0x7}, @generic="af3a60b33dd87ce6540061dea2e1a268f6e3bda573507d83b1d0521ea11613e3f75cb8cd5855d987738bb53df80a76ad8c25df8c3d30e5f9b92f4279f7d847", @nested={0x4, 0x7b}, @typed={0x8, 0x16b, 0x0, 0x0, @u32=0x9}, @typed={0x5, 0x157, 0x0, 0x0, @str='E'}, @generic="14755fe6819e3231fd51aaaee75d245792c73e18e1a9ce50ef71f49d1485ae421ff795759c", @typed={0x8, 0x166, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x1a, 0x108, 0x0, 0x0, @str='/selinux/checkreqprot\x00'}, @typed={0xb5, 0xf1, 0x0, 0x0, @binary="21e44713268b1df8dab01843ff45b5cfd34b52f68757899a5ab79776fddd00461ff11770af743ca037458cc13be407c61064963415e8a4ed4f2be44be74242897ab2ce56695b60247edec6242049cf830fdbb16d636cfe5f2dcb7b83929fd74d58c1146b77f4eb45b2abb4203f4ad8f6d9bbdc28708384169ec03f83b1ac77f839f835c0e8f9a4739744856faae0a6cc1c81f8d4896bd7c9023303f9ed6634c8098a616deb0b42768fb52cda40255a09a1"}, @generic="9584880310068660dbd9f090780b3666fff6b2828fc0c08932f5e6107389474eef5ee0e96e775a24fd5390fc67eb78b5edbb9f686d3c4032e109d23a3734bafb94a6a26871c019a1cfb5b91e59ec61c5fa3117a477cafb7a8d45d8a4a96c04a8a5935d0e852e16d5d9c48f94b42b906d4aadb9af0d0d123d4db2e5446fa2c37f0bbdc279d8aa734fd527e3fe61ba99f7e56e36a2175162cc36eac7a3c18d29090f186fe5b4b126390b2453eba98e1eb7f6b03271aa173aaa18dad203147804d6e86f11b49ba2ab42f7c1b7dc27fac244c48ea54f77fb9b7009fae038e6474afc625607d9889bf185180e5c3032343ca9af46e887035bcc09156b"]}, 0x3b4}}, 0x20004090) (async) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002ec0), 0x400480, 0x0) close_range(r0, r9, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000002fc0)={0x0, 0x20, &(0x7f0000002f00)="9a4001e7b66f039b48221f88aa6cb6e3dc235b95c7159d09192d54d57d061aa4b3a57d9e26584e12f6e28a0acca1c4ab537cd6179c928cda317f290a063150449103e243291ffdd481280672641f76d613ee1b31dac94dab21e3bf30b2e5fa67f60d56774a720018b812ad47a96f871880c909f142b388b5a40d2efbd2f07fa972525b58ecf1109fb094ef72f137b93d25eabbc837a242a76f7b411d2cf9d16a7594f4bfc994", {0xa7d, 0x0, 0x38415261, 0x5, 0xa6, 0x631, 0xf, 0x80000000}}) (async) ioctl$BLKBSZGET(r9, 0x80081270, &(0x7f0000003000)) (async) lsetxattr$system_posix_acl(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)='system.posix_acl_default\x00', &(0x7f00000030c0)={{}, {0x1, 0x6}, [{0x2, 0x1, r5}, {0x2, 0x1, r8}, {0x2, 0x1, r8}, {0x2, 0x2, r8}], {0x4, 0x2}, [{0x8, 0x0, r6}, {0x8, 0x4, r6}], {}, {0x20, 0x5}}, 0x54, 0x3) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003140), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f0000003180)={0x5, 0x0, 0x1}) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) r11 = mmap$IORING_OFF_SQES(0x0, 0xf179, 0x0, 0x2d4825f1aa8322b1, r0, 0x10000000) munmap$IORING_OFF_SQES(r11, 0x800) 58.996934ms ago: executing program 2 (id=2169): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000002c40)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1, 0xffffffffffffffff, 0xfffffffd}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x8, r3}, 0x38) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x5f, 0x0, &(0x7f0000000180)=0xffffffffffffff15) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/clk/clk_dump\x00', 0x101100, 0x22) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgid(0x0) r8 = landlock_create_ruleset(&(0x7f0000000100)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = syz_pidfd_open(r7, 0x0) syz_open_procfs(r6, &(0x7f00000002c0)='maps\x00') r10 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r10, 0x0) pidfd_send_signal(r9, 0xd, 0x0, 0x4) read$FUSE(r5, &(0x7f0000000c00)={0x2020}, 0x2020) 0s ago: executing program 3 (id=2170): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x4, 0x7dee5d6b69b34897, 0x2, 0x1, 0xfdfd}) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000040)='\xc6\x1b\xcfa\xbb\xa4\xf6:<\xcb\xb4\xe3\xbc127.0.0.b\xf6G\xf3l\r\xd5116789\x00W\xcf&\xd4U\xe9\x033i\xab\xe9G1\xc7\xfc\xfc\xdd\x11\xe7?<\x85\xbc\x18\x9cC%f\xc4\xa6a\ro\xd9\xcf\x9a\\xR', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x1}}}}, 0x7) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.3.1358'. [ 150.570547][T11123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.639583][T11131] ip6t_srh: unknown srh invflags 51E8 [ 150.964049][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 151.073349][T11164] ip_tables: iptables: counters copy to user failed while replacing table [ 151.082453][T11168] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1379'. [ 151.435939][ T5889] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 151.437964][T11195] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.585885][ T5889] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 151.586713][ T5889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.586735][ T5889] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.588336][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.588348][ T5889] usb 7-1: Product: syz [ 151.588355][ T5889] usb 7-1: Manufacturer: syz [ 151.588362][ T5889] usb 7-1: SerialNumber: syz [ 152.087056][T11221] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 152.418767][T11232] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1403'. [ 152.915576][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 152.916101][T11255] syzkaller0: entered promiscuous mode [ 152.916113][T11255] syzkaller0: entered allmulticast mode [ 152.981616][T11263] ip_tables: iptables: counters copy to user failed while replacing table [ 152.987396][ T42] kauditd_printk_skb: 150 callbacks suppressed [ 152.987405][T11263] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 152.987408][ T42] audit: type=1400 audit(1792792329.434:18975): avc: denied { write } for pid=11262 comm="syz.4.1413" path="socket:[32701]" dev="sockfs" ino=32701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 152.988199][ T42] audit: type=1400 audit(1792792329.434:18976): avc: denied { ioctl } for pid=11262 comm="syz.4.1413" path="socket:[32699]" dev="sockfs" ino=32699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.992823][ T42] audit: type=1400 audit(1792792329.434:18977): avc: denied { dac_read_search } for pid=11264 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 153.033773][ T42] audit: type=1400 audit(1792792329.474:18978): avc: denied { read write } for pid=11262 comm="syz.4.1413" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 153.034051][ T42] audit: type=1400 audit(1792792329.474:18979): avc: denied { open } for pid=11262 comm="syz.4.1413" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 153.034526][ T42] audit: type=1400 audit(1792792329.474:18980): avc: denied { ioctl } for pid=11262 comm="syz.4.1413" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 153.071475][ T5787] usb 7-1: USB disconnect, device number 17 [ 153.090280][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1413'. [ 153.124239][ T42] audit: type=1400 audit(1792792329.564:18981): avc: denied { create } for pid=11271 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.132591][ T42] audit: type=1400 audit(1792792329.574:18982): avc: denied { setopt } for pid=11271 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.138670][ T42] audit: type=1400 audit(1792792329.584:18983): avc: denied { bind } for pid=11271 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.144705][ T42] audit: type=1400 audit(1792792329.584:18984): avc: denied { name_bind } for pid=11271 comm="syz.4.1414" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 153.334825][T11281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1417'. [ 153.406823][T11281] could not allocate digest TFM handle cryptd(blake2b-160) [ 153.617311][T11291] overlayfs: failed to clone upperpath [ 153.703247][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 153.705957][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 153.706130][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 153.736629][T11298] synth uevent: /bus/acpi: unknown uevent action string [ 153.823375][T11305] FAULT_INJECTION: forcing a failure. [ 153.823375][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 153.823399][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.2.1425 Tainted: G Y syzkaller #0 PREEMPT(full) [ 153.823415][T11305] Tainted: [Y]=FORCED_BIND [ 153.823419][T11305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.823439][T11305] Call Trace: [ 153.823450][T11305] [ 153.823456][T11305] dump_stack_lvl+0x100/0x190 [ 153.823483][T11305] should_fail_ex.cold+0x5/0xa [ 153.823501][T11305] should_failslab+0xc2/0x120 [ 153.823524][T11305] kmem_cache_alloc_noprof+0x92/0x6a0 [ 153.823541][T11305] ? __kernfs_new_node+0xd2/0xa10 [ 153.823559][T11305] __kernfs_new_node+0xd2/0xa10 [ 153.823575][T11305] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.823591][T11305] ? lock_acquire+0x1d1/0x380 [ 153.823603][T11305] ? kernfs_root+0x23/0x2a0 [ 153.823616][T11305] ? find_held_lock+0x2b/0x80 [ 153.823632][T11305] ? kernfs_root+0xee/0x2a0 [ 153.823643][T11305] ? kernfs_root+0xee/0x2a0 [ 153.823658][T11305] kernfs_new_node+0x194/0x200 [ 153.823673][T11305] ? __pfx_kernfs_new_node+0x10/0x10 [ 153.823689][T11305] ? kernfs_add_one+0x213/0xb40 [ 153.823707][T11305] __kernfs_create_file+0x53/0x350 [ 153.823725][T11305] sysfs_add_file_mode_ns+0x207/0x3c0 [ 153.823743][T11305] internal_create_group+0x593/0xfb0 [ 153.823759][T11305] ? br_vlan_bridge_event+0x3bc/0x5d0 [ 153.823782][T11305] ? __pfx_internal_create_group+0x10/0x10 [ 153.823794][T11305] ? __pfx_br_vlan_bridge_event+0x10/0x10 [ 153.823817][T11305] br_sysfs_addbr+0x2a/0xd0 [ 153.823828][T11305] br_device_event+0x500/0xa00 [ 153.823841][T11305] ? __pfx_br_device_event+0x10/0x10 [ 153.823870][T11305] ? tee_netdev_event+0x300/0x3d0 [ 153.823886][T11305] notifier_call_chain+0x99/0x3f0 [ 153.823906][T11305] call_netdevice_notifiers_info+0xbe/0x110 [ 153.823923][T11305] register_netdevice+0x16f5/0x26b0 [ 153.823938][T11305] ? __pfx_register_netdevice+0x10/0x10 [ 153.823954][T11305] br_add_bridge+0x9a/0xf0 [ 153.823971][T11305] br_ioctl_stub+0x489/0x4d0 [ 153.823990][T11305] ? __pfx_br_ioctl_stub+0x10/0x10 [ 153.824012][T11305] ? do_vfs_ioctl+0x226/0x13e0 [ 153.824028][T11305] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 153.824043][T11305] ? __pfx_br_ioctl_stub+0x10/0x10 [ 153.824062][T11305] br_ioctl_call+0x53/0xa0 [ 153.824076][T11305] sock_ioctl+0x616/0x6b0 [ 153.824089][T11305] ? __pfx_sock_ioctl+0x10/0x10 [ 153.824106][T11305] ? selinux_file_ioctl+0x1e0/0x290 [ 153.824117][T11305] ? selinux_file_ioctl+0x1e7/0x290 [ 153.824128][T11305] ? __pfx_sock_ioctl+0x10/0x10 [ 153.824142][T11305] __x64_sys_ioctl+0x18e/0x210 [ 153.824157][T11305] do_syscall_64+0x123/0x790 [ 153.824184][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.824197][T11305] RIP: 0033:0x7f9ff199f559 [ 153.824208][T11305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.824219][T11305] RSP: 002b:00007f9ff27cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.824244][T11305] RAX: ffffffffffffffda RBX: 00007f9ff1c25fa0 RCX: 00007f9ff199f559 [ 153.824252][T11305] RDX: 0000200000000500 RSI: 00000000000089a0 RDI: 0000000000000009 [ 153.824259][T11305] RBP: 00007f9ff1a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 153.824267][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.824274][T11305] R13: 00007f9ff1c26038 R14: 00007f9ff1c25fa0 R15: 00007ffe42921a58 [ 153.824290][T11305] [ 153.833837][T11305] br_sysfs_addbr: can't create group syzkaller0/bridge [ 154.231230][T11325] Invalid logical block size (-1) [ 154.276960][T11328] loop7: detected capacity change from 0 to 16384 [ 154.517803][T11342] loop7: detected capacity change from 16384 to 0 [ 154.642615][T11365] cgroup: noprefix used incorrectly [ 154.643010][T11366] cgroup: noprefix used incorrectly [ 154.771938][T11382] SELinux: policydb version 0 does not match my version range 15-35 [ 154.772069][T11381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1447'. [ 154.772760][T11382] SELinux: failed to load policy [ 154.776852][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 154.791864][T11382] bridge0: port 3(syz_tun) entered disabled state [ 154.827666][T11382] syz_tun (unregistering): left allmulticast mode [ 154.827684][T11382] syz_tun (unregistering): left promiscuous mode [ 154.827773][T11382] bridge0: port 3(syz_tun) entered disabled state [ 154.828674][T11384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1448'. [ 154.835887][T11389] SELinux: policydb version 0 does not match my version range 15-35 [ 154.835914][T11389] SELinux: failed to load policy [ 154.886392][T11398] batman_adv: batadv0: Adding interface: dummy0 [ 154.886404][T11398] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.886483][T11398] batman_adv: batadv0: Interface activated: dummy0 [ 154.900745][T11398] batadv0: mtu less than device minimum [ 154.901344][T11398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.901828][T11398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.902325][T11398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.902812][T11398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.969551][T11406] overlay: filesystem on ./file0 not supported as upperdir [ 154.991425][T11409] ip6gretap0: entered promiscuous mode [ 155.045341][T11400] netlink: 'syz.1.1450': attribute type 12 has an invalid length. [ 155.395657][ T58] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 155.557649][ T58] usb 7-1: not running at top speed; connect to a high speed hub [ 155.557669][ T58] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 155.558492][ T58] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 155.558507][ T58] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 155.562557][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.562571][ T58] usb 7-1: Product: ﳿ [ 155.562578][ T58] usb 7-1: Manufacturer: Џ [ 155.562585][ T58] usb 7-1: SerialNumber: syz [ 155.782521][ T58] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 155.823766][ T58] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 155.828377][ T58] usb 7-1: USB disconnect, device number 18 [ 155.832151][ T9842] udevd[9842]: setting mode of /dev/bus/usb/007/018 to 020664 failed: No such file or directory [ 155.832210][ T9842] udevd[9842]: setting owner of /dev/bus/usb/007/018 to uid=0, gid=0 failed: No such file or directory [ 155.843656][ T9842] udevd[9842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.763342][T11479] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.773578][T11480] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.776834][T11479] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.870718][T11491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.870902][T11491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.115852][ T58] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 157.456397][T11521] __nla_validate_parse: 6 callbacks suppressed [ 157.456410][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'. [ 157.459493][T11521] ip6gre1: entered promiscuous mode [ 157.459506][T11521] ip6gre1: entered allmulticast mode [ 157.708691][T11526] trusted_key: encrypted_key: insufficient parameters specified [ 157.783104][T11529] evm: overlay not supported [ 157.932514][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 157.932535][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 157.932559][T11541] netlink: 'syz.4.1490': attribute type 12 has an invalid length. [ 157.932572][T11541] netlink: 'syz.4.1490': attribute type 7 has an invalid length. [ 157.977346][ T5865] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.977467][ T5865] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.977498][ T5865] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.977523][ T5865] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.039011][T11549] net_ratelimit: 15 callbacks suppressed [ 158.039026][T11549] ip_tables: iptables: counters copy to user failed while replacing table [ 158.116709][ T42] kauditd_printk_skb: 196 callbacks suppressed [ 158.116727][ T42] audit: type=1400 audit(1792792334.564:19181): avc: denied { map } for pid=11555 comm="syz.2.1496" path="/dev/tty3" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 158.117026][ T42] audit: type=1400 audit(1792792334.564:19182): avc: denied { execute } for pid=11555 comm="syz.2.1496" path="/dev/tty3" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 158.163072][ T42] audit: type=1400 audit(1792792334.604:19183): avc: denied { mount } for pid=11560 comm="syz.1.1497" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 158.165136][ T42] audit: type=1400 audit(1792792334.604:19184): avc: denied { setopt } for pid=11560 comm="syz.1.