last executing test programs: 40.193107039s ago: executing program 0 (id=126): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 40.005801924s ago: executing program 0 (id=127): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, @mcast1, @empty, 0x0, 0x0, 0x16, 0x9}}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x200}, @TCA_FQ_FLOW_REFILL_DELAY={0xffffff49, 0x9, 0x3}]}}]}, 0xa2}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x40200) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000000a40)={{0x3, 0x1, 0x9, 0x1, 0x80000001, 0x1}, 0x11, [0xd, 0x4b, 0x0, 0x2, 0x8001, 0x8, 0x1, 0x8, 0x2, 0x2c54, 0x2, 0x3, 0xffff7fc4, 0x80000000, 0x2, 0x1, 0x0, 0x2, 0x3, 0xfffeffff, 0x1, 0x7ff, 0x44be, 0x400, 0x7, 0x0, 0x80000001, 0x80000000, 0x401, 0xb4bc, 0x7, 0x1, 0x3, 0x8, 0x3, 0x7ff, 0x820d, 0x21d, 0x7, 0x800, 0x7, 0x7f, 0x6, 0xdce6, 0x0, 0x8000, 0x3ff, 0x1, 0xb4, 0x7, 0xfb0, 0x388, 0x6, 0x3, 0x401, 0x9, 0x715, 0x9, 0xc6, 0x7, 0x2, 0x5d02, 0x401, 0x9, 0x7, 0xc0000, 0x1, 0x0, 0x100, 0x9, 0x6, 0xfffffffe, 0xaa0, 0x0, 0x920, 0x7, 0x4, 0x80, 0x10001, 0xb6, 0x7, 0xc3, 0x5, 0x6, 0xa, 0x8, 0x4, 0x1da, 0x6, 0x400, 0x15, 0x7, 0x9, 0x1, 0xec2, 0x5, 0x101, 0xda9, 0x9, 0x1, 0xffe000, 0x1, 0x2, 0x5, 0x7fff, 0xe, 0x6, 0x7ecd863, 0x4dfd, 0x0, 0xc, 0xfffffff9, 0x9, 0x9, 0x2000000, 0x4, 0x5, 0x6915, 0xaa19, 0xfffffffe, 0x5, 0x9, 0x8, 0x4f11, 0x2000, 0x7fffffff, 0x4, 0x40, 0x6, 0x8001, 0x4, 0x4, 0x4, 0x1, 0x8, 0x3, 0x400, 0x6, 0x9, 0x7, 0xb, 0xfffffffd, 0xff, 0x8, 0x18, 0xab0, 0x6, 0x6, 0x5, 0x81, 0x6, 0x80, 0x6, 0x5, 0xef, 0x3, 0x8, 0x6, 0x9, 0xf8, 0xe61, 0x74c, 0x4, 0x0, 0x2, 0x401, 0xcd85, 0x312ee360, 0x5, 0x6, 0x4, 0x1cd9, 0x9, 0x2, 0x0, 0x3, 0x480732e7, 0x80e0, 0x7, 0x9, 0x101, 0x5, 0xe12e, 0x7, 0x7, 0x1ff, 0x2, 0xd, 0x9, 0xb, 0x52, 0x8, 0x7fff, 0x194bf480, 0x3, 0xb6a, 0x3, 0xa, 0x40, 0x1, 0x5, 0xdd7, 0x7fffffff, 0xffffff00, 0xde8, 0x7, 0x4000000, 0x7, 0xffffffff, 0x0, 0x3, 0xffffff81, 0x9, 0x0, 0x2, 0x6, 0x2, 0x34, 0x4, 0x5, 0x2, 0x7, 0x3, 0x8000, 0x8, 0x4, 0x7fff, 0xfffffffc, 0x0, 0xcdf, 0x58, 0x6, 0x1, 0x80000000, 0x5, 0x800, 0x8, 0xfffffff2, 0x8000, 0x1d, 0x92, 0x2, 0x8, 0x6, 0x8, 0x2, 0x8, 0xa4b, 0x0, 0x185, 0x8, 0x10000, 0x400, 0x7, 0x5, 0xfffffffd, 0x9, 0xa0d, 0x1ff, 0x5, 0x400, 0x9, 0x1, 0xffff, 0xe, 0xeb, 0x3, 0x2, 0x1, 0x6, 0x5, 0x400, 0x0, 0x7, 0xa, 0x1, 0x5, 0x40, 0x5, 0x7, 0x0, 0x1, 0xb8e, 0x1748, 0x6a, 0x6, 0x100, 0x1000, 0x8, 0x7, 0x1, 0x0, 0x0, 0x3, 0x7f, 0x4, 0x9, 0x4, 0x0, 0x4, 0x2, 0x0, 0x3, 0x6, 0x5, 0x10000, 0xffff7fff, 0x401, 0x1, 0x3, 0x8000, 0x4, 0xfff, 0x8, 0x8, 0x8, 0x3, 0x9, 0x8748, 0x6, 0x98d8, 0x200, 0x2, 0x9, 0x6ff3, 0xd0, 0x8, 0x0, 0x3b5, 0x51, 0xa, 0x6, 0x5, 0x2, 0xfffffffb, 0x2, 0x7f, 0x9, 0xf879, 0x7fffffff, 0x8, 0xfff, 0x5, 0x8, 0x6, 0x3, 0x2, 0x6, 0x81, 0x4, 0x6, 0x26, 0xcb, 0x1f, 0x0, 0x7, 0x5, 0x8, 0xa, 0x9, 0xffff0d2c, 0x7, 0x40, 0x0, 0xb9ea, 0xee3e, 0x8, 0x7, 0x9c, 0x0, 0x4, 0x4, 0x7fff, 0x7, 0x100, 0x81, 0x4, 0x75, 0x1, 0x20a0, 0x1, 0x8, 0x8, 0x8, 0x4, 0x2, 0xffff, 0xf9, 0x4, 0xffff, 0x3, 0x1ff, 0x3, 0xb, 0xffffffff, 0xe, 0x4, 0x10, 0x2, 0x75, 0x6, 0x0, 0x81, 0x800000, 0x8, 0x8, 0x3, 0xffffff20, 0x4, 0x4, 0x2, 0x0, 0x8, 0x6, 0x9, 0x9, 0xffffa8e5, 0x80000001, 0x6, 0x2, 0xfffffffb, 0xc, 0xd292, 0x6, 0xfffffff7, 0x1, 0x80000000, 0x9, 0x1, 0x5, 0x6, 0x10000, 0x4, 0x0, 0x100, 0x3, 0x6, 0x6, 0x9, 0x1, 0x1, 0x1, 0xdb, 0x8, 0xfffffff7, 0x3e0f, 0x4000000, 0x9, 0x8, 0x4, 0x2, 0x5ad6, 0x9d, 0x3, 0x0, 0xaa, 0x4, 0x6, 0xd4aa, 0x8, 0xfffff801, 0x6, 0x4, 0xd0a, 0x0, 0xfffffff9, 0xff, 0x5, 0x4, 0x7, 0x0, 0x10000, 0x7, 0x48e74c52, 0x5, 0x2, 0x1, 0x8, 0x10, 0x80, 0xc1, 0x2c84, 0x401, 0x10, 0x2, 0x401, 0xf72, 0x9, 0x6, 0x4e130b3d, 0x9, 0x6, 0x2, 0xfff, 0x3, 0x248a, 0xd6, 0x6, 0x3, 0x2, 0x2, 0x7ff, 0x8, 0xa, 0x6, 0x6, 0x3, 0x1, 0x2, 0xeb1ac8f, 0x2, 0x9, 0x200, 0x3ff, 0x9, 0x5, 0x5, 0x7, 0x7, 0x9, 0x9, 0x1, 0x4, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x3, 0x80, 0xcb, 0x2, 0xfd2, 0x2, 0x4f, 0x3, 0x7, 0x9, 0x1, 0x2, 0x2dd3, 0x9, 0x0, 0x0, 0x9, 0x401, 0x81, 0x44, 0x2, 0x0, 0xfffff107, 0x10000, 0x3, 0x839e, 0x5, 0x5d63d9b7, 0x8001, 0x1, 0x6, 0x40, 0x1d, 0x800, 0x7fcda135, 0xcb, 0x2, 0x1, 0x2, 0x4, 0x7fffffff, 0xd1ba, 0xc, 0x6fdf, 0x0, 0xc1, 0x100, 0x5, 0x9, 0xfff, 0x8, 0x5, 0x2, 0x6, 0x30f, 0x4, 0x80000000, 0x8001, 0x3, 0x3ff, 0x6, 0xfffffffa, 0xee, 0x8, 0x1, 0x3ff, 0x8, 0x8, 0xb7232af, 0x4, 0xf22, 0x0, 0xb, 0x5, 0x10001, 0x100, 0x1, 0x3, 0x9, 0x3ff, 0x200, 0x1, 0x0, 0xffffffff, 0x9, 0x4, 0x2, 0x3, 0x3, 0x7ff, 0x2, 0x2, 0xf, 0x3, 0x0, 0x7, 0x9, 0x216e, 0x7f, 0x9, 0x3, 0x33, 0x8, 0x81, 0x6, 0xd, 0x7f, 0x8, 0x0, 0x4, 0xa4, 0x0, 0xe, 0x6, 0x5, 0x2, 0x80000000, 0x3, 0x6, 0x8, 0x921f, 0xfffff72f, 0x6, 0x1f, 0x7b, 0x6, 0x51, 0x1, 0x1, 0x1, 0x26, 0xffff, 0x73, 0x5, 0x7, 0x9, 0xff1, 0xe, 0x4, 0x9, 0x3, 0x9, 0x10, 0x1, 0x1, 0x5, 0x5d, 0x79f, 0x8, 0xffff, 0x6, 0x2, 0x3, 0xc00f, 0x7, 0xc20, 0x8, 0x0, 0x3, 0xd, 0x2, 0x8001, 0x2, 0x2, 0x2, 0x8, 0x401, 0xfffffff8, 0x2, 0x991, 0x10, 0xe, 0x9, 0xb9e, 0x5, 0xffff8001, 0x1, 0x6, 0x80, 0x7, 0x6, 0x1, 0x2, 0x2d86a377, 0x3, 0x40, 0x6, 0x3929d6e6, 0x5be77f13, 0x9, 0x680, 0xfffffffc, 0x8, 0x9, 0x1, 0x7, 0xc, 0x8, 0x6, 0x3, 0x725, 0xff, 0xb3f0, 0xfffffff5, 0x2, 0x7, 0x3, 0x0, 0x3, 0x3, 0x0, 0x80, 0x5, 0x7, 0x0, 0x2, 0x81, 0x4, 0x7f, 0x4, 0x9, 0xe, 0x400, 0xa992, 0x3, 0x40000000, 0xd9e1, 0x0, 0x0, 0x2, 0x7, 0x516, 0xfffffa1d, 0x3, 0x3, 0xf, 0xdf45, 0xff, 0x8, 0x400, 0xa, 0x1, 0x8, 0x3, 0x5, 0x1, 0x5, 0xce7, 0x81, 0x8, 0x5, 0xffffff9e, 0x101, 0x8, 0xff, 0x0, 0x8, 0x55fe84de, 0xffff, 0x0, 0x10001, 0x4, 0x9, 0x55, 0x7, 0x6, 0x1, 0x7, 0x92, 0xd, 0x40, 0x8, 0xb, 0x9, 0x2, 0x69d, 0x546c, 0x8, 0x0, 0x0, 0x200, 0x1, 0xb, 0xcaf, 0x1000, 0xc, 0x10001, 0xd, 0x9, 0x0, 0xfffffffa, 0x0, 0x9, 0x2, 0x401, 0x3, 0x24cd, 0x9, 0x5, 0x359, 0x4, 0x1000, 0x9, 0x4, 0x8106, 0x8, 0x8, 0x800, 0xdf, 0x80000000, 0x7ff, 0x3a0db0b2, 0x0, 0x6, 0x41, 0x8, 0x31, 0x3, 0xd, 0x4, 0x5, 0x8, 0x5, 0xff, 0x80, 0x200, 0x4, 0x5, 0x80, 0x400, 0x4775, 0x8, 0x6, 0x3, 0x5, 0x7, 0x3d9, 0x8f, 0x0, 0x8b, 0x6, 0x5, 0xb, 0x3, 0xfffff801, 0x8, 0x3, 0x3, 0x0, 0x3, 0xb, 0x200, 0xffffffff, 0x7, 0x9, 0x4, 0x6, 0x3ff, 0x7, 0x2, 0x8001, 0x7, 0x1ff, 0x9, 0x4, 0x1, 0x10001, 0xfc, 0x8, 0x1, 0xf, 0x6, 0x400040, 0x4, 0x6, 0xa2f, 0xfffffff8, 0x9a22, 0x8, 0x8, 0x2, 0x8, 0x2, 0x101, 0x7, 0x1ff, 0x800, 0xffffffff, 0x1, 0x9, 0x5, 0x8, 0x3, 0x6, 0x0, 0xb62e, 0x5, 0x0, 0x1, 0x51, 0x5, 0x5, 0x9, 0x8, 0x5, 0x95b0, 0x8, 0x1, 0x1, 0xfc3b, 0x8, 0x6, 0x4, 0xffffea75, 0x401, 0x0, 0x5, 0x5, 0x9, 0x20004000, 0x4a, 0xffff, 0x4, 0x2, 0xff, 0x100, 0x2, 0x5, 0x10001, 0x6, 0x2, 0x3, 0x8, 0x0, 0x7, 0x4c, 0x100, 0x5, 0x6, 0x7f, 0x52, 0xc906, 0x1, 0x0, 0x2, 0x83d, 0xdab, 0x3, 0x0, 0x81, 0x6, 0x4, 0x7, 0xd, 0xfffffffa, 0x0, 0x10001, 0x3, 0x4, 0x1000, 0xeb6, 0x4b, 0x7, 0x3, 0x9, 0x40000, 0x882, 0x7, 0xfffffffd, 0x3, 0x6, 0x1, 0x1, 0x7, 0xeb, 0xfff, 0x6, 0x2, 0xdf83, 0xf, 0x80, 0x9, 0x9, 0xcfcf, 0x8, 0x6, 0xb50, 0x5, 0x200, 0x5, 0x4, 0x13400, 0x27, 0x154, 0x1, 0xf]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r1, 0x29, 0x2, 0x81, 0xcf57, 0xff52, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8000, 0x8, 0x1}}) 39.953958923s ago: executing program 0 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 39.953499183s ago: executing program 0 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x100) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x161) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_trace_dev_match', 0x28c102, 0x1ea) write$binfmt_script(r1, &(0x7f00000109c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) ftruncate(r2, 0x4a8e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000680)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 39.916879525s ago: executing program 0 (id=130): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) mknod(0x0, 0x8001420, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffb, 0x7, 0x6, 0x7, 0x7fff, 0x7fff, 0x3, 0xaa64, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 39.472005501s ago: executing program 0 (id=134): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x49, 0x1, 0x10, "6040a717020540ff1057e31e0000e70000aeff0000e900", 0x50313134}) 39.333141953s ago: executing program 32 (id=134): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x49, 0x1, 0x10, "6040a717020540ff1057e31e0000e70000aeff0000e900", 0x50313134}) 35.645883618s ago: executing program 4 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb8847"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) 35.645521145s ago: executing program 4 (id=168): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000080)) ioctl$BSG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000002180)) syz_emit_vhci(&(0x7f0000005e40)=ANY=[@ANYBLOB="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", @ANYBLOB="4eae702996dace4e607038100e881b22ef22f646267ae0f3a9fac307005182efa55b8503004b2b854d235a4dbe8f812041f46ed76d9a197bec7c1b4311d44e640b9959642a59aee0d5d19dbd1b88925d43134bc6a2e875ad890d568689ef2935f0adacd9d3da3e2b61da375fe511bd8e0f382d3ecb74f75024429a96008616186fe41e60fefe7d53f2d027b74cc872493c07b40cda309ac7d162cd8cff5cff20e4ad3bec168503f51942da8db9a37b042d2f5d2056cd13f507812acb13b8f45b3f19d405", @ANYRES8=r1, @ANYRES64=r0], 0x7) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, 0xfffffffffffffff9) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f00000059c0)={0x2020}, 0x2020) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f00000020c0)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008854) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) pipe2$watch_queue(&(0x7f0000002140), 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat(r6, &(0x7f0000002100)='./file1\x00', 0x400002, 0x104) fcntl$getflags(r9, 0x401) read$FUSE(r9, &(0x7f0000002d00)={0x2020}, 0x2020) 35.454752382s ago: executing program 4 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x3, 0x0, {0x0, 0x3, 0x0, '\')*'}}, 0x24) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) 35.374956351s ago: executing program 4 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6020e9030014060100000000000000000000000000000000fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010df02c93a8493"], 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) (async) write(r1, &(0x7f0000000300)='1', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000010000000000000009ec97f145f52a25b3739", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x50) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000080)=@tcp6=r0}, 0x20) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) signalfd4(r8, &(0x7f0000000180), 0x8, 0x80800) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001dc0)=""/113, 0x71}], 0x1}, 0x4}], 0x1, 0x400100b4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001d, 0xc1141ccbd276e69d, r0, 0x28f41000) 35.213680547s ago: executing program 4 (id=179): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11600) 30.820493087s ago: executing program 4 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5400, 0x8a}, [@IFLA_MAP={0x24, 0xe, {0x4, 0x5, 0xc08, 0x80, 0x0, 0x71}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) 30.820306371s ago: executing program 33 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5400, 0x8a}, [@IFLA_MAP={0x24, 0xe, {0x4, 0x5, 0xc08, 0x80, 0x0, 0x71}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) 25.904416402s ago: executing program 1 (id=242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x5c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) 25.869226335s ago: executing program 1 (id=243): pipe(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x2000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 25.60471143s ago: executing program 1 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0xf5ffffff) 25.520915334s ago: executing program 1 (id=247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r2}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r9, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r7, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x5c, r10, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) 25.40406258s ago: executing program 1 (id=249): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x13, 0x311242) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000005000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000010009c09f91f22e523e1b4e2886af4600000000000000000000000020000000002b000000008000003a2d285cc980fb0002000000000000006d4d928d14d3a461b60245898556c2060000005f0f00003bcf2debff00002b130000000000"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r2, 0x40104d05, &(0x7f0000000a00)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) ptrace$getsig(0x4202, r3, 0xbe, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000200)={0x7, 0x2}) fchdir(r4) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000b80)={0x5, 0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000740)=""/152, 0x98}, {&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/251, 0xfb}], &(0x7f0000000b40)=[0x100000001, 0x4]}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680), 0x4) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000bc0)={{0x4, @addr=0x7ff}, "486d4fc653932a109d6d006af075aefdf45759ad5d24b38bebc120a38a84f111", 0x1}) 25.244596071s ago: executing program 1 (id=251): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002900)={&(0x7f0000002100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}, 0x20004c10) 10.855573389s ago: executing program 2 (id=399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000f0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0xd}, [@NFACCT_NAME={0x5, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2638e5aecc5a"}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7, 0x6, 0xc, 0xd0a5, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x3f40, 0x80000003, 0x0, 0x10, 0xb, 0xffff, 0x6, 0x1, 0x5, 0x0, 0x2, 0x2000000000000000, 0x809, 0x0, 0x5, 0x6, 0x9}) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x10, 0x8800) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000200)={0x13, &(0x7f0000000140)=[{0x7, '\x00', @data=0x3ff, 0x7}, {0x1f, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x1}, {0x0, @svalue=0x6}, {0x0, @uvalue=0x1}]}, 0x2}]}) 10.855443159s ago: executing program 2 (id=400): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0ef00000040000000800000007"], 0x48) 10.785063212s ago: executing program 2 (id=402): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x94, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) ioctl$I2C_TIMEOUT(r3, 0x40806685, 0x9) 10.230442275s ago: executing program 34 (id=251): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002900)={&(0x7f0000002100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}, 0x20004c10) 7.705052654s ago: executing program 2 (id=450): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800e89fab31503a4dbabcf6450000700004000000019078640101b8ac1414aa0b009078032c00004500fffdfffc000000890000ac1414bbac14142a8804c8fc071bd67f000001ac1414aaac1e0101ffffffff0000000000000000441c4f60000005dc00000008000000000000f00a0000000000000009"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0xfffffffffffffff8, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) r2 = syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x6, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x2, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x1000000b, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x30f, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x7, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x9, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x6, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x4005, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x4, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xfeff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 7.625334899s ago: executing program 2 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0) 7.121243626s ago: executing program 2 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x123640, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf4) 6.973288988s ago: executing program 35 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x123640, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf4) 3.214507112s ago: executing program 5 (id=510): ustat(0x801, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x2) write(r0, &(0x7f0000000070)='syz0:127.0+0.1', 0xe) 3.17788312s ago: executing program 5 (id=512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x9, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 3.065617716s ago: executing program 5 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x33333333333333-3,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) 1.655103296s ago: executing program 3 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'nicvf0\x00', 0x1000}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001000013"], 0x6a) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'nicvf0\x00', 0x1000}) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000000001000013"], 0x6a) (async) 1.654365387s ago: executing program 5 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0000000000000000000c0090000500000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4894}, 0xa080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @timestamp, @sack_perm, @sack_perm], 0x8) 1.605094845s ago: executing program 5 (id=522): r0 = fanotify_init(0x10, 0x1000) (async) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x8000013, r1, 0x0) (async) fanotify_mark(r0, 0x221, 0x103b, r1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc085}, 0x20000004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) (async) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) (async) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x8864000000000000) r10 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r12, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000800)=[{0x1a, '\x00', @st={0x4, [{0x0, @svalue=0x81}, {0x1, @uvalue=0x70000}, {0x0, @svalue=0xfffffffffffffffc}, {0x0, @uvalue=0x4}]}, 0x8}, {0x1c, '\x00', @data=0x6, 0x1}, {0x31, '\x00', @buffer={"7a4e0aba366430fb9f2bb9de4f717ef3d63bb756465abcb2228e57443eeec4cf", 0x20}}, {0x45, '\x00', @buffer={"5bb3099b8dd72038417881f26bd4056b8e776dc8efd699499f72a1b380f8904e", 0x20}, 0x5e1b}]}) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001d00010028bd7000fddbdf2502000000f741fa81049ea73ac8e7422262f6004fb6fe30a836b74d2c554158b9f29d0c2719e2bf3f216700c140e9c83e52be39721cdc314a383c8944901d8790d8112e10563c0e29f9d7cdfc0d45ea4c55bcc57b4b2577d75cfb8e11a090387f8d3c37a65a3bb92e57d03f2146595371716f26829a776e6f28b0219cce9d721d8cfd0e2c6b7b931f0af4d174506a6960e983148f", @ANYRES32=r11, @ANYBLOB="00003c09140003000400000002000000050000000101000008000f000000000008000f000100000008000900120b0000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x8946, &(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x14, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000007f418195a5adf9250008000000010000009decf35b235dd35cc985e308dfc0625b5026acba35349d5d713c478f8e0e10fc899ac886050215e45b556f9e8d5233e730f8aeb83407cf9f608ee2017e6fe26aaf353c169066d0b119d3e91a0e99c47d0581a885f1a30a6e640bf108342e167ef8a8dff0bc3e904df924d325cc0d298e48b21cc347cf3710000000000000000000"], 