last executing test programs: 2m28.278287194s ago: executing program 2 (id=491): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0xf0d7f39b386ab331, 0x0) landlock_restrict_self(r0, 0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000014280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000002c0)=[0x85f8], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000000000000e4", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000"], 0x30}}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'lo\x00'}}, 0x1e) 2m28.169497646s ago: executing program 2 (id=498): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) write$cgroup_pressure(r3, &(0x7f0000000140)={'some', 0x20, 0x66ac, 0x20, 0x9}, 0x2f) 2m28.115799641s ago: executing program 2 (id=501): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001600010325bd700000190000"], 0x14}, 0x1, 0x0, 0x0, 0x4010050}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0xc000980}, 0x40080d4) 2m28.050519634s ago: executing program 2 (id=505): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f00000001c0), 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000058000/0x3000)=nil, 0x3000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@sha1={0x1, "a679dc43060ab5aaebe8efe5c83f3aede83f609d"}, 0x15, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 2m27.991961075s ago: executing program 2 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "794a8fef68a42322"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "ae58003d3785e048"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x98}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8881) 2m27.540572831s ago: executing program 2 (id=514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000027c0)={0x54, r1, 0x1, 0x40400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x8e202}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}]}, 0x54}, 0x1, 0x1000000, 0x0, 0x20000010}, 0x0) 2m27.498782446s ago: executing program 32 (id=514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000027c0)={0x54, r1, 0x1, 0x40400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x8e202}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}]}, 0x54}, 0x1, 0x1000000, 0x0, 0x20000010}, 0x0) 2m27.434767476s ago: executing program 1 (id=515): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x48100000, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xfffffffffffffffe}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2m27.434216528s ago: executing program 1 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0xffffffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) symlink(&(0x7f0000001480)='./bus\x00', &(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000100)={0xd, 0x101, 0x0, {0x6, 0x720537be, 0xa001, 0x5}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x809}, {0x1ff, 0xffffffffa, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0xbc2536767ff1cec3, 0x1}, {{@in=@private=0xa010100, 0x1, 0x32}, 0xa, @in6=@mcast1, 0x3506, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x9}}, 0xe8) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0xa9525000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) close(0x3) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) 2m26.526329653s ago: executing program 1 (id=529): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x64e, 0x100000, 0x200000, 0x3, 0x9, 0x7fff}) 2m26.337837002s ago: executing program 1 (id=530): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001600010325bd70000019000015"], 0x14}, 0x1, 0x0, 0x0, 0x4010050}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x40080d4) 2m26.337370784s ago: executing program 1 (id=531): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r3 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x5, 0x16d003) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101901, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$VIDIOC_TRY_DECODER_CMD(r10, 0xc0485661, &(0x7f0000000700)={0x0, 0x2, @start={0x9}}) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x0, 0x3ff000000}]}) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000640400012cbd7000fddbdf25f5306c124324a2eaf9f1c1e0fe1c927793dbb32fe008fd3f3d611b284e152853b69209b55b2a937d8ab892e0e77ca9437b447a7bfd25e521442ce17c2f95c6af5b58882793d27a610bf3fdb46d7b08be355f7e9bdd90bd882a0380d8babc5b4bbdb6089991d3aaac"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4004850) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r9, {0x78}}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x13, 0x300, 0x70bd28, 0x25dfdbfe, {0x1e, 0x9, 0x3, 0x80, {0x4e21, 0x4e24, [0x6128, 0x7fffffff, 0x4, 0xf], [0x1000, 0x6, 0x7, 0xffff5e91], 0x0, [0x6, 0x401]}, 0xa, 0xf4f}, [@INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "e65b81bb39c9d92cc817a542123ac2a24fb2c6b0d152e37b37"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x410}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006400000000000000002"], 0x5c}}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="daf71b242bf1af1e9a4045add1972a137942c11e894ad2606c71704fc5f07dd3b1f6f1a5c099b7841505155c46572580db74415fbf6fb171f78163459d187babc20e888ba013820b468c90e02e4000d710035b99f4638b6a3a908c12c4c43e58da778f2e9c79b66f09be95a4052aecb6367b1c455e491dd030d4f693b1a651d9703b706d291c9d70a9695b7b09e3c7ab180b4bf5b14b214870dec4a575ae6844e106db6ac1934cd3af162ffd016bbd87a6a3fa9fb4c86f57e5c529bd8f1ad4d862058e6ac861b606", @ANYRES64=r3], 0xa8}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 2m26.169287313s ago: executing program 1 (id=532): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000003000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xff00000000000000) (fail_nth: 3) 1m28.530706738s ago: executing program 33 (id=532): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000003000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xff00000000000000) (fail_nth: 3) 1m23.769005347s ago: executing program 3 (id=599): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000001c007919b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r3, r7], 0x2, 0x1000}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000180)=@can={{0x2, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "52b8a3a57624ffdc"}, 0x10}}, 0x28000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2, 0xfff1}, {0xfff3, 0x9}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0xe, 0x4, {{0x15, 0x4, 0x2, 0x3, 0x54, 0x67, 0x0, 0x40, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0xb, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "7be14fbd8486061c16679ae43013"}]}, @ssrr={0x89, 0xf, 0xf6, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x44, 0x10, "cba93c189f59fa7476d86bec9216"}]}}}}}) r16 = socket$packet(0x11, 0x3, 0x300) r17 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r17) getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r18, @ANYBLOB="11980400419804002800128008000500736974001c00028008002300ac1414aa08000c000000000006000f0c0000000004f6722d7324b4817b8bf67a73b55aa7a5be34ef"], 0x48}}, 0x0) sendto$packet(r16, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r18, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x12c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x9ac9982b21be3d2b}, 0x20000004) 1m23.694576771s ago: executing program 3 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) clock_gettime(0x2, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) 1m22.524373668s ago: executing program 0 (id=602): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="0c37f8246f3e", 0xcb04}, {&(0x7f0000000440)='0', 0x1}], 0x2) 1m21.656925405s ago: executing program 3 (id=603): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = fsmount(0xffffffffffffffff, 0x1, 0x72) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x50000, 0x4, 0xf435, 0xb, 0x0, [{0x4, 0x1, 0x90, '\x00', 0x7}, {0x7f, 0x9, 0x8, '\x00', 0x80}, {0x7, 0x7, 0x9, '\x00', 0xf7}, {0x8, 0x5, 0x7, '\x00', 0x2}, {0x5, 0x19, 0x10, '\x00', 0x3}, {0x7, 0x78, 0x9, '\x00', 0xfa}, {0x10, 0xb3, 0xf, '\x00', 0x9}, {0xfa, 0x0, 0x6, '\x00', 0xa}, {0x35, 0xec, 0x0, '\x00', 0xf}, {0xa, 0x8, 0x4, '\x00', 0x7}, {0x0, 0x1, 0x9, '\x00', 0x20}, {0x7, 0x2, 0x46, '\x00', 0x2}, {0xc0, 0xff, 0x7, '\x00', 0x5}, {0x10, 0x4e, 0x3, '\x00', 0x8}, {0x6, 0x5, 0x2, '\x00', 0x1}, {0x3, 0x2, 0xe4}, {0xfc, 0x1, 0x4, '\x00', 0x8b}, {0xe0, 0x0, 0xe5, '\x00', 0xda}, {0x6, 0x4, 0x7, '\x00', 0x6}, {0x1, 0x1d, 0x5, '\x00', 0x2}, {0x4, 0x6, 0x6, '\x00', 0x18}, {0x4, 0x19, 0x8, '\x00', 0xf5}, {0x0, 0x3, 0x1b, '\x00', 0x4}, {0x8, 0xf9, 0x64, '\x00', 0x5}]}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f0000000900)={'syz_tun\x00', @random="d9a1f877ad6c"}) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x44, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x8090) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x30}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5860}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48044}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.568022514s ago: executing program 3 (id=604): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000540)=""/88, 0x58) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f2435f01000884", 0x7, 0x4008041, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000104000000000004000200060003000000090300"], 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000500)={0x3, 0x7, 0x2, 0x1, 0x6, 0x1}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="561ddcf1fa8a916fa822efe921714f677d2a03cdaf645762a1daf14f536c653742605205bc0279a9b91d10de0f573559b214f24846b866185f9da35882fcadcc4ded8c869399f822809cd4924d6862a1795a675c05a0975122d5a516c9c6a44d991c01d59f5b8de9f66dbcbc6fee1e1313f0bcc53ab5407c3a8a813fb2622d7b813ebf0ead743f993a49ead9b6df266c991b5f4aa10b072ac7dcb2985410e3c0aade23abaa6813444ed3bb0045fd013f44583d97660402fb8d76dfd8a1b4b66fce9c2fe5b9fac07dec41d57c003608ed", 0xd0}, {&(0x7f00000006c0)="7d7cd7c55f8d92d600bfd7afda9bc2cfced3dda5b549c684c6d7c5e93831c3e54263aeb638247042ea79dd09578fdabf2642129c6b2fb301d8aa7d393e4c14a3b6d9ad8845253da3d19e2d4de3576070dfd83973286f7e7ebec130cf4065081e36e46e31f8510b5edd96dd56146d2e5ccfd2ced0c83efa3ab2f2067430baa70ce5a57a52a47003bd7f83635182b17da3fae3d9abedf264bb924876895fdd5bc466145eea9e26291bec019ddadf98aee2fcc0162c6718fa597e6f81dd923cca564e04b994251cde02e79364408150c15883421f805c0b3d19ede4e1bd82efdf96748f", 0xe2}, {&(0x7f00000007c0)="80a025537160e391ce738256af93", 0xe}, {&(0x7f0000000800)="3f423a7e5cf06c74205d01be2f8cf279bc59545ddc412a7d47c2451afd28d80e284f8c1e01725a1a3b78eea87f0523c11d32da7ae51ddbf9166485a447ad8ba43163c3a4243a69374e34b60fe479be1681ee00f97f72843a5a960fb1f102b2a10c35222cb78e545c4a08212ae4e273935d2e6cff12ecfff8e5a9b0336087c81bfad3de85fe24163a03590b3d2424f86230f7001119d6ca4e9698076f37e9fbc65fecdef0d2cacfacb54a525e3b3b4dc7e4b40fffadaecbbf306181688e08a4bc37082a4337f78df38af729b4272e", 0xce}], 0x4, &(0x7f0000000940)=[{0x110, 0x119, 0xffffffff, "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"}], 0x110}, 0xc081) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000016000000450000002500000019000400480000000d00000000000006040000000000f93132", 0x39}], 0x1) unshare(0x36040800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x4040}, 0x20010840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m21.559362506s ago: executing program 0 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) clock_gettime(0x2, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000640)=ANY=[@ANYBLOB="03031400000086019a71522a83fba5f170605934367a4cc7bcb0bcf95dd72c5984e5c34f2bdef6ea90bd525e1f70a1b9f5f6b0a5e1296b77ece22ebfc907f713220ca14db286954ecd21d527fbd2163c3ed3cb4084b41ef61e65938f792bc664d32e0fcbc56bd9c9e1c7c92e6434e1e4bb1f4d6e7d8b8ce02b558a8405235c3bfe2e3cd46b9538b58e91bfcfd74790c168df77c0f2870fa985942fb3b0dead3a8d54a64e669da566e71a392e6142379a548eac10494c97236e307f4e222fb423f3f5424dde93bd1ca98b3846c6d0aa6cf6152fbeeb90e9c49dfe9c0000a29ea1cd795ba41500004b84b5927c337e5ec57b4a78db20a2370ec8493d00c1d38851d854560c05a1fb59c6c7a2edddc955519a576f4b88f9a34ddc5ac8c60cd43d02ca5996f35775fbac7f49244731e0a10270372dc46f124a519f4af919ad85a14b79ac0e7c018f7d459d6db6cbb88432bf04806d04d017124dfa7a4c962319c8016a42aec5974edd04e16a45f61e7ea2ced230c6b42a9b9408aeeb6637dc20f8d8775dfceb87d865fd2672fd3f286fb6362e75c7fe1ccdc747b915470a4096620a4e127dcff366faea09954d6ef30d8d3123b1acb7905b9f160b3a00bcadd0d300b6911b9ff9fe1149de89badf3961e57c15fb457fe31f2426fa23ffa5fb4f826a8f9a7a6688d8eaeece660cbcc6dc6bb0f676c23e10e2bd98542e66b6f37c783fe83d8e9a1c5e2a7d0d87dfc7f3d8939e0000"], 0x1a3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) 1m21.26090959s ago: executing program 3 (id=605): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000003480)=0x2, 0x4) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/anycast6\x00') r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@none, 0x7, 0x9, "3ac479", 0x5, 0x9}]}}}, 0x12) r6 = semget$private(0x0, 0x4000000009, 0xa0) semop(r6, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semctl$SETALL(r6, 0x0, 0x11, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close(0x3) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x5c22, 0xdb0, 0xffffffff, 0xffff3244, 0x1, 0x3, 0xc, 0xffffffff, 0x5, 0x7, 0x3, 0x2, 0x41, 0x403, 0x6, 0x7, 0x1000004, 0xffffffff, 0x4, 0x8, 0x90, 0x6, 0x200009, 0x5, 0x7, 0x8, 0x2, 0x8, 0x5, 0xe06, 0xfffffffd]}) read(r5, &(0x7f0000000000)=""/71, 0x47) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r4, 0x80047437, 0xfffffffffffeffff) read$snddsp(r3, &(0x7f0000000080)=""/120, 0x78) 1m19.633821829s ago: executing program 0 (id=606): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64000000}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8001, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1m19.518419855s ago: executing program 0 (id=607): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x441}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf250300000014000600626f6e645f736c6176655f310000000008000500ac1e000114000200000000000000000000000000000000ef9b000100000000002d00070073797374656d5f753a6f626a6563745f723a7075626c69635f636f6e74656e745f72775f743a7330000000001414a43429dc600ed8"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010050}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0xc000980}, 0x40080d4) 1m19.461072268s ago: executing program 0 (id=608): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @time={0x7fffffff, 0x6}, {}, {}, @raw32}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0xdc, 0x0, 0xfd, @time={0x1}, {}, {}, @result}], 0x1c) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2) readv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)=@mmap={0x2, 0x1, 0x4, 0x110060, 0x7fffffff, {}, {0x1, 0x0, 0x6, 0xd, 0x0, 0x2, "36eaa30d"}, 0x101, 0x1, {}, 0x7}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000100)={0x0, @time={0x7ff, 0x2}, 0x0, {0x5, 0x5}, 0x9, 0x1, 0x6}) write(r4, &(0x7f0000000340)="07000000010000", 0x7) 1m19.421387379s ago: executing program 0 (id=609): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000001c007919b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r3, r7], 0x2, 0x1000}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000180)=@can={{0x2, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "52b8a3a57624ffdc"}, 0x10}}, 0x28000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2, 0xfff1}, {0xfff3, 0x9}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0xe, 0x4, {{0x15, 0x4, 0x2, 0x3, 0x54, 0x67, 0x0, 0x40, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0xb, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "7be14fbd8486061c16679ae43013"}]}, @ssrr={0x89, 0xf, 0xf6, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x44, 0x10, "cba93c189f59fa7476d86bec9216"}]}}}}}) r16 = socket$packet(0x11, 0x3, 0x300) r17 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r17) getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r18, @ANYBLOB="11980400419804002800128008000500736974001c00028008002300ac1414aa08000c000000000006000f0c0000000004f6722d7324b4817b8bf67a73b55aa7a5be34ef"], 0x48}}, 0x0) sendto$packet(r16, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r18, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x12c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x9ac9982b21be3d2b}, 