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.234224][ T42] audit: type=1400 audit(1792792334.674:19185): avc: denied { create } for pid=11566 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.234935][ T42] audit: type=1400 audit(1792792334.674:19186): avc: denied { bind } for pid=11566 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.237946][ T42] audit: type=1400 audit(1792792334.684:19187): avc: denied { read write } for pid=11558 comm="syz.2.1498" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.237987][ T42] audit: type=1400 audit(1792792334.684:19188): avc: denied { open } for pid=11558 comm="syz.2.1498" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.238023][ T42] audit: type=1400 audit(1792792334.684:19189): avc: denied { ioctl } for pid=11558 comm="syz.2.1498" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xc008ae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.297580][ T42] audit: type=1400 audit(1792792334.744:19190): avc: denied { create } for pid=11570 comm="syz.3.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.307158][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307158][T11572] Use struct sctp_assoc_value instead [ 158.307206][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307206][T11572] Use struct sctp_assoc_value instead [ 158.307238][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307238][T11572] Use struct sctp_assoc_value instead [ 158.307270][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307270][T11572] Use struct sctp_assoc_value instead [ 158.307303][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307303][T11572] Use struct sctp_assoc_value instead [ 158.307332][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307332][T11572] Use struct sctp_assoc_value instead [ 158.307361][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307361][T11572] Use struct sctp_assoc_value instead [ 158.307390][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307390][T11572] Use struct sctp_assoc_value instead [ 158.307418][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307418][T11572] Use struct sctp_assoc_value instead [ 158.307448][T11572] sctp: [Deprecated]: syz.3.1501 (pid 11572) Use of int in max_burst socket option deprecated. [ 158.307448][T11572] Use struct sctp_assoc_value instead [ 158.592652][T11589] kAFS: No cell specified [ 158.682858][T11595] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1510'. [ 158.690424][T11595] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 158.690515][T11595] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 158.694695][T11595] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 158.700258][T11595] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 159.246492][T11631] /dev/nullb0: Can't lookup blockdev [ 159.249079][T11636] /dev/nullb0: Can't lookup blockdev [ 159.375646][T11644] md: array md1 already has disks! [ 159.415788][T11644] md: could not open device unknown-block(1,2). [ 159.415842][T11644] md: error, md_import_device() returned -16 [ 159.476116][ T58] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 159.633326][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 159.636963][ T58] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 159.637835][ T58] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.637857][ T58] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.640217][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.640230][ T58] usb 9-1: Product: syz [ 159.640238][ T58] usb 9-1: Manufacturer: syz [ 159.640246][ T58] usb 9-1: SerialNumber: syz [ 159.727384][T11665] loop7: detected capacity change from 0 to 7 [ 159.782365][T11665] Dev loop7: unable to read RDB block 7 [ 159.782386][T11665] loop7: unable to read partition table [ 159.782481][T11665] loop7: partition table beyond EOD, truncated [ 159.782499][T11665] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 159.987721][T11676] jffs2: notice: (11676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 160.111972][T11689] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 160.119854][ T58] usb 9-1: USB disconnect, device number 12 [ 160.131744][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1539'. [ 160.139460][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 160.167064][T11697] fuse: Bad value for 'fd' [ 160.171577][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 160.171591][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 160.402315][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 160.792828][T11737] Cannot find del_set index 4 as target [ 160.943449][T11754] br_netfilter no longer supported in user namespaces [ 160.947137][T11754] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.140504][ T5868] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 161.285915][ T5868] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 161.287223][ T5868] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.287247][ T5868] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.289136][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.289154][ T5868] usb 9-1: Product: syz [ 161.289166][ T5868] usb 9-1: Manufacturer: syz [ 161.289177][ T5868] usb 9-1: SerialNumber: syz [ 161.789487][ T6208] usb 9-1: USB disconnect, device number 13 [ 162.662256][T11847] __nla_validate_parse: 1 callbacks suppressed [ 162.662268][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 162.662344][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 163.037860][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 163.037879][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'. [ 163.254414][ T42] kauditd_printk_skb: 204 callbacks suppressed [ 163.254432][ T42] audit: type=1400 audit(1792792339.694:19395): avc: denied { create } for pid=11870 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.255166][ T42] audit: type=1400 audit(1792792339.694:19396): avc: denied { write } for pid=11870 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.256376][ T42] audit: type=1400 audit(1792792339.694:19397): avc: denied { read } for pid=11870 comm="syz.1.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.303271][ T42] audit: type=1400 audit(1792792339.744:19398): avc: denied { allowed } for pid=11872 comm="syz.1.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.323768][ T42] audit: type=1400 audit(1792792339.764:19399): avc: denied { mmap_zero } for pid=11872 comm="syz.1.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 163.324551][ T42] audit: type=1400 audit(1792792339.764:19400): avc: denied { map_create } for pid=11872 comm="syz.1.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.325103][ T42] audit: type=1400 audit(1792792339.764:19401): avc: denied { map_read map_write } for pid=11872 comm="syz.1.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.348705][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 163.362479][ T42] audit: type=1400 audit(1792792339.804:19402): avc: denied { prog_load } for pid=11874 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.396753][ T42] audit: type=1400 audit(1792792339.844:19403): avc: denied { create } for pid=11876 comm="syz.1.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.397777][ T42] audit: type=1400 audit(1792792339.844:19404): avc: denied { ioctl } for pid=11876 comm="syz.1.1586" path="socket:[35578]" dev="sockfs" ino=35578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.464153][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 163.506136][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 163.507238][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.507281][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.509185][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.509204][ T24] usb 7-1: Product: syz [ 163.509216][ T24] usb 7-1: Manufacturer: syz [ 163.509228][ T24] usb 7-1: SerialNumber: syz [ 163.574609][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 163.615513][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 163.980446][ T6208] usb 7-1: USB disconnect, device number 19 [ 164.367451][T11910] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 164.765607][ T5787] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 164.831140][T11927] tipc: Started in network mode [ 164.831165][T11927] tipc: Node identity 080211000001, cluster identity 4711 [ 164.831365][T11927] tipc: Enabled bearer , priority 0 [ 164.836441][T11927] tipc: Enabling of bearer rejected, already enabled [ 164.916206][ T5787] usb 7-1: Using ep0 maxpacket: 16 [ 164.917427][ T5787] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 164.922915][ T5787] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 164.922938][ T5787] usb 7-1: Product: syz [ 164.922951][ T5787] usb 7-1: Manufacturer: syz [ 164.922964][ T5787] usb 7-1: SerialNumber: syz [ 164.927313][ T5787] usb 7-1: config 0 descriptor?? [ 165.243243][ T5868] usb 7-1: USB disconnect, device number 20 [ 165.337016][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1612'. [ 165.337064][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 165.337072][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 165.337101][T11964] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1612'. [ 165.584606][T11980] netlink: 'syz.1.1615': attribute type 10 has an invalid length. [ 165.589610][T11980] ipvlan0: entered allmulticast mode [ 165.589629][T11980] veth0_vlan: entered allmulticast mode [ 165.596117][T11980] team0: Device ipvlan0 failed to register rx_handler [ 165.856493][ T1046] tipc: Node number set to 134418688 [ 166.095564][ T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 166.246215][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 166.248140][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.248175][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.250140][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.250159][ T24] usb 7-1: Product: syz [ 166.250170][ T24] usb 7-1: Manufacturer: syz [ 166.250181][ T24] usb 7-1: SerialNumber: syz [ 166.348189][T12019] xt_hashlimit: size too large, truncated to 1048576 [ 166.411848][T12036] xt_hashlimit: size too large, truncated to 1048576 [ 166.731449][T12064] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.742807][ T5787] usb 7-1: USB disconnect, device number 21 [ 166.742980][T12064] bond2: (slave lo): Enslaving as an active interface with an up link [ 166.752112][T12064] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 167.552295][T12148] fuse: fd is not a fuse device [ 167.582183][T12152] netlink: 'syz.3.1649': attribute type 10 has an invalid length. [ 167.817713][T12165] __nla_validate_parse: 2 callbacks suppressed [ 167.817726][T12165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1652'. [ 167.829796][ T6208] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 167.871887][T12161] overlayfs: failed to resolve './file1': -2 [ 167.933860][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 168.006262][ T6208] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 168.007267][ T6208] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.007305][ T6208] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.009292][ T6208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.009312][ T6208] usb 7-1: Product: syz [ 168.009325][ T6208] usb 7-1: Manufacturer: syz [ 168.009337][ T6208] usb 7-1: SerialNumber: syz [ 168.097590][T12188] fuse: Bad value for 'fd' [ 168.225243][T12201] tipc: Started in network mode [ 168.225256][T12201] tipc: Node identity 4, cluster identity 5 [ 168.225262][T12201] tipc: Node number set to 4 [ 168.257324][ T42] kauditd_printk_skb: 194 callbacks suppressed [ 168.257338][ T42] audit: type=1400 audit(1792792345.710:19599): avc: denied { create } for pid=12203 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.260435][ T42] audit: type=1400 audit(1792792345.710:19600): avc: denied { read write } for pid=12203 comm="syz.4.1668" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.260804][ T42] audit: type=1400 audit(1792792345.710:19601): avc: denied { open } for pid=12203 comm="syz.4.1668" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.261230][ T42] audit: type=1400 audit(1792792345.710:19602): avc: denied { ioctl } for pid=12203 comm="syz.4.1668" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc138fd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 168.261321][T12205] device-mapper: table: 248:3: thin-pool: target type may not be included in a read-only table (-EINVAL) [ 168.261333][T12205] device-mapper: ioctl: error adding target to table [ 168.264379][ T42] audit: type=1400 audit(1792792345.710:19603): avc: denied { map } for