0x50) (async) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000005000000000a0000ff7f000001000000", @ANYRES32, @ANYRES64=0x0, @ANYRESHEX=r5, @ANYRES32=r14, @ANYBLOB="01000000030000000400"/28], 0x50) 1.494284317s ago: executing program 3 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x2008}], 0x1, 0x40010162, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) 1.445311566s ago: executing program 6 (id=526): pipe(&(0x7f0000000340)={0xffffffffffffffff}) fcntl$getflags(r0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0116"], 0x5c}, 0x1, 0xf000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x2, 0x3, 0x8, 0x9, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, @mcast2, 0x8000, 0x8000, 0xfff, 0x7ad6fa18}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d40)={'ip6gre0\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', 0x0, 0x2f, 0xf, 0x3, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x9, 0x5, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="02002abd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003000624bbc9b33a96f5afa724ba", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400684b000008000600", @ANYRES32=r7, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4102, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) accept4$packet(r8, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f40)=0x14, 0x80000) sendfile(r8, r8, 0x0, 0xe3aa6ea) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000000)={0x2102, r9}, 0x1) landlock_restrict_self(r10, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_clone(0xa0000000, &(0x7f0000000180)="5bb7b81edf3eccefee25", 0xa, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="b3080738a50a673e5bf00dd30db4ba2b217938f063282381bca8eee005033ad1229b9c5c18a827868cb6bb86c9344e") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r8}}, './file1\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r11}}, 0x1c) 1.374196658s ago: executing program 3 (id=528): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8a00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='base=0x0 size=0x40000000 type=write-back\n', 0x29) ioctl$CDROM_DEBUG(r0, 0x5330, 0x1) 1.37403719s ago: executing program 6 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00001f02060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001340000008"], 0x5c}}, 0x0) 1.315370356s ago: executing program 3 (id=530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x34}}, './file0\x00'}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0xc044054) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x400080, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x18, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5a9f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x0, 0x6, 0x3, 0x9, 0x8, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @ldst={0x0, 0x2, 0x1, 0x8, 0xa, 0x30}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x0, 0xa}, 0x10, 0x2b03a, r0, 0x2, &(0x7f0000000340)=[r6, r8, 0xffffffffffffffff, r9], &(0x7f0000000380)=[{0x1, 0x4, 0x4, 0xa}, {0x4, 0x1, 0xc, 0x7}], 0x10, 0x80000000}, 0x94) 1.314786342s ago: executing program 6 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x300}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.245539172s ago: executing program 7 (id=533): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x0, 0x1}}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffb, 0x800000000000009, 0x3, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0xc592, 0x1000, 0xfffffffffffffffd, 0x3, 0x2000000000000000, 0x4000000000000b3, 0xfffffffeffffff04], 0xeeee0000, 0x201893}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x200, 0x101000) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000400)='>', 0x1, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r4, 0x0, 0x32, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') 1.244762923s ago: executing program 6 (id=534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) pipe2(&(0x7f00000001c0)={0x0, 0x0}, 0x4000) write(r2, &(0x7f0000000014)="0500010001000000", 0x8) (async) write(r2, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) (async) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) (async) ftruncate(r6, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.244535797s ago: executing program 3 (id=535): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x884) 1.244270554s ago: executing program 7 (id=536): r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752, 0x0, @stepwise={0x0, 0x4e7, 0x97c, 0x0, 0xfffffffc}}) 1.155657158s ago: executing program 7 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 710.560296ms ago: executing program 3 (id=538): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = socket(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, 0x0) landlock_create_ruleset(0x0, 0x0, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x8864, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x200060c0}, 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x41002, 0x0) ioctl$BSG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000200)) write(r1, &(0x7f0000000000)="1c0000001a009b8a140000003b000000000000000000000200000000", 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = gettid() write$P9_RGETLOCK(r2, &(0x7f0000000100)={0x23, 0x37, 0x1, {0x1, 0x7, 0xbe, r6, 0x5, '\xaa\xaa\xaa\xaa\xaa'}}, 0x23) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000040)={0x0, 0x6}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80400, 0x40) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x52) 665.034388ms ago: executing program 5 (id=539): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket(0x2, 0x2, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r5, &(0x7f0000000080)=""/237, 0xed, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) iopl(0x3) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000240)=@file={0x0, './proc/thread-self/fail-nth\x00'}, 0x6e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xa7dc, 0x0, 0x40, 0x3aa, 0x0, r0}) 595.331703ms ago: executing program 7 (id=540): renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x164, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}, @IFLA_VF_PORTS={0x124, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x7, 0x2, '/(\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sit\x00'}, @IFLA_PORT_PROFILE={0xa, 0x2, 'v,:,\xe3\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '^\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c8eadd37bb1b7d0d293b0844792b6ade"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf1}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5bc567820e06c8b235e6f505969bf1db"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sit\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1c20d2fdba32613190dd75c633842105"}, @IFLA_PORT_VF={0x8, 0x1, 0x978b}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sit\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'sit\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d92d7a13a87b7b007096e317c64023f3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "86c96db4408aab7823c548be18374234"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fdb6e6413756f54432a62e03ae843bfa"}]}]}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 494.147785ms ago: executing program 6 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x240, r2, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x142, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@device_b, {0x9, 0x6e8}, @value=@ver_80211n={0x0, 0xa8c, 0x2, 0x2, 0x0, 0x2}}, 0x60c, 0x61, @random=0x4, @val={0x1, 0x5, [{0x60, 0x1}, {}, {0x12, 0x1}, {0x24}, {0x2, 0x1}]}, @val={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0x34c0, 0xa52, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x8, 0x6}}, [{0xdd, 0xf7, "54db143875ba5525e5be37a972f009086347d22c5dc1487cc77267c37b17ed22d550b74bec065afa9011b8d4a4750c4366a2381049a64744f301c53505ed1aab3fdaf2f30187b4d5010c4fab60926f956af5225a2e1049d92f45707dbcf1b8aa0cbd3e9e890d81b5de0d3bf035028d2b10ac0d0e75642ae6093d5a68275852a35da332022f410ba707a3dcd825433484293b1bcdc613ce5c70f99ed4533dc0a80d7fc17415d5ab24eeaa4e4255111af5b52ceb7659d37a3ee33f31566e40f20885e9e4319ced7d1cf5c8f05564eededec3fce8632a1c94f161632dabfc4a19fbbb37f90f3a93774f96658035a794a8cadcb006869ee62c"}]}}, @NL80211_ATTR_FRAME={0xbf, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x3, 0x3}}, 0x240, 0x26, @default, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x8, 0x1}}, [{0xdd, 0x7f, "72fa67bb7a6e2886126242bfe4e4aac39c8aa314e24492e5395138053fc21222bd356f1d1ba0358b583130c8c99b22bf875790079bffc84886192e87139eba54d87c29dfebb519d9ad8561625e13a2cf20e43af106c57bfe2eba3417863e314b6c98ae183da611788b0a96d37e623ce9f708918f57e9e0b7f0bf95188030c2"}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x890}, 0xe89e8cdb83d2df35) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f0000000000000000340000000e0001006e657464657673696d0000000f0001"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x240, r2, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x142, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@device_b, {0x9, 0x6e8}, @value=@ver_80211n={0x0, 0xa8c, 0x2, 0x2, 0x0, 0x2}}, 0x60c, 0x61, @random=0x4, @val={0x1, 0x5, [{0x60, 0x1}, {}, {0x12, 0x1}, {0x24}, {0x2, 0x1}]}, @val={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0x34c0, 0xa52, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x8, 0x6}}, [{0xdd, 0xf7, "54db143875ba5525e5be37a972f009086347d22c5dc1487cc77267c37b17ed22d550b74bec065afa9011b8d4a4750c4366a2381049a64744f301c53505ed1aab3fdaf2f30187b4d5010c4fab60926f956af5225a2e1049d92f45707dbcf1b8aa0cbd3e9e890d81b5de0d3bf035028d2b10ac0d0e75642ae6093d5a68275852a35da332022f410ba707a3dcd825433484293b1bcdc613ce5c70f99ed4533dc0a80d7fc17415d5ab24eeaa4e4255111af5b52ceb7659d37a3ee33f31566e40f20885e9e4319ced7d1cf5c8f05564eededec3fce8632a1c94f161632dabfc4a19fbbb37f90f3a93774f96658035a794a8cadcb006869ee62c"}]}}, @NL80211_ATTR_FRAME={0xbf, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x3, 0x3}}, 0x240, 0x26, @default, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x8, 0x1}}, [{0xdd, 0x7f, "72fa67bb7a6e2886126242bfe4e4aac39c8aa314e24492e5395138053fc21222bd356f1d1ba0358b583130c8c99b22bf875790079bffc84886192e87139eba54d87c29dfebb519d9ad8561625e13a2cf20e43af106c57bfe2eba3417863e314b6c98ae183da611788b0a96d37e623ce9f708918f57e9e0b7f0bf95188030c2"}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x890}, 0xe89e8cdb83d2df35) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f0000000000000000340000000e0001006e657464657673696d0000000f0001"], 0x34}}, 0x0) (async) 401.084337ms ago: executing program 7 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r3, @ANYBLOB="050008000300000008000a00", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r4, 0x0, 0x78) close(r4) 337.048746ms ago: executing program 6 (id=543): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0xffffffffffffffff, 0x280000) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x0, 0x2, @vsb={0x7}}) getrusage(0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000330600000000fddbdf250a010101200000000000000000000000000040004e248000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002"], 0x140}}, 0x200080d4) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x190, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa03, 0x4, 0x1}}, @common=@ah={{0x30}, {[0xff, 0x4], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x190}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xff}}}, {{@ip={@empty, @empty, 0x0, 0xff, '\x00', '\x00', {}, {0xff}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1a, r7, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(0xffffffffffffffff, 0xc0107521, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r9) 0s ago: executing program 7 (id=544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) splice(r7, 0x0, r6, 0x0, 0x18, 0x7) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x2}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 379][ T5813] veth1_vlan: left promiscuous mode [ 77.854882][ T5813] veth0_vlan: left promiscuous mode [ 77.881463][ T1359] usb 7-1: USB disconnect, device number 2 [ 78.115972][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 78.129915][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 78.205760][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.340363][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 78.340376][ T43] audit: type=1400 audit(1789224698.158:484): avc: denied { write } for pid=6331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.363141][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.363220][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.363277][ T6266] bridge_slave_0: entered allmulticast mode [ 78.364128][ T6266] bridge_slave_0: entered promiscuous mode [ 78.371495][ T5089] Bluetooth: hci2: command tx timeout [ 78.373771][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.373813][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.373873][ T6266] bridge_slave_1: entered allmulticast mode [ 78.374623][ T6266] bridge_slave_1: entered promiscuous mode [ 78.401866][ T43] audit: type=1400 audit(1789224698.218:485): avc: denied { write } for pid=6339 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.410107][ T6341] FAULT_INJECTION: forcing a failure. [ 78.410107][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 78.410125][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 78.410138][ T6341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.410144][ T6341] Call Trace: [ 78.410148][ T6341] [ 78.410153][ T6341] dump_stack_lvl+0x100/0x190 [ 78.410183][ T6341] should_fail_ex.cold+0x5/0xa [ 78.410197][ T6341] ? __netlink_lookup+0x652/0x900 [ 78.410213][ T6341] should_failslab+0xc2/0x120 [ 78.410231][ T6341] kmem_cache_alloc_noprof+0x92/0x6a0 [ 78.410243][ T6341] ? skb_clone+0x190/0x400 [ 78.410258][ T6341] skb_clone+0x190/0x400 [ 78.410271][ T6341] netlink_deliver_tap+0xaed/0xcc0 [ 78.410291][ T6341] netlink_unicast+0x62b/0x850 [ 78.410304][ T6341] ? __pfx_netlink_unicast+0x10/0x10 [ 78.410320][ T6341] netlink_sendmsg+0x8b0/0xda0 [ 78.410333][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.410346][ T6341] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.410367][ T6341] ____sys_sendmsg+0xa4d/0xbe0 [ 78.410382][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.410395][ T6341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.410413][ T6341] ? lock_acquire+0x1d1/0x380 [ 78.410424][ T6341] ? get_pid_task+0x2a/0x250 [ 78.410441][ T6341] ___sys_sendmsg+0x190/0x1e0 [ 78.410458][ T6341] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.410474][ T6341] ? get_pid_task+0x106/0x250 [ 78.410493][ T6341] ? find_held_lock+0x2b/0x80 [ 78.410517][ T6341] __sys_sendmsg+0x160/0x210 [ 78.410530][ T6341] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.410550][ T6341] do_syscall_64+0x123/0x790 [ 78.410570][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.410581][ T6341] RIP: 0033:0x7fa979d9e159 [ 78.410590][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.410600][ T6341] RSP: 002b:00007fa97ac7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.410611][ T6341] RAX: ffffffffffffffda RBX: 00007fa97a025fa0 RCX: 00007fa979d9e159 [ 78.410618][ T6341] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 78.410624][ T6341] RBP: 00007fa97ac7b090 R08: 0000000000000000 R09: 0000000000000000 [ 78.410630][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.410637][ T6341] R13: 00007fa97a026038 R14: 00007fa97a025fa0 R15: 00007fff47639688 [ 78.410650][ T6341] [ 78.422226][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.426345][ T43] audit: type=1400 audit(1789224698.238:486): avc: denied { create } for pid=6343 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.436317][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.497619][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 78.516491][ T6266] team0: Port device team_slave_0 added [ 78.519543][ T6266] team0: Port device team_slave_1 added [ 78.542165][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.542179][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.542197][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.543071][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.543079][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.543091][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.591502][ T43] audit: type=1400 audit(1789224698.408:487): avc: denied { mount } for pid=6350 comm="syz.3.153" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.594672][ T6266] hsr_slave_0: entered promiscuous mode [ 78.600012][ T6266] hsr_slave_1: entered promiscuous mode [ 78.600326][ T6266] debugfs: 'hsr0' already exists in 'hsr' [ 78.600337][ T6266] Cannot create hsr debugfs directory [ 78.607048][ T43] audit: type=1400 audit(1789224698.418:488): avc: denied { read append } for pid=6350 comm="syz.3.153" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.607238][ T43] audit: type=1400 audit(1789224698.418:489): avc: denied { open } for pid=6350 comm="syz.3.153" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.607503][ T43] audit: type=1400 audit(1789224698.418:490): avc: denied { ioctl } for pid=6350 comm="syz.3.153" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.639779][ T43] audit: type=1400 audit(1789224698.458:491): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.732471][ T6266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.735800][ T6266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.736360][ T6266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.743358][ T6266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.747598][ T6266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.752434][ T6266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.752963][ T6266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.754579][ T6266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.770626][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.770706][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.771462][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.771509][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.800001][ T43] audit: type=1400 audit(1789224698.618:492): avc: denied { bind } for pid=6355 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.800200][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.800213][ T43] audit: type=1400 audit(1789224698.618:493): avc: denied { name_bind } for pid=6355 comm="syz.3.155" src=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 78.803324][ T6357] FAULT_INJECTION: forcing a failure. [ 78.803324][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 78.803342][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) [ 78.803354][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.803382][ T6357] Call Trace: [ 78.803387][ T6357] [ 78.803392][ T6357] dump_stack_lvl+0x100/0x190 [ 78.803412][ T6357] should_fail_ex.cold+0x5/0xa [ 78.803428][ T6357] should_failslab+0xc2/0x120 [ 78.803442][ T6357] __kmalloc_noprof+0xfc/0x840 [ 78.803454][ T6357] ? rcu_is_watching+0x13/0xc0 [ 78.803469][ T6357] ? tomoyo_encode2+0xfb/0x3c0 [ 78.803483][ T6357] tomoyo_encode2+0xfb/0x3c0 [ 78.803498][ T6357] tomoyo_encode+0x29/0x50 [ 78.803525][ T6357] tomoyo_realpath_from_path+0x18c/0x690 [ 78.803543][ T6357] tomoyo_path_number_perm+0x23c/0x580 [ 78.803560][ T6357] ? tomoyo_path_number_perm+0x22e/0x580 [ 78.803578][ T6357] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.803600][ T6357] ? __lock_acquire+0x5c0/0x1f40 [ 78.803618][ T6357] ? __fget_files+0x34/0x3d0 [ 78.803633][ T6357] ? find_held_lock+0x2b/0x80 [ 78.803648][ T6357] ? hook_file_ioctl_common+0x140/0x440 [ 78.803667][ T6357] ? __fget_files+0x21f/0x3d0 [ 78.803682][ T6357] security_file_ioctl+0xd3/0x230 [ 78.803694][ T6357] __x64_sys_ioctl+0xb7/0x210 [ 78.803706][ T6357] do_syscall_64+0x123/0x790 [ 78.803721][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.803733][ T6357] RIP: 0033:0x7f448f39e159 [ 78.803742][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.803759][ T6357] RSP: 002b:00007f449023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.803771][ T6357] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 78.803778][ T6357] RDX: 0000000000000000 RSI: 0000000040049421 RDI: 0000000000000003 [ 78.803785][ T6357] RBP: 00007f448f43503b R08: 0000000000000000 R09: 0000000000000000 [ 78.803792][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.803799][ T6357] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 78.803814][ T6357] [ 78.804902][ T6357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.805016][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.808248][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.809285][ T6367] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 78.847047][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.852061][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.852110][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.855418][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.855460][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.114095][ T6380] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 79.136786][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.166985][ T6380] bond1: (slave gretap1): making interface the new active one [ 79.173310][ T6380] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 79.203209][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.295088][ T6389] xt_hashlimit: size too large, truncated to 1048576 [ 79.416896][ T6266] veth0_vlan: entered promiscuous mode [ 79.421277][ T6266] veth1_vlan: entered promiscuous mode [ 79.439317][ T6266] veth0_macvtap: entered promiscuous mode [ 79.442609][ T6266] veth1_macvtap: entered promiscuous mode [ 79.461454][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.485682][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.540250][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.540289][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.540308][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.540327][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.558345][ T5835] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 79.567384][ T6397] FAULT_INJECTION: forcing a failure. [ 79.567384][ T6397] name failslab, interval 1, probability 0, space 0, times 0 [ 79.567404][ T6397] CPU: 3 UID: 0 PID: 6397 Comm: syz.3.160 Not tainted syzkaller #0 PREEMPT(full) [ 79.567419][ T6397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.567425][ T6397] Call Trace: [ 79.567430][ T6397] [ 79.567435][ T6397] dump_stack_lvl+0x100/0x190 [ 79.567455][ T6397] should_fail_ex.cold+0x5/0xa [ 79.567472][ T6397] should_failslab+0xc2/0x120 [ 79.567486][ T6397] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.567498][ T6397] ? __mt_dup+0x61e/0xce0 [ 79.567516][ T6397] __mt_dup+0x61e/0xce0 [ 79.567533][ T6397] ? __pfx___mt_dup+0x10/0x10 [ 79.567552][ T6397] ? lock_acquire+0x1d1/0x380 [ 79.567563][ T6397] ? get_mm_exe_file+0x25/0x1a0 [ 79.567582][ T6397] dup_mmap+0x3d0/0x2370 [ 79.567598][ T6397] ? do_raw_spin_lock+0x128/0x260 [ 79.567615][ T6397] ? __pfx_dup_mmap+0x10/0x10 [ 79.567628][ T6397] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.567642][ T6397] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.567657][ T6397] ? __lock_acquire+0x5c0/0x1f40 [ 79.567674][ T6397] ? lock_acquire+0x1d1/0x380 [ 79.567685][ T6397] ? copy_process+0x4806/0x8370 [ 79.567703][ T6397] copy_process+0x4811/0x8370 [ 79.567723][ T6397] ? __pfx_copy_process+0x10/0x10 [ 79.567735][ T6397] ? find_held_lock+0x2b/0x80 [ 79.567755][ T6397] kernel_clone+0x176/0x9d0 [ 79.567767][ T6397] ? find_held_lock+0x2b/0x80 [ 79.567782][ T6397] ? __pfx_kernel_clone+0x10/0x10 [ 79.567797][ T6397] ? ksys_write+0x190/0x250 [ 79.567809][ T6397] ? lock_acquire+0x1d1/0x380 [ 79.567823][ T6397] __do_sys_clone+0xd9/0x120 [ 79.567850][ T6397] ? __pfx___do_sys_clone+0x10/0x10 [ 79.567862][ T6397] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.567883][ T6397] ? ksys_write+0x1ac/0x250 [ 79.567893][ T6397] ? __pfx_ksys_write+0x10/0x10 [ 79.567911][ T6397] do_syscall_64+0x123/0x790 [ 79.567927][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.567939][ T6397] RIP: 0033:0x7f448f39e159 [ 79.567948][ T6397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.567958][ T6397] RSP: 002b:00007f449023afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 79.567969][ T6397] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 79.567976][ T6397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200011 [ 79.567983][ T6397] RBP: 00007f449023b090 R08: 0000000000000000 R09: 0000000000000000 [ 79.567989][ T6397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 79.567995][ T6397] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 79.568009][ T6397] [ 79.569879][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.569896][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.595802][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.595827][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.747499][ T6404] FAULT_INJECTION: forcing a failure. [ 79.747499][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 79.747526][ T6404] CPU: 3 UID: 0 PID: 6404 Comm: syz.4.163 Not tainted syzkaller #0 PREEMPT(full) [ 79.747542][ T6404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.747551][ T6404] Call Trace: [ 79.747556][ T6404] [ 79.747561][ T6404] dump_stack_lvl+0x100/0x190 [ 79.747587][ T6404] should_fail_ex.cold+0x5/0xa [ 79.747608][ T6404] should_failslab+0xc2/0x120 [ 79.747626][ T6404] __kmalloc_noprof+0xfc/0x840 [ 79.747640][ T6404] ? rcu_is_watching+0x13/0xc0 [ 79.747659][ T6404] ? tomoyo_realpath_from_path+0xb6/0x690 [ 79.747680][ T6404] tomoyo_realpath_from_path+0xb6/0x690 [ 79.747702][ T6404] tomoyo_path_number_perm+0x23c/0x580 [ 79.747724][ T6404] ? tomoyo_path_number_perm+0x22e/0x580 [ 79.747748][ T6404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 79.747778][ T6404] ? __lock_acquire+0x5c0/0x1f40 [ 79.747803][ T6404] ? __fget_files+0x34/0x3d0 [ 79.747825][ T6404] ? find_held_lock+0x2b/0x80 [ 79.747872][ T6404] ? hook_file_ioctl_common+0x140/0x440 [ 79.747901][ T6404] ? __fget_files+0x21f/0x3d0 [ 79.747928][ T6404] security_file_ioctl+0xd3/0x230 [ 79.747949][ T6404] __x64_sys_ioctl+0xb7/0x210 [ 79.747967][ T6404] do_syscall_64+0x123/0x790 [ 79.747990][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.748008][ T6404] RIP: 0033:0x7faaea59e159 [ 79.748022][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.748036][ T6404] RSP: 002b:00007faaeb421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.748052][ T6404] RAX: ffffffffffffffda RBX: 00007faaea825fa0 RCX: 00007faaea59e159 [ 79.748064][ T6404] RDX: 0000200000000100 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 79.748074][ T6404] RBP: 00007faaeb421090 R08: 0000000000000000 R09: 0000000000000000 [ 79.748084][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.748093][ T6404] R13: 00007faaea826038 R14: 00007faaea825fa0 R15: 00007ffe6f23d5e8 [ 79.748115][ T6404] [ 79.750716][ T6404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.806339][ T6407] syzkaller0: entered promiscuous mode [ 79.806354][ T6407] syzkaller0: entered allmulticast mode [ 80.005832][ T6423] syzkaller0: entered promiscuous mode [ 80.005846][ T6423] syzkaller0: entered allmulticast mode [ 80.077475][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803d42b000: rx timeout, send abort [ 80.354385][ T6441] nvme_tcp: malformed address passed: 127.0.:.::4369 [ 80.409623][ T6445] netlink: Unknown conntrack attr (type=11092, max=9) [ 80.409698][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.494242][ T6447] syzkaller0: entered promiscuous mode [ 80.494264][ T6447] syzkaller0: entered allmulticast mode [ 80.527169][ T6449] SELinux: invalid class [ 80.527369][ T6449] SELinux: failed to load policy [ 80.578221][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803d42b000: abort rx timeout. Force session deactivation [ 80.631877][ T6454] FAULT_INJECTION: forcing a failure. [ 80.631877][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 80.631922][ T6454] CPU: 3 UID: 0 PID: 6454 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(full) [ 80.631946][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.631958][ T6454] Call Trace: [ 80.631965][ T6454] [ 80.631973][ T6454] dump_stack_lvl+0x100/0x190 [ 80.632007][ T6454] should_fail_ex.cold+0x5/0xa [ 80.632038][ T6454] should_failslab+0xc2/0x120 [ 80.632064][ T6454] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.632084][ T6454] ? vhost_task_create+0x1db/0x370 [ 80.632113][ T6454] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 80.632137][ T6454] ? alloc_pid+0x1bd/0x1930 [ 80.632168][ T6454] alloc_pid+0x1bd/0x1930 [ 80.632199][ T6454] ? __pfx_alloc_pid+0x10/0x10 [ 80.632239][ T6454] ? __lock_acquire+0x5c0/0x1f40 [ 80.632261][ T6454] ? avc_has_perm_noaudit+0x145/0x3b0 [ 80.632299][ T6454] ? fpu_clone+0x226/0x7a0 [ 80.632329][ T6454] ? copy_thread+0x729/0xbe0 [ 80.632356][ T6454] copy_process+0x4dd6/0x8370 [ 80.632396][ T6454] ? __pfx_copy_process+0x10/0x10 [ 80.632419][ T6454] ? kasan_save_track+0x14/0x30 [ 80.632442][ T6454] ? __kasan_kmalloc+0xaa/0xb0 [ 80.632466][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 80.632491][ T6454] ? lockdep_init_map_type+0x5c/0x250 [ 80.632515][ T6454] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 80.632548][ T6454] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 80.632576][ T6454] vhost_task_create+0x1db/0x370 [ 80.632608][ T6454] ? __pfx_vhost_task_create+0x10/0x10 [ 80.632649][ T6454] ? __pfx_vhost_task_fn+0x10/0x10 [ 80.632682][ T6454] ? register_lock_class+0x3f/0x7b0 [ 80.632704][ T6454] ? rcu_is_watching+0x13/0xc0 [ 80.632731][ T6454] ? trace_contention_end+0x126/0x160 [ 80.632761][ T6454] kvm_mmu_post_init_vm+0x1b3/0x360 [ 80.632787][ T6454] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 80.632820][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 80.632847][ T6454] ? kasan_quarantine_put+0x104/0x240 [ 80.632873][ T6454] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 80.632905][ T6454] ? lock_acquire+0x1d1/0x380 [ 80.632927][ T6454] ? do_raw_write_lock+0x11e/0x260 [ 80.632952][ T6454] ? find_held_lock+0x2b/0x80 [ 80.632979][ T6454] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 80.633009][ T6454] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 80.633043][ T6454] kvm_vcpu_ioctl+0x730/0x1700 [ 80.633074][ T6454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.633104][ T6454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.633129][ T6454] ? do_vfs_ioctl+0x226/0x13e0 [ 80.633150][ T6454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.633199][ T6454] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 80.633255][ T6454] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.633282][ T6454] ? __fget_files+0x34/0x3d0 [ 80.633321][ T6454] ? selinux_file_ioctl+0x13b/0x290 [ 80.633342][ T6454] ? selinux_file_ioctl+0xb6/0x290 [ 80.633365][ T6454] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.633395][ T6454] __x64_sys_ioctl+0x18e/0x210 [ 80.633418][ T6454] do_syscall_64+0x123/0x790 [ 80.633449][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.633470][ T6454] RIP: 0033:0x7f448f39e159 [ 80.633487][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.633506][ T6454] RSP: 002b:00007f449023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.633527][ T6454] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 80.633541][ T6454] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 80.633553][ T6454] RBP: 00007f449023b090 R08: 0000000000000000 R09: 0000000000000000 [ 80.633565][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.633577][ T6454] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 80.633606][ T6454] [ 80.670453][ T6458] comedi comedi3: pcl724: I/O base address or length out of range [ 80.684563][ T6460] FAULT_INJECTION: forcing a failure. [ 80.684563][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 80.684591][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 80.684610][ T6460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.684619][ T6460] Call Trace: [ 80.684625][ T6460] [ 80.684632][ T6460] dump_stack_lvl+0x100/0x190 [ 80.684660][ T6460] should_fail_ex.cold+0x5/0xa [ 80.684685][ T6460] should_failslab+0xc2/0x120 [ 80.684706][ T6460] __kmalloc_noprof+0xfc/0x840 [ 80.684723][ T6460] ? rcu_is_watching+0x13/0xc0 [ 80.684745][ T6460] ? tomoyo_realpath_from_path+0xb6/0x690 [ 80.684770][ T6460] tomoyo_realpath_from_path+0xb6/0x690 [ 80.684795][ T6460] tomoyo_path_number_perm+0x23c/0x580 [ 80.684826][ T6460] ? tomoyo_path_number_perm+0x22e/0x580 [ 80.684853][ T6460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.684888][ T6460] ? __lock_acquire+0x5c0/0x1f40 [ 80.684917][ T6460] ? __fget_files+0x34/0x3d0 [ 80.684937][ T6460] ? find_held_lock+0x2b/0x80 [ 80.684960][ T6460] ? hook_file_ioctl_common+0x140/0x440 [ 80.684986][ T6460] ? __fget_files+0x21f/0x3d0 [ 80.685010][ T6460] security_file_ioctl+0xd3/0x230 [ 80.685030][ T6460] __x64_sys_ioctl+0xb7/0x210 [ 80.685049][ T6460] do_syscall_64+0x123/0x790 [ 80.685073][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.685090][ T6460] RIP: 0033:0x7fa979d9e159 [ 80.685104][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.685118][ T6460] RSP: 002b:00007fa97ac7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.685135][ T6460] RAX: ffffffffffffffda RBX: 00007fa97a025fa0 RCX: 00007fa979d9e159 [ 80.685144][ T6460] RDX: 0000200000001a00 RSI: 0000000040946400 RDI: 0000000000000003 [ 80.685154][ T6460] RBP: 00007fa97ac7b090 R08: 0000000000000000 R09: 0000000000000000 [ 80.685164][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.685174][ T6460] R13: 00007fa97a026038 R14: 00007fa97a025fa0 R15: 00007fff47639688 [ 80.685196][ T6460] [ 80.685203][ T6460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.685266][ T6460] comedi comedi3: pcl724: I/O base address or length out of range [ 81.012848][ T6474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.156397][ T6476] __nla_validate_parse: 64 callbacks suppressed [ 81.156417][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 81.156430][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 81.575276][ T5089] Bluetooth: hci1: unexpected event for opcode 0xff1b [ 81.587958][ T850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.738358][ T850] usb 6-1: Using ep0 maxpacket: 8 [ 81.739583][ T850] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.743672][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.743697][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.743725][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.754433][ T850] usb 6-1: config 0 descriptor?? [ 81.969654][ T850] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 82.167505][ T6482] iowarrior 6-1:0.0: Error -90 while submitting URB [ 82.174512][ T850] usb 6-1: USB disconnect, device number 2 [ 82.951716][ T5547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.224634][ T5547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.291243][ T5547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.374688][ T5547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.496284][ T5547] bridge_slave_1: left allmulticast mode [ 83.496302][ T5547] bridge_slave_1: left promiscuous mode [ 83.496472][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.501012][ T5547] bridge_slave_0: left allmulticast mode [ 83.501028][ T5547] bridge_slave_0: left promiscuous mode [ 83.501146][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.551137][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 83.551150][ T43] audit: type=1400 audit(1789224703.368:540): avc: denied { write } for pid=6495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.593043][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.596181][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.597296][ T43] audit: type=1400 audit(1789224703.408:541): avc: denied { write } for pid=6498 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.597607][ T5547] bond0 (unregistering): Released all slaves [ 83.644072][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 83.731946][ T43] audit: type=1400 audit(1789224703.548:542): avc: denied { write } for pid=6501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.773274][ T43] audit: type=1400 audit(1789224703.588:543): avc: denied { write } for pid=6504 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.812004][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 83.844470][ T5547] hsr_slave_0: left promiscuous mode [ 83.844884][ T5547] hsr_slave_1: left promiscuous mode [ 83.845813][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.845825][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.846325][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.846334][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.850521][ T5547] veth1_macvtap: left promiscuous mode [ 83.850539][ T5547] veth0_macvtap: left promiscuous mode [ 83.850583][ T5547] veth1_vlan: left promiscuous mode [ 83.850613][ T5547] veth0_vlan: left promiscuous mode [ 83.890992][ T43] audit: type=1400 audit(1789224703.708:544): avc: denied { write } for pid=6508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.941159][ T43] audit: type=1400 audit(1789224703.758:545): avc: denied { write } for pid=6511 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.970298][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 83.975512][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 84.072409][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 84.140474][ T43] audit: type=1400 audit(1789224703.958:546): avc: denied { write } for pid=6515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.181607][ T43] audit: type=1400 audit(1789224703.998:547): avc: denied { write } for pid=6518 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.219479][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 84.717514][ T43] audit: type=1400 audit(1789224704.528:548): avc: denied { create } for pid=6525 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.717992][ T43] audit: type=1400 audit(1789224704.528:549): avc: denied { bind } for pid=6525 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.827017][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.831609][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.834271][ T6545] cgroup: noprefix used incorrectly [ 84.836502][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.837607][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.844303][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.854234][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 84.854265][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 84.960175][ T6555] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.991716][ T6562] geneve2: entered promiscuous mode [ 85.229755][ T1043] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.246190][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.246271][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.246420][ T6540] bridge_slave_0: entered allmulticast mode [ 85.247227][ T6540] bridge_slave_0: entered promiscuous mode [ 85.248529][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.248593][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.248733][ T6540] bridge_slave_1: entered allmulticast mode [ 85.249643][ T6540] bridge_slave_1: entered promiscuous mode [ 85.268915][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.271701][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.295894][ T6540] team0: Port device team_slave_0 added [ 85.298882][ T6540] team0: Port device team_slave_1 added [ 85.324780][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.324797][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.324822][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.326320][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.326332][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.326351][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.347991][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.358332][ T1043] usb 6-1: device descriptor read/64, error -71 [ 85.369590][ T6540] hsr_slave_0: entered promiscuous mode [ 85.370627][ T6540] hsr_slave_1: entered promiscuous mode [ 85.371318][ T6540] debugfs: 'hsr0' already exists in 'hsr' [ 85.371337][ T6540] Cannot create hsr debugfs directory [ 85.512843][ T50] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 85.513604][ T50] usb 8-1: config 0 has no interfaces? [ 85.514125][ T50] usb 8-1: config 0 has no interfaces? [ 85.517733][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.517759][ T50] usb 8-1: Product: syz [ 85.517774][ T50] usb 8-1: Manufacturer: syz [ 85.517788][ T50] usb 8-1: SerialNumber: syz [ 85.520624][ T50] usb 8-1: config 0 descriptor?? [ 85.598475][ T1043] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.604080][ T6540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.628831][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.632492][ T6540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.650237][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.651142][ T6540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.660156][ T5749] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 85.660218][ T5749] Bluetooth: hci1: Injecting HCI hardware error event [ 85.662491][ T5749] Bluetooth: hci1: hardware error 0x00 [ 85.668635][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.669714][ T6540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.729760][ T1043] usb 6-1: device descriptor read/64, error -71 [ 85.729892][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.789916][ T5835] usb 8-1: USB disconnect, device number 7 [ 85.814495][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.814561][ T6540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.814695][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.814756][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.843407][ T1043] usb usb6-port1: attempt power cycle [ 85.932345][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.964071][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.981079][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.002998][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.051886][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.052005][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.070697][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.070779][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.178045][ T1043] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.216584][ T1043] usb 6-1: device descriptor read/8, error -71 [ 86.460212][ T1043] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.482488][ T1043] usb 6-1: device descriptor read/8, error -71 [ 86.596767][ T1043] usb usb6-port1: unable to enumerate USB device [ 86.676522][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.782870][ T6612] vlan2: entered promiscuous mode [ 86.782892][ T6612] batadv0: entered promiscuous mode [ 86.783064][ T6612] vlan2: entered allmulticast mode [ 86.783074][ T6612] batadv0: entered allmulticast mode [ 86.849083][ T5089] Bluetooth: hci2: command tx timeout [ 86.921745][ T6540] veth0_vlan: entered promiscuous mode [ 86.926690][ T6540] veth1_vlan: entered promiscuous mode [ 86.956643][ T6540] veth0_macvtap: entered promiscuous mode [ 86.960683][ T6540] veth1_macvtap: entered promiscuous mode [ 86.972902][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.983123][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.012106][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.012402][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.079306][ T5813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.081425][ T6627] ceph: Path missing in source [ 87.083861][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.104116][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.104129][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.137666][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.137687][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.899609][ T5749] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 88.682991][ T6635] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 88.683013][ T6635] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.683152][ T6635] vhci_hcd vhci_hcd.0: Device attached [ 88.700105][ T6635] vhci_hcd vhci_hcd.0: port 0 already used [ 88.703979][ T6640] xt_hashlimit: size too large, truncated to 1048576 [ 88.724371][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 88.724389][ T43] audit: type=1400 audit(1789224708.538:563): avc: denied { write } for pid=6644 comm="syz.1.227" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 88.770576][ T43] audit: type=1400 audit(1789224708.568:564): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 88.821395][ T6635] process 'syz.5.226' launched './file0' with NULL argv: empty string added [ 88.822997][ T43] audit: type=1400 audit(1789224708.638:565): avc: denied { execute_no_trans } for pid=6634 comm="syz.5.226" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.910630][ T43] audit: type=1400 audit(1789224708.728:566): avc: denied { write } for pid=6654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.926682][ T43] audit: type=1326 audit(1789224708.748:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.229" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448f39e159 code=0x0 [ 88.928813][ T5749] Bluetooth: hci2: command tx timeout [ 88.950689][ T6638] vhci_hcd: connection closed [ 88.952309][ T5814] vhci_hcd vhci_hcd.5: stop threads [ 88.952337][ T5814] vhci_hcd vhci_hcd.5: release socket [ 88.952386][ T5814] vhci_hcd vhci_hcd.5: disconnect device [ 88.981523][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 88.998056][ T1359] usb 48-1: enqueue for inactive port 0 [ 89.016089][ T43] audit: type=1400 audit(1789224708.828:568): avc: denied { write } for pid=6661 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.114982][ T43] audit: type=1400 audit(1789224708.928:569): avc: denied { mounton } for pid=6671 comm="syz.1.233" path="/57/file0" dev="9p" ino=73941779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.115165][ T6673] 9pnet_virtio: no channels available for device syz [ 89.115426][ T6673] 9pnet_virtio: no channels available for device syz [ 89.115688][ T6673] 9pnet_virtio: no channels available for device syz [ 89.115932][ T6673] 9pnet_virtio: no channels available for device syz [ 89.116305][ T6673] 9pnet_virtio: no channels available for device syz [ 89.116657][ T6673] 9pnet_virtio: no channels available for device syz [ 89.116914][ T6673] 9pnet_virtio: no channels available for device syz [ 89.117154][ T6673] 9pnet_virtio: no channels available for device syz [ 89.117532][ T6673] 9pnet_virtio: no channels available for device syz [ 89.117771][ T6673] 9pnet_virtio: no channels available for device syz [ 89.118166][ T6673] 9pnet_virtio: no channels available for device syz [ 89.120601][ T6673] 9pnet_virtio: no channels available for device syz [ 89.121057][ T6673] 9pnet_virtio: no channels available for device syz [ 89.121342][ T6673] 9pnet_virtio: no channels available for device syz [ 89.121599][ T6673] 9pnet_virtio: no channels available for device syz [ 89.121974][ T6673] 9pnet_virtio: no channels available for device syz [ 89.122226][ T6673] 9pnet_virtio: no channels available for device syz [ 89.122487][ T6673] 9pnet_virtio: no channels available for device syz [ 89.122732][ T6673] 9pnet_virtio: no channels available for device syz [ 89.123143][ T6673] 9pnet_virtio: no channels available for device syz [ 89.123410][ T6673] 9pnet_virtio: no channels available for device syz [ 89.123662][ T6673] 9pnet_virtio: no channels available for device syz [ 89.123916][ T6673] 9pnet_virtio: no channels available for device syz [ 89.124355][ T6673] 9pnet_virtio: no channels available for device syz [ 89.124608][ T6673] 9pnet_virtio: no channels available for device syz [ 89.124841][ T6673] 9pnet_virtio: no channels available for device syz [ 89.125082][ T6673] 9pnet_virtio: no channels available for device syz [ 89.125520][ T6673] 9pnet_virtio: no channels available for device syz [ 89.125758][ T6673] 9pnet_virtio: no channels available for device syz [ 89.125992][ T6673] 9pnet_virtio: no channels available for device syz [ 89.126249][ T6673] 9pnet_virtio: no channels available for device syz [ 89.126623][ T6673] 9pnet_virtio: no channels available for device syz [ 89.126959][ T6673] 9pnet_virtio: no channels available for device syz [ 89.132037][ T6673] 9pnet_virtio: no channels available for device syz [ 89.133067][ T6673] 9pnet_virtio: no channels available for device syz [ 89.133504][ T6673] 9pnet_virtio: no channels available for device syz [ 89.133768][ T6673] 9pnet_virtio: no channels available for device syz [ 89.134012][ T6673] 9pnet_virtio: no channels available for device syz [ 89.134258][ T6673] 9pnet_virtio: no channels available for device syz [ 89.135141][ T6673] 9pnet_virtio: no channels available for device syz [ 89.135465][ T6673] 9pnet_virtio: no channels available for device syz [ 89.135874][ T6673] 9pnet_virtio: no channels available for device syz [ 89.136142][ T6673] 9pnet_virtio: no channels available for device syz [ 89.136432][ T6673] 9pnet_virtio: no channels available for device syz [ 89.136690][ T6673] 9pnet_virtio: no channels available for device syz [ 89.137109][ T6673] 9pnet_virtio: no channels available for device syz [ 89.137445][ T6673] 9pnet_virtio: no channels available for device syz [ 89.137718][ T6673] 9pnet_virtio: no channels available for device syz [ 89.139166][ T6673] 9pnet_virtio: no channels available for device syz [ 89.140210][ T6673] 9pnet_virtio: no channels available for device syz [ 89.140637][ T6673] 9pnet_virtio: no channels available for device syz [ 89.141007][ T6673] 9pnet_virtio: no channels available for device syz [ 89.141308][ T6673] 9pnet_virtio: no channels available for device syz [ 89.141730][ T6673] 9pnet_virtio: no channels available for device syz [ 89.142008][ T6673] 9pnet_virtio: no channels available for device syz [ 89.142266][ T6673] 9pnet_virtio: no channels available for device syz [ 89.142520][ T6673] 9pnet_virtio: no channels available for device syz [ 89.142873][ T6673] 9pnet_virtio: no channels available for device syz [ 89.143115][ T6673] 9pnet_virtio: no channels available for device syz [ 89.143363][ T6673] 9pnet_virtio: no channels available for device syz [ 89.143582][ T6673] 9pnet_virtio: no channels available for device syz [ 89.143923][ T6673] 9pnet_virtio: no channels available for device syz [ 89.144169][ T6673] 9pnet_virtio: no channels available for device syz [ 89.144424][ T6673] 9pnet_virtio: no channels available for device syz [ 89.318305][ T6676] capability: warning: `syz.1.234' uses deprecated v2 capabilities in a way that may be insecure [ 89.332976][ T43] audit: type=1400 audit(1789224709.148:570): avc: denied { ioctl } for pid=6675 comm="syz.1.234" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.378452][ T43] audit: type=1400 audit(1789224709.198:571): avc: denied { create } for pid=6677 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.379522][ T43] audit: type=1400 audit(1789224709.198:572): avc: denied { getopt } for pid=6677 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 89.386447][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 89.516990][ T6693] FAULT_INJECTION: forcing a failure. [ 89.516990][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.517020][ T6693] CPU: 1 UID: 0 PID: 6693 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 89.517039][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.517049][ T6693] Call Trace: [ 89.517056][ T6693] [ 89.517063][ T6693] dump_stack_lvl+0x100/0x190 [ 89.517093][ T6693] should_fail_ex.cold+0x5/0xa [ 89.517118][ T6693] _copy_from_iter+0x1f4/0x1690 [ 89.517138][ T6693] ? __asan_memset+0x23/0x50 [ 89.517155][ T6693] ? __pfx__copy_from_iter+0x10/0x10 [ 89.517204][ T6693] ? __pfx___alloc_skb+0x10/0x10 [ 89.517233][ T6693] netlink_sendmsg+0x808/0xda0 [ 89.517255][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.517274][ T6693] ? selinux_socket_sendmsg+0x198/0x2f0 [ 89.517306][ T6693] ____sys_sendmsg+0xa4d/0xbe0 [ 89.517329][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.517348][ T6693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.517377][ T6693] ? lock_acquire+0x1d1/0x380 [ 89.517395][ T6693] ? get_pid_task+0x2a/0x250 [ 89.517420][ T6693] ___sys_sendmsg+0x190/0x1e0 [ 89.517447][ T6693] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.517473][ T6693] ? get_pid_task+0x106/0x250 [ 89.517505][ T6693] ? find_held_lock+0x2b/0x80 [ 89.517546][ T6693] __sys_sendmsg+0x160/0x210 [ 89.517566][ T6693] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.517598][ T6693] do_syscall_64+0x123/0x790 [ 89.517622][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.517640][ T6693] RIP: 0033:0x7f620479e159 [ 89.517653][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.517669][ T6693] RSP: 002b:00007f62055fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.517686][ T6693] RAX: ffffffffffffffda RBX: 00007f6204a25fa0 RCX: 00007f620479e159 [ 89.517697][ T6693] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 89.517708][ T6693] RBP: 00007f62055fe090 R08: 0000000000000000 R09: 0000000000000000 [ 89.517718][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.517728][ T6693] R13: 00007f6204a26038 R14: 00007f6204a25fa0 R15: 00007ffe28a76248 [ 89.517757][ T6693] [ 89.581910][ T6699] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.597294][ T1359] usb usb48-port1: attempt power cycle [ 89.613045][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 89.660650][ T6702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.674317][ T6699] overlayfs: failed to resolve './file0/file0': -2 [ 90.029471][ T6726] ublk0: read batch cmd buffer failed [ 90.029560][ T6726] ublk0: read batch cmd buffer failed [ 90.056334][ T6726] ublk0: read batch cmd buffer failed [ 90.056539][ T6726] ublk0: read batch cmd buffer failed [ 90.153137][ T6734] zero sized request [ 90.168914][ T1359] usb usb48-port1: unable to enumerate USB device [ 90.459686][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.254'. [ 90.660142][ T6763] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.796210][ T6766] tipc: Resetting bearer [ 90.918852][ T5815] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 91.010609][ T5749] Bluetooth: hci2: command tx timeout [ 91.028674][ T6783] FAULT_INJECTION: forcing a failure. [ 91.028674][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 91.028695][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: syz.3.260 Not tainted syzkaller #0 PREEMPT(full) [ 91.028708][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.028715][ T6783] Call Trace: [ 91.028719][ T6783] [ 91.028724][ T6783] dump_stack_lvl+0x100/0x190 [ 91.028761][ T6783] should_fail_ex.cold+0x5/0xa [ 91.028778][ T6783] should_failslab+0xc2/0x120 [ 91.028798][ T6783] __kmalloc_noprof+0xfc/0x840 [ 91.028810][ T6783] ? tomoyo_encode2+0xfb/0x3c0 [ 91.028826][ T6783] tomoyo_encode2+0xfb/0x3c0 [ 91.028841][ T6783] tomoyo_encode+0x29/0x50 [ 91.028853][ T6783] tomoyo_realpath_from_path+0x18c/0x690 [ 91.028876][ T6783] tomoyo_path_number_perm+0x23c/0x580 [ 91.028901][ T6783] ? tomoyo_path_number_perm+0x22e/0x580 [ 91.028931][ T6783] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.028968][ T6783] ? __lock_acquire+0x5c0/0x1f40 [ 91.029000][ T6783] ? __fget_files+0x34/0x3d0 [ 91.029016][ T6783] ? find_held_lock+0x2b/0x80 [ 91.029033][ T6783] ? hook_file_ioctl_common+0x140/0x440 [ 91.029051][ T6783] ? __fget_files+0x21f/0x3d0 [ 91.029067][ T6783] security_file_ioctl+0xd3/0x230 [ 91.029081][ T6783] __x64_sys_ioctl+0xb7/0x210 [ 91.029093][ T6783] do_syscall_64+0x123/0x790 [ 91.029115][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.029127][ T6783] RIP: 0033:0x7f448f39e159 [ 91.029137][ T6783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.029148][ T6783] RSP: 002b:00007f449023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.029180][ T6783] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 91.029189][ T6783] RDX: 0000200000000040 RSI: 0000000080046f45 RDI: 0000000000000003 [ 91.029196][ T6783] RBP: 00007f449023b090 R08: 0000000000000000 R09: 0000000000000000 [ 91.029202][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.029208][ T6783] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 91.029223][ T6783] [ 91.029233][ T6783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.115112][ T5815] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.116584][ T5815] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 91.116602][ T5815] usb 7-1: can't read configurations, error -71 [ 91.761898][ T6824] cgroup: Unknown subsys name 'cpuset' [ 92.031914][ T6829] FAULT_INJECTION: forcing a failure. [ 92.031914][ T6829] name fail_futex, interval 1, probability 0, space 0, times 1 [ 92.031936][ T6829] CPU: 2 UID: 0 PID: 6829 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 92.031950][ T6829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.031958][ T6829] Call Trace: [ 92.031968][ T6829] [ 92.031973][ T6829] dump_stack_lvl+0x100/0x190 [ 92.032000][ T6829] should_fail_ex.cold+0x5/0xa [ 92.032018][ T6829] get_futex_key+0x1d0/0x14f0 [ 92.032035][ T6829] ? __pfx_get_futex_key+0x10/0x10 [ 92.032050][ T6829] ? do_semtimedop+0x1b6/0x2e0 [ 92.032064][ T6829] ? do_semtimedop+0x1cc/0x2e0 [ 92.032077][ T6829] futex_wake+0xf4/0x5e0 [ 92.032097][ T6829] ? __pfx_futex_wake+0x10/0x10 [ 92.032119][ T6829] do_futex+0x2b2/0x440 [ 92.032133][ T6829] ? __pfx_do_futex+0x10/0x10 [ 92.032149][ T6829] ? __pfx_ipcget+0x10/0x10 [ 92.032164][ T6829] __x64_sys_futex+0x34f/0x4d0 [ 92.032180][ T6829] ? __pfx___x64_sys_futex+0x10/0x10 [ 92.032202][ T6829] do_syscall_64+0x123/0x790 [ 92.032221][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.032232][ T6829] RIP: 0033:0x7fa979d9e159 [ 92.032242][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.032258][ T6829] RSP: 002b:00007fa97ac5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.032274][ T6829] RAX: ffffffffffffffda RBX: 00007fa97a026098 RCX: 00007fa979d9e159 [ 92.032282][ T6829] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa97a02609c [ 92.032289][ T6829] RBP: 00007fa97a026090 R08: 0000000000000001 R09: 0000000000000000 [ 92.032296][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.032303][ T6829] R13: 00007fa97a026128 R14: 00007fff476395a0 R15: 00007fff47639688 [ 92.032318][ T6829] [ 93.087976][ T5749] Bluetooth: hci2: command tx timeout [ 94.907559][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 94.907571][ T43] audit: type=1400 audit(1789224714.718:605): avc: denied { write } for pid=6833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.946765][ T43] audit: type=1400 audit(1789224714.758:606): avc: denied { write } for pid=6836 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.673743][ T43] audit: type=1400 audit(1789224715.488:607): avc: denied { write } for pid=6839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.724494][ T43] audit: type=1400 audit(1789224715.538:608): avc: denied { write } for pid=6842 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.025491][ T43] audit: type=1400 audit(1789224715.838:609): avc: denied { write } for pid=6845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.062368][ T43] audit: type=1400 audit(1789224715.878:610): avc: denied { write } for pid=6848 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.196442][ T43] audit: type=1400 audit(1789224716.008:611): avc: denied { write } for pid=6852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.272480][ T43] audit: type=1400 audit(1789224716.058:612): avc: denied { write } for pid=6855 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.331575][ T6858] 8021q: adding VLAN 0 to HW filter on device .