last executing test programs: 53.301749363s ago: executing program 3 (id=124): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400fc23000008001b0000000000a1ec2b7c0a84c97a5246ba38486e5bca12bf2ba43dc48e1d4196240a522d6bef0c87ef210e0084f5fb6d657104db850e2d18a9a9ec5ad79e18ef133d9abb034b9401e585baf5e449fc49707ba264f4489fa1372db7c23a9d78502ae2561f0710bf2fecedc44edf4dd48d41a655649038f8d50531"], 0x30}, 0x1, 0x600000000000000}, 0x0) keyctl$session_to_parent(0x12) 53.04142878s ago: executing program 3 (id=131): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 53.039858349s ago: executing program 3 (id=133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"]) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') open(0x0, 0x400, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f00000007c0)=@ethtool_wolinfo={0xa, 0x0, 0x0, "2d51305d39af"}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) flistxattr(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./my_configfs\x00') r5 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) 52.122538076s ago: executing program 3 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/Loopback.usb0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r1, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 52.072032816s ago: executing program 3 (id=142): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 51.761152841s ago: executing program 3 (id=144): r0 = semget$private(0x0, 0x6, 0x3b1) semop(r0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000200000000000006"], 0x30}}, 0x4090) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg(r4, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000780)={&(0x7f0000000740)=[{0x0, 0x8000, 0x0, 0x0}], 0x1}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r5, 0x58dd2000) 51.726593452s ago: executing program 32 (id=144): r0 = semget$private(0x0, 0x6, 0x3b1) semop(r0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000200000000000006"], 0x30}}, 0x4090) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg(r4, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000780)={&(0x7f0000000740)=[{0x0, 0x8000, 0x0, 0x0}], 0x1}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r5, 0x58dd2000) 1.15176749s ago: executing program 2 (id=854): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000047000100fcff07000400000001006100040048800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async, rerun: 32) r2 = socket(0x2, 0x80805, 0x0) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) write$P9_RREADLINK(r5, &(0x7f00000002c0)={0x16, 0x17, 0x2, {0xd, './file0/file1'}}, 0x16) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x2, 0x4523, 0x5, 0x80000000, 0x24, 0x4, 0x2, 0x7f, r4}, 0x20) (rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r6, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f00000000c0)) (async) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x4, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1) 1.150548405s ago: executing program 1 (id=855): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100009"], 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x49, &(0x7f0000000080)=0x474c, 0x4) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='mountinfo\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x28) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r5, 0x0, r7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00') read$FUSE(r9, &(0x7f0000000340)={0x2020}, 0xcb0a) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)='c:::\x00', 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xee) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000002540)=ANY=[]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) capset(&(0x7f0000000040)={0x19980330, r8}, &(0x7f0000000080)) 1.081696076s ago: executing program 2 (id=856): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad}, 0x14}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "909f50c21562"}]}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76695852696f2cc67363616368652c00027e080ebd1142ec05922dc88eb925e31631e1b8c0"]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad}, 0x14}}, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) (async) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "909f50c21562"}]}}}}}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) (async) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76695852696f2cc67363616368652c00027e080ebd1142ec05922dc88eb925e31631e1b8c0"]) (async) 991.376449ms ago: executing program 2 (id=857): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400fc23000008001b0000000000a1ec2b7c0a84c97a5246ba38486e5bca12bf2ba43dc48e1d4196240a522d6bef0c87ef210e0084f5fb6d657104db850e2d18a9a9ec5ad79e18ef133d9abb034b9401e585baf5e449fc49707ba264f4489fa1372db7c23a9d78502ae2561f0710bf2fecedc44edf4dd48d41a655649038f8d50531"], 0x30}, 0x1, 0x0, 0x0, 0xfdff}, 0x0) keyctl$session_to_parent(0x12) 990.946747ms ago: executing program 2 (id=858): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14e80100f1b15d5b060085efb4f66ec5", @ANYRES16=r0, @ANYBLOB="000229bd7000faffffff25000000"], 0x14}, 0x1, 0x0, 0x0, 