pid=12203 comm="syz.4.1668" path="socket:[36657]" dev="sockfs" ino=36657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.264538][ T42] audit: type=1400 audit(1792792345.710:19604): avc: denied { read } for pid=12203 comm="syz.4.1668" path="socket:[36657]" dev="sockfs" ino=36657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.265800][ T42] audit: type=1400 audit(1792792345.710:19605): avc: denied { create } for pid=12203 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.266448][ T42] audit: type=1400 audit(1792792345.710:19606): avc: denied { listen } for pid=12203 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.267193][ T42] audit: type=1400 audit(1792792345.710:19607): avc: denied { accept } for pid=12203 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.600085][T12213] FAULT_INJECTION: forcing a failure. [ 168.600085][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 168.600118][T12213] CPU: 3 UID: 0 PID: 12213 Comm: syz.4.1671 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 168.600145][T12213] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 168.600159][T12213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.600170][T12213] Call Trace: [ 168.600176][T12213] [ 168.600184][T12213] dump_stack_lvl+0x100/0x190 [ 168.600215][T12213] should_fail_ex.cold+0x5/0xa [ 168.600242][T12213] should_failslab+0xc2/0x120 [ 168.600271][T12213] __kmalloc_cache_noprof+0x91/0x6d0 [ 168.600293][T12213] ? tty_register_device_attr+0x221/0x810 [ 168.600325][T12213] tty_register_device_attr+0x221/0x810 [ 168.600351][T12213] ? lockdep_init_map_type+0x5c/0x250 [ 168.600372][T12213] ? __pfx_tty_register_device_attr+0x10/0x10 [ 168.600404][T12213] ? tty_port_init+0x156/0x1c0 [ 168.600434][T12213] gsm_activate_mux+0x155/0x2a0 [ 168.600462][T12213] gsmld_ioctl+0x346/0x15c0 [ 168.600486][T12213] ? kasan_quarantine_put+0x104/0x240 [ 168.600510][T12213] ? __pfx_gsmld_ioctl+0x10/0x10 [ 168.600546][T12213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.600570][T12213] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 168.600596][T12213] ? __pfx_gsmld_ioctl+0x10/0x10 [ 168.600613][T12213] tty_ioctl+0x12f4/0x1870 [ 168.600639][T12213] ? __pfx_tty_ioctl+0x10/0x10 [ 168.600663][T12213] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 168.600684][T12213] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 168.600706][T12213] ? __fget_files+0x34/0x3d0 [ 168.600743][T12213] ? selinux_file_ioctl+0x1e0/0x290 [ 168.600760][T12213] ? selinux_file_ioctl+0x1e7/0x290 [ 168.600779][T12213] ? __pfx_tty_ioctl+0x10/0x10 [ 168.600806][T12213] __x64_sys_ioctl+0x18e/0x210 [ 168.600830][T12213] do_syscall_64+0x123/0x790 [ 168.600856][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.600876][T12213] RIP: 0033:0x7f3c2139f559 [ 168.600891][T12213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.600930][T12213] RSP: 002b:00007f3c2224c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.600950][T12213] RAX: ffffffffffffffda RBX: 00007f3c21625fa0 RCX: 00007f3c2139f559 [ 168.600963][T12213] RDX: 0000200000000680 RSI: 0000000040204706 RDI: 0000000000000004 [ 168.600974][T12213] RBP: 00007f3c21436b20 R08: 0000000000000000 R09: 0000000000000000 [ 168.600987][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.600998][T12213] R13: 00007f3c21626038 R14: 00007f3c21625fa0 R15: 00007ffcdcd408c8 [ 168.601023][T12213] [ 168.602011][ T42] audit: type=1400 audit(1792792346.050:19608): avc: denied { ioctl } for pid=12211 comm="syz.4.1671" path="socket:[40002]" dev="sockfs" ino=40002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.604488][T12217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1671'. [ 169.210249][T12251] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1684'. [ 169.223155][T12250] netlink: 'syz.4.1683': attribute type 12 has an invalid length. [ 169.223168][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1683'. [ 169.268483][T12255] cgroup: none used incorrectly [ 169.308387][ T5889] usb 7-1: USB disconnect, device number 22 [ 169.342259][T12258] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 169.342802][T12258] batman_adv: batadv0: Adding interface: gretap1 [ 169.342814][T12258] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.342837][T12258] batman_adv: batadv0: Interface activated: gretap1 [qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. 169.342849][T12258] batadv0: mtu less than device minimum [ 169.343759][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.344701][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.345673][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.346608][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.347487][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.348238][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.348719][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.349199][T12258] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.630403][T12266] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 169.886754][T12296] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1698'. [ 169.892742][T12284] bond3: entered promiscuous mode [ 170.234717][T12322] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1703'. [ 170.496969][ T67] Bluetooth: hci0: command 0x0401 tx timeout [ 170.925409][ T5889] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 171.050952][T12366] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1712'. [ 171.076320][ T5889] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 171.077476][ T5889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.077512][ T5889] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.095720][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.095742][ T5889] usb 7-1: Product: syz [ 171.095758][ T5889] usb 7-1: Manufacturer: syz [ 171.095770][ T5889] usb 7-1: SerialNumber: syz [ 171.128837][T12369] overlayfs: failed to clone upperpath [ 171.344119][T12381] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 171.344144][T12381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.344365][T12381] vhci_hcd vhci_hcd.0: Device attached [ 171.344762][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344830][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344843][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344855][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344866][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344878][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344889][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344901][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344912][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.344923][ T24] hid-generic 000B:000B:0008.0004: unknown main item tag 0x0 [ 171.350733][ T24] hid-generic 000B:000B:0008.0004: hidraw1: HID v4.00 Device [syz0] on syz0 [ 171.645552][ T6208] usb 46-1: SetAddress Request (2) to port 0 [ 171.645609][ T6208] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 171.949420][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 171.949442][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 172.158308][T12383] vhci_hcd: connection reset by peer [ 172.163853][ T12] vhci_hcd vhci_hcd.4: stop threads [ 172.164568][ T12] vhci_hcd vhci_hcd.4: release socket [ 172.168982][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 172.183851][T12409] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20003 [ 172.452128][ T1046] usb 7-1: USB disconnect, device number 23 [ 172.934846][T12456] netlink: 'syz.4.1737': attribute type 39 has an invalid length. [ 172.943050][T12454] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 172.943092][T12454] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.259025][T12470] bpf: Bad value for 'uid' [ 173.342216][ T42] kauditd_printk_skb: 194 callbacks suppressed [ 173.342235][ T42] audit: type=1400 audit(1792792350.716:19803): avc: denied { map } for pid=12473 comm="syz.4.1743" path="/316" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.344049][ T42] audit: type=1400 audit(1792792350.716:19804): avc: denied { write } for pid=12473 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.345507][ T42] audit: type=1400 audit(1792792350.716:19805): avc: denied { module_request } for pid=12473 comm="syz.4.1743" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.379112][ T42] audit: type=1400 audit(1792792350.744:19806): avc: denied { sys_module } for pid=12473 comm="syz.4.1743" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.450364][ T42] audit: type=1400 audit(1792792350.819:19807): avc: denied { mount } for pid=12478 comm="syz.4.1744" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 173.453618][ T42] audit: type=1400 audit(1792792350.819:19808): avc: denied { bpf } for pid=12478 comm="syz.4.1744" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.453661][ T42] audit: type=1400 audit(1792792350.819:19809): avc: denied { perfmon } for pid=12478 comm="syz.4.1744" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.455800][T12480] FAULT_INJECTION: forcing a failure. [ 173.455800][T12480] name fail_futex, interval 1, probability 0, space 0, times 1 [ 173.455828][T12480] CPU: 0 UID: 0 PID: 12480 Comm: syz.4.1744 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 173.455855][T12480] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 173.455862][T12480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.455873][T12480] Call Trace: [ 173.455879][T12480] [ 173.455887][T12480] dump_stack_lvl+0x100/0x190 [ 173.455919][T12480] should_fail_ex.cold+0x5/0xa [ 173.455946][T12480] get_futex_key+0x1c9/0x13e0 [ 173.455975][T12480] ? __pfx_get_futex_key+0x10/0x10 [ 173.455999][T12480] ? wakeup_preempt_fair+0x4fc/0xf60 [ 173.456025][T12480] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 173.456055][T12480] futex_wait_setup+0x91/0x540 [ 173.456083][T12480] __futex_wait+0x19f/0x360 [ 173.456106][T12480] ? __pfx___futex_wait+0x10/0x10 [ 173.456125][T12480] ? __pfx_try_to_wake_up+0x10/0x10 [ 173.456162][T12480] ? futex_hash+0x311/0x400 [ 173.456190][T12480] ? __pfx_futex_wake_mark+0x10/0x10 [ 173.456220][T12480] ? find_held_lock+0x2b/0x80 [ 173.456245][T12480] ? futex_wake+0x4ea/0x5e0 [ 173.456271][T12480] futex_wait+0xe6/0x370 [ 173.456293][T12480] ? __pfx_futex_wait+0x10/0x10 [ 173.456327][T12480] do_futex+0x265/0x440 [ 173.456356][T12480] ? __pfx_do_futex+0x10/0x10 [ 173.456379][T12480] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.456425][T12480] __x64_sys_futex+0x34f/0x4d0 [ 173.456454][T12480] ? putname+0xb6/0x110 [ 173.456473][T12480] ? __pfx___x64_sys_futex+0x10/0x10 [ 173.456501][T12480] ? __pfx___x64_sys_chdir+0x10/0x10 [ 173.456536][T12480] do_syscall_64+0x123/0x790 [ 173.456563][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.456582][T12480] RIP: 0033:0x7f3c2139f559 [ 173.456598][T12480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.456615][T12480] RSP: 002b:00007f3c2222b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 173.456633][T12480] RAX: ffffffffffffffda RBX: 00007f3c21626098 RCX: 00007f3c2139f559 [ 173.456644][T12480] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c21626098 [ 173.456655][T12480] RBP: 00007f3c21626090 R08: 0000000000000000 R09: 0000000000000000 [ 173.456667][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.456677][T12480] R13: 00007f3c21626128 R14: 00007ffcdcd407e0 R15: 00007ffcdcd408c8 [ 173.456701][T12480] [ 173.479655][ T42] audit: type=1400 audit(1792792350.847:19810): avc: denied { unmount } for pid=7237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 174.033704][ T42] audit: type=1400 audit(1792792351.353:19811): avc: denied { mmap_zero } for pid=12491 comm="syz.2.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 174.096529][ T42] audit: type=1400 audit(1792792351.418:19812): avc: denied { create } for pid=12493 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.522066][T12538] net_ratelimit: 11 callbacks suppressed [ 174.522093][T12538] IPVS: sed: TCP 172.20.20.170:20000 - no destination available [ 174.563074][T12543] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 174.571271][T12543] vlan2: entered allmulticast mode [ 174.571290][T12543] bond0: entered allmulticast mode [ 174.825843][T12559] tmpfs: Unknown parameter '18446744073709551615' [ 174.887381][T12567] __nla_validate_parse: 2 callbacks suppressed [ 174.887399][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 174.887412][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1772'. [ 175.308573][T12596] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 175.309049][T12597] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 175.333730][T12599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12599 comm=syz.2.1784 [ 175.346855][T12596] bond1: entered promiscuous mode [ 175.357527][T12596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.397424][T12596] bond1: (slave gre1): refused to change device type [ 175.887049][T12642] ip_tables: iptables: counters copy to user failed while replacing table [ 175.984447][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 176.189349][T12667] fuse: fd is not a fuse device [ 176.492033][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 176.548875][T12672] nbd: must specify at least one socket [ 176.657142][ T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 176.658094][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.658125][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.660149][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.660165][ T9] usb 9-1: Product: syz [ 176.660174][ T9] usb 9-1: Manufacturer: syz [ 176.660184][ T9] usb 9-1: SerialNumber: syz [ 176.833206][T12674] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 177.048190][ T6208] usb 46-1: device descriptor read/8, error -110 [ 177.113591][ T9] usb 9-1: USB disconnect, device number 14 [ 177.465479][ T6208] usb usb46-port1: attempt power cycle [ 177.524432][T12715] overlayfs: failed to clone upperpath [ 177.531274][T12715] overlayfs: failed to clone upperpath [ 177.584028][T12730] fuse: fd is not a fuse device [ 177.640783][T12740] fuse: fd is not a fuse device [ 177.643230][T12741] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1820'. [ 177.679340][T12742] overlayfs: missing 'workdir' [ 177.718096][T12752] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 177.831114][T12769] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 177.861214][T12769] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 177.874421][T12769] macvlan2: entered promiscuous mode [ 177.874436][T12769] macvlan2: entered allmulticast mode [ 