` [ 96.340936][ T6858] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 96.399261][ T6868] Invalid logical block size (65533) [ 96.418212][ T43] audit: type=1400 audit(1789224716.238:613): avc: denied { read } for pid=6865 comm="syz.3.274" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.418545][ T43] audit: type=1400 audit(1789224716.238:614): avc: denied { open } for pid=6865 comm="syz.3.274" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.744018][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 96.747391][ T6883] erspan0: entered promiscuous mode [ 96.748765][ T6883] macvlan2: entered allmulticast mode [ 96.748776][ T6883] erspan0: entered allmulticast mode [ 96.864626][ T6891] FAULT_INJECTION: forcing a failure. [ 96.864626][ T6891] name failslab, interval 1, probability 0, space 0, times 0 [ 96.864655][ T6891] CPU: 2 UID: 0 PID: 6891 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT(full) [ 96.864675][ T6891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.864686][ T6891] Call Trace: [ 96.864692][ T6891] [ 96.864699][ T6891] dump_stack_lvl+0x100/0x190 [ 96.864729][ T6891] should_fail_ex.cold+0x5/0xa [ 96.864755][ T6891] should_failslab+0xc2/0x120 [ 96.864783][ T6891] kmem_cache_alloc_noprof+0x92/0x6a0 [ 96.864803][ T6891] ? do_getname+0x35/0x390 [ 96.864833][ T6891] do_getname+0x35/0x390 [ 96.864859][ T6891] __x64_sys_rmdir+0x36/0x70 [ 96.864881][ T6891] do_syscall_64+0x123/0x790 [ 96.864906][ T6891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.864924][ T6891] RIP: 0033:0x7fa979d9e159 [ 96.864939][ T6891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.864954][ T6891] RSP: 002b:00007fa97ac7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 96.864969][ T6891] RAX: ffffffffffffffda RBX: 00007fa97a025fa0 RCX: 00007fa979d9e159 [ 96.864979][ T6891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 96.864988][ T6891] RBP: 00007fa97ac7b090 R08: 0000000000000000 R09: 0000000000000000 [ 96.864999][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.865009][ T6891] R13: 00007fa97a026038 R14: 00007fa97a025fa0 R15: 00007fff47639688 [ 96.865032][ T6891] [ 97.583336][ T6905] netlink: 48 bytes leftover after parsing attributes in process `syz.5.290'. [ 97.796327][ T6913] NILFS (nullb0): couldn't find nilfs on the device [ 97.926552][ T6916] ip6t_hbh: Not strict - not implemented [ 98.220066][ T6928] netlink: 340 bytes leftover after parsing attributes in process `syz.5.296'. [ 98.348853][ T6936] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 98.369900][ T5749] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 98.370064][ T5089] Bluetooth: hci0: command 0x0c3a tx timeout [ 98.397065][ T6936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.412341][ T6936] netlink: 56 bytes leftover after parsing attributes in process `syz.2.298'. [ 98.467548][ T6949] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 98.468209][ T6945] netlink: 56 bytes leftover after parsing attributes in process `syz.2.298'. [ 98.788620][ T6964] Invalid option length (480) for dns_resolver key [ 98.817430][ T6966] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 98.897815][ T1183] IPVS: starting estimator thread 0... [ 98.997994][ T6970] IPVS: using max 24 ests per chain, 57600 per kthread [ 99.056972][ T6976] Bluetooth: MGMT ver 1.23 [ 99.059106][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.5.308'. [ 99.121102][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 99.121345][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 99.140732][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 99.140878][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 99.155996][ T6979] ceph: No mds server is up or the cluster is laggy [ 99.222606][ T6987] openvswitch: netlink: Invalid VLAN frame [ 99.232716][ T6987] program syz.3.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.324861][ T6994] FAULT_INJECTION: forcing a failure. [ 99.324861][ T6994] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.324880][ T6994] CPU: 3 UID: 0 PID: 6994 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT(full) [ 99.324892][ T6994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.324899][ T6994] Call Trace: [ 99.324904][ T6994] [ 99.324908][ T6994] dump_stack_lvl+0x100/0x190 [ 99.324935][ T6994] should_fail_ex.cold+0x5/0xa [ 99.324950][ T6994] ? prepare_alloc_pages+0x16d/0x5b0 [ 99.324969][ T6994] should_fail_alloc_page+0xeb/0x140 [ 99.324984][ T6994] prepare_alloc_pages+0x1f0/0x5b0 [ 99.325001][ T6994] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 99.325020][ T6994] ? __pfx_get_page_from_freelist+0x10/0x10 [ 99.325038][ T6994] ? prepare_alloc_pages+0x1f0/0x5b0 [ 99.325053][ T6994] ? rcu_is_watching+0x13/0xc0 [ 99.325068][ T6994] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 99.325088][ T6994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.325107][ T6994] ? find_held_lock+0x2b/0x80 [ 99.325150][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.325164][ T6994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.325182][ T6994] ? is_bpf_text_address+0x94/0x1a0 [ 99.325197][ T6994] ? __kernel_text_address+0xd/0x30 [ 99.325216][ T6994] ? do_raw_spin_lock+0x128/0x260 [ 99.325236][ T6994] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 99.325262][ T6994] ? policy_nodemask+0xed/0x4f0 [ 99.325278][ T6994] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 99.325304][ T6994] __kasan_populate_vmalloc+0xf0/0x210 [ 99.325319][ T6994] alloc_vmap_area+0x95d/0x2bb0 [ 99.325336][ T6994] ? kasan_save_track+0x14/0x30 [ 99.325348][ T6994] ? __kasan_kmalloc+0xaa/0xb0 [ 99.325360][ T6994] ? __pfx_alloc_vmap_area+0x10/0x10 [ 99.325387][ T6994] ? __get_vm_area_node+0x124/0x350 [ 99.325402][ T6994] __get_vm_area_node+0x1ed/0x350 [ 99.325418][ T6994] __vmalloc_node_range_noprof+0x268/0x1420 [ 99.325434][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.325454][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.325468][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.325485][ T6994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.325499][ T6994] ? __might_fault+0xc5/0x140 [ 99.325516][ T6994] ? __might_fault+0xc5/0x140 [ 99.325532][ T6994] ? __might_fault+0xc5/0x140 [ 99.325549][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.325563][ T6994] __vmalloc_node_noprof+0xad/0xf0 [ 99.325577][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.325593][ T6994] dev_ethtool+0x5289/0x6bb0 [ 99.325607][ T6994] ? bpf_ksym_find+0x128/0x1c0 [ 99.325623][ T6994] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.325647][ T6994] ? __pfx_dev_ethtool+0x10/0x10 [ 99.325664][ T6994] ? tomoyo_path_number_perm+0x46d/0x580 [ 99.325683][ T6994] ? stack_trace_save+0x8e/0xc0 [ 99.325700][ T6994] ? __pfx_stack_trace_save+0x10/0x10 [ 99.325717][ T6994] ? stack_depot_save_flags+0x27/0x9f0 [ 99.325731][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.325746][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.325758][ T6994] ? __kasan_slab_free+0x5f/0x80 [ 99.325770][ T6994] ? kfree+0x22b/0x6d0 [ 99.325784][ T6994] ? tomoyo_path_number_perm+0x46d/0x580 [ 99.325801][ T6994] ? security_file_ioctl+0xd3/0x230 [ 99.325812][ T6994] ? __x64_sys_ioctl+0xb7/0x210 [ 99.325822][ T6994] ? do_syscall_64+0x123/0x790 [ 99.325840][ T6994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.325854][ T6994] ? lock_acquire+0x1d1/0x380 [ 99.325865][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.325879][ T6994] ? udp_ioctl+0x3d/0x150 [ 99.325891][ T6994] ? sk_ioctl+0x173/0x360 [ 99.325911][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.325922][ T6994] ? inet_ioctl+0x1ad/0x3f0 [ 99.325937][ T6994] ? __pfx_inet_ioctl+0x10/0x10 [ 99.325954][ T6994] ? lock_acquire+0x1d1/0x380 [ 99.325965][ T6994] ? dev_load+0x2a/0x240 [ 99.325977][ T6994] ? find_held_lock+0x2b/0x80 [ 99.325992][ T6994] ? dev_load+0x8e/0x240 [ 99.326003][ T6994] ? dev_load+0x8e/0x240 [ 99.326018][ T6994] dev_ioctl+0x63b/0x10e0 [ 99.326032][ T6994] sock_do_ioctl+0x1a0/0x280 [ 99.326048][ T6994] ? __pfx_sock_do_ioctl+0x10/0x10 [ 99.326062][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.326077][ T6994] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.326087][ T6994] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 99.326101][ T6994] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.326117][ T6994] sock_ioctl+0x599/0x6b0 [ 99.326133][ T6994] ? __pfx_sock_ioctl+0x10/0x10 [ 99.326154][ T6994] ? selinux_file_ioctl+0x13b/0x290 [ 99.326165][ T6994] ? selinux_file_ioctl+0xb6/0x290 [ 99.326177][ T6994] ? __pfx_sock_ioctl+0x10/0x10 [ 99.326194][ T6994] __x64_sys_ioctl+0x18e/0x210 [ 99.326206][ T6994] do_syscall_64+0x123/0x790 [ 99.326221][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.326233][ T6994] RIP: 0033:0x7f448f39e159 [ 99.326246][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.326257][ T6994] RSP: 002b:00007f449023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.326269][ T6994] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 99.326276][ T6994] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 99.326282][ T6994] RBP: 00007f449023b090 R08: 0000000000000000 R09: 0000000000000000 [ 99.326289][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.326295][ T6994] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 99.326309][ T6994] [ 99.326483][ T6994] syz.3.313: vmalloc error: size 240, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 99.326608][ T6994] CPU: 3 UID: 0 PID: 6994 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT(full) [ 99.326620][ T6994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.326627][ T6994] Call Trace: [ 99.326631][ T6994] [ 99.326635][ T6994] dump_stack_lvl+0x100/0x190 [ 99.326654][ T6994] warn_alloc.cold+0x9e/0xb2 [ 99.326666][ T6994] ? __pfx_warn_alloc+0x10/0x10 [ 99.326683][ T6994] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.326699][ T6994] ? __get_vm_area_node+0x2f0/0x350 [ 99.326715][ T6994] ? __get_vm_area_node+0x22b/0x350 [ 99.326731][ T6994] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 99.326750][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.326764][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.326802][ T6994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.326817][ T6994] ? __might_fault+0xc5/0x140 [ 99.326834][ T6994] ? __might_fault+0xc5/0x140 [ 99.326849][ T6994] ? __might_fault+0xc5/0x140 [ 99.326866][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.326880][ T6994] __vmalloc_node_noprof+0xad/0xf0 [ 99.326895][ T6994] ? dev_ethtool+0x5289/0x6bb0 [ 99.326910][ T6994] dev_ethtool+0x5289/0x6bb0 [ 99.326924][ T6994] ? bpf_ksym_find+0x128/0x1c0 [ 99.326941][ T6994] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.326964][ T6994] ? __pfx_dev_ethtool+0x10/0x10 [ 99.326982][ T6994] ? tomoyo_path_number_perm+0x46d/0x580 [ 99.327002][ T6994] ? stack_trace_save+0x8e/0xc0 [ 99.327025][ T6994] ? __pfx_stack_trace_save+0x10/0x10 [ 99.327049][ T6994] ? stack_depot_save_flags+0x27/0x9f0 [ 99.327070][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.327091][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.327107][ T6994] ? __kasan_slab_free+0x5f/0x80 [ 99.327125][ T6994] ? kfree+0x22b/0x6d0 [ 99.327146][ T6994] ? tomoyo_path_number_perm+0x46d/0x580 [ 99.327170][ T6994] ? security_file_ioctl+0xd3/0x230 [ 99.327186][ T6994] ? __x64_sys_ioctl+0xb7/0x210 [ 99.327202][ T6994] ? do_syscall_64+0x123/0x790 [ 99.327220][ T6994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.327246][ T6994] ? lock_acquire+0x1d1/0x380 [ 99.327263][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.327284][ T6994] ? udp_ioctl+0x3d/0x150 [ 99.327303][ T6994] ? sk_ioctl+0x173/0x360 [ 99.327327][ T6994] ? __lock_acquire+0x5c0/0x1f40 [ 99.327345][ T6994] ? inet_ioctl+0x1ad/0x3f0 [ 99.327366][ T6994] ? __pfx_inet_ioctl+0x10/0x10 [ 99.327392][ T6994] ? lock_acquire+0x1d1/0x380 [ 99.327408][ T6994] ? dev_load+0x2a/0x240 [ 99.327424][ T6994] ? find_held_lock+0x2b/0x80 [ 99.327445][ T6994] ? dev_load+0x8e/0x240 [ 99.327461][ T6994] ? dev_load+0x8e/0x240 [ 99.327484][ T6994] dev_ioctl+0x63b/0x10e0 [ 99.327506][ T6994] sock_do_ioctl+0x1a0/0x280 [ 99.327529][ T6994] ? __pfx_sock_do_ioctl+0x10/0x10 [ 99.327547][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.327570][ T6994] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.327585][ T6994] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 99.327606][ T6994] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.327630][ T6994] sock_ioctl+0x599/0x6b0 [ 99.327651][ T6994] ? __pfx_sock_ioctl+0x10/0x10 [ 99.327681][ T6994] ? selinux_file_ioctl+0x13b/0x290 [ 99.327698][ T6994] ? selinux_file_ioctl+0xb6/0x290 [ 99.327717][ T6994] ? __pfx_sock_ioctl+0x10/0x10 [ 99.327740][ T6994] __x64_sys_ioctl+0x18e/0x210 [ 99.327758][ T6994] do_syscall_64+0x123/0x790 [ 99.327781][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.327798][ T6994] RIP: 0033:0x7f448f39e159 [ 99.327812][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.327827][ T6994] RSP: 002b:00007f449023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.327841][ T6994] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 99.327849][ T6994] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 99.327859][ T6994] RBP: 00007f449023b090 R08: 0000000000000000 R09: 0000000000000000 [ 99.327870][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.327880][ T6994] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 99.327903][ T6994] [ 99.332603][ T6994] Mem-Info: [ 99.332615][ T6994] active_anon:18198 inactive_anon:0 isolated_anon:0 [ 99.332615][ T6994] active_file:3079 inactive_file:62259 isolated_file:0 [ 99.332615][ T6994] unevictable:1000 dirty:461 writeback:0 [ 99.332615][ T6994] slab_reclaimable:11883 slab_unreclaimable:69243 [ 99.332615][ T6994] mapped:24957 shmem:9871 pagetables:1360 [ 99.332615][ T6994] sec_pagetables:297 bounce:0 [ 99.332615][ T6994] kernel_misc_reclaimable:0 [ 99.332615][ T6994] free:434017 free_pcp:12747 free_cma:0 [ 99.332655][ T6994] Node 0 active_anon:72792kB inactive_anon:0kB active_file:12316kB inactive_file:248840kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99828kB dirty:1836kB writeback:0kB shmem:37484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13664kB pagetables:5232kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 99.332698][ T6994] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 99.332733][ T6994] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.332778][ T6994] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 99.332807][ T6994] Node 0 DMA32 free:86308kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:72792kB inactive_anon:0kB active_file:12316kB inactive_file:248840kB unevictable:2000kB writepending:1836kB zspages:0kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:44648kB local_pcp:11104kB free_cma:0kB [ 99.332848][ T6994] lowmem_reserve[]: 0 0 0 0 0 [ 99.332875][ T6994] Node 1 Normal free:1634400kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:6340kB local_pcp:0kB free_cma:0kB [ 99.332916][ T6994] lowmem_reserve[]: 0 0 0 0 0 [ 99.332942][ T6994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.333036][ T6994] Node 0 DMA32: 706*4kB (UME) 656*8kB (UME) 483*16kB (UME) 326*32kB (UME) 94*64kB (UME) 34*128kB (UME) 5*256kB (UE) 5*512kB (UME) 3*1024kB (ME) 5*2048kB (UME) 8*4096kB (UM) = 86520kB [ 99.333184][ T6994] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 4*32kB (UM) 3*64kB (UM) 4*128kB (UM) 1*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 397*4096kB (M) = 1634404kB [ 99.333310][ T6994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.333323][ T6994] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.333336][ T6994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.333348][ T6994] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.333356][ T6994] 75205 total pagecache pages [ 99.333361][ T6994] 0 pages in swap cache [ 99.333366][ T6994] Free swap = 124996kB [ 99.333372][ T6994] Total swap = 124996kB [ 99.333377][ T6994] 1048443 pages RAM [ 99.333383][ T6994] 0 pages HighMem/MovableOnly [ 99.333388][ T6994] 285903 pages reserved [ 99.333394][ T6994] 0 pages cma reserved [ 99.382535][ T5967] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 99.382610][ T5967] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 99.382630][ T5967] hid-generic 0006:0008:0008.0002: unknown main item tag 0x2 [ 99.382645][ T5967] hid-generic 0006:0008:0008.0002: unknown main item tag 0x1 [ 99.389376][ T5967] hid-generic 0006:0008:0008.