0x20000004) 1m19.421178295s ago: executing program 3 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x1004}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 44.877615781s ago: executing program 5 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x2000}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "566d994784e1f620ede30714556a01d3f51ddde4de44c36fe15f0771aa861663f0a6f6e1c4a691c3d1d477d703e0d800ee26c89ccd9c08753b80e91cbe210612"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000c060103000000000000000007000006050001000700000005000100070000000900020073797a31000000000900020073797a3100000000d3b10b37535f595b552eed5c31c2815bd0fe"], 0x3c}}, 0x800) 38.268169649s ago: executing program 4 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800002710000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 37.47549017s ago: executing program 5 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x2000}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "566d994784e1f620ede30714556a01d3f51ddde4de44c36fe15f0771aa861663f0a6f6e1c4a691c3d1d477d703e0d800ee26c89ccd9c08753b80e91cbe210612"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000c060103000000000000000007000006050001000700000005000100070000000900020073797a31000000000900020073797a3100000000d3b10b37535f595b552eed5c31c2815bd0fe"], 0x3c}}, 0x800) 30.778601421s ago: executing program 4 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800002710000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 29.733869445s ago: executing program 5 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x2000}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "566d994784e1f620ede30714556a01d3f51ddde4de44c36fe15f0771aa861663f0a6f6e1c4a691c3d1d477d703e0d800ee26c89ccd9c08753b80e91cbe210612"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000c060103000000000000000007000006050001000700000005000100070000000900020073797a31000000000900020073797a3100000000d3b10b37535f595b552eed5c31c2815bd0fe"], 0x3c}}, 0x800) 22.858712091s ago: executing program 4 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800002710000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 22.334600843s ago: executing program 5 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x2000}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "566d994784e1f620ede30714556a01d3f51ddde4de44c36fe15f0771aa861663f0a6f6e1c4a691c3d1d477d703e0d800ee26c89ccd9c08753b80e91cbe210612"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000c060103000000000000000007000006050001000700000005000100070000000900020073797a31000000000900020073797a3100000000d3b10b37535f595b552eed5c31c2815bd0fe"], 0x3c}}, 0x800) 16.338156359s ago: executing program 4 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800002710000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 14.627119837s ago: executing program 5 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x2000}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "566d994784e1f620ede30714556a01d3f51ddde4de44c36fe15f0771aa861663f0a6f6e1c4a691c3d1d477d703e0d800ee26c89ccd9c08753b80e91cbe210612"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000c060103000000000000000007000006050001000700000005000100070000000900020073797a31000000000900020073797a3100000000d3b10b37535f595b552eed5c31c2815bd0fe"], 0x3c}}, 0x800) 8.458567212s ago: executing program 4 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800002710000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 6.089353363s ago: executing program 5 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x2000}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee00}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "566d994784e1f620ede30714556a01d3f51ddde4de44c36fe15f0771aa861663f0a6f6e1c4a691c3d1d477d703e0d800ee26c89ccd9c08753b80e91cbe210612"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000c060103000000000000000007000006050001000700000005000100070000000900020073797a31000000000900020073797a3100000000d3b10b37535f595b552eed5c31c2815bd0fe"], 0x3c}}, 0x800) 0s ago: executing program 4 (id=523): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800002710000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) kernel console output (not intermixed with test programs): permissive=1 [ 67.045363][ T40] audit: type=1400 audit(1775249595.683:596): avc: denied { map } for pid=6664 comm="syz.2.255" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=14748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.047206][ T6673] FAULT_INJECTION: forcing a failure. [ 67.047206][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 67.054448][ T40] audit: type=1400 audit(1775249595.683:597): avc: denied { read write } for pid=6664 comm="syz.2.255" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=14748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.062037][ T6673] CPU: 3 UID: 0 PID: 6673 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(full) [ 67.062052][ T6673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.062059][ T6673] Call Trace: [ 67.062063][ T6673] [ 67.062067][ T6673] dump_stack_lvl+0x100/0x190 [ 67.062088][ T6673] should_fail_ex.cold+0x5/0xa [ 67.062103][ T6673] should_failslab+0xc2/0x120 [ 67.062115][ T6673] __kvmalloc_node_noprof+0xfa/0xa00 [ 67.062131][ T6673] ? simple_xattr_alloc+0x4a/0xa0 [ 67.062147][ T6673] ? shmem_initxattrs+0x3b9/0x570 [ 67.062161][ T6673] simple_xattr_alloc+0x4a/0xa0 [ 67.062176][ T6673] shmem_initxattrs+0x225/0x570 [ 67.062190][ T6673] security_inode_init_security+0x242/0x370 [ 67.062204][ T6673] ? __pfx_shmem_initxattrs+0x10/0x10 [ 67.062217][ T6673] ? __pfx_security_inode_init_security+0x10/0x10 [ 67.062235][ T6673] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.062251][ T6673] shmem_mknod+0x2bf/0x470 [ 67.062266][ T6673] ? __pfx_shmem_mknod+0x10/0x10 [ 67.062278][ T6673] ? bpf_lsm_inode_create+0x9/0x10 [ 67.062296][ T6673] ? __pfx_shmem_create+0x10/0x10 [ 67.062309][ T6673] lookup_open.isra.0+0xc47/0x11b0 [ 67.062329][ T6673] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 67.062348][ T6673] ? __pfx___might_resched+0x10/0x10 [ 67.062361][ T6673] ? mnt_get_write_access+0x52/0x2f0 [ 67.062380][ T6673] ? __pfx_down_write+0x10/0x10 [ 67.062390][ T6673] ? mnt_get_write_access+0x1e9/0x2f0 [ 67.062408][ T6673] path_openat+0x2291/0x31a0 [ 67.062425][ T6673] ? __pfx_path_openat+0x10/0x10 [ 67.062442][ T6673] do_file_open+0x20e/0x430 [ 67.062455][ T6673] ? __pfx_do_file_open+0x10/0x10 [ 67.062476][ T6673] ? alloc_fd+0x476/0x790 [ 67.062489][ T6673] ? do_getname+0x191/0x390 [ 67.062505][ T6673] do_sys_openat2+0x10d/0x1e0 [ 67.062519][ T6673] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.062532][ T6673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.062544][ T6673] ? __fget_files+0x21f/0x3d0 [ 67.062558][ T6673] __x64_sys_openat+0x12d/0x210 [ 67.062572][ T6673] ? __pfx___x64_sys_openat+0x10/0x10 [ 67.062586][ T6673] ? ksys_write+0x1ac/0x250 [ 67.062600][ T6673] do_syscall_64+0x106/0xf80 [ 67.062616][ T6673] ? clear_bhb_loop+0x40/0x90 [ 67.062629][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.062639][ T6673] RIP: 0033:0x7fc58859c819 [ 67.062649][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.062658][ T6673] RSP: 002b:00007fc5894d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.062670][ T6673] RAX: ffffffffffffffda RBX: 00007fc588815fa0 RCX: 00007fc58859c819 [ 67.062676][ T6673] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 67.062682][ T6673] RBP: 00007fc5894d3090 R08: 0000000000000000 R09: 0000000000000000 [ 67.062689][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.062695][ T6673] R13: 00007fc588816038 R14: 00007fc588815fa0 R15: 00007ffea3124278 [ 67.062708][ T6673] [ 67.196591][ T6681] binder: 6680:6681 unknown command 0 [ 67.198548][ T6681] binder: 6680:6681 ioctl c0306201 200000000080 returned -22 [ 67.201832][ T6681] binder: 6680:6681 ioctl c0306201 200000000180 returned -22 [ 67.334076][ T6695] capability: warning: `syz.3.268' uses 32-bit capabilities (legacy support in use) [ 67.432912][ T6683] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 67.433526][ T6709] random: crng reseeded on system resumption [ 67.441551][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 67.595037][ T6718] FAULT_INJECTION: forcing a failure. [ 67.595037][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 67.598974][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 67.598991][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.598998][ T6718] Call Trace: [ 67.599003][ T6718] [ 67.599008][ T6718] dump_stack_lvl+0x100/0x190 [ 67.599031][ T6718] should_fail_ex.cold+0x5/0xa [ 67.599046][ T6718] ? selinux_ima_measure_state_locked+0x14e/0x10e0 [ 67.599064][ T6718] should_failslab+0xc2/0x120 [ 67.599076][ T6718] __kmalloc_noprof+0xe0/0x850 [ 67.599096][ T6718] selinux_ima_measure_state_locked+0x14e/0x10e0 [ 67.599118][ T6718] ? __pfx_selinux_ima_measure_state_locked+0x10/0x10 [ 67.599142][ T6718] ? selinux_transaction_write+0x181/0x1a0 [ 67.599155][ T6718] selinux_ima_measure_state+0x5f/0xb0 [ 67.599173][ T6718] sel_write_enforce+0x3fc/0x510 [ 67.599187][ T6718] ? __pfx_sel_write_enforce+0x10/0x10 [ 67.599205][ T6718] ? __pfx_sel_write_enforce+0x10/0x10 [ 67.599218][ T6718] vfs_writev+0x5ea/0xe10 [ 67.599235][ T6718] ? rcu_is_watching+0x12/0xc0 [ 67.599252][ T6718] ? __pfx_vfs_writev+0x10/0x10 [ 67.599268][ T6718] ? fdget_pos+0x2aa/0x380 [ 67.599282][ T6718] ? find_held_lock+0x2b/0x80 [ 67.599306][ T6718] ? __fget_files+0x21f/0x3d0 [ 67.599322][ T6718] ? do_writev+0x13e/0x340 [ 67.599338][ T6718] do_writev+0x13e/0x340 [ 67.599356][ T6718] ? __pfx_do_writev+0x10/0x10 [ 67.599377][ T6718] do_syscall_64+0x106/0xf80 [ 67.599395][ T6718] ? clear_bhb_loop+0x40/0x90 [ 67.599409][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.599421][ T6718] RIP: 0033:0x7f4d55b9c819 [ 67.599431][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.599442][ T6718] RSP: 002b:00007f4d56aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 67.599453][ T6718] RAX: ffffffffffffffda RBX: 00007f4d55e15fa0 RCX: 00007f4d55b9c819 [ 67.599460][ T6718] RDX: 0000000000000002 RSI: 0000200000001480 RDI: 0000000000000003 [ 67.599466][ T6718] RBP: 00007f4d56aee090 R08: 0000000000000000 R09: 0000000000000000 [ 67.599473][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.599483][ T6718] R13: 00007f4d55e16038 R14: 00007f4d55e15fa0 R15: 00007ffe1ab99c88 [ 67.599497][ T6718] [ 67.599502][ T6718] SELinux: selinux_ima_measure_state_locked: failed to read state. [ 67.994346][ T6734] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 68.095509][ T6744] netlink: 64 bytes leftover after parsing attributes in process `syz.3.288'. [ 68.189096][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 68.418605][ T6772] FAULT_INJECTION: forcing a failure. [ 68.418605][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 68.423787][ T6772] CPU: 2 UID: 0 PID: 6772 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(full) [ 68.423803][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.423809][ T6772] Call Trace: [ 68.423813][ T6772] [ 68.423818][ T6772] dump_stack_lvl+0x100/0x190 [ 68.423840][ T6772] should_fail_ex.cold+0x5/0xa [ 68.423855][ T6772] should_failslab+0xc2/0x120 [ 68.423867][ T6772] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 68.423884][ T6772] ? __alloc_skb+0x140/0x710 [ 68.423901][ T6772] __alloc_skb+0x140/0x710 [ 68.423914][ T6772] ? __alloc_skb+0x5b7/0x710 [ 68.423928][ T6772] ? __pfx___alloc_skb+0x10/0x10 [ 68.423946][ T6772] create_monitor_ctrl_open+0x13d/0x790 [ 68.423962][ T6772] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 68.423977][ T6772] ? __pfx_cgroup_migrate_add_src+0x2/0x10 [ 68.423990][ T6772] ? security_capable+0x80/0x260 [ 68.424006][ T6772] hci_sock_ioctl+0x4ce/0x7e0 [ 68.424026][ T6772] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 68.424039][ T6772] ? tomoyo_path_number_perm+0x188/0x580 [ 68.424058][ T6772] sock_do_ioctl+0x118/0x280 [ 68.424069][ T6772] ? __pfx_sock_do_ioctl+0x10/0x10 [ 68.424083][ T6772] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.424100][ T6772] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.424119][ T6772] sock_ioctl+0x599/0x6b0 [ 68.424132][ T6772] ? __pfx_sock_ioctl+0x10/0x10 [ 68.424142][ T6772] ? hook_file_ioctl_common+0x146/0x410 [ 68.424158][ T6772] ? selinux_file_ioctl+0x139/0x290 [ 68.424174][ T6772] ? selinux_file_ioctl+0xb4/0x290 [ 68.424194][ T6772] ? __pfx_sock_ioctl+0x10/0x10 [ 68.424206][ T6772] __x64_sys_ioctl+0x18e/0x210 [ 68.424224][ T6772] do_syscall_64+0x106/0xf80 [ 68.424239][ T6772] ? clear_bhb_loop+0x40/0x90 [ 68.424253][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.424263][ T6772] RIP: 0033:0x7fc58859c819 [ 68.424273][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.424283][ T6772] RSP: 002b:00007fc5894d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.424294][ T6772] RAX: ffffffffffffffda RBX: 00007fc588815fa0 RCX: 00007fc58859c819 [ 68.424301][ T6772] RDX: 0000200000000040 RSI: 00000000800448d4 RDI: 0000000000000004 [ 68.424307][ T6772] RBP: 00007fc5894d3090 R08: 0000000000000000 R09: 0000000000000000 [ 68.424313][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.424319][ T6772] R13: 00007fc588816038 R14: 00007fc588815fa0 R15: 00007ffea3124278 [ 68.424332][ T6772] [ 68.434229][ T6773] binder: Bad value for 'max' [ 68.558813][ T6763] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 68.597654][ T6790] binder: 6788:6790 unknown command 0 [ 68.599411][ T6790] binder: 6788:6790 ioctl c0306201 200000000080 returned -22 [ 68.602952][ T6790] binder: BINDER_SET_CONTEXT_MGR already set [ 68.605025][ T6790] binder: 6788:6790 ioctl 4018620d 200000000040 returned -16 [ 68.664151][ T6800] FAULT_INJECTION: forcing a failure. [ 68.664151][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 68.668135][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.1.312 Not tainted syzkaller #0 PREEMPT(full) [ 68.668155][ T6800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.668161][ T6800] Call Trace: [ 68.668165][ T6800] [ 68.668170][ T6800] dump_stack_lvl+0x100/0x190 [ 68.668192][ T6800] should_fail_ex.cold+0x5/0xa [ 68.668207][ T6800] ? tomoyo_encode2+0xfb/0x3c0 [ 68.668224][ T6800] should_failslab+0xc2/0x120 [ 68.668236][ T6800] __kmalloc_noprof+0xe0/0x850 [ 68.668251][ T6800] ? d_absolute_path+0x136/0x1b0 [ 68.668269][ T6800] tomoyo_encode2+0xfb/0x3c0 [ 68.668288][ T6800] tomoyo_encode+0x29/0x50 [ 68.668307][ T6800] tomoyo_realpath_from_path+0x18c/0x690 [ 68.668327][ T6800] tomoyo_path_number_perm+0x23c/0x580 [ 68.668341][ T6800] ? tomoyo_path_number_perm+0x22e/0x580 [ 68.668356][ T6800] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.668384][ T6800] ? find_held_lock+0x2b/0x80 [ 68.668398][ T6800] ? __fget_files+0x215/0x3d0 [ 68.668409][ T6800] ? hook_file_ioctl_common+0x146/0x410 [ 68.668423][ T6800] ? __fget_files+0x21f/0x3d0 [ 68.668437][ T6800] security_file_ioctl+0xd3/0x230 [ 68.668453][ T6800] __x64_sys_ioctl+0xb7/0x210 [ 68.668471][ T6800] do_syscall_64+0x106/0xf80 [ 68.668488][ T6800] ? clear_bhb_loop+0x40/0x90 [ 68.668501][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.668512][ T6800] RIP: 0033:0x7f4d55b9c819 [ 68.668521][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.668532][ T6800] RSP: 002b:00007f4d56aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.668542][ T6800] RAX: ffffffffffffffda RBX: 00007f4d55e15fa0 RCX: 00007f4d55b9c819 [ 68.668548][ T6800] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 68.668554][ T6800] RBP: 00007f4d56aee090 R08: 0000000000000000 R09: 0000000000000000 [ 68.668560][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.668566][ T6800] R13: 00007f4d55e16038 R14: 00007f4d55e15fa0 R15: 00007ffe1ab99c88 [ 68.668579][ T6800] [ 68.668589][ T6800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.808901][ T6808] FAULT_INJECTION: forcing a failure. [ 68.808901][ T6808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.815013][ T6808] CPU: 2 UID: 0 PID: 6808 Comm: syz.0.315 Not tainted