177.874725][T12769] bond3: entered promiscuous mode [ 177.875034][T12769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.875359][T12769] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 177.875541][T12769] bond3: left promiscuous mode [ 177.963820][T12782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2050 sclass=netlink_tcpdiag_socket pid=12782 comm=syz.4.1832 [ 178.057163][T12790] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 178.067256][ T6208] usb usb46-port1: unable to enumerate USB device [ 178.081173][T12790] ip6t_frag: unknown flags 6 [ 178.099788][T12790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.101639][T12790] bond4: (slave bond5): making interface the new active one [ 178.101995][T12790] bond4: (slave bond5): Enslaving as an active interface with an up link [ 178.113766][T12790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.118960][T12790] bond4: (slave bond6): Enslaving as a backup interface with an up link [ 178.149481][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 178.279096][T12804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.279113][T12804] IPv6: NLM_F_CREATE should be set when creating new route [ 178.312021][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 178.313096][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.313118][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.315103][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.315116][ T9] usb 7-1: Product: syz [ 178.315123][ T9] usb 7-1: Manufacturer: syz [ 178.315131][ T9] usb 7-1: SerialNumber: syz [ 178.368388][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.370780][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.419771][T12804] tipc: Resetting bearer [ 178.458399][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.458420][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.458440][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.458453][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.458469][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.458483][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.458499][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.458512][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.489616][T12812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.490105][T12813] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.736423][ T42] kauditd_printk_skb: 303 callbacks suppressed [ 178.736437][ T42] audit: type=1400 audit(1792792355.770:20116): avc: denied { create } for pid=12839 comm="syz.1.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.810963][ T9] usb 7-1: USB disconnect, device number 24 [ 179.347414][ T42] audit: type=1400 audit(1792792356.341:20117): avc: denied { mount } for pid=12844 comm="syz.1.1850" name="/" dev="ocfs2_dlmfs" ino=41993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 179.394147][ T42] audit: type=1400 audit(1792792356.378:20118): avc: denied { create } for pid=12849 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.396872][ T42] audit: type=1400 audit(1792792356.378:20119): avc: denied { bind } for pid=12849 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.405772][ T42] audit: type=1400 audit(1792792356.387:20120): avc: denied { setopt } for pid=12849 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.406898][ T42] audit: type=1400 audit(1792792356.387:20121): avc: denied { ioctl } for pid=12849 comm="syz.1.1852" path="socket:[40749]" dev="sockfs" ino=40749 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.419701][ T42] audit: type=1400 audit(1792792356.397:20122): avc: denied { dac_read_search } for pid=12851 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 179.482699][ T42] audit: type=1400 audit(1792792356.453:20123): avc: denied { sys_module } for pid=12849 comm="syz.1.1852" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.494249][T12857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.495544][T12857] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.531854][T12857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.531878][T12857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.535933][T12857] veth1_macvtap: left promiscuous mode [ 179.536775][T12857] veth0_macvtap: left promiscuous mode [ 179.538563][T12857] veth0_macvtap: entered promiscuous mode [ 179.540836][T12857] veth1_macvtap: entered promiscuous mode [ 179.545440][ T42] audit: type=1400 audit(1792792356.518:20124): avc: denied { setopt } for pid=12858 comm="syz.3.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.545650][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.545850][ T42] audit: type=1400 audit(1792792356.518:20125): avc: denied { ioctl } for pid=12863 comm="syz.4.1855" path="socket:[40754]" dev="sockfs" ino=40754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.546581][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.547696][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.550705][T12857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.555428][T12857] veth0_to_team: entered promiscuous mode [ 179.559699][T12857] 8021q: adding VLAN 0 to HW filter on device b [ 179.561309][T12857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.563346][T12857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.587868][T12857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.597137][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.597220][ T9384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.598880][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.598949][ T9384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.630073][T12866] tap0: tun_chr_ioctl cmd 1074025677 [ 179.630088][T12866] tap0: Linktype set failed because interface is up [ 179.636990][T12857] jffs2: notice: (12857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 179.689087][ T5865] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 179.692660][ T5865] bond2: (slave veth0_to_bond): making interface the new active one [ 179.708485][ T5865] bond2: active interface up! [ 179.874262][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 180.464160][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 180.487966][T12915] team2: entered promiscuous mode [ 180.488001][T12915] team2: entered allmulticast mode [ 180.488361][T12915] 8021q: adding VLAN 0 to HW filter on device team2 [ 180.747359][T12937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 180.783384][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 180.825319][T12941] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 180.826545][T12941] netlink: 'syz.3.1874': attribute type 4 has an invalid length. [ 180.910751][T12942] bond7: entered promiscuous mode [ 180.913059][T12942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 181.023020][ T6208] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 181.032655][T12953] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1877'. [ 181.032672][T12953] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1877'. [ 181.097009][ T5889] libceph: connect (1)127.0.0.1:6789 error -22 [ 181.097117][ T5889] libceph: mon0 (1)127.0.0.1:6789 connect error [ 181.194899][ T6208] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 181.195703][ T6208] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.195726][ T6208] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.197407][ T6208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.197420][ T6208] usb 7-1: Product: syz [ 181.197427][ T6208] usb 7-1: Manufacturer: syz [ 181.197434][ T6208] usb 7-1: SerialNumber: syz [ 181.343469][ T5787] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 181.364971][ T5889] libceph: connect (1)127.0.0.1:6789 error -22 [ 181.365068][ T5889] libceph: mon0 (1)127.0.0.1:6789 connect error [ 181.515278][ T5787] usb 9-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 181.516199][ T5787] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.517548][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.517565][ T5787] usb 9-1: Product: syz [ 181.517572][ T5787] usb 9-1: Manufacturer: syz [ 181.520814][ T5787] navman 9-1:1.0: navman converter detected [ 181.522378][ T5787] usb 9-1: navman converter now attached to ttyUSB0 [ 181.690584][ T6208] usb 7-1: USB disconnect, device number 25 [ 181.743987][ T6967] usb 9-1: USB disconnect, device number 15 [ 181.747905][ T6967] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 181.748297][ T6967] navman 9-1:1.0: device disconnected [ 181.910769][ T5889] libceph: connect (1)127.0.0.1:6789 error -22 [ 181.910928][ T5889] libceph: mon0 (1)127.0.0.1:6789 connect error [ 181.973037][T12959] ceph: No mds server is up or the cluster is laggy [ 182.469041][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1893'. [ 182.469067][T13012] netlink: 'syz.3.1893': attribute type 7 has an invalid length. [ 182.469074][T13012] netlink: 'syz.3.1893': attribute type 8 has an invalid length. [ 182.469081][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 182.472033][T13012] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 182.499780][T13012] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 182.501319][T13012] erspan0: entered promiscuous mode [ 182.502682][T13012] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 182.556473][T13019] nvme_fcloop: unknown parameter or missing value 'wwnn=' [ 182.557534][T13019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1895'. [ 182.598279][T13025] tipc: Enabled bearer , priority 0 [ 182.669690][T13029] Falling back ldisc for ttyS3. [ 182.796791][ T153] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 182.968762][ T153] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 182.969852][ T153] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.969885][ T153] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.972738][ T153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.972757][ T153] usb 7-1: Product: syz [ 182.972768][ T153] usb 7-1: Manufacturer: syz [ 182.972779][ T153] usb 7-1: SerialNumber: syz [ 183.177644][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 183.186981][T13033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1901'. [ 183.472774][ T6967] usb 7-1: USB disconnect, device number 26 [ 183.918157][T13063] md: md1 stopped. [ 184.096276][ T42] kauditd_printk_skb: 142 callbacks suppressed [ 184.096305][ T42] audit: type=1400 audit(1792792360.776:20268): avc: denied { mounton } for pid=13068 comm="syz.2.1914" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 184.098225][ T42] audit: type=1400 audit(1792792360.776:20269): avc: denied { mount } for pid=13068 comm="syz.2.1914" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 184.113155][T13070] MINIX-fs: blocksize too small for device [ 184.122193][ T42] audit: type=1400 audit(1792792360.804:20270): avc: denied { unmount } for pid=6950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 184.144114][ T42] audit: type=1400 audit(1792792360.823:20271): avc: denied { write } for pid=13073 comm="syz.2.1915" name="softnet_stat" dev="proc" ino=4026533418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 184.208119][ T42] audit: type=1400 audit(1792792360.889:20272): avc: denied { create } for pid=13077 comm="syz.2.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.211284][ T42] audit: type=1400 audit(1792792360.889:20273): avc: denied { setopt } for pid=13077 comm="syz.2.1916" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.211310][ T42] audit: type=1400 audit(1792792360.889:20274): avc: denied { connect } for pid=13077 comm="syz.2.1916" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.211331][ T42] audit: type=1400 audit(1792792360.889:20275): avc: denied { read } for pid=13077 comm="syz.2.1916" name="event2" dev="devtmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.211351][ T42] audit: type=1400 audit(1792792360.889:20276): avc: denied { open } for pid=13077 comm="syz.2.1916" path="/dev/input/event2" dev="devtmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.211627][ T42] audit: type=1400 audit(1792792360.889:20277): avc: denied { write } for pid=13077 comm="syz.2.1916" laddr=fe80::5c63:73ff:fe51:d60 lport=60 faddr=ff01::1 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.219391][T13080] 9p: Bad value for 'wfdno' [ 184.240370][T13078] xt_hashlimit: size too large, truncated to 1048576 [ 184.618444][T13113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.680464][T13117] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 184.685471][T13117] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 184.693809][ T153] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 184.849334][ T153] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 184.850344][ T153] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.850380][ T153] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.852820][ T153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.852840][ T153] usb 7-1: Product: syz [ 184.852853][ T153] usb 7-1: Manufacturer: syz [ 184.852866][ T153] usb 7-1: SerialNumber: syz [ 185.120715][T13153] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 185.149329][T13153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.170156][T13154] bond4: (slave geneve2): making interface the new active one [ 185.171054][T13154] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 185.394165][ T6967] usb 7-1: USB disconnect, device number 27 [ 185.394485][T13160] md/raid:md3: device ram6 operational as raid disk 0 [ 185.444809][T13171] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.468556][T13160] md/raid:md3: not enough operational devices (2/3 failed) [ 185.562505][T13179] trusted_key: encrypted_key: insufficient parameters specified [ 185.716360][T13160] md/raid:md3: failed to run raid set. [ 185.716373][T13160] md: pers->run() failed ... [ 186.709912][ T5777] Bluetooth: hci3: unexpected event for opcode 0x080d [ 186.710504][T13215] netlink: 'syz.2.1950': attribute type 12 has an invalid length. [ 186.729307][ T5865] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.732158][ T5865] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.732248][ T5865] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.732266][ T5865] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.511243][T13231] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 187.519430][T13232] netlink: 'syz.3.1955': attribute type 21 has an invalid length. [ 187.640868][T13231] input: syz0 as /devices/virtual/input/input11 [ 187.655050][T13231] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 187.696051][T13241] overlayfs: failed to clone