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 99.508724][ T6998] fido_id[6998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.893467][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 99.893480][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 99.902878][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 99.902891][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 99.912956][ T43] kauditd_printk_skb: 96 callbacks suppressed [ 99.912966][ T43] audit: type=1400 audit(1789224719.728:711): avc: denied { map } for pid=7004 comm="syz.3.316" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.913092][ T43] audit: type=1400 audit(1789224719.728:712): avc: denied { read write } for pid=7004 comm="syz.3.316" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.918931][ T5813] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.918958][ T5813] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.918977][ T5813] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.918996][ T5813] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.953918][ T43] audit: type=1400 audit(1789224719.768:713): avc: denied { mmap_zero } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 99.955260][ T43] audit: type=1400 audit(1789224719.768:714): avc: denied { create } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.955385][ T43] audit: type=1400 audit(1789224719.768:715): avc: denied { bind } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.955479][ T43] audit: type=1400 audit(1789224719.768:716): avc: denied { listen } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.955729][ T43] audit: type=1400 audit(1789224719.768:717): avc: denied { connect } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.955901][ T43] audit: type=1400 audit(1789224719.768:718): avc: denied { setopt } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.964882][ T43] audit: type=1400 audit(1789224719.778:719): avc: denied { write } for pid=7006 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.997606][ T43] audit: type=1400 audit(1789224719.808:720): avc: denied { ioctl } for pid=7010 comm="syz.3.318" path="socket:[16102]" dev="sockfs" ino=16102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.032908][ T7013] capability: warning: `syz.3.319' uses 32-bit capabilities (legacy support in use) [ 100.123933][ T7023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7023 comm=syz.5.321 [ 100.124198][ T1167] IPVS: starting estimator thread 0... [ 100.124272][ T7025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7025 comm=syz.5.321 [ 100.172869][ T7029] openvswitch: netlink: Duplicate key (type 0). [ 100.219116][ T7024] IPVS: using max 43 ests per chain, 103200 per kthread [ 100.686484][ T7048] bond0: no command found in slaves file - use +ifname or -ifname [ 100.828951][ T7056] PM: Enabling pm_trace changes system date and time during resume. [ 100.828951][ T7056] PM: Correct system time has to be restored manually after resume. [ 100.871268][ T7059] program syz.5.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.072268][ T7063] block2mtd: error: cannot open device ./dev/ [ 101.073736][ T7062] [U]  [ 101.280388][ T7074] netlink: 'syz.5.335': attribute type 9 has an invalid length. [ 101.515474][ T7085] overlayfs: missing 'lowerdir' [ 101.520543][ T7086] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 101.520562][ T7086] overlayfs: overlapping lowerdir path [ 101.523944][ T7084] overlayfs: failed to resolve 'fsmagic=0x000000000000c7c5': -2 [ 101.547679][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=7088 comm=syz.5.341 [ 101.702227][ T7095] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 101.702227][ T7095] [ 101.702318][ T7095] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 101.702350][ T7095] CIFS: Attempting to mount //127.0.0.1/share [ 101.765912][ T7095] CIFS: VFS: cifs_mount failed w/return code = -112 [ 101.820259][ T7104] warning: `syz.3.346' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.904850][ T7108] jffs2: notice: (7108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.930373][ T7110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input40 [ 102.245285][ T7127] netlink: 'syz.2.354': attribute type 15 has an invalid length. [ 102.318116][ T7133] __nla_validate_parse: 4 callbacks suppressed [ 102.318135][ T7133] netlink: 116 bytes leftover after parsing attributes in process `syz.2.354'. [ 102.547509][ T7140] netlink: 'syz.5.357': attribute type 10 has an invalid length. [ 102.575033][ T7140] team0: Port device dummy0 added [ 102.750798][ T7153] syz_tun: entered allmulticast mode [ 102.751407][ T7153] syz_tun: left allmulticast mode [ 103.591701][ T7176] binder: 7175:7176 ioctl 4004af07 2000000000c0 returned -22 [ 103.599707][ T7180] ptrace attach of "/syz-executor exec"[6540] was attempted by " @   À  @    8   appletalk_socketsocketˆ        @ @ \x0a À  @  €  @ @  À @  € €   À     @ @   @  ÿÿ \x0b       @ @   @ @   \x09  @ @   @ @     @ À  @ @ À    @   € À @   @À @  € \x0c @  @  € D @ À  €  @   \x0c  @ À  @ @ À    @   € À @   @À @  € \x0c @  @  € [ 103.773352][ T7192] FAULT_INJECTION: forcing a failure. [ 103.773352][ T7192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.773383][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.3.375 Not tainted syzkaller #0 PREEMPT(full) [ 103.773403][ T7192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.773413][ T7192] Call Trace: [ 103.773420][ T7192] [ 103.773427][ T7192] dump_stack_lvl+0x100/0x190 [ 103.773467][ T7192] should_fail_ex.cold+0x5/0xa [ 103.773489][ T7192] _copy_from_user+0x2e/0xd0 [ 103.773511][ T7192] input_event_from_user+0x123/0x310 [ 103.773540][ T7192] ? __pfx_input_event_from_user+0x10/0x10 [ 103.773561][ T7192] ? __pfx___might_resched+0x10/0x10 [ 103.773577][ T7192] ? input_inject_event+0x198/0x380 [ 103.773603][ T7192] evdev_write+0x342/0x610 [ 103.773631][ T7192] ? __pfx_evdev_write+0x10/0x10 [ 103.773656][ T7192] ? bpf_lsm_file_permission+0x9/0x10 [ 103.773677][ T7192] ? security_file_permission+0x76/0x210 [ 103.773698][ T7192] ? rw_verify_area+0xce/0x6d0 [ 103.773724][ T7192] vfs_write+0x2aa/0x1050 [ 103.773741][ T7192] ? __pfx_evdev_write+0x10/0x10 [ 103.773764][ T7192] ? lock_acquire+0x1d1/0x380 [ 103.773781][ T7192] ? __fget_files+0x34/0x3d0 [ 103.773801][ T7192] ? __pfx_vfs_write+0x10/0x10 [ 103.773815][ T7192] ? find_held_lock+0x2b/0x80 [ 103.773836][ T7192] ? __fget_files+0x215/0x3d0 [ 103.773854][ T7192] ? __fget_files+0x215/0x3d0 [ 103.773878][ T7192] ? __fget_files+0x21f/0x3d0 [ 103.773904][ T7192] ksys_write+0x1f8/0x250 [ 103.773921][ T7192] ? __pfx_ksys_write+0x10/0x10 [ 103.773946][ T7192] do_syscall_64+0x123/0x790 [ 103.773981][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.773999][ T7192] RIP: 0033:0x7f448f39e159 [ 103.774014][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.774030][ T7192] RSP: 002b:00007f449023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.774048][ T7192] RAX: ffffffffffffffda RBX: 00007f448f625fa0 RCX: 00007f448f39e159 [ 103.774059][ T7192] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 103.774070][ T7192] RBP: 00007f449023b090 R08: 0000000000000000 R09: 0000000000000000 [ 103.774080][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.774090][ T7192] R13: 00007f448f626038 R14: 00007f448f625fa0 R15: 00007fff4e560258 [ 103.774114][ T7192] [ 103.873902][ T7201] FAULT_INJECTION: forcing a failure. [ 103.873902][ T7201] name failslab, interval 1, probability 0, space 0, times 0 [ 103.873932][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.5.378 Not tainted syzkaller #0 PREEMPT(full) [ 103.873953][ T7201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.873964][ T7201] Call Trace: [ 103.873971][ T7201] [ 103.873978][ T7201] dump_stack_lvl+0x100/0x190 [ 103.874009][ T7201] should_fail_ex.cold+0x5/0xa [ 103.874035][ T7201] should_failslab+0xc2/0x120 [ 103.874056][ T7201] __kvmalloc_node_noprof+0x113/0x9b0 [ 103.874076][ T7201] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 103.874102][ T7201] ? percpu_ref_init+0xec/0x3f0 [ 103.874125][ T7201] ? io_alloc_cache_init+0x38/0x170 [ 103.874155][ T7201] io_alloc_cache_init+0x38/0x170 [ 103.874181][ T7201] io_uring_setup.cold+0x450/0x1cde [ 103.874202][ T7201] ? lock_acquire+0x1d1/0x380 [ 103.874221][ T7201] ? avc_has_perm_noaudit+0x56/0x3b0 [ 103.874244][ T7201] ? __pfx_io_uring_setup+0x10/0x10 [ 103.874263][ T7201] ? find_held_lock+0x2b/0x80 [ 103.874287][ T7201] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 103.874309][ T7201] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 103.874356][ T7201] ? ksys_write+0x1ac/0x250 [ 103.874376][ T7201] ? __pfx_ksys_write+0x10/0x10 [ 103.874399][ T7201] __x64_sys_io_uring_setup+0xc2/0x170 [ 103.874421][ T7201] do_syscall_64+0x123/0x790 [ 103.874448][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.874467][ T7201] RIP: 0033:0x7fde6f39e159 [ 103.874483][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.874499][ T7201] RSP: 002b:00007fde6d5f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 103.874518][ T7201] RAX: ffffffffffffffda RBX: 0000200000001040 RCX: 00007fde6f39e159 [ 103.874530][ T7201] RDX: 0000200000000080 RSI: 0000200000001040 RDI: 0000000000005d51 [ 103.874541][ T7201] RBP: 00007fde6d5f6090 R08: 0000000000000000 R09: 0000000000000101 [ 103.874552][ T7201] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000080 [ 103.874563][ T7201] R13: 0000200000000140 R14: 0000200000000000 R15: 00007fff8c309dc8 [ 103.874588][ T7201] [ 103.904268][ T7202] file system registered [ 103.922399][ T7202] ffs_data_put(): freeing [ 103.938027][ T7202] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 103.938065][ T7202] SELinux: failed to load policy [ 103.991707][ T7207] batman_adv: batadv0: Adding interface: dummy0 [ 103.991724][ T7207] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.991756][ T7207] batman_adv: batadv0: Interface activated: dummy0 [ 104.024853][ T7207] batadv0: mtu less than device minimum [ 104.026575][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.027610][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.028884][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.029495][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.030132][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.031058][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.032011][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.032978][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.033961][ T7207] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 104.052134][ T7209] batman_adv: batadv0: Adding interface: dummy0 [ 104.052153][ T7209] batman_adv: batadv0: Interface activated: dummy0 [ 104.069635][ T7207] netlink: 'syz.3.380': attribute type 10 has an invalid length. [ 104.076187][ T7209] FAULT_INJECTION: forcing a failure. [ 104.076187][ T7209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.076214][ T7209] CPU: 2 UID: 0 PID: 7209 Comm: syz.2.381 Not tainted syzkaller #0 PREEMPT(full) [ 104.076234][ T7209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.076253][ T7209] Call Trace: [ 104.076260][ T7209] [ 104.076267][ T7209] dump_stack_lvl+0x100/0x190 [ 104.076297][ T7209] should_fail_ex.cold+0x5/0xa [ 104.076322][ T7209] _copy_from_user+0x2e/0xd0 [ 104.076342][ T7209] copy_msghdr_from_user+0x9f/0x4c0 [ 104.076370][ T7209] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.076401][ T7209] ? lock_acquire+0x1d1/0x380 [ 104.076419][ T7209] ? get_pid_task+0x2a/0x250 [ 104.076444][ T7209] ___sys_sendmsg+0x106/0x1e0 [ 104.076471][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.076497][ T7209] ? get_pid_task+0x106/0x250 [ 104.076528][ T7209] ? find_held_lock+0x2b/0x80 [ 104.076566][ T7209] __sys_sendmsg+0x160/0x210 [ 104.076587][ T7209] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.076644][ T7209] do_syscall_64+0x123/0x790 [ 104.076671][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.076689][ T7209] RIP: 0033:0x7fa979d9e159 [ 104.076704][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.076719][ T7209] RSP: 002b:00007fa97ac7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.076736][ T7209] RAX: ffffffffffffffda RBX: 00007fa97a025fa0 RCX: 00007fa979d9e159 [ 104.076746][ T7209] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 104.076757][ T7209] RBP: 00007fa97ac7b090 R08: 0000000000000000 R09: 0000000000000000 [ 104.076767][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.076777][ T7209] R13: 00007fa97a026038 R14: 00007fa97a025fa0 R15: 00007fff47639688 [ 104.076800][ T7209] [ 104.254011][ T7222] ªªªªªª: renamed from lo (while UP) [ 104.313647][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 104.313668][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 104.372976][ T7234] syzkaller0: entered promiscuous mode [ 104.372991][ T7234] syzkaller0: entered allmulticast mode [ 104.533485][ T7249] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 104.533485][ T7249] The task syz.3.396 (7249) triggered the difference, watch for misbehavior. [ 104.688749][ T7264] xt_nfacct: accounting object `syz0' does not exist [ 104.836593][ T7276] raw_sendmsg: syz.5.403 forgot to set AF_INET. Fix it! [ 105.005832][ T43] kauditd_printk_skb: 115 callbacks suppressed [ 105.005849][ T43] audit: type=1326 audit(2000000004.169:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.5.405" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde6f39e159 code=0x0 [ 105.334067][ T43] audit: type=1400 audit(2000000004.499:837): avc: denied { execute } for pid=7296 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.334333][ T43] audit: type=1400 audit(2000000004.499:838): avc: denied { execute_no_trans } for pid=7296 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.356903][ T7298] vlan2: entered promiscuous mode [ 105.356918][ T7298] bridge0: entered promiscuous mode [ 105.385891][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 105.386107][ T7300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7300 comm=syz.3.408 [ 105.392085][ T7300] bridge1: entered allmulticast mode [ 105.401616][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.407289][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.407721][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.411669][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.411917][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.422292][ T7304] fuse: Bad value for 'fd' [ 105.423857][ T43] audit: type=1400 audit(2000000004.589:839): avc: denied { mounton } for pid=7301 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.544930][ T5547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.577782][ T43] audit: type=1400 audit(2000000004.739:840): avc: denied { create } for pid=7318 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 105.578837][ T43] audit: type=1400 audit(2000000004.749:841): avc: denied { sys_admin } for pid=7318 comm="syz.3.413" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 105.621686][ T7323] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 105.621717][ T7323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.621740][ T7323] IPv6: NLM_F_CREATE should be set when creating new route [ 105.621751][ T7323] IPv6: NLM_F_CREATE should be set when creating new route [ 105.622353][ T43] audit: type=1400 audit(2000000004.789:842): avc: denied { shutdown } for pid=7322 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.622501][ T43] audit: type=1400 audit(2000000004.789:843): avc: denied { getopt } for pid=7322 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.623747][ T43] audit: type=1400 audit(2000000004.789:844): avc: denied { connect } for pid=7322 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.625941][ T43] audit: type=1400 audit(2000000004.789:845): avc: denied { name_connect } for pid=7322 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 105.631666][ T7323] bridge0: port 3(syz_tun) entered blocking state [ 105.631744][ T7323] bridge0: port 3(syz_tun) entered disabled state [ 105.631808][ T7323] syz_tun: entered allmulticast mode [ 105.632672][ T7323] syz_tun: entered promiscuous mode [ 105.633294][ T7323] bridge0: port 3(syz_tun) entered blocking state [ 105.633341][ T7323] bridge0: port 3(syz_tun) entered forwarding state [ 105.664398][ T5547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.770179][ T5547] team0: Port device netdevsim1 removed [ 105.770995][ T5547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.812452][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.812555][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.812643][ T7301] bridge_slave_0: entered allmulticast mode [ 105.813410][ T7301] bridge_slave_0: entered promiscuous mode [ 105.813955][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 105.827912][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.827992][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.828055][ T7301] bridge_slave_1: entered allmulticast mode [ 105.828834][ T7301] bridge_slave_1: entered promiscuous mode [ 105.858746][ T5547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.875948][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.881802][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.906033][ T7301] team0: Port device team_slave_0 added [ 105.909525][ T7301] team0: Port device team_slave_1 added [ 105.922473][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.922484][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.922497][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.923277][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.923284][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.923297][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.973719][ T7301] hsr_slave_0: entered promiscuous mode [ 105.974184][ T7301] hsr_slave_1: entered promiscuous mode [ 105.974474][ T7301] debugfs: 'hsr0' already exists in 'hsr' [ 105.974485][ T7301] Cannot create hsr debugfs directory [ 106.019578][ T5547] bridge_slave_1: left allmulticast mode [ 106.019594][ T5547] bridge_slave_1: left promiscuous mode [ 106.019703][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.021104][ T5547] bridge_slave_0: left allmulticast mode [ 106.021119][ T5547] bridge_slave_0: left promiscuous mode [ 106.021217][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.105335][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.106684][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.107420][ T5547] bond0 (unregistering): Released all slaves [ 106.163666][ T5547] tipc: Disabling bearer [ 106.171009][ T5547] tipc: Left network mode [ 106.207223][ T7352] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.289621][ T7301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.291944][ T7301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.292389][ T7301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.294975][ T7301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.295493][ T7301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.300724][ T7301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.301080][ T7301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.302928][ T7301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.329679][ T5547] hsr_slave_0: left promiscuous mode [ 106.330279][ T5547] hsr_slave_1: left promiscuous mode [ 