syzkaller #0 PREEMPT(full) [ 68.815029][ T6808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.815037][ T6808] Call Trace: [ 68.815041][ T6808] [ 68.815046][ T6808] dump_stack_lvl+0x100/0x190 [ 68.815070][ T6808] should_fail_ex.cold+0x5/0xa [ 68.815086][ T6808] _copy_to_user+0x32/0xd0 [ 68.815100][ T6808] simple_read_from_buffer+0xcb/0x170 [ 68.815114][ T6808] proc_fail_nth_read+0x1af/0x230 [ 68.815131][ T6808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.815149][ T6808] ? rw_verify_area+0xce/0x6d0 [ 68.815165][ T6808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.815182][ T6808] vfs_read+0x1e4/0xb30 [ 68.815193][ T6808] ? __pfx_vfs_read+0x10/0x10 [ 68.815203][ T6808] ? __fget_files+0x215/0x3d0 [ 68.815218][ T6808] ? __fget_files+0x21f/0x3d0 [ 68.815234][ T6808] ksys_read+0x12a/0x250 [ 68.815251][ T6808] ? __pfx_ksys_read+0x10/0x10 [ 68.815265][ T6808] do_syscall_64+0x106/0xf80 [ 68.815283][ T6808] ? clear_bhb_loop+0x40/0x90 [ 68.815297][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.815308][ T6808] RIP: 0033:0x7f352195d04e [ 68.815318][ T6808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.815329][ T6808] RSP: 002b:00007f3522824fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.815339][ T6808] RAX: ffffffffffffffda RBX: 00007f35228256c0 RCX: 00007f352195d04e [ 68.815346][ T6808] RDX: 000000000000000f RSI: 00007f35228250a0 RDI: 0000000000000003 [ 68.815352][ T6808] RBP: 00007f3522825090 R08: 0000000000000000 R09: 0000000000000000 [ 68.815359][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.815365][ T6808] R13: 00007f3521c16038 R14: 00007f3521c15fa0 R15: 00007fffb3285448 [ 68.815379][ T6808] [ 69.000945][ T5944] Bluetooth: hci0: command 0x0419 tx timeout [ 69.000955][ T5293] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 69.063685][ T6817] binder: 6816:6817 ioctl c0306201 200000000640 returned -22 [ 69.105658][ T6820] vivid-001: disconnect [ 69.144278][ T6824] binder: 6823:6824 ioctl 40047211 200000000000 returned -22 [ 69.145647][ T6822] vivid-001: reconnect [ 69.333961][ T6838] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 69.412094][ T6849] FAULT_INJECTION: forcing a failure. [ 69.412094][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 69.416054][ T6849] CPU: 2 UID: 0 PID: 6849 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT(full) [ 69.416069][ T6849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.416076][ T6849] Call Trace: [ 69.416080][ T6849] [ 69.416085][ T6849] dump_stack_lvl+0x100/0x190 [ 69.416115][ T6849] should_fail_ex.cold+0x5/0xa [ 69.416129][ T6849] ? shmem_initxattrs+0x122/0x570 [ 69.416141][ T6849] should_failslab+0xc2/0x120 [ 69.416153][ T6849] __kmalloc_noprof+0xe0/0x850 [ 69.416169][ T6849] ? __asan_memcpy+0x3c/0x60 [ 69.416188][ T6849] shmem_initxattrs+0x122/0x570 [ 69.416203][ T6849] security_inode_init_security+0x242/0x370 [ 69.416224][ T6849] ? __pfx_shmem_initxattrs+0x10/0x10 [ 69.416236][ T6849] ? __pfx_security_inode_init_security+0x10/0x10 [ 69.416250][ T6849] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.416266][ T6849] shmem_mknod+0x2bf/0x470 [ 69.416281][ T6849] ? __pfx_shmem_mknod+0x10/0x10 [ 69.416293][ T6849] ? bpf_lsm_inode_create+0x9/0x10 [ 69.416311][ T6849] ? __pfx_shmem_create+0x10/0x10 [ 69.416325][ T6849] lookup_open.isra.0+0xc47/0x11b0 [ 69.416345][ T6849] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 69.416364][ T6849] ? __pfx___might_resched+0x10/0x10 [ 69.416377][ T6849] ? mnt_get_write_access+0x52/0x2f0 [ 69.416397][ T6849] ? __pfx_down_write+0x10/0x10 [ 69.416413][ T6849] ? mnt_get_write_access+0x1e9/0x2f0 [ 69.416435][ T6849] path_openat+0x2291/0x31a0 [ 69.416452][ T6849] ? __pfx_path_openat+0x10/0x10 [ 69.416469][ T6849] do_file_open+0x20e/0x430 [ 69.416482][ T6849] ? __pfx_do_file_open+0x10/0x10 [ 69.416503][ T6849] ? alloc_fd+0x476/0x790 [ 69.416517][ T6849] ? do_getname+0x191/0x390 [ 69.416533][ T6849] do_sys_openat2+0x10d/0x1e0 [ 69.416547][ T6849] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.416560][ T6849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.416572][ T6849] ? __fget_files+0x21f/0x3d0 [ 69.416586][ T6849] __x64_sys_openat+0x12d/0x210 [ 69.416601][ T6849] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.416614][ T6849] ? ksys_write+0x1ac/0x250 [ 69.416629][ T6849] do_syscall_64+0x106/0xf80 [ 69.416645][ T6849] ? clear_bhb_loop+0x40/0x90 [ 69.416658][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.416669][ T6849] RIP: 0033:0x7f352199c819 [ 69.416678][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.416689][ T6849] RSP: 002b:00007f3522825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.416699][ T6849] RAX: ffffffffffffffda RBX: 00007f3521c15fa0 RCX: 00007f352199c819 [ 69.416706][ T6849] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 69.416712][ T6849] RBP: 00007f3522825090 R08: 0000000000000000 R09: 0000000000000000 [ 69.416730][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.416737][ T6849] R13: 00007f3521c16038 R14: 00007f3521c15fa0 R15: 00007fffb3285448 [ 69.416751][ T6849] [ 69.559836][ T6855] ubi0: attaching mtd0 [ 69.566149][ T6855] ubi0: scanning is finished [ 69.568278][ T6855] ubi0: empty MTD device detected [ 69.668762][ T6852] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 69.719545][ T6855] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 69.723805][ T6855] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 69.727269][ T6855] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 69.729957][ T6855] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 69.734468][ T6855] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 69.737223][ T6855] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 69.740493][ T6855] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 987572178 [ 69.741235][ T6861] binder: 6860:6861 ioctl c0306201 2000000003c0 returned -14 [ 69.743701][ T6855] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 69.753327][ T6862] ubi0: background thread "ubi_bgt0d" started, PID 6862 [ 69.800025][ T6865] binder: 6863:6865 unknown command 0 [ 69.801948][ T6865] binder: 6863:6865 ioctl c0306201 200000000080 returned -22 [ 69.805468][ T6865] binder: 6863:6865 ioctl c0306201 200000000180 returned -22 [ 70.499322][ T6915] __nla_validate_parse: 5 callbacks suppressed [ 70.499335][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 70.504898][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 70.600294][ T6930] random: crng reseeded on system resumption [ 70.610648][ T6929] binder: 6928:6929 ioctl c0306201 200000000640 returned -22 [ 70.644680][ T6932] netlink: 236 bytes leftover after parsing attributes in process `syz.3.364'. [ 70.647714][ T6932] netlink: 236 bytes leftover after parsing attributes in process `syz.3.364'. [ 70.838245][ T6951] netlink: 52 bytes leftover after parsing attributes in process `syz.1.373'. [ 70.866968][ T6951] netlink: 52 bytes leftover after parsing attributes in process `syz.1.373'. [ 70.904600][ T6960] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 70.907350][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 70.924267][ T6962] binder: 6961:6962 unknown command 0 [ 70.926416][ T6962] binder: 6961:6962 ioctl c0306201 200000000080 returned -22 [ 71.048361][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 71.052002][ T6969] openvswitch: netlink: Flow actions attr not present in new flow. [ 71.122965][ T6975] random: crng reseeded on system resumption [ 71.130194][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.383'. [ 71.133588][ T6977] FAULT_INJECTION: forcing a failure. [ 71.133588][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.138105][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT(full) [ 71.138120][ T6977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.138127][ T6977] Call Trace: [ 71.138132][ T6977] [ 71.138136][ T6977] dump_stack_lvl+0x100/0x190 [ 71.138173][ T6977] should_fail_ex.cold+0x5/0xa [ 71.138188][ T6977] _copy_from_user+0x2e/0xd0 [ 71.138210][ T6977] drm_ioctl+0x520/0xc60 [ 71.138225][ T6977] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 71.138241][ T6977] ? __pfx_drm_ioctl+0x10/0x10 [ 71.138259][ T6977] ? selinux_file_ioctl+0x139/0x290 [ 71.138275][ T6977] ? selinux_file_ioctl+0xb4/0x290 [ 71.138293][ T6977] ? __pfx_drm_ioctl+0x10/0x10 [ 71.138305][ T6977] __x64_sys_ioctl+0x18e/0x210 [ 71.138324][ T6977] do_syscall_64+0x106/0xf80 [ 71.138361][ T6977] ? clear_bhb_loop+0x40/0x90 [ 71.138375][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.138386][ T6977] RIP: 0033:0x7f352199c819 [ 71.138395][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.138406][ T6977] RSP: 002b:00007f3522825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.138417][ T6977] RAX: ffffffffffffffda RBX: 00007f3521c15fa0 RCX: 00007f352199c819 [ 71.138423][ T6977] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 71.138430][ T6977] RBP: 00007f3522825090 R08: 0000000000000000 R09: 0000000000000000 [ 71.138436][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.138442][ T6977] R13: 00007f3521c16038 R14: 00007f3521c15fa0 R15: 00007fffb3285448 [ 71.138455][ T6977] [ 71.237823][ T6979] binder: 6978:6979 ioctl c0306201 200000000640 returned -22 [ 71.241064][ T5293] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 71.251704][ T5293] Bluetooth: hci0: command 0x0419 tx timeout [ 71.277521][ T6981] vim2m vim2m.0: vidioc_s_fmt queue busy [ 71.329296][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 71.415308][ T6992] bridge_slave_1: left allmulticast mode [ 71.417775][ T6992] bridge_slave_1: left promiscuous mode [ 71.419785][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.429861][ T6992] bridge_slave_0: left allmulticast mode [ 71.433219][ T6992] bridge_slave_0: left promiscuous mode [ 71.435292][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.478214][ T7002] FAULT_INJECTION: forcing a failure. [ 71.478214][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 71.484475][ T7002] CPU: 2 UID: 0 PID: 7002 Comm: syz.2.395 Not tainted syzkaller #0 PREEMPT(full) [ 71.484491][ T7002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.484498][ T7002] Call Trace: [ 71.484501][ T7002] [ 71.484506][ T7002] dump_stack_lvl+0x100/0x190 [ 71.484527][ T7002] should_fail_ex.cold+0x5/0xa [ 71.484541][ T7002] ? tomoyo_realpath_from_path+0xb6/0x690 [ 71.484558][ T7002] should_failslab+0xc2/0x120 [ 71.484570][ T7002] __kmalloc_noprof+0xe0/0x850 [ 71.484589][ T7002] tomoyo_realpath_from_path+0xb6/0x690 [ 71.484625][ T7002] tomoyo_check_open_permission+0x2af/0x3c0 [ 71.484641][ T7002] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 71.484668][ T7002] ? lock_acquire+0x1cf/0x380 [ 71.484679][ T7002] ? find_held_lock+0x2b/0x80 [ 71.484697][ T7002] tomoyo_file_open+0x6b/0x90 [ 71.484709][ T7002] security_file_open+0xb5/0x1e0 [ 71.484720][ T7002] do_dentry_open+0x5aa/0x1660 [ 71.484735][ T7002] vfs_open+0x82/0x3f0 [ 71.484750][ T7002] path_openat+0x208c/0x31a0 [ 71.484767][ T7002] ? __pfx_path_openat+0x10/0x10 [ 71.484784][ T7002] do_file_open+0x20e/0x430 [ 71.484797][ T7002] ? __pfx_do_file_open+0x10/0x10 [ 71.484836][ T7002] ? alloc_fd+0x476/0x790 [ 71.484853][ T7002] ? do_getname+0x191/0x390 [ 71.484868][ T7002] do_sys_openat2+0x10d/0x1e0 [ 71.484882][ T7002] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.484895][ T7002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.484908][ T7002] ? __fget_files+0x21f/0x3d0 [ 71.484922][ T7002] __x64_sys_openat+0x12d/0x210 [ 71.484936][ T7002] ? __pfx___x64_sys_openat+0x10/0x10 [ 71.484950][ T7002] ? ksys_write+0x1ac/0x250 [ 71.484964][ T7002] do_syscall_64+0x106/0xf80 [ 71.484980][ T7002] ? clear_bhb_loop+0x40/0x90 [ 71.484993][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.485004][ T7002] RIP: 0033:0x7fcdf439c819 [ 71.485013][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.485024][ T7002] RSP: 002b:00007fcdf52a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.485034][ T7002] RAX: ffffffffffffffda RBX: 00007fcdf4615fa0 RCX: 00007fcdf439c819 [ 71.485040][ T7002] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 71.485047][ T7002] RBP: 00007fcdf52a7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.485052][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.485058][ T7002] R13: 00007fcdf4616038 R14: 00007fcdf4615fa0 R15: 00007fff20658428 [ 71.485072][ T7002] [ 71.485107][ T7002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.525536][ T7004] random: crng reseeded on system resumption [ 71.648185][ T7009] overlayfs: missing 'lowerdir' [ 71.763761][ T7016] FAULT_INJECTION: forcing a failure. [ 71.763761][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 71.766861][ T7018] binder: 7017:7018 unknown command 0 [ 71.768436][ T7016] CPU: 3 UID: 0 PID: 7016 Comm: syz.3.402 Not tainted syzkaller #0 PREEMPT(full) [ 71.768455][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.768463][ T7016] Call Trace: [ 71.768468][ T7016] [ 71.768473][ T7016] dump_stack_lvl+0x100/0x190 [ 71.768500][ T7016] should_fail_ex.cold+0x5/0xa [ 71.768517][ T7016] ? __d_alloc+0x679/0xa80 [ 71.768533][ T7016] should_failslab+0xc2/0x120 [ 71.768547][ T7016] __kmalloc_noprof+0xe0/0x850 [ 71.768570][ T7016] __d_alloc+0x679/0xa80 [ 71.768588][ T7016] d_alloc_parallel+0x111/0x14e0 [ 71.768610][ T7016] ? find_held_lock+0x2b/0x80 [ 71.768627][ T7016] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 71.768646][ T7016] ? __pfx_d_alloc_parallel+0x10/0x10 [ 71.768668][ T7016] ? lockdep_init_map_type+0x5c/0x250 [ 71.768684][ T7016] ? lockdep_init_map_type+0x5c/0x250 [ 71.768700][ T7016] __lookup_slow+0x193/0x460 [ 71.768719][ T7016] ? __pfx___lookup_slow+0x10/0x10 [ 71.768739][ T7016] ? irq_entries_start+0xd0/0xcb0 [ 71.768756][ T7016] ? irq_entries_start+0xd0/0xcb0 [ 71.768773][ T7016] lookup_slow+0x50/0x70 [ 71.768792][ T7016] lookup_one_positive_unlocked+0x129/0x170 [ 71.768808][ T7016] ovl_lookup_index+0x1d6/0x660 [ 71.768852][ T7016] ? trace_kmalloc+0x101/0x130 [ 71.768865][ T7016] ? __pfx_ovl_lookup_index+0x10/0x10 [ 71.768885][ T7016] ? __kmalloc_noprof+0x320/0x850 [ 71.768907][ T7016] ovl_lookup_layers+0x60b/0x2ac0 [ 71.768936][ T7016] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 71.768956][ T7016] ? avc_has_perm_noaudit+0x145/0x3b0 [ 71.768973][ T7016] ? avc_has_perm+0x135/0x1e0 [ 71.768987][ T7016] ? __pfx_avc_has_perm+0x10/0x10 [ 71.769005][ T7016] ovl_lookup+0x4a8/0x6b0 [ 71.769025][ T7016] ? may_create+0x285/0x440 [ 71.769045][ T7016] ? __pfx_ovl_lookup+0x10/0x10 [ 71.769064][ T7016] ? __pfx_may_create+0x10/0x10 [ 71.769090][ T7016] ? bpf_lsm_inode_create+0x9/0x10 [ 71.769107][ T7016] ? security_inode_create+0xc4/0x280 [ 71.769122][ T7016] ? may_o_create+0x46/0x3a0 [ 71.769141][ T7016] lookup_open.isra.0+0x631/0x11b0 [ 71.769165][ T7016] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 71.769189][ T7016] ? __pfx___might_resched+0x10/0x10 [ 71.769204][ T7016] ? mnt_get_write_access+0x52/0x2f0 [ 71.769227][ T7016] ? __pfx_down_write+0x10/0x10 [ 71.769244][ T7016] ? mnt_get_write_access+0x1e9/0x2f0 [ 71.769266][ T7016] path_openat+0x2291/0x31a0 [ 71.769286][ T7016] ? __pfx_path_openat+0x10/0x10 [ 71.769307][ T7016] do_file_open+0x20e/0x430 [ 71.769323][ T7016] ? __pfx_do_file_open+0x10/0x10 [ 71.769349][ T7016] ? alloc_fd+0x476/0x790 [ 71.769365][ T7016] ? do_getname+0x191/0x390 [ 71.769384][ T7016] do_sys_openat2+0x10d/0x1e0 [ 71.769401][ T7016] ? __pfx_do_sys_openat2+0x10/0x10 [ 71.769417][ T7016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.769432][ T7016] ? __fget_files+0x21f/0x3d0 [ 71.769449][ T7016] __x64_sys_openat+0x12d/0x210 [ 71.769466][ T7016] ? __pfx___x64_sys_openat+0x10/0x10 [ 71.769482][ T7016] ? ksys_write+0x1ac/0x250 [ 71.769500][ T7016] do_syscall_64+0x106/0xf80 [ 71.769519][ T7016] ? clear_bhb_loop+0x40/0x90 [ 71.769535][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.769548][ T7016] RIP: 0033:0x7fc58859c819 [ 71.769560][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.769572][ T7016] RSP: 002b:00007fc5894d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.769585][ T7016] RAX: ffffffffffffffda RBX: 00007fc588815fa0 RCX: 00007fc58859c819 [ 