upperpath [ 187.771260][T13244] overlayfs: failed to clone upperpath [ 187.829160][T13248] fuse: fd is not a fuse device [ 187.860979][ T9842] udevd[9842]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 187.867327][T13250] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 188.255653][T13280] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 188.259141][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 188.439988][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 188.440824][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.440847][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.442497][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.442509][ T24] usb 9-1: Product: syz [ 188.442517][ T24] usb 9-1: Manufacturer: syz [ 188.442524][ T24] usb 9-1: SerialNumber: syz [ 188.808186][ T6307] syz_tun (unregistering): left allmulticast mode [ 188.822233][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.828523][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.829339][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.829987][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.830339][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.961700][ T153] usb 9-1: USB disconnect, device number 16 [ 189.046366][ T5865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.046390][ T5865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.159066][ T5865] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 189.159303][ T5865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.159321][ T5865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.240320][T13328] xt_socket: unknown flags 0x4c [ 189.265855][ T5865] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 189.266640][ T5865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.266659][ T5865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.278250][T13333] ALSA: mixer_oss: invalid OSS volume '' [ 189.284651][T13306] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.362570][ T5865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.362592][ T5865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.435653][T13343] FAT-fs (nbd2): unable to read boot sector [ 189.517817][ T42] kauditd_printk_skb: 327 callbacks suppressed [ 189.517847][ T42] audit: type=1400 audit(1792792365.848:20605): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 189.530502][ T42] audit: type=1400 audit(1792792365.858:20606): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.530549][ T42] audit: type=1400 audit(1792792365.858:20607): avc: denied { search } for pid=5491 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.530587][ T42] audit: type=1400 audit(1792792365.858:20608): avc: denied { search } for pid=5491 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.530625][ T42] audit: type=1400 audit(1792792365.858:20609): avc: denied { read } for pid=5491 comm="dhcpcd" name="n60" dev="tmpfs" ino=3411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.539159][ T42] audit: type=1400 audit(1792792365.867:20610): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n60" dev="tmpfs" ino=3411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.539209][ T42] audit: type=1400 audit(1792792365.867:20611): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n60" dev="tmpfs" ino=3411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.626614][ T42] audit: type=1400 audit(1792792365.961:20612): avc: denied { read } for pid=13356 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.627201][ T42] audit: type=1400 audit(1792792365.961:20613): avc: denied { read open } for pid=13356 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.627366][ T42] audit: type=1400 audit(1792792365.961:20614): avc: denied { getattr } for pid=13356 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.685162][ T5865] veth1_to_bridge: left allmulticast mode [ 189.685178][ T5865] veth1_to_bridge: left promiscuous mode [ 189.685270][ T5865] bridge0: port 1(veth1_to_bridge) entered disabled state [ 189.697734][ T5865] tipc: Resetting bearer [ 189.698460][ T5865] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 189.780203][ T5865] erspan0 (unregistering): left promiscuous mode [ 189.820674][ T5865] tipc: Disabling bearer [ 189.820853][ T5865] batman_adv: batadv0: Removing interface: syzkaller0 [ 190.089376][ T5865] bond0 (unregistering): Released all slaves [ 190.094837][ T5865] bond1 (unregistering): Released all slaves [ 190.105098][ T5865] bond2 (unregistering): Released all slaves [ 190.115746][ T5865] bond3 (unregistering): Released all slaves [ 190.140567][ T5865] bond4 (unregistering): (slave bond5): Releasing backup interface [ 190.141945][ T5865] bond4 (unregistering): (slave bond6): Releasing backup interface [ 190.142741][ T5865] bond4 (unregistering): Released all slaves [ 190.156580][ T5865] bond5 (unregistering): Released all slaves [ 190.167315][ T5865] bond6 (unregistering): Released all slaves [ 190.176040][ T5865] bond7 (unregistering): Released all slaves [ 190.188901][ T5491] 8021q: adding VLAN 0 to HW filter on device eth6 [ 190.207691][T13306] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.207778][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.207833][T13306] bridge_slave_0: entered allmulticast mode [ 190.208542][T13306] bridge_slave_0: entered promiscuous mode [ 190.211827][T13306] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.211868][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.211922][T13306] bridge_slave_1: entered allmulticast mode [ 190.213484][T13306] bridge_slave_1: entered promiscuous mode [ 190.238268][T13306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.240209][T13306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.254126][T13306] team0: Port device team_slave_0 added [ 190.255502][T13306] team0: Port device team_slave_1 added [ 190.267698][T13306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.267709][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.267722][T13306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.268687][T13306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.268695][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.268708][T13306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.289033][T13306] hsr_slave_0: entered promiscuous mode [ 190.289556][T13306] hsr_slave_1: entered promiscuous mode [ 190.289969][T13306] debugfs: 'hsr0' already exists in 'hsr' [ 190.289980][T13306] Cannot create hsr debugfs directory [ 190.342523][ T5865] tipc: Left network mode [ 190.542349][ T5491] 8021q: adding VLAN 0 to HW filter on device eth7 [ 190.701079][T13390] __nla_validate_parse: 4 callbacks suppressed [ 190.701091][T13390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1984'. [ 190.702993][T13390] netlink: get zone limit has 4 unknown bytes [ 190.855240][ T5865] hsr_slave_0: left promiscuous mode [ 190.860189][ T5865] hsr_slave_1: left promiscuous mode [ 190.871636][ T5865] veth1_macvtap: left promiscuous mode [ 190.871660][ T5865] veth0_macvtap: left promiscuous mode [ 190.871732][ T5865] veth1_vlan: left promiscuous mode [ 190.871747][ T5865] veth0_vlan: left promiscuous mode [ 191.068335][ T5777] Bluetooth: hci0: command tx timeout [ 191.319800][T13306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.322897][T13306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.323419][T13306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.332027][T13306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.332431][T13306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.342272][T13306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.342657][T13306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.347426][T13306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.417144][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.427446][T13306] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.432046][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.432131][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.450980][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.451067][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.624988][ T67] Bluetooth: hci2: SCO packet for unknown connection handle 349 [ 191.713568][T13443] fuse: fd is not a fuse device [ 191.859441][T13306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.898150][T13306] veth0_vlan: entered promiscuous mode [ 191.908702][T13306] veth1_vlan: entered promiscuous mode [ 191.953743][T13306] veth0_macvtap: entered promiscuous mode [ 191.966175][T13306] veth1_macvtap: entered promiscuous mode [ 191.972261][T13306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.981704][T13306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.017604][ T5874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.017679][ T5874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.017720][ T5874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.017752][ T5874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.050114][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.050135][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.066318][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.066336][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.510635][ T5787] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 192.682126][ T5787] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 192.683641][ T5787] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.683665][ T5787] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.686291][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.686304][ T5787] usb 9-1: Product: syz [ 192.686311][ T5787] usb 9-1: Manufacturer: syz [ 192.686318][ T5787] usb 9-1: SerialNumber: syz [ 193.192541][ T5787] usb 9-1: USB disconnect, device number 17 [ 193.207859][T13516] CIFS: VFS: bad security option: krb5i [ 193.255052][ T77] IPVS: starting estimator thread 0... [ 193.290645][ T67] Bluetooth: hci0: command tx timeout [ 193.335653][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2004'. [ 193.343944][T13521] IPVS: using max 46 ests per chain, 110400 per kthread [ 193.372764][T13533] fuse: fd is not a fuse device [ 193.633566][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 193.633665][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.698313][T13558] netlink: 'syz.3.2012': attribute type 3 has an invalid length. [ 193.698327][T13558] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 193.708526][T13560] nbd: must specify at least one socket [ 193.799770][T13568] syzkaller0: left promiscuous mode [ 193.799784][T13568] syzkaller0: left allmulticast mode [ 193.835157][T13570] Line length is too long: Should be less than 4094 [ 193.893940][T13577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13577 comm=syz.3.2022 [ 193.971230][ T10] usb 6-1: USB disconnect, device number 3 [ 194.072445][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.079510][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.080175][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.080588][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.080853][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.141008][ T6415] syz_tun (unregistering): left allmulticast mode [ 194.141030][ T6415] syz_tun (unregistering): left promiscuous mode [ 194.141095][ T6415] bridge0: port 3(syz_tun) entered disabled state [ 194.157107][T13590] x_tables: duplicate underflow at hook 2 [ 194.253977][ T5787] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 194.341946][T13585] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.413276][ T5787] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 194.414270][ T5787] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.414307][ T5787] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.417219][ T5787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.417238][ T5787] usb 8-1: Product: syz [ 194.417250][ T5787] usb 8-1: Manufacturer: syz [ 194.417263][ T5787] usb 8-1: SerialNumber: syz [ 194.778701][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.778837][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.778936][T13585] bridge_slave_0: entered allmulticast mode [ 194.780368][T13585] bridge_slave_0: entered promiscuous mode [ 194.783550][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.783676][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.783773][T13585] bridge_slave_1: entered allmulticast mode [ 194.785335][T13585] bridge_slave_1: entered promiscuous mode [ 194.808253][T13585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.809845][T13585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.822823][T13585] team0: Port device team_slave_0 added [ 194.824158][T13585] team0: Port device team_slave_1 added [ 194.836762][T13585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.836771][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.836784][T13585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.837673][T13585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.837680][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.837693][T13585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.858794][T13585] hsr_slave_0: entered promiscuous mode [ 194.859244][T13585] hsr_slave_1: entered promiscuous mode [ 194.859660][T13585] debugfs: 'hsr0' already exists in 'hsr' [ 194.859672][T13585] Cannot create hsr debugfs directory [ 194.943063][ T5787] usb 8-1: USB disconnect, device number 2 [ 195.098326][ T42] kauditd_printk_skb: 291 callbacks suppressed [ 195.098340][ T42] audit: type=1400 audit(1792792371.079:20906): avc: denied { unmount } for pid=7237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.101422][ T42] audit: type=1400 audit(1792792371.079:20907): avc: denied { unmount } for pid=7237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 195.128461][ T42] audit: type=1400 audit(1792792371.098:20908): avc: denied { create } for pid=13609 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.129691][ T42] audit: type=1400 audit(1792792371.107:20909): avc: denied { ioctl } for pid=13609 comm="syz.4.2028" path="socket:[42807]" dev="sockfs" ino=42807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.130083][ T42] audit: type=1400 audit(1792792371.107:20910): avc: denied { create } for pid=13609 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.135302][ T42] audit: type=1400 audit(1792792371.107:20911): avc: denied { mount } for pid=13609 comm="syz.4.2028" name="/" dev="9p" ino=72095525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.136196][ T42] audit: type=1400 