106.330668][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.330679][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.331017][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.331026][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.334209][ T5547] veth1_macvtap: left promiscuous mode [ 106.334228][ T5547] veth0_macvtap: left promiscuous mode [ 106.334272][ T5547] veth1_vlan: left promiscuous mode [ 106.334302][ T5547] veth0_vlan: left promiscuous mode [ 106.467217][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 106.476036][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 106.558366][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 106.583292][ T5749] Bluetooth: Frame is too long (len 46, expected len 4) [ 106.594180][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.601451][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.605879][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.605925][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.616820][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.616866][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.762979][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 106.892674][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.893224][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.929286][ T7412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.931682][ T7412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.977463][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.978018][ T5814] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.978089][ T5814] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.978264][ T5814] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.978283][ T5814] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.978977][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 107.114803][ T7301] veth0_vlan: entered promiscuous mode [ 107.119389][ T7301] veth1_vlan: entered promiscuous mode [ 107.131727][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 107.142669][ T7301] veth0_macvtap: entered promiscuous mode [ 107.144758][ T7301] veth1_macvtap: entered promiscuous mode [ 107.153017][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.160330][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.256213][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.256227][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.258409][ T5813] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.258584][ T5813] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.258705][ T5813] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.258723][ T5813] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.286290][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.286303][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.455084][ T7465] fuse: fd is not a fuse device [ 107.479924][ T7468] netlink: 48 bytes leftover after parsing attributes in process `syz.6.439'. [ 107.498073][ T5749] Bluetooth: hci4: command tx timeout [ 107.723869][ T7483] netlink: 260 bytes leftover after parsing attributes in process `syz.6.444'. [ 107.798251][ T1359] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 107.851950][ T7497] vxcan0: tx address claim with different name [ 107.871379][ T7497] vivid-000: ================= START STATUS ================= [ 107.871391][ T7497] vivid-000: Test Pattern: 75% Colorbar [ 107.871404][ T7497] vivid-000: Fill Percentage of Frame: 100 [ 107.871415][ T7497] vivid-000: Horizontal Movement: No Movement [ 107.871426][ T7497] vivid-000: Vertical Movement: No Movement [ 107.871436][ T7497] vivid-000: OSD Text Mode: All [ 107.871446][ T7497] vivid-000: Show Border: false [ 107.871456][ T7497] vivid-000: Show Square: false [ 107.871466][ T7497] vivid-000: Sensor Flipped Horizontally: false [ 107.871476][ T7497] vivid-000: Sensor Flipped Vertically: false [ 107.871487][ T7497] vivid-000: Insert SAV Code in Image: false [ 107.871497][ T7497] vivid-000: Insert EAV Code in Image: false [ 107.871507][ T7497] vivid-000: Insert Video Guard Band: false [ 107.871518][ T7497] vivid-000: Reduced Framerate: false [ 107.871529][ T7497] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 107.871541][ T7497] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 107.871552][ T7497] vivid-000: Enable Capture Cropping: true grabbed [ 107.871566][ T7497] vivid-000: Enable Capture Composing: true grabbed [ 107.871578][ T7497] vivid-000: Enable Capture Scaler: true grabbed [ 107.871590][ T7497] vivid-000: Timestamp Source: End of Frame [ 107.871599][ T7497] vivid-000: Colorspace: sRGB [ 107.871609][ T7497] vivid-000: Transfer Function: Default [ 107.871618][ T7497] vivid-000: Y'CbCr Encoding: Default [ 107.871628][ T7497] vivid-000: HSV Encoding: Hue 0-179 [ 107.871637][ T7497] vivid-000: Quantization: Default [ 107.871647][ T7497] vivid-000: Apply Alpha To Red Only: false [ 107.871656][ T7497] vivid-000: Standard Aspect Ratio: 4x3 [ 107.871666][ T7497] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 107.871678][ T7497] vivid-000: DV Timings: 640x480p59 inactive [ 107.871713][ T7497] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 107.871726][ T7497] vivid-000: Maximum EDID Blocks: 2 [ 107.871736][ T7497] vivid-000: Limited RGB Range (16-235): false [ 107.871747][ T7497] vivid-000: Rx RGB Quantization Range: Automatic [ 107.871758][ T7497] vivid-000: Power Present: 0x00000001 [ 107.871770][ T7497] tpg source WxH: 320x240 (Y'CbCr) [ 107.871777][ T7497] tpg field: 1 [ 107.871781][ T7497] tpg crop: (0,0)/320x240 [ 107.871788][ T7497] tpg compose: (0,0)/320x240 [ 107.871795][ T7497] tpg colorspace: 8 [ 107.871800][ T7497] tpg transfer function: 0/2 [ 107.871805][ T7497] tpg Y'CbCr encoding: 0/1 [ 107.871810][ T7497] tpg quantization: 0/2 [ 107.871815][ T7497] tpg RGB range: 0/2 [ 107.871821][ T7497] vivid-000: ================== END STATUS ================== [ 107.883476][ T7506] 9p: Unknown access argument : -22 [ 107.968452][ T1359] usb 10-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 107.969440][ T1359] usb 10-1: config 0 has an invalid interface number: 205 but max is 0 [ 107.969459][ T1359] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 107.969475][ T1359] usb 10-1: config 0 has no interface number 0 [ 107.969495][ T1359] usb 10-1: config 0 interface 205 has no altsetting 0 [ 107.974108][ T1359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.974127][ T1359] usb 10-1: Product: syz [ 107.974139][ T1359] usb 10-1: Manufacturer: syz [ 107.974149][ T1359] usb 10-1: SerialNumber: syz [ 107.976266][ T1359] usb 10-1: config 0 descriptor?? [ 107.992827][ T7513] fuse: fd is not a fuse device [ 108.011623][ T1359] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 108.011662][ T1359] dvb-usb: bulk message failed: -22 (3/0) [ 108.038132][ T1359] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 108.038921][ T1359] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 108.038964][ T1359] usb 10-1: media controller created [ 108.040136][ T1359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.074121][ T1359] dvb-usb: bulk message failed: -22 (6/0) [ 108.074157][ T1359] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 108.076774][ T1359] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input41 [ 108.079302][ T1359] dvb-usb: schedule remote query interval to 150 msecs. [ 108.079327][ T1359] dvb-usb: bulk message failed: -22 (3/0) [ 108.097983][ T1359] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 108.166779][ T7521] netlink: 'syz.6.457': attribute type 1 has an invalid length. [ 108.199984][ T1359] usb 10-1: USB disconnect, device number 2 [ 108.227440][ T7523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.459'. [ 108.259830][ T1359] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 108.345265][ T5814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.635967][ T5814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.751619][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.764502][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.765407][ T5814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.779162][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.794241][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.812026][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.141179][ T5814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.393751][ T5814] bridge_slave_1: left allmulticast mode [ 109.393810][ T5814] bridge_slave_1: left promiscuous mode [ 109.394014][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.425878][ T5814] bridge_slave_0: left allmulticast mode [ 109.425915][ T5814] bridge_slave_0: left promiscuous mode [ 109.426145][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.544135][ T5814] erspan0 (unregistering): left allmulticast mode [ 109.568207][ T5749] Bluetooth: hci4: command tx timeout [ 109.611471][ T5814] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.615316][ T5814] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.621836][ T5814] .` (unregistering): (slave batadv0): Releasing backup interface [ 109.628296][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805444e000: rx timeout, send abort [ 109.628593][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805444e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 109.633818][ T5814] net_ratelimit: 31 callbacks suppressed [ 109.633831][ T5814] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 109.633981][ T5814] .` (unregistering): Released all slaves [ 109.637743][ T5814] bond0 (unregistering): Released all slaves [ 109.663132][ T5814] bond1 (unregistering): Released all slaves [ 109.682436][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 109.781985][ T7574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 109.918340][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 110.001113][ T5814] hsr_slave_0: left promiscuous mode [ 110.003991][ T5814] hsr_slave_1: left promiscuous mode [ 110.004679][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.004695][ T5814] batadv0: mtu less than device minimum [ 110.006998][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.008152][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.009209][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.010253][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.011281][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.012319][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.013505][ T5814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.052389][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.053599][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.077945][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.084660][ T5814] batman_adv: batadv0: Interface deactivated: dummy0 [ 110.084683][ T5814] batman_adv: batadv0: Removing interface: dummy0 [ 110.099385][ T5814] veth1_macvtap: left promiscuous mode [ 110.099409][ T5814] veth0_macvtap: left promiscuous mode [ 110.099455][ T5814] veth1_vlan: left promiscuous mode [ 110.099485][ T5814] veth0_vlan: left promiscuous mode [ 110.265894][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.475'. [ 110.275755][ T7604] jffs2: notice: (7604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 110.286101][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 110.298560][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 110.325730][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 110.325749][ T43] audit: type=1400 audit(2000000009.489:923): avc: denied { kexec_image_load } for pid=7601 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 110.458975][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 110.520653][ T43] audit: type=1400 audit(2000000009.689:924): avc: denied { write } for pid=7615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.537404][ T43] audit: type=1400 audit(2000000009.699:925): avc: denied { mounton } for pid=7623 comm="syz.5.477" path="/79/file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 110.569221][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.569411][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.569472][ T7541] bridge_slave_0: entered allmulticast mode [ 110.570740][ T7541] bridge_slave_0: entered promiscuous mode [ 110.572426][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.572568][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.572623][ T7541] bridge_slave_1: entered allmulticast mode [ 110.573424][ T7541] bridge_slave_1: entered promiscuous mode [ 110.601567][ T43] audit: type=1400 audit(2000000009.759:926): avc: denied { write } for pid=7625 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.603016][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.607738][ T7541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.624617][ T7541] team0: Port device team_slave_0 added [ 110.625841][ T7541] team0: Port device team_slave_1 added [ 110.640140][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.640157][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.640178][ T7541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.641672][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.641684][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.641706][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.699594][ T43] audit: type=1400 audit(2000000009.869:927): avc: denied { mounton } for pid=7623 comm="syz.5.477" path="/79/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 110.702376][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16 [ 110.712790][ T7541] hsr_slave_0: entered promiscuous mode [ 110.713571][ T7541] hsr_slave_1: entered promiscuous mode [ 110.729449][ T5814] IPVS: stop unused estimator thread 0... [ 110.815882][ T43] audit: type=1400 audit(2000000009.979:928): avc: denied { write } for pid=7636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.851042][ T7541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.853159][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.853688][ T7541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.855243][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.855728][ T7541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.857477][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.860549][ T7541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 110.863613][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.874719][ T43] audit: type=1400 audit(2000000010.039:929): avc: denied { write } for pid=7639 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.915162][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.925156][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17 [ 110.927347][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.935279][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.935333][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.947372][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.947454][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.017982][ T5749] Bluetooth: hci0: command tx timeout [ 111.265750][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.454115][ T7541] veth0_vlan: entered promiscuous mode [ 111.460969][ T7541] veth1_vlan: entered promiscuous mode [ 111.471642][ T43] audit: type=1400 audit(2000000010.639:930): avc: denied { map } for pid=7685 comm="syz.3.483" path="socket:[21915]" dev="sockfs" ino=21915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.481222][ T7541] veth0_macvtap: entered promiscuous mode [ 111.485634][ T7541] veth1_macvtap: entered promiscuous mode [ 111.495987][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.500994][ T43] audit: type=1400 audit(2000000010.669:931): avc: denied { write } for pid=7690 comm="syz.6.484" name="001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 111.507536][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.578360][ T7683] kvm: pic: non byte write [ 111.581049][ T7683] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3625979812 (7251959624 ns) > initial count (4302315212 ns). Using initial count to start timer. [ 111.583104][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.583117][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.589012][ T43] audit: type=1400 audit(2000000010.759:932): avc: denied { map } for pid=7690 comm="syz.6.484" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 111.590325][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.605140][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.605154][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.628376][ T5814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.628424][ T5814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.628451][ T5814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.648028][ T5749] Bluetooth: hci4: command tx timeout [ 111.741018][ T7720] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 111.745116][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.493'. [ 111.745179][ T7716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.745188][ T7716] IPv6: NLM_F_CREATE should be set when creating new route [ 111.745208][ T7716] IPv6: NLM_F_CREATE should be set when creating new route [ 111.763446][ T225] IPVS: starting estimator thread 0... [ 111.848539][ T7723] IPVS: using max 43 ests per chain, 103200 per kthread [ 112.331282][ T7772] kAFS: bad VL server IP address [ 113.088052][ T5749] Bluetooth: hci0: command tx timeout [ 113.727973][ T5749] Bluetooth: hci4: command tx timeout [ 113.968683][ T7802] overlayfs: unescaped trailing colons in lowerdir mount option. [ 113.976522][ T7813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7813 comm=syz.5.522 [ 113.994275][ T7807] netlink: 132 bytes leftover after parsing attributes in process `syz.6.521'. [ 114.065572][ T7830] syz_tun: entered allmulticast mode [ 114.068531][ T7829] syz_tun: left allmulticast mode [ 114.101474][ T7836] netlink: 72 bytes leftover after parsing attributes in process `syz.6.526'. [ 114.329507][ T7862] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 114.340451][ T7862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.354476][ T7862] bond2: (slave veth0_to_bond): making interface the new active one [ 114.355460][ T7862] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 114.361369][ T7862] macvlan2: entered promiscuous mode [ 114.361382][ T7862] macvlan2: entered allmulticast mode [ 114.361664][ T7862] bond2: entered promiscuous mode [ 114.361673][ T7862] veth0_to_bond: entered promiscuous mode [ 114.364848][ T7862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.365188][ T7862] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 114.365291][ T7862] bond2: left promiscuous mode [ 114.365300][ T7862] veth0_to_bond: left promiscuous mode [ 114.939476][ T7870] net_ratelimit: 36 callbacks suppressed [ 114.939489][ T7870] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 114.940892][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 115.171309][ T5749] Bluetooth: hci0: command tx timeout [ 115.221044][ T7886] netlink: 'syz.7.542': attribute type 1 has an invalid length. [ 115.269912][ T7872] FAULT_INJECTION: forcing a failure. [ 115.269912][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 115.269943][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.5.539 Not tainted syzkaller #0 PREEMPT(full) [ 115.269963][ T7872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.269976][ T7872] Call Trace: [ 115.269982][ T7872] [ 115.269990][ T7872] dump_stack_lvl+0x100/0x190 [ 115.270023][ T7872] should_fail_ex.cold+0x5/0xa [ 115.270050][ T7872] should_failslab+0xc2/0x120 [ 115.270085][ T7872] __kmalloc_noprof+0xfc/0x840 [ 115.270105][ T7872] ? rcu_is_watching+0x13/0xc0 [ 115.270133][ T7872] ? tomoyo_realpath_from_path+0xb6/0x690 [ 115.270163][ T7872] tomoyo_realpath_from_path+0xb6/0x690 [ 115.270192][ T7872] tomoyo_path_number_perm+0x23c/0x580 [ 115.270222][ T7872] ? tomoyo_path_number_perm+0x22e/0x580 [ 115.270255][ T7872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.270294][ T7872] ? __pfx_futex_wait+0x10/0x10 [ 115.270318][ T7872] ? __lock_acquire+0x5c0/0x1f40 [ 115.270352][ T7872] ? __fget_files+0x34/0x3d0 [ 115.270378][ T7872] ? find_held_lock+0x2b/0x80 [ 115.270406][ T7872] ? hook_file_ioctl_common+0x140/0x440 [ 115.270438][ T7872] ? __fget_files+0x21f/0x3d0 [ 115.270467][ T7872] security_file_ioctl+0xd3/0x230 [ 115.270491][ T7872] __x64_sys_ioctl+0xb7/0x210 [ 115.270514][ T7872] do_syscall_64+0x123/0x790 [ 115.270542][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.270562][ T7872] RIP: 0033:0x7fde6f39e159 [ 115.270577][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.270595][ T7872] RSP: 002b:00007fde6d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.270616][ T7872] RAX: ffffffffffffffda RBX: 00007fde6f625fa0 RCX: 00007fde6f39e159 [ 115.270629][ T7872] RDX: 0000000000000000 RSI: 0000000040049421 RDI: 0000000000000003 [ 115.270642][ T7872] RBP: 00007fde6f43503b R08: 0000000000000000 R09: 0000000000000000 [ 115.270660][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.270674][ T7872] R13: 00007fde6f626038 R14: 00007fde6f625fa0 R15: 00007fff8c309dc8 [ 115.270705][ T7872] [ 115.270751][ T7872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.351083][ T7891] x_tables: duplicate underflow at hook 2 [ 115.383328][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.543'. [ 115.576474][ T7887] check_preemption_disabled: 25 callbacks suppressed [ 115.576522][ T7887] BUG: using smp_processor_id() in preemptible [00000000] code: syz.6.543/7887 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 115.576537][ T7887] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 115.576569][ T7887] CPU: 3 UID: 0 PID: 7887 Comm: syz.6.543 Not tainted syzkaller #0 PREEMPT(full) [ 115.576589][ T7887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.576599][ T7887] Call Trace: [ 115.576605][ T7887] [ 115.576612][ T7887] dump_stack_lvl+0x100/0x190 [ 115.576636][ T7887] check_preemption_disabled+0xd2/0xe0 [ 115.576662][ T7887] ? skb_queue_purge_reason+0x2aa/0x420 [ 115.576682][ T7887] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 115.576705][ T7887] ? skb_queue_purge_reason+0x2aa/0x420 [ 115.576726][ T7887] trace_kfree_skb+0x18b/0x230 [ 115.576758][ T7887] sk_skb_reason_drop+0xb7/0x1b0 [ 115.576780][ T7887] skb_queue_purge_reason+0x2aa/0x420 [ 115.576801][ T7887] ? synchronize_rcu_expedited+0x3c3/0x450 [ 115.576823][ T7887] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 115.576859][ T7887] packet_release+0x839/0xd70 [ 115.576882][ T7887] ? __pfx_packet_release+0x10/0x10 [ 115.576903][ T7887] ? __pfx_down_write+0x10/0x10 [ 115.576934][ T7887] __sock_release+0xb3/0x260 [ 115.576955][ T7887] ? __pfx_sock_close+0x10/0x10 [ 115.576975][ T7887] sock_close+0x1c/0x30 [ 115.576993][ T7887] __fput+0x3ff/0xb50 [ 115.577014][ T7887] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.577028][ T7887] task_work_run+0x150/0x240 [ 115.577075][ T7887] ? __pfx_task_work_run+0x10/0x10 [ 115.577108][ T7887] exit_to_user_mode_loop+0x1d8/0x700 [ 115.577129][ T7887] ? rcu_is_watching+0x13/0xc0 [ 115.577148][ T7887] do_syscall_64+0x661/0x790 [ 115.577164][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.577177][ T7887] RIP: 0033:0x7f0048b9e159 [ 115.577187][ T7887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.577198][ T7887] RSP: 002b:00007ffdb52fee78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 115.577209][ T7887] RAX: 0000000000000000 RBX: 00007f0048e27da0 RCX: 00007f0048b9e159 [ 115.577216][ T7887] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 115.577222][ T7887] RBP: 00007f0048e27da0 R08: 00007f0048e26038 R09: 0000000000000000 [ 115.577229][ T7887] R10: 00000000003ee670 R11: 0000000000000246 R12: 000000000001c500 [ 115.577236][ T7887] R13: 00007f0048e2609c R14: 000000000001c2bd R15: 00007f0048e26090 [ 115.577252][ T7887] [ 115.596404][ T43] audit: type=1400 audit(2000000014.759:958): avc: denied { write } for pid=5658 comm="syz-executor" path="pipe:[5063]" dev="pipefs" ino=5063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 115.757149][ T43] audit: type=1400 audit(2000000014.909:959): avc: denied { write } for pid=7894 comm="syz.7.544" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.977777][ T5738] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor/5738 [ 115.977798][ T5738] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 115.977982][ T5738] CPU: 2 UID: 0 PID: 5738 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 115.978001][ T5738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.978011][ T5738] Call Trace: [ 115.978016][ T5738] [ 115.978023][ T5738] dump_stack_lvl+0x100/0x190 [ 115.978048][ T5738] check_preemption_disabled+0xd2/0xe0 [ 115.978073][ T5738] ? tun_queue_purge+0x1ee/0x340 [ 115.978088][ T5738] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 115.978111][ T5738] ? tun_queue_purge+0x1ee/0x340 [ 115.978127][ T5738] trace_kfree_skb+0x18b/0x230 [ 115.978151][ T5738] sk_skb_reason_drop+0xb7/0x1b0 [ 115.978171][ T5738] tun_queue_purge+0x1ee/0x340 [ 115.978192][ T5738] __tun_detach+0xb70/0x1850 [ 115.978206][ T5738] ? locks_remove_file+0xd1/0x600 [ 115.978236][ T5738] ? __pfx_tun_chr_close+0x10/0x10 [ 115.978252][ T5738] tun_chr_close+0xc2/0x220 [ 115.978267][ T5738] ? __pfx_tun_chr_close+0x10/0x10 [ 115.978281][ T5738] __fput+0x3ff/0xb50 [ 115.978305][ T5738] task_work_run+0x150/0x240 [ 115.978329][ T5738] ? __pfx_task_work_run+0x10/0x10 [ 115.978358][ T5738] do_exit+0x951/0x2ae0 [ 115.978380][ T5738] ? do_raw_spin_lock+0x128/0x260 [ 115.978400][ T5738] ? __pfx_do_exit+0x10/0x10 [ 115.978417][ T5738] ? do_group_exit+0x1bd/0x2a0 [ 115.978438][ T5738] ? rcu_is_watching+0x13/0xc0 [ 115.978462][ T5738] do_group_exit+0xd5/0x2a0 [ 115.978483][ T5738] __x64_sys_exit_group+0x3e/0x50 [ 115.978503][ T5738] x64_sys_call+0x1567/0x1570 [ 115.978519][ T5738] do_syscall_64+0x123/0x790 [ 115.978541][ T5738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.978557][ T5738] RIP: 0033:0x7f448f39e159 [ 115.978570][ T5738] Code: Unable to access opcode bytes at 0x7f448f39e12f. [ 115.978577][ T5738] RSP: 002b:00007fff4e560498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 115.978593][ T5738] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f448f39e159 [ 115.978603][ T5738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 115.978616][ T5738] RBP: 00007f448f435d3f R08: 0000000000000000 R09: 00000000000927c0 [ 115.978626][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 115.978635][ T5738] R13: 00000000000927c0 R14: 000000000001c128 R15: 00007fff4e560650 [ 115.978656][ T5738] [ 116.057460][ T5738] bridge0: port 3(syz_tun) entered disabled state [ 116.132348][ T5738] syz_tun (unregistering): left allmulticast mode [ 116.132373][ T5738] syz_tun (unregistering): left promiscuous mode [ 116.132449][ T5738] bridge0: port 3(syz_tun) entered disabled state [ 116.273459][ T7895] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.544/7895 [ 116.273484][ T7895] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 116.273518][ T7895] CPU: 2 UID: 0 PID: 7895 Comm: syz.7.544 Not tainted syzkaller #0 PREEMPT(full) [ 116.273536][ T7895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.273545][ T7895] Call Trace: [ 116.273551][ T7895] [ 116.273559][ T7895] dump_stack_lvl+0x100/0x190 [ 116.273585][ T7895] check_preemption_disabled+0xd2/0xe0 [ 116.273609][ T7895] ? tun_queue_purge+0x1ee/0x340 [ 116.273625][ T7895] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 116.273648][ T7895] ? tun_queue_purge+0x1ee/0x340 [ 116.273663][ T7895] trace_kfree_skb+0x18b/0x230 [ 116.273686][ T7895] sk_skb_reason_drop+0xb7/0x1b0 [ 116.273706][ T7895] tun_queue_purge+0x1ee/0x340 [ 116.273727][ T7895] __tun_detach+0xb70/0x1850 [ 116.273750][ T7895] ? __pfx_tun_chr_close+0x10/0x10 [ 116.273766][ T7895] tun_chr_close+0xc2/0x220 [ 116.273791][ T7895] ? __pfx_tun_chr_close+0x10/0x10 [ 116.273806][ T7895] __fput+0x3ff/0xb50 [ 116.273831][ T7895] task_work_run+0x150/0x240 [ 116.273856][ T7895] ? __pfx_task_work_run+0x10/0x10 [ 116.273887][ T7895] do_exit+0x951/0x2ae0 [ 116.273913][ T7895] ? __pfx_do_exit+0x10/0x10 [ 116.273934][ T7895] ? do_raw_spin_lock+0x128/0x260 [ 116.273955][ T7895] ? find_held_lock+0x2b/0x80 [ 116.273978][ T7895] ? get_signal+0x7e0/0x21e0 [ 116.274001][ T7895] do_group_exit+0xd5/0x2a0 [ 116.274025][ T7895] get_signal+0x1ec7/0x21e0 [ 116.274048][ T7895] ? putname+0xb1/0x110 [ 116.274069][ T7895] ? __pfx_get_signal+0x10/0x10 [ 116.274088][ T7895] ? do_futex+0x190/0x440 [ 116.274114][ T7895] arch_do_signal_or_restart+0x91/0x7e0 [ 116.274140][ T7895] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 116.274170][ T7895] ? __x64_sys_openat+0x12d/0x210 [ 116.274198][ T7895] exit_to_user_mode_loop+0x139/0x700 [ 116.274218][ T7895] ? rcu_is_watching+0x13/0xc0 [ 116.274242][ T7895] do_syscall_64+0x661/0x790 [ 116.274265][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.274281][ T7895] RIP: 0033:0x7f599219e159 [ 116.274297][ T7895] Code: Unable to access opcode bytes at 0x7f599219e12f. [ 116.274305][ T7895] RSP: 002b:00007f59930310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.274324][ T7895] RAX: 0000000000000000 RBX: 00007f5992425fa8 RCX: 00007f599219e159 [ 116.274336][ T7895] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5992425fa8 [ 116.274347][ T7895] RBP: 00007f5992425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 116.274358][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.274368][ T7895] R13: 00007f5992426038 R14: 00007ffd199853d0 R15: 00007ffd199854b8 [ 116.274390][ T7895] [ 116.371435][ T5547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.371470][ T5547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.446746][ T5547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.446788][ T5547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.512089][ T5547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.512130][ T5547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.633772][ T5547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.633796][ T5547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.775706][ T5547] bridge_slave_1: left allmulticast mode [ 116.775728][ T5547] bridge_slave_1: left promiscuous mode [ 116.775859][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.784186][ T5547] bridge_slave_0: left allmulticast mode [ 116.784212][ T5547] bridge_slave_0: left promiscuous mode [ 116.784413][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.831746][ T43] audit: type=1400 audit(2000000015.999:960): avc: denied { write } for pid=7899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.881508][ T43] audit: type=1400 audit(2000000016.049:961): avc: denied { write } for pid=7902 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.926894][ T5547] bond1 (unregistering): (slave gretap1): Releasing active interface [ 116.971684][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.973622][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.976016][ T5547] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 116.976568][ T5547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 116.976846][ T5547] bond0 (unregistering): Released all slaves [ 116.982584][ T5547] bond1 (unregistering): Released all slaves [ 116.998870][ T5547] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 117.000334][ T5547] bond2 (unregistering): Released all slaves [ 117.015393][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 117.102128][ T43] audit: type=1400 audit(2000000016.269:962): avc: denied { write } for pid=7905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.180319][ T43] audit: type=1400 audit(2000000016.349:963): avc: denied { write } for pid=7908 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.235199][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19 [ 117.279712][ T5547] hsr_slave_0: left promiscuous mode [ 117.280104][ T5547] hsr_slave_1: left promiscuous mode [ 117.280460][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.280472][ T5547] batadv0: mtu less than device minimum [ 117.281018][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.281555][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.282107][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.282660][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.283179][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.283695][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.284212][ T5547] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.293938][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.295363][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.305660][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.309031][ T5547] batman_adv: batadv0: Interface deactivated: dummy0 [ 117.309062][ T5547] batman_adv: batadv0: Removing interface: dummy0 [ 117.317009][ T5547] veth1_vlan: left promiscuous mode [ 117.317105][ T5547] veth0_vlan: left promiscuous mode [ 117.323806][ T43] audit: type=1400 audit(2000000016.489:964): avc: denied { write } for pid=7911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.451879][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 117.463825][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 117.579383][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20 [ 117.747976][ T5547] IPVS: stop unused estimator thread 0... [ 117.803839][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21 [ 117.844975][ T5547] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.944510][ T5547] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.042391][ T5547] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.113962][ T5547] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.256991][ T5547] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.335886][ T5547] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.425752][ T5547] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.453246][ T5444] 8021q: adding VLAN 0 to HW filter on device eth22 [ 118.506898][ T5547] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.655130][ T5547] bridge_slave_1: left allmulticast mode [ 118.655154][ T5547] bridge_slave_1: left promiscuous mode [ 118.655329][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.666881][ T5547] bridge_slave_0: left allmulticast mode [ 118.666905][ T5547] bridge_slave_0: left promiscuous mode [ 118.667086][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.685313][ T5547] bridge_slave_1: left allmulticast mode [ 118.685339][ T5547] bridge_slave_1: left promiscuous mode [ 118.685501][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.698648][ T5547] bridge_slave_0: left allmulticast mode [ 118.698665][ T5547] bridge_slave_0: left promiscuous mode [ 118.698758][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.880746][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.882946][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.884281][ T5547] bond0 (unregistering): Released all slaves [ 118.989980][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.992231][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.993533][ T5547] bond0 (unregistering): Released all slaves [ 119.327491][ T5444] 8021q: adding VLAN 0 to HW filter on device eth23 [ 119.445357][ T5547] hsr_slave_0: left promiscuous mode [ 119.446029][ T5547] hsr_slave_1: left promiscuous mode [ 119.447513][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.447529][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.450182][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.450193][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.460836][ T5547] hsr_slave_0: left promiscuous mode [ 119.461456][ T5547] hsr_slave_1: left promiscuous mode [ 119.461914][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.461925][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.462656][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.462665][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.477420][ T5547] veth1_macvtap: left promiscuous mode [ 119.477443][ T5547] veth0_macvtap: left promiscuous mode [ 119.477487][ T5547] veth1_vlan: left promiscuous mode [ 119.477517][ T5547] veth0_vlan: left promiscuous mode [ 119.486600][ T5547] veth1_macvtap: left promiscuous mode [ 119.486622][ T5547] veth0_macvtap: left promiscuous mode [ 119.486665][ T5547] veth1_vlan: left promiscuous mode [ 119.486696][ T5547] veth0_vlan: left promiscuous mode [ 119.647093][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 119.654864][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 119.795598][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 119.801007][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 119.857757][ T5444] 8021q: adding VLAN 0 to HW filter on device eth24 [ 120.051957][ T5444] 8021q: adding VLAN 0 to HW filter on device eth25 [ 120.208138][ T5444] 8021q: adding VLAN 0 to HW filter on device eth26 [ 120.284131][ T5547] IPVS: stop unused estimator thread 0... [ 120.343063][ T5444] 8021q: adding VLAN 0 to HW filter on device eth27 [ 120.502144][ T5444] 8021q: adding VLAN 0 to HW filter on device eth28 [ 120.618874][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 120.618887][ T43] audit: type=1400 audit(2000000019.789:991): avc: denied { write } for pid=8007 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.647618][ T5444] 8021q: adding VLAN 0 to HW filter on device eth29 [ 121.177171][ T43] audit: type=1400 audit(2000000020.339:992): avc: denied { write } for pid=8020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.219318][ T43] audit: type=1400 audit(2000000020.389:993): avc: denied { write } for pid=8024 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.102288][ T43] audit: type=1400 audit(2000000021.269:994): avc: denied { write } for pid=8030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.155150][ T43] audit: type=1400 audit(2000000021.319:995): avc: denied { write } for pid=8033 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.551135][ T43] audit: type=1400 audit(2000000021.719:996): avc: denied { write } for pid=8040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.618604][ T43] audit: type=1400 audit(2000000021.789:997): avc: denied { write } for pid=8043 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.132608][ T43] audit: type=1400 audit(2000000022.299:998): avc: denied { write } for pid=8046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.211605][ T43] audit: type=1400 audit(2000000022.379:999): avc: denied { write } for pid=8049 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1