71.769593][ T7016] RDX: 0000000000000441 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 71.769600][ T7016] RBP: 00007fc5894d3090 R08: 0000000000000000 R09: 0000000000000000 [ 71.769608][ T7016] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000002 [ 71.769615][ T7016] R13: 00007fc588816038 R14: 00007fc588815fa0 R15: 00007ffea3124278 [ 71.769631][ T7016] [ 71.769834][ T7016] overlayfs: failed inode index lookup (ino=589, key=00fb21000116d12fdbd6984d72bbc308a69e820980ed840f704d02000000000000, err=-12); [ 71.769834][ T7016] overlayfs: mount with '-o index=off' to disable inodes index. [ 71.774754][ T7018] binder: 7017:7018 ioctl c0306201 200000000080 returned -22 [ 71.818809][ T7019] binder: 7017:7019 ioctl c0306201 200000000180 returned -22 [ 72.025166][ T7034] random: crng reseeded on system resumption [ 72.091389][ T40] kauditd_printk_skb: 240 callbacks suppressed [ 72.091402][ T40] audit: type=1400 audit(1775249600.783:838): avc: denied { create } for pid=7036 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.099948][ T40] audit: type=1400 audit(1775249600.783:839): avc: denied { bind } for pid=7036 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.107921][ T40] audit: type=1400 audit(1775249600.783:840): avc: denied { write } for pid=7036 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.158415][ T7029] veth0_to_bond: entered allmulticast mode [ 72.345084][ T40] audit: type=1400 audit(1775249601.033:841): avc: denied { ioctl } for pid=7049 comm="syz.0.418" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.345263][ T7051] ata1.00: invalid multi_count 128 ignored [ 72.393693][ T7056] binder: 7048:7056 ioctl c0306201 200000000640 returned -22 [ 72.407291][ T7050] could not allocate digest TFM handle blake2s-160-generic [ 72.467496][ T7061] random: crng reseeded on system resumption [ 72.620964][ T3254] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.752056][ T7067] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 72.759326][ T7080] FAULT_INJECTION: forcing a failure. [ 72.759326][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 72.764312][ T7080] CPU: 3 UID: 0 PID: 7080 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) [ 72.764338][ T7080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.764348][ T7080] Call Trace: [ 72.764355][ T7080] [ 72.764362][ T7080] dump_stack_lvl+0x100/0x190 [ 72.764395][ T7080] should_fail_ex.cold+0x5/0xa [ 72.764420][ T7080] should_failslab+0xc2/0x120 [ 72.764439][ T7080] __kmalloc_cache_noprof+0x7a/0x6f0 [ 72.764467][ T7080] ? drm_atomic_state_alloc+0xb8/0x120 [ 72.764488][ T7080] ? kfree+0x1f6/0x6b0 [ 72.764506][ T7080] ? tomoyo_path_number_perm+0x46d/0x580 [ 72.764527][ T7080] ? security_file_ioctl+0xd3/0x230 [ 72.764555][ T7080] drm_atomic_state_alloc+0xb8/0x120 [ 72.764576][ T7080] drm_mode_atomic_ioctl+0x395/0x2680 [ 72.764602][ T7080] ? avc_has_extended_perms+0x33a/0x1080 [ 72.764627][ T7080] ? avc_has_extended_perms+0x484/0x1080 [ 72.764649][ T7080] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 72.764671][ T7080] ? __lock_acquire+0x4a5/0x2630 [ 72.764703][ T7080] ? drm_is_current_master+0x2c/0x40 [ 72.764724][ T7080] ? drm_is_current_master+0x2c/0x40 [ 72.764749][ T7080] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.764772][ T7080] drm_ioctl_kernel+0x1f3/0x3e0 [ 72.764791][ T7080] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 72.764837][ T7080] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 72.764864][ T7080] drm_ioctl+0x5e6/0xc60 [ 72.764885][ T7080] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 72.764906][ T7080] ? __pfx_drm_ioctl+0x10/0x10 [ 72.764932][ T7080] ? selinux_file_ioctl+0x139/0x290 [ 72.764955][ T7080] ? selinux_file_ioctl+0xb4/0x290 [ 72.764978][ T7080] ? __pfx_drm_ioctl+0x10/0x10 [ 72.764996][ T7080] __x64_sys_ioctl+0x18e/0x210 [ 72.765022][ T7080] do_syscall_64+0x106/0xf80 [ 72.765046][ T7080] ? clear_bhb_loop+0x40/0x90 [ 72.765066][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.765081][ T7080] RIP: 0033:0x7f4d55b9c819 [ 72.765096][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.765111][ T7080] RSP: 002b:00007f4d56aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.765125][ T7080] RAX: ffffffffffffffda RBX: 00007f4d55e15fa0 RCX: 00007f4d55b9c819 [ 72.765132][ T7080] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 72.765138][ T7080] RBP: 00007f4d56aee090 R08: 0000000000000000 R09: 0000000000000000 [ 72.765144][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.765151][ T7080] R13: 00007f4d55e16038 R14: 00007f4d55e15fa0 R15: 00007ffe1ab99c88 [ 72.765164][ T7080] [ 72.797094][ T3254] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.886427][ T3254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.890026][ T3254] usb 8-1: Product: syz [ 72.891973][ T3254] usb 8-1: Manufacturer: syz [ 72.895261][ T3254] usb 8-1: SerialNumber: syz [ 72.908382][ T3254] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.923856][ T40] audit: type=1400 audit(1775249601.613:842): avc: denied { firmware_load } for pid=24 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 72.935375][ T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.937188][ T7084] binder: 7083:7084 ioctl c0306201 200000000640 returned -22 [ 72.987964][ T7086] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 73.022083][ T7089] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 73.025822][ T7089] overlayfs: missing 'lowerdir' [ 73.042853][ T7089] XFS (nullb0): Invalid superblock magic number [ 73.055332][ T7086] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 73.065649][ T7089] netlink: 'syz.1.432': attribute type 3 has an invalid length. [ 73.069174][ T7089] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 73.076258][ T7086] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 73.085078][ T7086] bond2 (unregistering): Released all slaves [ 73.088327][ T7089] mmap: syz.1.432 (7089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.096704][ T7089] fuse: Bad value for 'group_id' [ 73.099157][ T7089] fuse: Bad value for 'group_id' [ 73.247098][ T40] audit: type=1404 audit(1775249601.933:843): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 73.265641][ T40] audit: type=1400 audit(1775249601.953:844): avc: denied { read } for pid=7107 comm="syz.0.439" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 73.272396][ T40] audit: type=1400 audit(1775249601.953:845): avc: denied { create } for pid=7107 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 73.278824][ T40] audit: type=1400 audit(1775249601.953:846): avc: denied { create } for pid=7107 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 73.279765][ T7108] capability: warning: `syz.1.438' uses deprecated v2 capabilities in a way that may be insecure [ 73.285789][ T40] audit: type=1404 audit(1775249601.953:847): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 73.316831][ T7111] fuse: Bad value for 'fd' [ 73.400956][ T5944] Bluetooth: hci0: command 0x0419 tx timeout [ 73.403725][ T5293] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 73.447273][ T7119] binder: 7118:7119 unknown command 0 [ 73.449544][ T7119] binder: 7118:7119 ioctl c0306201 200000000080 returned -22 [ 73.452854][ T7119] binder: 7118:7119 ioctl c0306201 200000000180 returned -22 [ 73.537981][ T3254] usb 8-1: USB disconnect, device number 2 [ 73.587347][ T7126] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 73.616920][ T7131] loop6: detected capacity change from 0 to 2640 [ 73.627269][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.630860][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.634072][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.634879][ T7133] batman_adv: batadv0: Adding interface: dummy0 [ 73.636740][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.639364][ T7133] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.643458][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.660935][ T7133] batman_adv: batadv0: Interface activated: dummy0 [ 73.664063][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.667392][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.670440][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.673942][ T7131] ldm_validate_partition_table(): Disk read failed. [ 73.676554][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.679869][ T7131] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.682959][ T7133] batadv0: mtu less than device minimum [ 73.684670][ T7131] Dev loop6: unable to read RDB block 0 [ 73.686747][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.688224][ T7131] loop6: unable to read partition table [ 73.693316][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.699030][ T7131] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 73.700056][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.707541][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.712874][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.716603][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.720273][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.724692][ T7133] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.975895][ T7149] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 74.200916][ T24] usb 8-1: Service connection timeout for: 256 [ 74.203290][ T24] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 74.206832][ T24] ath9k_htc: Failed to initialize the device [ 74.210885][ T3254] usb 8-1: ath9k_htc: USB layer deinitialized [ 74.230908][ T6005] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 74.271971][ T7165] syzkaller0: entered promiscuous mode [ 74.274859][ T7165] syzkaller0: entered allmulticast mode [ 74.413640][ T6005] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 74.416740][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.419621][ T6005] usb 6-1: Product: syz [ 74.421280][ T6005] usb 6-1: Manufacturer: syz [ 74.423090][ T6005] usb 6-1: SerialNumber: syz [ 74.428126][ T6005] usb 6-1: config 0 descriptor?? syzkaller syzkaller login: [ 74.661141][ T10] usb 6-1: USB disconnect, device number 2 [ 74.662062][ T7190] binder: BINDER_SET_CONTEXT_MGR already set [ 74.666575][ T7190] binder: 7187:7190 ioctl 4018620d 200000000100 returned -16 [ 74.749638][ T7198] delete_channel: no stack [ 74.758191][ T7196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7196 comm=syz.0.473 [ 74.782089][ T7196] bond2: entered allmulticast mode [ 74.786631][ T7196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7196 comm=syz.0.473 [ 74.795314][ T7196] ip6gretap2: entered promiscuous mode [ 74.800175][ T7196] ip6gretap2: entered allmulticast mode [ 74.802545][ T7196] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 74.837901][ T7207] binder: 7205:7207 ioctl c0306201 200000000640 returned -22 [ 75.018900][ T7214] FAULT_INJECTION: forcing a failure. [ 75.018900][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 75.025674][ T7214] CPU: 3 UID: 0 PID: 7214 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 75.025699][ T7214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.025710][ T7214] Call Trace: [ 75.025716][ T7214] [ 75.025724][ T7214] dump_stack_lvl+0x100/0x190 [ 75.025769][ T7214] should_fail_ex.cold+0x5/0xa [ 75.025794][ T7214] should_failslab+0xc2/0x120 [ 75.025815][ T7214] __kmalloc_node_noprof+0xe6/0x850 [ 75.025841][ T7214] ? alloc_slab_obj_exts+0xae/0x260 [ 75.025863][ T7214] ? find_held_lock+0x2b/0x80 [ 75.025889][ T7214] alloc_slab_obj_exts+0xae/0x260 [ 75.025915][ T7214] __memcg_slab_post_alloc_hook+0x246/0x990 [ 75.025944][ T7214] ? __d_alloc+0x679/0xa80 [ 75.025966][ T7214] __kmalloc_noprof+0x662/0x850 [ 75.025997][ T7214] __d_alloc+0x679/0xa80 [ 75.026022][ T7214] d_alloc_parallel+0x111/0x14e0 [ 75.026051][ T7214] ? find_held_lock+0x2b/0x80 [ 75.026073][ T7214] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 75.026107][ T7214] ? __pfx_d_alloc_parallel+0x10/0x10 [ 75.026137][ T7214] ? lockdep_init_map_type+0x5c/0x250 [ 75.026157][ T7214] ? lockdep_init_map_type+0x5c/0x250 [ 75.026180][ T7214] __lookup_slow+0x193/0x460 [ 75.026210][ T7214] ? __pfx___lookup_slow+0x10/0x10 [ 75.026238][ T7214] ? irq_entries_start+0xd0/0xcb0 [ 75.026262][ T7214] ? irq_entries_start+0xd0/0xcb0 [ 75.026287][ T7214] lookup_slow+0x50/0x70 [ 75.026310][ T7214] lookup_one_positive_unlocked+0x129/0x170 [ 75.026333][ T7214] ovl_lookup_index+0x1d6/0x660 [ 75.026362][ T7214] ? trace_kmalloc+0x101/0x130 [ 75.026380][ T7214] ? __pfx_ovl_lookup_index+0x10/0x10 [ 75.026408][ T7214] ? __kmalloc_noprof+0x320/0x850 [ 75.026438][ T7214] ovl_lookup_layers+0x60b/0x2ac0 [ 75.026476][ T7214] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 75.026502][ T7214] ? avc_has_perm_noaudit+0x145/0x3b0 [ 75.026524][ T7214] ? avc_has_perm+0x135/0x1e0 [ 75.026543][ T7214] ? __pfx_avc_has_perm+0x10/0x10 [ 75.026568][ T7214] ovl_lookup+0x4a8/0x6b0 [ 75.026595][ T7214] ? may_create+0x285/0x440 [ 75.026620][ T7214] ? __pfx_ovl_lookup+0x10/0x10 [ 75.026644][ T7214] ? __pfx_may_create+0x10/0x10 [ 75.026681][ T7214] ? bpf_lsm_inode_create+0x9/0x10 [ 75.026704][ T7214] ? security_inode_create+0xc4/0x280 [ 75.026723][ T7214] ? may_o_create+0x46/0x3a0 [ 75.026751][ T7214] lookup_open.isra.0+0x631/0x11b0 [ 75.026783][ T7214] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 75.026815][ T7214] ? __pfx___might_resched+0x10/0x10 [ 75.026835][ T7214] ? mnt_get_write_access+0x52/0x2f0 [ 75.026867][ T7214] ? __pfx_down_write+0x10/0x10 [ 75.026892][ T7214] ? mnt_get_write_access+0x1e9/0x2f0 [ 75.026922][ T7214] path_openat+0x2291/0x31a0 [ 75.026950][ T7214] ? __pfx_path_openat+0x10/0x10 [ 75.026979][ T7214] do_file_open+0x20e/0x430 [ 75.027001][ T7214] ? __pfx_do_file_open+0x10/0x10 [ 75.027037][ T7214] ? alloc_fd+0x476/0x790 [ 75.027059][ T7214] ? do_getname+0x191/0x390 [ 75.027083][ T7214] do_sys_openat2+0x10d/0x1e0 [ 75.027106][ T7214] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.027126][ T7214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.027148][ T7214] ? __fget_files+0x21f/0x3d0 [ 75.027172][ T7214] __x64_sys_openat+0x12d/0x210 [ 75.027196][ T7214] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.027222][ T7214] ? ksys_write+0x1ac/0x250 [ 75.027248][ T7214] do_syscall_64+0x106/0xf80 [ 75.027274][ T7214] ? clear_bhb_loop+0x40/0x90 [ 75.027296][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.027314][ T7214] RIP: 0033:0x7fcdf439c819 [ 75.027330][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.027346][ T7214] RSP: 002b:00007fcdf52a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.027363][ T7214] RAX: ffffffffffffffda RBX: 00007fcdf4615fa0 RCX: 00007fcdf439c819 [ 75.027373][ T7214] RDX: 0000000000000441 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 75.027383][ T7214] RBP: 00007fcdf52a7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.027394][ T7214] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000002 [ 75.027403][ T7214] R13: 00007fcdf4616038 R14: 00007fcdf4615fa0 R15: 00007fff20658428 [ 75.027429][ T7214] [ 75.270816][ T7220] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 75.278524][ T7220] netlink: 'syz.1.483': attribute type 3 has an invalid length. [ 75.290601][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3170034004 (101441088128 ns) > initial count (92024169792 ns). Using initial count to start timer. [ 75.324936][ T7228] bond3: entered allmulticast mode [ 75.328866][ T7228] veth0_vlan: entered allmulticast mode [ 75.517199][ T7243] __nla_validate_parse: 18 callbacks suppressed [ 75.517211][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 75.556026][ T7247] binder: 7246:7247 unknown command 0 [ 75.558008][ T7247] binder: 7246:7247 ioctl c0306201 200000000080 returned -22 [ 75.563529][ T7247] binder: 7246:7247 ioctl c0306201 200000000180 returned -22 [ 75.616534][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 75.645144][ T7255] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 75.647656][ T7255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.494'. [ 75.677565][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 75.786589][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'. [ 75.914123][ T10] IPVS: starting estimator thread 0... [ 75.991881][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 76.000860][ T7284] IPVS: using max 43 ests per chain, 103200 per kthread [ 76.055476][ T7290] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 76.065566][ T7290] usb usb8: usbfs: process 7290 (syz.0.516) did not claim interface 0 before use [ 76.073470][ T1153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.092609][ T7293] FAULT_INJECTION: forcing a failure. [ 76.092609][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 76.097489][ T7293] CPU: 1 UID: 0 PID: 7293 Comm: syz.1.511 Not tainted syzkaller #0 PREEMPT(full) [ 76.097510][ T7293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.097519][ T7293] Call Trace: [ 76.097526][ T7293] [ 76.097532][ T7293] dump_stack_lvl+0x100/0x190 [ 76.097562][ T7293] should_fail_ex.cold+0x5/0xa [ 76.097581][ T7293] should_failslab+0xc2/0x120 [ 76.097598][ T7293] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 76.097620][ T7293] ? sidtab_sid2str_get+0x17a/0x670 [ 76.097639][ T7293] kmemdup_noprof+0x29/0x60 [ 76.097660][ T7293] sidtab_sid2str_get+0x17a/0x670 [ 76.097676][ T7293] security_sid_to_context_core+0x35a/0x6d0 [ 76.097696][ T7293] ? skb_put+0x12a/0x180 [ 76.097712][ T7293] avc_audit_post_callback+0x109/0x910 [ 76.097730][ T7293] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 76.097743][ T7293] ? skb_put+0x138/0x180 [ 76.097757][ T7293] ? audit_log_n_string+0x256/0x550 [ 76.097781][ T7293] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 76.097794][ T7293] common_lsm_audit+0x23f/0x2b0 [ 76.097816][ T7293] ? __pfx_common_lsm_audit+0x10/0x10 [ 76.097835][ T7293] ? find_held_lock+0x2b/0x80 [ 76.097854][ T7293] ? rcu_is_watching+0x12/0xc0 [ 76.097874][ T7293] slow_avc_audit+0x186/0x210 [ 76.097890][ T7293] ? __pfx_slow_avc_audit+0x10/0x10 [ 76.097909][ T7293] ? find_held_lock+0x2b/0x80 [ 76.097926][ T7293] ? avc_has_extended_perms+0x33a/0x1080 [ 76.097941][ T7293] ? avc_has_extended_perms+0x33a/0x1080 [ 76.097959][ T7293] avc_has_extended_perms+0x9b7/0x1080 [ 76.097981][ T7293] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 76.097998][ T7293] ? kasan_quarantine_put+0x104/0x240 [ 76.098021][ T7293] ? find_held_lock+0x2b/0x80 [ 76.098044][ T7293] ? tomoyo_path_number_perm+0x188/0x580 [ 76.098076][ T7293] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 76.098101][ T7293] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.098128][ T7293] ? __fget_files+0x215/0x3d0 [ 76.098143][ T7293] ? hook_file_ioctl_common+0x146/0x410 [ 76.098163][ T7293] ? selinux_file_ioctl+0x139/0x290 [ 76.098183][ T7293] selinux_file_ioctl+0x139/0x290 [ 76.098205][ T7293] security_file_ioctl+0xfb/0x230 [ 76.098227][ T7293] __x64_sys_ioctl+0xb7/0x210 [ 76.098250][ T7293] do_syscall_64+0x106/0xf80 [ 76.098271][ T7293] ? clear_bhb_loop+0x40/0x90 [ 76.098288][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.098302][ T7293] RIP: 0033:0x7f4d55b9c819 [ 76.098315][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.098329][ T7293] RSP: 002b:00007f4d56aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.098344][ T7293] RAX: ffffffffffffffda RBX: 00007f4d55e15fa0 RCX: 00007f4d55b9c819 [ 76.098353][ T7293] RDX: 0000200000000040 RSI: 00000000800448d4 RDI: 0000000000000004 [ 76.098361][ T7293] RBP: 00007f4d56aee090 R08: 0000000000000000 R09: 0000000000000000 [ 76.098369][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.098377][ T7293] R13: 00007f4d55e16038 R14: 00007f4d55e15fa0 R15: 00007ffe1ab99c88 [ 76.098397][ T7293] [ 76.297168][ T1153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.369057][ T7301] binder: 7300:7301 unknown command 0 [ 76.372735][ T7301] binder: 7300:7301 ioctl c0306201 200000000080 returned -22 [ 76.401790][ T1153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.447140][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.449300][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.454207][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.458537][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.462292][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.467543][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.471383][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.483236][ T7309] Failed to initialize the IGMP autojoin socket (err -2) [ 76.525670][ T1153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.648353][ T7305] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 76.680949][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 76.684407][ T5293] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.707774][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 76.832276][ T1153] bridge_slave_1: left allmulticast mode [ 76.834719][ T1153] bridge_slave_1: left promiscuous mode [ 76.837858][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.855087][ T1153] bridge_slave_0: left allmulticast mode [ 76.856945][ T1153] bridge_slave_0: left promiscuous mode [ 76.858884][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.015749][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.021629][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.025294][ T1153] bond0 (unregistering): Released all slaves [ 77.052127][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.056177][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.058591][ T7309] bridge_slave_0: entered allmulticast mode [ 77.063080][ T7309] bridge_slave_0: entered promiscuous mode [ 77.069760][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.072255][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.075640][ T7309] bridge_slave_1: entered allmulticast mode [ 77.078551][ T7309] bridge_slave_1: entered promiscuous mode [ 77.152228][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.178725][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.209664][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 77.209680][ T40] audit: type=1400 audit(1775249605.893:1025): avc: denied { connect } for pid=7335 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.233577][ T40] audit: type=1400 audit(1775249605.923:1026): avc: denied { mounton } for pid=7337 comm="syz.3.527" path="/137/bus" dev="tmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.237203][ T7338] FAULT_INJECTION: forcing a failure. [ 77.237203][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 77.244539][ T40] audit: type=1400 audit(1775249605.923:1027): avc: denied { unlink } for pid=7337 comm="syz.3.527" name="#13" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.247768][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.3.527 Not tainted syzkaller #0 PREEMPT(full) [ 77.247783][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.247790][ T7338] Call Trace: [ 77.247794][ T7338] [ 77.247798][ T7338] dump_stack_lvl+0x100/0x190 [ 77.247821][ T7338] should_fail_ex.cold+0x5/0xa [ 77.247834][ T7338] ? __pfx_ovl_inode_test+0x10/0x10 [ 77.247850][ T7338] should_failslab+0xc2/0x120 [ 77.247862][ T7338] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 77.247878][ T7338] ? ovl_alloc_inode+0x25/0x190 [ 77.247893][ T7338] ? __pfx_ilookup5+0x10/0x10 [ 77.247909][ T7338] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 77.247923][ T7338] ? __pfx_ovl_inode_test+0x10/0x10 [ 77.247937][ T7338] ? __pfx_ovl_inode_set+0x10/0x10 [ 77.247951][ T7338] ovl_alloc_inode+0x25/0x190 [ 77.247965][ T7338] alloc_inode+0x68/0x250 [ 77.247981][ T7338] iget5_locked+0x5f/0xa0 [ 77.247997][ T7338] ovl_get_inode+0xecc/0x1900 [ 77.248017][ T7338] ? __pfx_ovl_get_inode+0x10/0x10 [ 77.248033][ T7338] ? ovl_stack_cpy+0x78/0xb0 [ 77.248044][ T7338] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.248058][ T7338] ? _raw_spin_unlock+0x28/0x50 [ 77.248075][ T7338] ovl_lookup_layers+0x8bc/0x2ac0 [ 77.248099][ T7338] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 77.248121][ T7338] ? avc_has_perm_noaudit+0x145/0x3b0 [ 77.248141][ T7338] ovl_lookup+0x4a8/0x6b0 [ 77.248158][ T7338] ? may_create+0x285/0x440 [ 77.248174][ T7338] ? __pfx_ovl_lookup+0x10/0x10 [ 77.248190][ T7338] ? __pfx_may_create+0x10/0x10 [ 77.248212][ T7338] ? bpf_lsm_inode_create+0x9/0x10 [ 77.248226][ T7338] ? security_inode_create+0xc4/0x280 [ 77.248238][ T7338] ? may_o_create+0x46/0x3a0 [ 77.248256][ T7338] lookup_open.isra.0+0x631/0x11b0 [ 77.248275][ T7338] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 77.248294][ T7338] ? __pfx___might_resched+0x10/0x10 [ 77.248307][ T7338] ? mnt_get_write_access+0x52/0x2f0 [ 77.248326][ T7338] ? __pfx_down_write+0x10/0x10 [ 77.248336][ T7338] ? mnt_get_write_access+0x1e9/0x2f0 [ 77.248354][ T7338] path_openat+0x2291/0x31a0 [ 77.248371][ T7338] ? __pfx_path_openat+0x10/0x10 [ 77.248388][ T7338] do_file_open+0x20e/0x430 [ 77.248401][ T7338] ? __pfx_do_file_open+0x10/0x10 [ 77.248423][ T7338] ? alloc_fd+0x476/0x790 [ 77.248436][ T7338] ? do_getname+0x191/0x390 [ 77.248452][ T7338] do_sys_openat2+0x10d/0x1e0 [ 77.248466][ T7338] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.248479][ T7338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.248491][ T7338] ? __fget_files+0x21f/0x3d0 [ 77.248505][ T7338] __x64_sys_openat+0x12d/0x210 [ 77.248519][ T7338] ? __pfx___x64_sys_openat+0x10/0x10 [ 77.248533][ T7338] ? ksys_write+0x1ac/0x250 [ 77.248547][ T7338] do_syscall_64+0x106/0xf80 [ 77.248563][ T7338] ? clear_bhb_loop+0x40/0x90 [ 77.248576][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.248591][ T7338] RIP: 0033:0x7fc58859c819 [ 77.248600][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.248610][ T7338] RSP: 002b:00007fc5894d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.248621][ T7338] RAX: ffffffffffffffda RBX: 00007fc588815fa0 RCX: 00007fc58859c819 [ 77.248627][ T7338] RDX: 0000000000000441 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 77.248633][ T7338] RBP: 00007fc5894d3090 R08: 0000000000000000 R09: 0000000000000000 [ 77.248640][ T7338] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000002 [ 77.248646][ T7338] R13: 00007fc588816038 R14: 00007fc588815fa0 R15: 00007ffea3124278 [ 77.248659][ T7338] [ 77.248959][ T7338] overlayfs: failed to get inode (-12) [ 77.259146][ T40] audit: type=1400 audit(1775249605.923:1028): avc: denied { mount } for pid=7337 comm="syz.3.527" name="/" dev="overlay" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.261068][ T7309] team0: Port device team_slave_0 added [ 77.300757][ T7309] team0: Port device team_slave_1 added [ 77.303735][ T40] audit: type=1400 audit(1775249605.963:1029): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.308314][ T7340] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.309808][ T40] audit: type=1400 audit(1775249605.993:1030): avc: denied { write } for pid=7339 comm="syz.1.529" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.421139][ T40] audit: type=1400 audit(1775249606.013:1031): avc: denied { create } for pid=7343 comm="syz.3.528" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.429377][ T40] audit: type=1400 audit(1775249606.013:1032): avc: denied { ioctl } for pid=7343 comm="syz.3.528" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21130 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.430230][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.443246][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.452026][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.503594][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.505908][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.514781][ T40] audit: type=1400 audit(1775249606.203:1033): avc: denied { create } for pid=7349 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.516163][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.535743][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 77.543581][ T40] audit: type=1400 audit(1775249606.233:1034): avc: denied { write } for pid=7349 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.617174][ T7309] hsr_slave_0: entered promiscuous mode [ 77.619994][ T7309] hsr_slave_1: entered promiscuous mode [ 77.622560][ T7309] debugfs: 'hsr0' already exists in 'hsr' [ 77.624230][ T7309] Cannot create hsr debugfs directory [ 77.744991][ T1153] hsr_slave_0: left promiscuous mode [ 77.749627][ T1153] hsr_slave_1: left promiscuous mode [ 77.752078][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.755134][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.759214][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.762984][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.783436][ T1153] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 77.788016][ T1153] batman_adv: batadv0: Removing interface: ipvlan2 [ 77.821442][ T1153] veth1_macvtap: left promiscuous mode [ 77.823894][ T1153] veth0_macvtap: left promiscuous mode [ 77.826243][ T1153] veth1_vlan: left promiscuous mode [ 77.828436][ T1153] veth0_vlan: left promiscuous mode [ 78.016023][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 78.022887][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 78.299517][ T7383] FAULT_INJECTION: forcing a failure. [ 78.299517][ T7383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.322722][ T7383] CPU: 2 UID: 0 PID: 7383 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 78.322745][ T7383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.322755][ T7383] Call Trace: [ 78.322761][ T7383] [ 78.322768][ T7383] dump_stack_lvl+0x100/0x190 [ 78.322802][ T7383] should_fail_ex.cold+0x5/0xa [ 78.322819][ T7383] ? prepare_alloc_pages+0x16d/0x5f0 [ 78.322839][ T7383] should_fail_alloc_page+0xeb/0x140 [ 78.322860][ T7383] prepare_alloc_pages+0x1f0/0x5f0 [ 78.322883][ T7383] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 78.322908][ T7383] ? rcu_is_watching+0x12/0xc0 [ 78.322929][ T7383] ? trace_mm_page_alloc+0x17a/0x1d0 [ 78.322949][ T7383] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 78.322978][ T7383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 78.323004][ T7383] ? find_held_lock+0x2b/0x80 [ 78.323025][ T7383] ? is_bpf_text_address+0x8a/0x1a0 [ 78.323050][ T7383] ? is_bpf_text_address+0x8a/0x1a0 [ 78.323075][ T7383] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 78.323097][ T7383] ? is_bpf_text_address+0x94/0x1a0 [ 78.323121][ T7383] ? kernel_text_address+0x8d/0x100 [ 78.323145][ T7383] ? __kernel_text_address+0xd/0x30 [ 78.323163][ T7383] ? unwind_get_return_address+0x59/0xa0 [ 78.323193][ T7383] alloc_pages_bulk_noprof+0x782/0x1490 [ 78.323229][ T7383] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 78.323253][ T7383] ? kasan_save_stack+0x30/0x50 [ 78.323282][ T7383] ? alloc_pages_noprof+0x238/0x390 [ 78.323302][ T7383] __kasan_populate_vmalloc+0xf0/0x210 [ 78.323333][ T7383] alloc_vmap_area+0x95d/0x2bd0 [ 78.323357][ T7383] ? __pfx_alloc_vmap_area+0x10/0x10 [ 78.323382][ T7383] __get_vm_area_node+0x1ca/0x330 [ 78.323406][ T7383] __vmalloc_node_range_noprof+0x213/0x1530 [ 78.323425][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.323444][ T7383] ? selinux_ima_measure_state+0x5f/0xb0 [ 78.323467][ T7383] ? sel_write_enforce+0x3fc/0x510 [ 78.323485][ T7383] ? vfs_writev+0x5ea/0xe10 [ 78.323508][ T7383] ? do_syscall_64+0x106/0xf80 [ 78.323529][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.323550][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.323577][ T7383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.323603][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.323622][ T7383] __vmalloc_node_noprof+0xad/0xf0 [ 78.323643][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.323665][ T7383] security_read_state_kernel+0x105/0x380 [ 78.323682][ T7383] ? __pfx_security_read_state_kernel+0x10/0x10 [ 78.323698][ T7383] ? selinux_ima_measure_state_locked+0xb70/0x10e0 [ 78.323723][ T7383] ? kfree+0x1f6/0x6b0 [ 78.323749][ T7383] selinux_ima_measure_state_locked+0xbcf/0x10e0 [ 78.323775][ T7383] ? __pfx_selinux_ima_measure_state_locked+0x10/0x10 [ 78.323811][ T7383] ? selinux_transaction_write+0x181/0x1a0 [ 78.323830][ T7383] selinux_ima_measure_state+0x5f/0xb0 [ 78.323852][ T7383] sel_write_enforce+0x3fc/0x510 [ 78.323871][ T7383] ? __pfx_sel_write_enforce+0x10/0x10 [ 78.323898][ T7383] ? __pfx_sel_write_enforce+0x10/0x10 [ 78.323917][ T7383] vfs_writev+0x5ea/0xe10 [ 78.323938][ T7383] ? rcu_is_watching+0x12/0xc0 [ 78.323962][ T7383] ? __pfx_vfs_writev+0x10/0x10 [ 78.323985][ T7383] ? fdget_pos+0x2aa/0x380 [ 78.324007][ T7383] ? find_held_lock+0x2b/0x80 [ 78.324039][ T7383] ? __fget_files+0x21f/0x3d0 [ 78.324064][ T7383] ? do_writev+0x13e/0x340 [ 78.324087][ T7383] do_writev+0x13e/0x340 [ 78.324110][ T7383] ? __pfx_do_writev+0x10/0x10 [ 78.324140][ T7383] do_syscall_64+0x106/0xf80 [ 78.324164][ T7383] ? clear_bhb_loop+0x40/0x90 [ 78.324184][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.324202][ T7383] RIP: 0033:0x7f352199c819 [ 78.324217][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.324233][ T7383] RSP: 002b:00007f3522825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 78.324250][ T7383] RAX: ffffffffffffffda RBX: 00007f3521c15fa0 RCX: 00007f352199c819 [ 78.324261][ T7383] RDX: 0000000000000002 RSI: 0000200000001480 RDI: 0000000000000003 [ 78.324271][ T7383] RBP: 00007f3522825090 R08: 0000000000000000 R09: 0000000000000000 [ 78.324279][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.324286][ T7383] R13: 00007f3521c16038 R14: 00007f3521c15fa0 R15: 00007fffb3285448 [ 78.324309][ T7383] [ 78.324737][ T7383] syz.0.542: vmalloc error: size 280859, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 78.482145][ T7383] CPU: 2 UID: 0 PID: 7383 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 78.482162][ T7383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.482169][ T7383] Call Trace: [ 78.482172][ T7383] [ 78.482177][ T7383] dump_stack_lvl+0x100/0x190 [ 78.482198][ T7383] warn_alloc.cold+0x95/0x1c1 [ 78.482217][ T7383] ? __pfx_warn_alloc+0x10/0x10 [ 78.482232][ T7383] ? lockdep_hardirqs_on+0x78/0x100 [ 78.482250][ T7383] ? __get_vm_area_node+0x2c5/0x330 [ 78.482266][ T7383] ? __get_vm_area_node+0x208/0x330 [ 78.482280][ T7383] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 78.482293][ T7383] ? selinux_ima_measure_state+0x5f/0xb0 [ 78.482309][ T7383] ? sel_write_enforce+0x3fc/0x510 [ 78.482321][ T7383] ? vfs_writev+0x5ea/0xe10 [ 78.482337][ T7383] ? do_syscall_64+0x106/0xf80 [ 78.482353][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.482366][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.482382][ T7383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.482403][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.482415][ T7383] __vmalloc_node_noprof+0xad/0xf0 [ 78.482428][ T7383] ? security_read_state_kernel+0x105/0x380 [ 78.482442][ T7383] security_read_state_kernel+0x105/0x380 [ 78.482456][ T7383] ? __pfx_security_read_state_kernel+0x10/0x10 [ 78.482472][ T7383] ? selinux_ima_measure_state_locked+0xb70/0x10e0 [ 78.482494][ T7383] ? kfree+0x1f6/0x6b0 [ 78.482524][ T7383] selinux_ima_measure_state_locked+0xbcf/0x10e0 [ 78.482555][ T7383] ? __pfx_selinux_ima_measure_state_locked+0x10/0x10 [ 78.482588][ T7383] ? selinux_transaction_write+0x181/0x1a0 [ 78.482601][ T7383] selinux_ima_measure_state+0x5f/0xb0 [ 78.482617][ T7383] sel_write_enforce+0x3fc/0x510 [ 78.482631][ T7383] ? __pfx_sel_write_enforce+0x10/0x10 [ 78.482648][ T7383] ? __pfx_sel_write_enforce+0x10/0x10 [ 78.482660][ T7383] vfs_writev+0x5ea/0xe10 [ 78.482675][ T7383] ? rcu_is_watching+0x12/0xc0 [ 78.482692][ T7383] ? __pfx_vfs_writev+0x10/0x10 [ 78.482707][ T7383] ? fdget_pos+0x2aa/0x380 [ 78.482721][ T7383] ? find_held_lock+0x2b/0x80 [ 78.482743][ T7383] ? __fget_files+0x21f/0x3d0 [ 78.482758][ T7383] ? do_writev+0x13e/0x340 [ 78.482773][ T7383] do_writev+0x13e/0x340 [ 78.482789][ T7383] ? __pfx_do_writev+0x10/0x10 [ 78.482809][ T7383] do_syscall_64+0x106/0xf80 [ 78.482825][ T7383] ? clear_bhb_loop+0x40/0x90 [ 78.482838][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.482849][ T7383] RIP: 0033:0x7f352199c819 [ 78.482858][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.482869][ T7383] RSP: 002b:00007f3522825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 78.482880][ T7383] RAX: ffffffffffffffda RBX: 00007f3521c15fa0 RCX: 00007f352199c819 [ 78.482886][ T7383] RDX: 0000000000000002 RSI: 0000200000001480 RDI: 0000000000000003 [ 78.482892][ T7383] RBP: 00007f3522825090 R08: 0000000000000000 R09: 0000000000000000 [ 78.482898][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.482904][ T7383] R13: 00007f3521c16038 R14: 00007f3521c15fa0 R15: 00007fffb3285448 [ 78.482917][ T7383] [ 78.482921][ T7383] Mem-Info: [ 78.520639][ T63] Bluetooth: hci1: command tx timeout [ 78.523955][ T7383] active_anon:27018 inactive_anon:15527 isolated_anon:0 [ 78.523955][ T7383] active_file:13434 inactive_file:50995 isolated_file:0 [ 78.523955][ T7383] unevictable:1768 dirty:839 writeback:31 [ 78.523955][ T7383] slab_reclaimable:9681 slab_unreclaimable:70954 [ 78.523955][ T7383] mapped:25238 shmem:34343 pagetables:1471 [ 78.523955][ T7383] sec_pagetables:293 bounce:0 [ 78.523955][ T7383] kernel_misc_reclaimable:0 [ 78.523955][ T7383] free:404007 free_pcp:26148 free_cma:0 [ 78.628072][ T7383] Node 0 active_anon:72528kB inactive_anon:62108kB active_file:53736kB inactive_file:203772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100952kB dirty:3352kB writeback:124kB shmem:98188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:5804kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 78.639363][ T7383] Node 1 active_anon:35668kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:39184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.651877][ T7383] Node 0 DMA free:7040kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3844kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:76kB free_cma:0kB [ 78.661712][ T7383] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 78.663704][ T7383] Node 0 DMA32 free:65040kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68684kB inactive_anon:62108kB active_file:53736kB inactive_file:203772kB unevictable:3536kB writepending:3352kB zspages:0kB present:2080628kB managed:1260788kB mlocked:0kB bounce:0kB free_pcp:45056kB local_pcp:7672kB free_cma:0kB [ 78.675802][ T7383] lowmem_reserve[]: 0 0 0 0 0 [ 78.677821][ T7383] Node 1 Normal free:1541368kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35668kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:60076kB local_pcp:11952kB free_cma:0kB [ 78.691681][ T7383] lowmem_reserve[]: 0 0 0 0 0 [ 78.693578][ T7383] Node 0 DMA: 10*4kB (UME) 13*8kB (UME) 7*16kB (UME) 10*32kB (UME) 13*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 4*1024kB (UME) 0*2048kB 0*4096kB = 7040kB [ 78.698959][ T7383] Node 0 DMA32: 419*4kB (U) 1009*8kB (UME) 432*16kB (UM) 44*32kB (UE) 42*64kB (UME) 38*128kB (UE) 7*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 7*2048kB (UM) 3*4096kB (M) = 64788kB [ 78.707192][ T7398] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 78.714950][ T7383] Node 1 Normal: 92*4kB (UME) 61*8kB (U) 51*16kB (UE) 66*32kB (U) 34*64kB (UM) 21*128kB (U) 15*256kB (UME) 8*512kB (U) 17*1024kB (U) 7*2048kB (UE) 365*4096kB (UM) = 1543368kB [ 78.720600][ T7383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.727091][ T7383] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.730450][ T7383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.733891][ T7383] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.740351][ T7383] 98768 total pagecache pages [ 78.742218][ T7383] 0 pages in swap cache [ 78.743617][ T7383] Free swap = 124996kB [ 78.748452][ T7383] Total swap = 124996kB [ 78.750126][ T7383] 1048443 pages RAM [ 78.751634][ T7383] 0 pages HighMem/MovableOnly [ 78.753272][ T7383] 283935 pages reserved [ 78.761470][ T7383] 0 pages cma reserved [ 78.763422][ T7383] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 78.769638][ T7398] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 78.775923][ T7398] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 78.782681][ T7398] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 78.875430][ T7414] trusted_key: encrypted_key: master key parameter 'tefault' is invalid [ 79.006269][ T7429] binder: 7428:7429 unknown command 0 [ 79.008040][ T7429] binder: 7428:7429 ioctl c0306201 200000000080 returned -22 [ 79.244104][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 79.465869][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.470174][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.482871][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.487248][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.493073][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.513513][ T7464] Failed to initialize the IGMP autojoin socket (err -2) [ 79.550208][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.567'. [ 79.600261][ T7476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7476 comm=syz.3.567 [ 79.768933][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 80.162776][ T7464] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 80.173838][ T7464] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 80.181072][ T7464] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 80.187992][ T7464] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 80.392289][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.416627][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.419026][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.435721][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.438069][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.542103][ T7464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.666655][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.963435][ T7464] veth0_vlan: entered promiscuous mode [ 80.969212][ T7464] veth1_vlan: entered promiscuous mode [ 81.054857][ T7464] veth0_macvtap: entered promiscuous mode [ 81.072428][ T7464] veth1_macvtap: entered promiscuous mode [ 81.136009][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.158425][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.171034][ T7464] net_ratelimit: 12 callbacks suppressed [ 81.171046][ T7464] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 81.193672][ T7464] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 81.201651][ T7464] wireguard: wg0: Could not create IPv4 socket [ 81.205480][ T7464] wireguard: wg1: Could not create IPv4 socket [ 81.209542][ T7464] wireguard: wg2: Could not create IPv4 socket [ 81.240951][ T5293] Bluetooth: hci0: command 0x0419 tx timeout [ 81.244454][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.056896][ T40] kauditd_printk_skb: 2889 callbacks suppressed [ 84.056909][ T40] audit: type=1400 audit(1775249612.744:3642): avc: denied { execute } for pid=7703 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.067993][ T40] audit: type=1400 audit(1775249612.744:3643): avc: denied { execute_no_trans } for pid=7703 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.133435][ T40] audit: type=1400 audit(1775249612.824:3644): avc: denied { read write } for pid=7707 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.143897][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.144981][ T40] audit: type=1400 audit(1775249612.824:3645): avc: denied { open } for pid=7707 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.150515][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.156093][ T40] audit: type=1400 audit(1775249612.824:3646): avc: denied { ioctl } for pid=7707 comm="syz-executor" path="socket:[24677]" dev="sockfs" ino=24677 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.161355][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.177174][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.180025][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.194278][ T40] audit: type=1400 audit(1775249612.884:3647): avc: denied { mounton } for pid=7707 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 84.198052][ T7707] Failed to initialize the IGMP autojoin socket (err -2) [ 86.210777][ T5293] Bluetooth: hci1: command tx timeout [ 86.322780][ T7707] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 86.329796][ T7707] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 86.339721][ T7707] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 86.353169][ T7707] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 86.673747][ T7707] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 86.692154][ T840] cfg80211: failed to load regulatory.db [ 86.698112][ T7707] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 86.713966][ T7707] wireguard: wg0: Could not create IPv4 socket [ 86.717508][ T7707] wireguard: wg1: Could not create IPv4 socket [ 86.721569][ T7707] wireguard: wg2: Could not create IPv4 socket [ 90.794936][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.798528][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.810039][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.814511][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.817513][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.831692][ T7933] Failed to initialize the IGMP autojoin socket (err -2) [ 91.492159][ T7933] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 91.506207][ T7933] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 91.514618][ T7933] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 91.524955][ T7933] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 91.811444][ T7933] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.818743][ T7933] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 91.831698][ T7933] wireguard: wg0: Could not create IPv4 socket [ 91.835090][ T7933] wireguard: wg1: Could not create IPv4 socket [ 91.839294][ T7933] wireguard: wg2: Could not create IPv4 socket [ 93.657819][ T1145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.742215][ T1145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.836391][ T1145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.987908][ T1145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.213960][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.218795][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.223997][ T1145] bond0 (unregistering): Released all slaves [ 94.327287][ T1145] tipc: Disabling bearer [ 94.333898][ T1145] tipc: Left network mode [ 94.548704][ T1145] hsr_slave_0: left promiscuous mode [ 94.551379][ T1145] hsr_slave_1: left promiscuous mode [ 94.553930][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.556706][ T1145] batadv0: mtu less than device minimum [ 94.559027][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.563062][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.566791][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.570590][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.574607][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.578491][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.582264][ T1145] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.591840][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.594897][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.607855][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.613653][ T1145] batman_adv: batadv0: Interface deactivated: dummy0 [ 94.615813][ T1145] batman_adv: batadv0: Removing interface: dummy0 [ 94.621119][ T1145] veth1_macvtap: left promiscuous mode [ 94.622966][ T1145] veth0_macvtap: left promiscuous mode [ 94.624919][ T1145] veth1_vlan: left promiscuous mode [ 94.626806][ T1145] veth0_vlan: left promiscuous mode [ 94.750295][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 94.767283][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 96.215586][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.218896][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.223857][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.227356][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.230186][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.243467][ T8143] Failed to initialize the IGMP autojoin socket (err -2) [ 98.289656][ T5293] Bluetooth: hci1: command tx timeout [ 99.713524][ T8143] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 99.721217][ T8143] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 99.728529][ T8143] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 99.735209][ T8143] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 100.010777][ T8143] net_ratelimit: 32 callbacks suppressed [ 100.010789][ T8143] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.026860][ T8143] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 100.037764][ T8143] wireguard: wg0: Could not create IPv4 socket [ 100.045549][ T8143] wireguard: wg1: Could not create IPv4 socket [ 100.050578][ T8143] wireguard: wg2: Could not create IPv4 socket [ 104.826808][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.830569][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.833601][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.838662][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.851787][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.866025][ T8491] Failed to initialize the IGMP autojoin socket (err -2) [ 105.484180][ T8491] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 105.490901][ T8491] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 105.498771][ T8491] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 105.506351][ T8491] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 105.776549][ T8491] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.784469][ T8491] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 105.795559][ T8491] wireguard: wg0: Could not create IPv4 socket [ 105.801753][ T8491] wireguard: wg1: Could not create IPv4 socket [ 105.805378][ T8491] wireguard: wg2: Could not create IPv4 socket [ 110.595764][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.601006][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.604346][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.608175][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.611169][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.623948][ T8682] Failed to initialize the IGMP autojoin socket (err -2) [ 111.192484][ T8682] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 111.203018][ T8682] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 111.207986][ T8682] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 111.213182][ T8682] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 111.516257][ T8682] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 111.524338][ T8682] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 111.533336][ T8682] wireguard: wg0: Could not create IPv4 socket [ 111.538219][ T8682] wireguard: wg1: Could not create IPv4 socket [ 111.542564][ T8682] wireguard: wg2: Could not create IPv4 socket [ 116.954593][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.959742][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.963118][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.966682][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.971705][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.982055][ T8943] Failed to initialize the IGMP autojoin socket (err -2) [ 117.591233][ T8943] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 117.599011][ T8943] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 117.607424][ T8943] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 117.613301][ T8943] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 117.974644][ T8943] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 117.983468][ T8943] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 117.990540][ T8943] wireguard: wg0: Could not create IPv4 socket [ 117.993839][ T8943] wireguard: wg1: Could not create IPv4 socket [ 117.997426][ T8943] wireguard: wg2: Could not create IPv4 socket [ 124.435183][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.440623][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.445243][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.450317][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.453002][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.463775][ T9174] Failed to initialize the IGMP autojoin socket (err -2) [ 125.127080][ T9174] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 125.133476][ T9174] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 125.147022][ T9174] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 125.155869][ T9174] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 125.471502][ T9174] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.480442][ T9174] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 125.487381][ T9174] wireguard: wg0: Could not create IPv4 socket [ 125.493111][ T9174] wireguard: wg1: Could not create IPv4 socket [ 125.497734][ T9174] wireguard: wg2: Could not create IPv4 socket [ 131.603183][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.608650][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.612943][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.616452][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.619315][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.635433][ T9352] Failed to initialize the IGMP autojoin socket (err -2) [ 132.210516][ T9352] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 132.220271][ T9352] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 132.227473][ T9352] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 132.235300][ T9352] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 132.479431][ T9352] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 132.486297][ T9352] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 132.495183][ T9352] wireguard: wg0: Could not create IPv4 socket [ 132.498496][ T9352] wireguard: wg1: Could not create IPv4 socket [ 132.501740][ T9352] wireguard: wg2: Could not create IPv4 socket [ 137.885266][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.888146][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.697242][ T40] audit: type=1400 audit(1775249667.377:3648): avc: denied { mounton } for pid=9477 comm="syz.3.585" path="/158/file1" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.706811][ T40] audit: type=1400 audit(1775249667.377:3649): avc: denied { mount } for pid=9477 comm="syz.3.585" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.728671][ T40] audit: type=1400 audit(1775249667.417:3650): avc: denied { create } for pid=9479 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.742543][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.747754][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.751027][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.753917][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.755018][ T40] audit: type=1400 audit(1775249667.427:3651): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.767737][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.793777][ T9481] Failed to initialize the IGMP autojoin socket (err -2) [ 138.797238][ T40] audit: type=1400 audit(1775249667.477:3652): avc: denied { create } for pid=9487 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.806243][ T40] audit: type=1400 audit(1775249667.477:3653): avc: denied { create } for pid=9487 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.806944][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.821568][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.831838][ T40] audit: type=1400 audit(1775249667.477:3654): avc: denied { getopt } for pid=9487 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.831850][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.847312][ T40] audit: type=1400 audit(1775249667.487:3655): avc: denied { connect } for pid=9487 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.850350][ T9495] netlink: 596 bytes leftover after parsing attributes in process `syz.3.589'. [ 138.854355][ T40] audit: type=1400 audit(1775249667.537:3656): avc: denied { write } for pid=9494 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.857297][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.861213][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.864375][ T40] audit: type=1400 audit(1775249667.537:3657): avc: denied { nlmsg_write } for pid=9494 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.937862][ T9488] Failed to initialize the IGMP autojoin socket (err -2) [ 139.024456][ T9505] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 139.027027][ T9505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.588'. [ 139.068932][ T9505] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 139.152098][ T9499] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 139.248389][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.253897][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.259721][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.265518][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.271862][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.305873][ T9513] Failed to initialize the IGMP autojoin socket (err -2) [ 139.475553][ T9523] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 139.495463][ T9523] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.592'. [ 139.634823][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.645469][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.649801][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.652966][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.655549][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.658500][ T9481] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 139.671555][ T9481] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 139.700696][ T9481] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 139.708240][ T9481] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 139.727856][ T9531] Failed to initialize the IGMP autojoin socket (err -2) [ 139.826902][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 139.909384][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 140.044977][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.055717][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.067267][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.070321][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.073536][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.094687][ T9571] Failed to initialize the IGMP autojoin socket (err -2) [ 140.133448][ T9481] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.142810][ T9481] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 140.160319][ T9481] wireguard: wg0: Could not create IPv4 socket [ 140.166268][ T9481] wireguard: wg1: Could not create IPv4 socket [ 140.172201][ T9481] wireguard: wg2: Could not create IPv4 socket [ 140.221737][ T9562] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 140.832095][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.836152][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.840926][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.843860][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.852371][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.873259][ T9581] Failed to initialize the IGMP autojoin socket (err -2) [ 141.589656][ T9581] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 141.600780][ T9581] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 141.610971][ T9581] wireguard: wg0: Could not create IPv4 socket [ 141.616183][ T9581] wireguard: wg1: Could not create IPv4 socket [ 141.620248][ T9581] wireguard: wg2: Could not create IPv4 socket [ 142.397615][ T9625] netlink: 'syz.3.604': attribute type 4 has an invalid length. [ 142.401348][ T9625] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.604'. [ 144.223627][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 144.283464][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 146.420250][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.423391][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.426785][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.431767][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.435288][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.452390][ T9724] Failed to initialize the IGMP autojoin socket (err -2) [ 147.674451][ T9724] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 147.682490][ T9724] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 147.692727][ T9724] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 147.699051][ T9724] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 147.841225][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.844922][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.847940][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.850724][ T5293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.853261][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.868605][ T9779] Failed to initialize the IGMP autojoin socket (err -2) [ 147.952721][ T9724] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 147.960552][ T9724] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 147.968985][ T9724] wireguard: wg0: Could not create IPv4 socket [ 147.972188][ T9724] wireguard: wg1: Could not create IPv4 socket [ 147.975909][ T9724] wireguard: wg2: Could not create IPv4 socket [ 148.764687][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.769864][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.774464][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.787502][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.791099][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.802003][ T9792] Failed to initialize the IGMP autojoin socket (err -2) [ 149.681285][ T9792] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 149.688227][ T9792] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 149.694285][ T9792] wireguard: wg0: Could not create IPv4 socket [ 149.698978][ T9792] wireguard: wg1: Could not create IPv4 socket [ 149.702485][ T9792] wireguard: wg2: Could not create IPv4 socket [ 155.221831][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.227309][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.230666][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.233540][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.236286][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.248977][ T9899] Failed to initialize the IGMP autojoin socket (err -2) [ 155.794324][ T9899] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 155.799514][ T9899] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 155.807483][ T9899] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 155.816071][ T9899] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 155.968572][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.972356][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.975447][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.980111][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.982773][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.994806][ T9932] Failed to initialize the IGMP autojoin socket (err -2) [ 156.089063][ T9899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.098173][ T9899] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 156.104899][ T9899] wireguard: wg0: Could not create IPv4 socket [ 156.110735][ T9899] wireguard: wg1: Could not create IPv4 socket [ 156.114262][ T9899] wireguard: wg2: Could not create IPv4 socket [ 157.034620][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.038788][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.042619][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.045597][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.049090][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.061771][ T9960] Failed to initialize the IGMP autojoin socket (err -2) [ 157.830489][ T9960] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 157.836705][ T9960] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 157.842523][ T9960] wireguard: wg0: Could not create IPv4 socket [ 157.845657][ T9960] wireguard: wg1: Could not create IPv4 socket [ 157.851282][ T9960] wireguard: wg2: Could not create IPv4 socket [ 162.551994][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.556223][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.559897][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.562875][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.565599][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.578644][T10085] Failed