audit(1792792371.107:20912): avc: denied { write } for pid=13609 comm="syz.4.2028" name="/" dev="9p" ino=72095525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.136342][ T42] audit: type=1400 audit(1792792371.107:20913): avc: denied { add_name } for pid=13609 comm="syz.4.2028" name="blkio.bfq.time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.136564][ T42] audit: type=1400 audit(1792792371.107:20914): avc: denied { create } for pid=13609 comm="syz.4.2028" name="blkio.bfq.time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 195.136701][ T42] audit: type=1400 audit(1792792371.107:20915): avc: denied { associate } for pid=13609 comm="syz.4.2028" name="blkio.bfq.time" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 195.445554][T13585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.449861][T13585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.452813][T13585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.455269][T13585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.458101][T13585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.460315][T13585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.460721][T13585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.466292][T13585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.515566][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.515596][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.516494][ T67] Bluetooth: hci0: command tx timeout [ 195.605152][T13585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.629071][T13585] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.634601][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.634647][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.648861][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.648907][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.985203][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2032'. [ 196.072865][T13585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.147721][T13585] veth0_vlan: entered promiscuous mode [ 196.161874][T13585] veth1_vlan: entered promiscuous mode [ 196.213605][ T9373] syz_tun (unregistering): left allmulticast mode [ 196.226562][T13585] veth0_macvtap: entered promiscuous mode [ 196.235906][T13585] veth1_macvtap: entered promiscuous mode [ 196.259163][T13585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.271134][T13585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.284405][ T67] Bluetooth: hci4: command tx timeout [ 196.325846][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.326137][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.326157][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.326174][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.384968][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.384986][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.411538][ T9385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.411558][ T9385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.306334][T13669] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.382069][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.390628][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.391563][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.392317][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.392793][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.515846][T13684] kvm: emulating exchange as write [ 197.533661][T13696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.533675][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 197.533697][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 197.571008][T13700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13700 comm=syz.2.2045 [ 197.592915][T13703] netlink: 'syz.3.2044': attribute type 5 has an invalid length. [ 197.693261][T13711] FAULT_INJECTION: forcing a failure. [ 197.693261][T13711] name failslab, interval 1, probability 0, space 0, times 0 [ 197.693290][T13711] CPU: 3 UID: 0 PID: 13711 Comm: syz.3.2048 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 197.693315][T13711] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 197.693322][T13711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.693346][T13711] Call Trace: [ 197.693360][T13711] [ 197.693368][T13711] dump_stack_lvl+0x100/0x190 [ 197.693406][T13711] should_fail_ex.cold+0x5/0xa [ 197.693450][T13711] should_failslab+0xc2/0x120 [ 197.693482][T13711] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 197.693507][T13711] ? __alloc_skb+0x140/0x710 [ 197.693540][T13711] __alloc_skb+0x140/0x710 [ 197.693562][T13711] ? tcp_write_xmit+0x39/0x8490 [ 197.693582][T13711] ? __pfx___alloc_skb+0x10/0x10 [ 197.693616][T13711] tcp_stream_alloc_skb+0x34/0x660 [ 197.693644][T13711] tcp_write_xmit+0x732/0x8490 [ 197.693676][T13711] ? __sk_mem_schedule+0xd0/0x100 [ 197.693706][T13711] tcp_sendmsg_locked+0x2b38/0x42d0 [ 197.693740][T13711] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 197.693757][T13711] ? lock_acquire+0x1d1/0x380 [ 197.693775][T13711] ? do_raw_spin_lock+0x128/0x260 [ 197.693790][T13711] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.693807][T13711] ? __local_bh_enable_ip+0xa5/0x120 [ 197.693826][T13711] tcp_sendmsg+0x2e/0x50 [ 197.693836][T13711] ? __pfx_tcp_sendmsg+0x10/0x10 [ 197.693846][T13711] inet_sendmsg+0xb9/0x140 [ 197.693864][T13711] ____sys_sendmsg+0xa23/0xc30 [ 197.693875][T13711] ? __pfx_inet_sendmsg+0x10/0x10 [ 197.693915][T13711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.693934][T13711] ___sys_sendmsg+0x190/0x1e0 [ 197.693948][T13711] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.693961][T13711] ? futex_wait+0x11e/0x370 [ 197.693978][T13711] ? find_held_lock+0x2b/0x80 [ 197.694002][T13711] __sys_sendmsg+0x160/0x210 [ 197.694019][T13711] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.694043][T13711] do_syscall_64+0x123/0x790 [ 197.694070][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.694082][T13711] RIP: 0033:0x7ff56f79f559 [ 197.694092][T13711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.694103][T13711] RSP: 002b:00007ff570580028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.694121][T13711] RAX: ffffffffffffffda RBX: 00007ff56fa25fa0 RCX: 00007ff56f79f559 [ 197.694128][T13711] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 197.694135][T13711] RBP: 00007ff56f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 197.694141][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.694147][T13711] R13: 00007ff56fa26038 R14: 00007ff56fa25fa0 R15: 00007ffd92c05e98 [ 197.694162][T13711] [ 197.736389][ T5777] Bluetooth: hci0: command tx timeout [ 197.745546][T13679] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.917674][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 198.062889][T13679] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.063071][T13679] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.063164][T13679] bridge_slave_0: entered allmulticast mode [ 198.064317][T13679] bridge_slave_0: entered promiscuous mode [ 198.066525][T13679] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.066592][T13679] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.066687][T13679] bridge_slave_1: entered allmulticast mode [ 198.068520][T13679] bridge_slave_1: entered promiscuous mode [ 198.080456][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 198.081065][ T24] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 198.082004][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 198.083999][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.084017][ T24] usb 7-1: Product: syz [ 198.084024][ T24] usb 7-1: Manufacturer: syz [ 198.084035][ T24] usb 7-1: SerialNumber: syz [ 198.089169][ T24] usb 7-1: config 0 descriptor?? [ 198.091792][T13709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.092621][T13679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.094956][T13679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.100330][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 198.100346][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 198.109397][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 198.114279][T13679] team0: Port device team_slave_0 added [ 198.117978][T13679] team0: Port device team_slave_1 added [ 198.144170][T13679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.144207][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.144221][T13679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.145613][T13679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.145621][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.145635][T13679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.172624][T13679] hsr_slave_0: entered promiscuous mode [ 198.173073][T13679] hsr_slave_1: entered promiscuous mode [ 198.173763][T13679] debugfs: 'hsr0' already exists in 'hsr' [ 198.173781][T13679] Cannot create hsr debugfs directory [ 198.362070][T13679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.366414][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.366995][T13679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.371314][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.374181][T13679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.376699][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.377456][T13679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.381000][T13679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.413629][ T9] hid_parser_main: 14 callbacks suppressed [ 198.413644][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413658][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413670][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413682][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413693][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413705][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413716][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413728][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413739][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.413751][ T9] hid-generic 0005:0C45:0005.0005: unknown main item tag 0x0 [ 198.452169][T13679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.457973][T13679] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.466169][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.466240][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.475606][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.475680][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.477282][ T9] hid-generic 0005:0C45:0005.0005: hidraw1: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 198.505500][ T5777] Bluetooth: hci4: command tx timeout [ 198.526158][T13739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.694809][ T5777] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 198.695241][ T6208] usb 7-1: USB disconnect, device number 28 [ 198.695358][ C2] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 198.910290][T13679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.126328][T13679] veth0_vlan: entered promiscuous mode [ 199.132126][T13679] veth1_vlan: entered promiscuous mode [ 199.161316][T13679] veth0_macvtap: entered promiscuous mode [ 199.166195][T13679] veth1_macvtap: entered promiscuous mode [ 199.177395][T13679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.184971][T13679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.210561][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.210588][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.210606][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.210623][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.279740][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.279759][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.337096][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.337118][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.601703][T13789] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 199.601731][T13789] SELinux: failed to load policy [ 199.602497][T13789] trusted_key: encrypted_key: keyword 'laecryptfs' not recognized [ 199.616704][ T5777] Bluetooth: hci1: command tx timeout [ 199.653375][ T77] IPVS: starting estimator thread 0... [ 199.745025][T13795] IPVS: using max 46 ests per chain, 110400 per kthread [ 199.832019][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 199.833100][T13814] syz_tun: entered promiscuous mode [ 200.023547][ T153] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.099693][T13818] fuse: Unknown parameter 'Ɗ50x0000000000000004' [ 200.131872][T13820] qnx6: unable to read the first superblock [ 200.131966][T13820] qnx6: unable to read the first superblock [ 200.131971][T13820] qnx6: unable to read the first superblock [ 200.183127][ T153] usb 6-1: Using ep0 maxpacket: 32 [ 200.185411][ T153] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.185454][ T153] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 200.188102][ T153] usb 6-1: config 14 has an invalid interface number: 57 but max is 0 [ 200.188127][ T153] usb 6-1: config 14 has no interface number 0 [ 200.188174][ T153] usb 6-1: config 14 interface 57 has no altsetting 0 [ 200.190376][ T153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.190412][ T153] usb 6-1: Product: syz [ 200.190427][ T153] usb 6-1: Manufacturer: syz [ 200.190441][ T153] usb 6-1: SerialNumber: syz [ 200.346705][T13830] device-mapper: table: 248:5: thin: Error opening pool device (-ENXIO) [ 200.346723][T13830] device-mapper: ioctl: error adding target to table [ 200.504030][ T42] kauditd_printk_skb: 289 callbacks suppressed [ 200.504044][ T42] audit: type=1400 audit(1792792376.133:21205): avc: denied { read } for pid=13839 comm="syz.5.2075" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.504260][ T42] audit: type=1400 audit(1792792376.133:21206): avc: denied { open } for pid=13839 comm="syz.5.2075" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.504897][ T42] audit: type=1400 audit(1792792376.133:21207): avc: denied { read } for pid=13839 comm="syz.5.2075" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.505548][ T42] audit: type=1400 audit(1792792376.133:21208): avc: denied { ioctl } for pid=13839 comm="syz.5.2075" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.528566][ T42] audit: type=1400 audit(1792792376.161:21209): avc: denied { ioctl } for pid=13811 comm="syz.1.2066" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x40085503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.555245][ T42] audit: type=1400 audit(1792792376.179:21210): avc: denied { read } for pid=13837 comm="syz.2.2074" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.555933][ T42] audit: type=1400 audit(1792792376.179:21211): avc: denied { open } for pid=13837 comm="syz.2.2074" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.557732][ T42] audit: type=1400 audit(1792792376.189:21212): avc: denied { execmem } for pid=13837 comm="syz.2.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 200.558150][ T42] audit: type=1400 audit(1792792376.189:21213): avc: denied { mmap_zero } for pid=13837 comm="syz.2.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 200.563262][ T42] audit: type=1400 audit(1792792376.189:21214): avc: denied { create } for pid=13837 comm="syz.2.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.729258][ T67] Bluetooth: hci4: command tx timeout [ 200.758775][ T153] legousbtower 6-1:14.57: interrupt endpoints not found [ 200.941769][ T1046] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 200.966839][ T57] usb 6-1: USB disconnect, device number 4 [ 201.114432][ T1046] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 201.115717][ T1046] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.115755][ T1046] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.118155][ T1046] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.118173][ T1046] usb 8-1: Product: syz [ 201.118184][ T1046] usb 8-1: Manufacturer: syz [ 201.118194][ T1046] usb 8-1: SerialNumber: syz [ 201.424902][T13854] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.619089][ T57] usb 8-1: USB disconnect, device number 3 [ 201.670744][T13861] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 201.670809][T13861] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 201.839410][ T67] Bluetooth: hci1: command tx timeout [ 202.240327][T13871] lo: entered allmulticast mode [ 202.241384][T13870] lo: left allmulticast mode [ 202.446093][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.447024][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.450035][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.452778][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.455961][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.459671][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.462859][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.466088][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.470500][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.473148][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.476559][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.479670][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.482994][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.486132][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.489243][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.492644][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.496318][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.502386][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.507103][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.508944][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.512064][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.515190][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.519227][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.525371][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.532341][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.538648][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.539217][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.539709][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.553438][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.559460][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.559989][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.561022][T13884] overlay: filesystem on ./file0 not supported as upperdir [ 202.590698][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 202.701595][T13894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2090'. [ 202.811916][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 202.908134][ T1046] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 202.950757][ T67] Bluetooth: hci4: command tx timeout [ 202.951650][ T57] usb 8-1: device descriptor read/64, error -71 [ 203.079694][ T1046] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.080844][ T1046] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 203.080872][ T1046] usb 10-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 203.080893][ T1046] usb 10-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 203.080912][ T1046] usb 10-1: config 1 interface 0 has no altsetting 0 [ 203.082837][ T1046] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.082858][ T1046] usb 10-1: Product: ⓺࠷ၨꯚ쑴Ȅఒ䈎ย䓗荃丠ﻕﵜ貣搾Ꮣ슞伉ﳺゾ᫱䉋㳫ઑ笭⥜냃삪⍨꺇얙䋕텫곅㒖 [ 203.082878][ T1046] usb 10-1: Manufacturer: Ќ [ 203.082890][ T1046] usb 10-1: SerialNumber: syz [ 203.085915][T13892] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 203.086055][T13892] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 203.228630][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 203.304577][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.304944][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.309501][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.309809][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.317492][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.317841][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.334800][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.336033][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.367517][ T57] usb 8-1: device descriptor read/64, error -71 [ 203.429289][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.429338][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.435811][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.438509][T13909] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 203.438551][T13909] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 203.438595][T13909] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 203.442074][T13910] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 203.481593][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.486476][ T57] usb usb8-port1: attempt power cycle [ 203.492287][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.493730][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.495157][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.497801][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.500664][T13909] wg2 speed is unknown, defaulting to 1000 [ 203.520227][ T1046] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 203.531915][ T1046] usb 10-1: USB disconnect, device number 2 [ 203.757528][T13922] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 203.848310][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 203.870246][ T57] usb 8-1: device descriptor read/8, error -71 [ 204.062221][ T67] Bluetooth: hci1: command tx timeout [ 204.126349][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 204.134033][T13924] FAULT_INJECTION: forcing a failure. [ 204.134033][T13924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.134079][T13924] CPU: 0 UID: 0 PID: 13924 Comm: syz.5.2099 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 204.134116][T13924] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 204.134124][T13924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.134157][T13924] Call Trace: [ 204.134178][T13924] [ 204.134189][T13924] dump_stack_lvl+0x100/0x190 [ 204.134258][T13924] should_fail_ex.cold+0x5/0xa [ 204.134295][T13924] _copy_from_user+0x2e/0xd0 [ 204.134331][T13924] __sys_bpf+0x2f5/0x4a30 [ 204.134369][T13924] ? __pfx___sys_bpf+0x10/0x10 [ 204.134395][T13924] ? find_held_lock+0x2b/0x80 [ 204.134433][T13924] ? futex_wake+0x4ea/0x5e0 [ 204.134488][T13924] ? rcu_read_lock_any_held+0x6a/0x90 [ 204.134527][T13924] ? find_held_lock+0x2b/0x80 [ 204.134564][T13924] ? ksys_write+0x190/0x250 [ 204.134599][T13924] ? ksys_write+0x190/0x250 [ 204.134658][T13924] ? __x64_sys_futex+0x34f/0x4d0 [ 204.134696][T13924] ? __x64_sys_futex+0x358/0x4d0 [ 204.134740][T13924] ? xfd_validate_state+0x129/0x190 [ 204.134777][T13924] ? __x64_sys_bpf+0xce/0x140 [ 204.134803][T13924] __x64_sys_bpf+0xce/0x140 [ 204.134837][T13924] ? do_syscall_64+0xae/0x790 [ 204.134888][T13924] do_syscall_64+0x123/0x790 [ 204.134927][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.134956][T13924] RIP: 0033:0x7f04e6b9f559 [ 204.134975][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.134999][T13924] RSP: 002b:00007f04e79a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.135043][T13924] RAX: ffffffffffffffda RBX: 00007f04e6e25fa0 RCX: 00007f04e6b9f559 [ 204.135063][T13924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 204.135080][T13924] RBP: 00007f04e6c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 204.135095][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.135113][T13924] R13: 00007f04e6e26038 R14: 00007f04e6e25fa0 R15: 00007fffbdd387e8 [ 204.135152][T13924] [ 204.141588][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2099'. [ 204.141611][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2099'. [ 204.155140][ T57] usb 8-1: device descriptor read/8, error -71 [ 204.280433][ T57] usb usb8-port1: unable to enumerate USB device [ 204.364510][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'. [ 204.624519][T13933] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.624563][T13933] overlayfs: missing 'lowerdir' [ 204.939024][T13952] syzkaller0: entered promiscuous mode [ 204.939044][T13952] syzkaller0: entered allmulticast mode [ 204.945483][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'. [ 204.970750][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'. [ 204.978448][T13956] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 204.978464][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 204.978676][T13956] 8021q: VLANs not supported on tunl0 [ 205.367752][T13975] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2118'. [ 205.602281][T13989] misc userio: No port type given on /dev/userio [ 205.697232][ T58] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 205.755094][T13995] bonding: b is being created... [ 205.795587][T13999] gretap1: entered allmulticast mode [ 205.835179][T14005] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 205.847631][T14005] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 205.847653][T14005] overlayfs: failed to set xattr on upper [ 205.847661][T14005] overlayfs: ...falling back to redirect_dir=nofollow. [ 205.847668][T14005] overlayfs: ...falling back to index=off. [ 205.847675][T14005] overlayfs: ...falling back to uuid=null. [ 205.847682][T14005] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 205.860957][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 205.863833][ T42] kauditd_printk_skb: 162 callbacks suppressed [ 205.863862][ T42] audit: type=1400 audit(1792792381.149:21377): avc: denied { read } for pid=13981 comm="syz.2.2120" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.864864][ T42] audit: type=1400 audit(1792792381.149:21378): avc: denied { open } for pid=13981 comm="syz.2.2120" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.874666][ T42] audit: type=1400 audit(1792792381.158:21379): avc: denied { unmount } for pid=13306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 206.082755][T13982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.083278][T13982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.087932][ T42] audit: type=1400 audit(1792792381.354:21380): avc: denied { read write } for pid=13981 comm="syz.2.2120" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 206.087974][ T42] audit: type=1400 audit(1792792381.354:21381): avc: denied { open } for pid=13981 comm="syz.2.2120" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 206.089707][ T58] usb 7-1: unable to get BOS descriptor or descriptor too short [ 206.089731][ T58] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 206.090396][ T58] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 206.090418][ T58] usb 7-1: can't read configurations, error -71 [ 206.092410][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 206.151387][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 206.151435][T14019] bridge_slave_1: left allmulticast mode [ 206.151458][T14019] bridge_slave_1: left promiscuous mode [ 206.151578][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.153326][T14019] bridge_slave_0: left allmulticast mode [ 206.153339][T14019] bridge_slave_0: left promiscuous mode [ 206.153454][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.154091][ T42] audit: type=1400 audit(1792792381.420:21382): avc: denied { create } for pid=14018 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.154680][ T42] audit: type=1400 audit(1792792381.420:21383): avc: denied { write } for pid=14018 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.158742][ T42] audit: type=1400 audit(1792792381.429:21384): avc: denied { mount } for pid=14018 comm="syz.3.2134" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 206.158769][ T42] audit: type=1400 audit(1792792381.429:21385): avc: denied { mounton } for pid=14018 comm="syz.3.2134" path="/36/sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 206.164027][ T42] audit: type=1400 audit(1792792381.429:21386): avc: denied { create } for pid=14018 comm="syz.3.