to initialize the IGMP autojoin socket (err -2) [ 163.877457][T10085] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 163.882652][T10085] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 163.893284][T10085] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 163.898303][T10085] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 164.172952][T10085] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 164.181888][T10085] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 164.189370][T10085] wireguard: wg0: Could not create IPv4 socket [ 164.192747][T10085] wireguard: wg1: Could not create IPv4 socket [ 164.197122][T10085] wireguard: wg2: Could not create IPv4 socket [ 164.773806][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.778008][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.781039][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.784033][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.787828][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.807187][T10163] Failed to initialize the IGMP autojoin socket (err -2) [ 165.700765][T10163] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.711371][T10163] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 165.724489][T10163] wireguard: wg0: Could not create IPv4 socket [ 165.729727][T10163] wireguard: wg1: Could not create IPv4 socket [ 165.734161][T10163] wireguard: wg2: Could not create IPv4 socket [ 171.014763][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.019444][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.023863][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.028479][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.032209][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.046126][T10285] Failed to initialize the IGMP autojoin socket (err -2) [ 171.692634][T10285] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 171.702438][T10285] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 171.709410][T10285] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 171.716262][T10285] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 171.964795][T10285] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.973777][T10285] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 171.980837][T10285] wireguard: wg0: Could not create IPv4 socket [ 171.984219][T10285] wireguard: wg1: Could not create IPv4 socket [ 171.988995][T10285] wireguard: wg2: Could not create IPv4 socket [ 172.024911][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.032146][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.042936][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.046097][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.060076][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.078755][T10332] Failed to initialize the IGMP autojoin socket (err -2) [ 173.102066][T10332] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 173.110016][T10332] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 173.118860][T10332] wireguard: wg0: Could not create IPv4 socket [ 173.122325][T10332] wireguard: wg1: Could not create IPv4 socket [ 173.125707][T10332] wireguard: wg2: Could not create IPv4 socket [ 175.795229][ T5944] Bluetooth: hci2: command 0x0406 tx timeout [ 175.796409][ T5941] Bluetooth: hci0: command 0x0419 tx timeout [ 178.739110][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.742905][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.746335][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.749324][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.752012][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.762338][T10462] Failed to initialize the IGMP autojoin socket (err -2) [ 179.342001][T10462] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 179.348068][T10462] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 179.358166][T10462] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 179.364556][T10462] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 179.614641][T10462] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 179.622525][T10462] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 179.628834][T10462] wireguard: wg0: Could not create IPv4 socket [ 179.632308][T10462] wireguard: wg1: Could not create IPv4 socket [ 179.635725][T10462] wireguard: wg2: Could not create IPv4 socket [ 180.226687][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.231573][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.235073][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.240574][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.244027][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.268801][T10499] Failed to initialize the IGMP autojoin socket (err -2) [ 181.264623][T10499] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.272261][T10499] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 181.281726][T10499] wireguard: wg0: Could not create IPv4 socket [ 181.286384][T10499] wireguard: wg1: Could not create IPv4 socket [ 181.291116][T10499] wireguard: wg2: Could not create IPv4 socket [ 186.435958][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.439531][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.442552][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.446607][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.449475][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.461747][T10634] Failed to initialize the IGMP autojoin socket (err -2) [ 187.066821][T10634] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 187.072420][T10634] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 187.077071][T10634] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 187.085072][T10634] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 187.316034][T10634] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.322611][T10634] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 187.331495][T10634] wireguard: wg0: Could not create IPv4 socket [ 187.335765][T10634] wireguard: wg1: Could not create IPv4 socket [ 187.339118][T10634] wireguard: wg2: Could not create IPv4 socket [ 187.637940][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.642763][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.645917][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.649877][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.653673][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.672858][T10671] Failed to initialize the IGMP autojoin socket (err -2) [ 188.633372][T10671] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 188.643988][T10671] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 188.654508][T10671] wireguard: wg0: Could not create IPv4 socket [ 188.658543][T10671] wireguard: wg1: Could not create IPv4 socket [ 188.662544][T10671] wireguard: wg2: Could not create IPv4 socket [ 194.175992][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.179743][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.182943][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.186434][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.189175][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.206860][T10837] Failed to initialize the IGMP autojoin socket (err -2) [ 194.733082][T10837] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 194.743233][T10837] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 194.748611][T10837] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 194.753849][T10837] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 194.999116][T10837] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.008633][T10837] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 195.016326][T10837] wireguard: wg0: Could not create IPv4 socket [ 195.019966][T10837] wireguard: wg1: Could not create IPv4 socket [ 195.023425][T10837] wireguard: wg2: Could not create IPv4 socket [ 195.480446][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.484794][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.488128][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.491409][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.495249][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.509672][T10874] Failed to initialize the IGMP autojoin socket (err -2) [ 196.368861][T10874] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 196.378674][T10874] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 196.388216][T10874] wireguard: wg0: Could not create IPv4 socket [ 196.391903][T10874] wireguard: wg1: Could not create IPv4 socket [ 196.395974][T10874] wireguard: wg2: Could not create IPv4 socket [ 199.328817][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.330995][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.599822][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.603965][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.608096][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.611469][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.615723][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.630552][T11026] Failed to initialize the IGMP autojoin socket (err -2) [ 202.118744][T11026] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 202.123930][T11026] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 202.128971][T11026] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 202.134243][T11026] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 202.361089][T11026] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.370195][T11026] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 202.379096][T11026] wireguard: wg0: Could not create IPv4 socket [ 202.382907][T11026] wireguard: wg1: Could not create IPv4 socket [ 202.389367][T11026] wireguard: wg2: Could not create IPv4 socket [ 202.973222][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.977386][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.980198][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.983079][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.986430][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.000960][T11058] Failed to initialize the IGMP autojoin socket (err -2) [ 203.881164][T11058] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.889623][T11058] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 203.898853][T11058] wireguard: wg0: Could not create IPv4 socket [ 203.902123][T11058] wireguard: wg1: Could not create IPv4 socket [ 203.906869][T11058] wireguard: wg2: Could not create IPv4 socket [ 209.277129][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.280307][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.283445][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.286908][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.289611][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.304437][T11202] Failed to initialize the IGMP autojoin socket (err -2) [ 209.874929][T11202] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 209.880172][T11202] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 209.890270][T11202] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 209.895609][T11202] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 210.133410][T11202] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 210.140233][T11202] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 210.147943][T11202] wireguard: wg0: Could not create IPv4 socket [ 210.151023][T11202] wireguard: wg1: Could not create IPv4 socket [ 210.155839][T11202] wireguard: wg2: Could not create IPv4 socket [ 210.785461][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.790471][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.794757][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.798825][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.801530][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.818785][T11239] Failed to initialize the IGMP autojoin socket (err -2) [ 211.738268][T11239] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.747764][T11239] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 211.756538][T11239] wireguard: wg0: Could not create IPv4 socket [ 211.760641][T11239] wireguard: wg1: Could not create IPv4 socket [ 211.765991][T11239] wireguard: wg2: Could not create IPv4 socket [ 217.532134][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.535798][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.538542][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.541252][ T5293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.544478][ T5293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.556909][T11380] Failed to initialize the IGMP autojoin socket (err -2) [ 218.081095][T11380] netdevsim netdevsim4 netdevsim0: renamed from eth14 [ 218.085799][T11380] netdevsim netdevsim4 netdevsim1: renamed from eth15 [ 218.093041][T11380] netdevsim netdevsim4 netdevsim2: renamed from eth16 [ 218.097963][T11380] netdevsim netdevsim4 netdevsim3: renamed from eth17 [ 218.330020][T11380] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 218.339282][T11380] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 218.348526][T11380] wireguard: wg0: Could not create IPv4 socket [ 218.351837][T11380] wireguard: wg1: Could not create IPv4 socket [ 218.356297][T11380] wireguard: wg2: Could not create IPv4 socket [ 219.485280][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.489548][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.492454][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.497420][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.503189][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.522390][T11437] Failed to initialize the IGMP autojoin socket (err -2) [ 220.259269][T11437] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 220.266708][T11437] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 220.273274][T11437] wireguard: wg0: Could not create IPv4 socket [ 220.276608][T11437] wireguard: wg1: Could not create IPv4 socket [ 220.279873][T11437] wireguard: wg2: Could not create IPv4 socket [ 223.925318][ T40] kauditd_printk_skb: 42 callbacks suppressed SYZFAIL: socket(AF_NETLINK) failed (errno 13: Permission denied) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=523 state=3 status=67 (errno 9: Bad file descriptor) [ 223.925329][ T40] audit: type=1400 audit(1775249752.622:3700): avc: denied { write } for pid=5875 comm="syz-executor" path="pipe:[7337]" dev="pipefs" ino=7337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 224.584610][ T118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.686855][ T118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.773309][ T118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.855757][ T118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.983397][ T118] bridge_slave_1: left allmulticast mode [ 224.985713][ T118] bridge_slave_1: left promiscuous mode [ 224.988139][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.993702][ T118] bridge_slave_0: left allmulticast mode [ 224.996237][ T118] bridge_slave_0: left promiscuous mode [ 224.998962][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.180284][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.184550][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.188237][ T118] bond0 (unregistering): Released all slaves [ 225.535663][ T118] hsr_slave_0: left promiscuous mode [ 225.538014][ T118] hsr_slave_1: left promiscuous mode [ 225.540149][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.542648][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.545317][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.547633][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.554362][ T118] veth1_macvtap: left promiscuous mode [ 225.556630][ T118] veth0_macvtap: left promiscuous mode [ 225.558487][ T118] veth1_vlan: left promiscuous mode [ 225.560510][ T118] veth0_vlan: left promiscuous mode [ 225.699187][ T118] team0 (unregistering): Port device team_slave_1 removed [ 225.705652][ T118] team0 (unregistering): Port device team_slave_0 removed