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.167698][ T5868] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 206.253775][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 206.254657][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.256293][ T9] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 206.256307][ T9] usb 6-1: Product: syz [ 206.256316][ T9] usb 6-1: Manufacturer: syz [ 206.256324][ T9] usb 6-1: SerialNumber: syz [ 206.257823][ T9] usb 6-1: config 0 descriptor?? [ 206.262525][ T9] keyspan 6-1:0.0: Keyspan 4 port adapter converter detected [ 206.262652][ T9] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 206.262681][ T9] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 88 [ 206.268918][ T9] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 206.276925][ T9] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 206.277662][ T9] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 206.279750][ T9] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 206.281336][ T9] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 206.282520][ T9] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 206.283572][ T9] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 206.284393][ T9] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 206.284738][ T67] Bluetooth: hci1: command tx timeout [ 206.291477][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 206.291496][T14028] netlink: 'syz.3.2135': attribute type 30 has an invalid length. [ 206.291506][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 206.291980][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 206.291993][T14028] netlink: 'syz.3.2135': attribute type 30 has an invalid length. [ 206.292005][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 206.321035][ T5868] usb 10-1: device descriptor read/64, error -71 [ 206.514825][T14033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14033 comm=syz.3.2137 [ 206.594700][ T5868] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 206.602807][ T9] usb 6-1: USB disconnect, device number 5 [ 206.610815][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 206.622027][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 206.624018][T14039] syzkaller1: entered promiscuous mode [ 206.624035][T14039] syzkaller1: entered allmulticast mode [ 206.632604][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 206.638608][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 206.641893][ T9] keyspan 6-1:0.0: device disconnected [ 206.744623][ T5868] usb 10-1: device descriptor read/64, error -71 [ 206.873048][ T5868] usb usb10-port1: attempt power cycle [ 206.994400][T14052] tmpfs: Bad value for 'mpol' [ 207.257298][ T5868] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 207.287775][T14055] cgroup: fork rejected by pids controller in /syz3 [ 207.295153][ T5868] usb 10-1: device descriptor read/8, error -71 [ 207.371858][T14089] netlink: 'syz.1.2145': attribute type 4 has an invalid length. [ 207.568316][ T5868] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 207.590399][ T5868] usb 10-1: device descriptor read/8, error -71 [ 207.706489][ T5868] usb usb10-port1: unable to enumerate USB device [ 207.882775][T14107] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 207.911595][T14107] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 207.911745][T14107] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 207.911802][T14107] pci 0000:00:01.0: BAR 4 [mem 0xfeaf6000-0xfeaf6fff] [ 207.911897][T14107] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 207.913218][T14107] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 207.942915][T14107] pci 0000:00:01.0: Adding to iommu group 1 [ 207.955543][T14107] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 207.955558][T14107] pci 0000:00:01.0: vgaarb: bridge control possible [ 207.955565][T14107] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 207.965448][T14107] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 207.971836][T14107] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 207.977639][T14107] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 208.019506][T14119] nbd: couldn't find device at index 2097152 [ 208.035750][T14107] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 208.035896][T14107] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 208.036865][T14107] [drm] features: -virgl +edid -resource_blob -host_visible [ 208.036874][T14107] [drm] features: -context_init -blob_alignment [ 208.051845][T14107] [drm] number of scanouts: 1 [ 208.051878][T14107] [drm] number of cap sets: 0 [ 208.053699][T14119] netlink: 'syz.3.2154': attribute type 19 has an invalid length. [ 208.053715][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 208.063391][T14119] netlink: 'syz.3.2154': attribute type 19 has an invalid length. [ 208.063407][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 208.080119][T13852] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.080220][T13852] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.080251][T13852] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.080278][T13852] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.109951][T14107] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 208.128010][T14125] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2155'. [ 208.206540][T14107] Console: switching to colour frame buffer device 160x50 [ 208.254889][T14107] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 208.344829][T14135] dlm: no locking on control device [ 208.407408][T14138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.459106][ T58] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 208.459842][ T58] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 208.732414][ T58] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 208.832772][T14150] : renamed from lo (while UP) [ 208.934208][T14156] overlay: ./file2 is not a directory [ 209.056113][T14167] libceph: resolve 'a' (ret=-3): failed [ 209.077058][T14168] ------------[ cut here ]------------ [ 209.077107][T14168] kernel BUG at net/ceph/mon_client.c:211! [ 209.077187][T14168] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 209.083883][T14168] CPU: 0 UID: 0 PID: 14168 Comm: syz.3.2170 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 209.089811][T14168] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 209.092263][T14168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.096336][T14168] RIP: 0010:__open_session+0x60f/0x740 [ 209.098734][T14168] Code: f6 44 89 e7 e8 02 f1 1e fa 89 c5 e9 2b fb ff ff e8 06 24 71 f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 f2 23 71 f6 90 <0f> 0b e8 2a 76 e5 f6 e9 7b fa ff ff 4c 89 f7 e8 1d 76 e5 f6 e9 16 [ 209.106640][T14168] RSP: 0018:ffffc90004377be0 EFLAGS: 00010293 [ 209.109180][T14168] RAX: 0000000000000000 RBX: ffff888063d9c290 RCX: 0000000000000000 [ 209.112449][T14168] RDX: ffff8880342ba580 RSI: ffffffff8b9c8efe RDI: ffff8880342ba580 [ 209.115725][T14168] RBP: ffff88802a62ba00 R08: 0000000000000005 R09: 0000000000000000 [ 209.119036][T14168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 209.121908][T14168] R13: 00000000ffffffff R14: ffff888063d9c400 R15: ffff888063d9c298 [ 209.124629][T14168] FS: 00007ff56d9d56c0(0000) GS:ffff8880d44e2000(0000) knlGS:0000000000000000 [ 209.127692][T14168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.129977][T14168] CR2: 00007f9ff195a670 CR3: 0000000059a68000 CR4: 0000000000352ef0 [ 209.132784][T14168] Call Trace: [ 209.133995][T14168] [ 209.135091][T14168] ? __ceph_monc_want_map+0x189/0x360 [ 209.136947][T14168] ceph_monc_open_session+0x46/0x60 [ 209.138760][T14168] __ceph_open_session+0x135/0x5f0 [ 209.140585][T14168] ? __pfx___mutex_lock+0x10/0x10 [ 209.142522][T14168] ? super_setup_bdi_name+0x1a3/0x250 [ 209.144795][T14168] ? __pfx___ceph_open_session+0x10/0x10 [ 209.147105][T14168] ? __pfx_woken_wake_function+0x10/0x10 [ 209.149343][T14168] ceph_get_tree+0xd98/0x1fd0 [ 209.151269][T14168] ? security_capable+0x80/0x260 [ 209.153327][T14168] vfs_get_tree+0x92/0x320 [ 209.155390][T14168] vfs_cmd_create+0xd7/0x2a0 [ 209.157398][T14168] __do_sys_fsconfig+0x55a/0xcb0 [ 209.159551][T14168] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 209.161853][T14168] do_syscall_64+0x123/0x790 [ 209.163838][T14168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.166340][T14168] RIP: 0033:0x7ff56f79f559 [ 209.168239][T14168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.176173][T14168] RSP: 002b:00007ff56d9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 209.179668][T14168] RAX: ffffffffffffffda RBX: 00007ff56fa26180 RCX: 00007ff56f79f559 [ 209.182993][T14168] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 209.186343][T14168] RBP: 00007ff56f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 209.189645][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.192933][T14168] R13: 00007ff56fa26218 R14: 00007ff56fa26180 R15: 00007ffd92c05e98 [ 209.196285][T14168] [ 209.197646][T14168] Modules linked in: [ 209.200113][T14168] ---[ end trace 0000000000000000 ]--- [ 209.217918][T14168] RIP: 0010:__open_session+0x60f/0x740 [ 209.217942][T14168] Code: f6 44 89 e7 e8 02 f1 1e fa 89 c5 e9 2b fb ff ff e8 06 24 71 f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 f2 23 71 f6 90 <0f> 0b e8 2a 76 e5 f6 e9 7b fa ff ff 4c 89 f7 e8 1d 76 e5 f6 e9 16 [ 209.217953][T14168] RSP: 0018:ffffc90004377be0 EFLAGS: 00010293 [ 209.217963][T14168] RAX: 0000000000000000 RBX: ffff888063d9c290 RCX: 0000000000000000 [ 209.217970][T14168] RDX: ffff8880342ba580 RSI: ffffffff8b9c8efe RDI: ffff8880342ba580 [ 209.217976][T14168] RBP: ffff88802a62ba00 R08: 0000000000000005 R09: 0000000000000000 [ 209.217983][T14168] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 209.217989][T14168] R13: 00000000ffffffff R14: ffff888063d9c400 R15: ffff888063d9c298 [ 209.217996][T14168] FS: 00007ff56d9d56c0(0000) GS:ffff8880d44e2000(0000) knlGS:0000000000000000 [ 209.218020][T14168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.218028][T14168] CR2: 00007f04e6df62f8 CR3: 0000000059a68000 CR4: 0000000000352ef0 [ 209.218037][T14168] Kernel panic - not syncing: Fatal exception [ 209.249772][T14168] Kernel Offset: disabled [ 209.251167][T14168] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:53:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b70ae5 RDI=ffffffff9cee40c0 RBP=ffffffff9cee4080 RSP=ffffc90004377388 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000020 R14=0000000000000001 R15=ffffc900043776a0 RIP=ffffffff85b70b0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff56d9d56c0 ffffffff 00c00000 GS =0000 ffff8880d44e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ff195a670 CR3=0000000059a68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f984635d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc17a0f216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc17a0f216 00007ffc17a0f21c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f984563714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9845637184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98456372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9845637176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98457f9600 00007f98457f95e0 00007f98457f95e8 00007f98457f9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f98457f95f8 00007f98457f95c8 00007f98457f9600 00007f98457f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff888020692580 RSI=ffffffff81b82e9e RDI=ffff888020692580 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b82e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d45e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c221c7ff8 CR3=000000000fd98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdcd40db6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdcd40db6 00007ffcdcd40dbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c2143714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c21437184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c214372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c21437176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c215f95f8 00007f3c215f95c8 00007f3c215f9600 00007f3c215f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f02e4152f0d0b4b6 83ecb92852e9824c 0b5e0c148394fa17 ec4abe8b2d4243da ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69bbe5c3fe62c1a6 2d44973a000b1685 352927aad42dd132 952c700b26b67efa ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24863a3e5121bcaa 7447c8589ec8dc20 86baab59a62a1428 01136979a1ae8d45 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4b1b5c5c4e18ba0 140ac2d15922eccc 4e27d8e678ec9566 dd4cefc9a92bc9a4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc900063c0000 RBX=ffff88802c8e4000 RCX=0000000001000202 RDX=00000000ffffffff RSI=ffffffff870d7c3b RDI=ffff888027fa2580 RBP=0000000000000000 RSP=ffffc90000648ec0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90000648ff8 R12=0000000000000000 R13=ffff88802c8e5848 R14=ffff88802c8e5460 R15=0000000000000000 RIP=ffffffff870d7c68 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f22a7433300 ffffffff 00c00000 GS =0000 ffff8880d46e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005588006a8f40 CR3=000000003e913000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=b2cd5df2f10c8b39 04fcd4369fc8b2be b2cd5df2f10c8b39 04fcd4369fc8b2be b2cd5df2f10c8b39 04fcd4369fc8b2be b2cd5df2f10c8b39 04fcd4369fc8b2be ZMM18=1a2f6c3046d2b146 8d73c02d7fd952c1 1a2f6c3046d2b146 8d73c02d7fd952c1 1a2f6c3046d2b146 8d73c02d7fd952c1 1a2f6c3046d2b146 8d73c02d7fd952c1 ZMM19=3f0f000000000000 0000000000000005 3f0f000000000000 0000000000000004 3f0f000000000000 0000000000000003 3f0f000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ebe0a0b61ed3b79 d00caa8aab99c474 396c1c32f0937efd 6b08f8fa3f6d7007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e1048b1cb28f971 66203d545c8f554a 0be4f482ebc771d1 9b7e13cdbf6f6273 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d2791990f3329a8 50bae7ea44943c0b eb6cc806debdd2c2 b6c5442ff8080a80 ZMM24=7fd952c17fd952c1 7fd952c17fd952c1 7fd952c17fd952c1 7fd952c17fd952c1 7fd952c17fd952c1 7fd952c17fd952c1 7fd952c17fd952c1 7fd952c17fd952c1 ZMM25=8d73c02d8d73c02d 8d73c02d8d73c02d 8d73c02d8d73c02d 8d73c02d8d73c02d 8d73c02d8d73c02d 8d73c02d8d73c02d 8d73c02d8d73c02d 8d73c02d8d73c02d ZMM26=46d2b14646d2b146 46d2b14646d2b146 46d2b14646d2b146 46d2b14646d2b146 46d2b14646d2b146 46d2b14646d2b146 46d2b14646d2b146 46d2b14646d2b146 ZMM27=1a2f6c301a2f6c30 1a2f6c301a2f6c30 1a2f6c301a2f6c30 1a2f6c301a2f6c30 1a2f6c301a2f6c30 1a2f6c301a2f6c30 1a2f6c301a2f6c30 1a2f6c301a2f6c30 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3e0f00003e0f0000 3e0f00003e0f0000 3e0f00003e0f0000 3e0f00003e0f0000 3e0f00003e0f0000 3e0f00003e0f0000 3e0f00003e0f0000 3e0f00003e0f0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff888028dd4b00 RSI=ffffffff8200f1be RDI=ffff888028dd4b00 RBP=ffff88806a0440a0 RSP=ffffc900039ef4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed10051bac13 R13=0000000000000003 R14=ffffed100d408815 R15=0000000000000001 RIP=ffffffff8200f1c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555727f0500 ffffffff 00c00000 GS =0000 ffff8880d47e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9ff27556c8 CR3=000000005d066000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe42921f46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe42921f46 00007ffe42921f4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff1a3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff1a37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff1a372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff1a37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000