0xc088}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000c010) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) dup(r2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) 920.207574ms ago: executing program 2 (id=860): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x11, r1, 0x91c7d000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff002}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = eventfd2(0x2, 0x1) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="6effef930c53dea1", 0x8}, {&(0x7f0000000280)="7e75c01071cb6c74", 0x8}], 0x2) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) (async) close(r6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f000001c340)=@o_path={&(0x7f000000c300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, 0x4000, r3}, 0x18) (async) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x51) 860.605056ms ago: executing program 2 (id=862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) fcntl$setstatus(r3, 0x4, 0x40800) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={[0x7fffffff]}, 0x0, &(0x7f00000000c0)={r4, r5+60000000}, 0x8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r7, 0x2000009) sendfile(r3, r7, 0x0, 0x7ffff004) 350.085238ms ago: executing program 0 (id=872): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3400000022000106"], 0x34}], 0x1}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xfc0f, r0, 0x80000}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x45}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044040) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmmsg$inet(r5, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 349.690038ms ago: executing program 4 (id=873): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r1, &(0x7f0000001880)=[{&(0x7f0000000040)="09d3ec", 0x3}, {&(0x7f0000000280)="ac48662a94e6efc6c14cf51ec51cc51119da4c0c52f39673fbb5d56a24d65f19e3c78eb4cb9a0ba705835644f1f6772ea75adde000703f2ff13bca553b36e362cb550c9ddee8a6392d2f9de04464630626873ec8b62b7c66aa6861dc9a1f7f7b7ebc33f1770a1f203688769f81bcae10afd24db79c67d8502d5765099fdfeabbd3ef8d16e7473a1dc01262f313a1835770ebf8aec69b8305ad7fc5ce7b4be84ebe4f055f83848115784b21c135", 0xad}, {&(0x7f0000000340)="70572a957e4454df3548f44ca3600358ed9d0f8cd3b1e9a53cbc5f80", 0x1c}, {&(0x7f0000000380)="491342696f3ff806f4e59d7bbea2ed97934fb6af85622bdcb94e714df9d00b0f44ef6ad85880f9ec623cbbf643aa16d45da581ee9541043f056f7efb2db32745d67256d4e13faa23099c3abb4aede02551cc5916cd6e214ad54ea9f06323f901fa69ab5c2c0eabc225710c76b9c9adcbfbed1f6e4691380a01909b0fc5e690946dc2f6ce55632d29804cee4e31c2fd92ee9499a1c10d66bd7ad794a4813127621cbd667e", 0xa4}, {&(0x7f0000000880)="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", 0x1000}], 0x5) listen(r0, 0x7d4165cc) open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x1e9) acct(&(0x7f00000005c0)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x1, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x3}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000240)={'pim6reg0\x00', @ifru_map={0x7fffffff, 0x8, 0xea0, 0x8, 0x9, 0xda}}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c31a2970000000000006"], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x20008084) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x100) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x7d4165c9) listen(r7, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x7d, @mcast1, 0xc}}, 0x0, 0x0, 0x3b, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r6, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001900)={@in6={{0xa, 0x4e23, 0x4, @private1, 0x3}}, 0x0, 0x0, 0x3b, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) r11 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x0, 0x2, @stepwise={0xfffffff9, 0xd, 0x3, 0x1, 0x40000800, 0xfffffff7}}) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 292.294769ms ago: executing program 0 (id=874): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 291.742801ms ago: executing program 0 (id=875): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioprio_set$uid(0x3, 0x0, 0x0) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x5b1, 0xffffffffffffffff) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 290.825514ms ago: executing program 1 (id=876): process_madvise(0xffffffffffffffff, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x14, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xa, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x9, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x5, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f7, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x7, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x8015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x5, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000003340)={&(0x7f0000002340)=[0x0, 0x9, 0xd1e9, 0x52, 0x4, 0xffffb033, 0x0, 0xeb, 0x7, 0x0, 0x4, 0x7, 0x3, 0x7fffffff, 0x7fff, 0x3, 0x9, 0x6, 0x10, 0x5, 0x4, 0x0, 0x3, 0x4, 0x2, 0x7, 0x3, 0x8, 0x1, 0x6, 0x4, 0x401, 0xd9, 0xe5, 0x383, 0x8, 0x7, 0x0, 0x7, 0x4, 0x44, 0x1, 0x9, 0x18000000, 0x800, 0x10, 0xfffffff8, 0xa, 0x7, 0x3, 0x80, 0x10, 0x1bda9609, 0x81, 0x6, 0xfffffffc, 0x100, 0xfffffff7, 0x9, 0x7, 0x426a, 0x8, 0xc0000000, 0xf, 0x5, 0x9, 0xf, 0xf7, 0x0, 0x200, 0x4, 0x3, 0x2, 0x10001, 0x1, 0x4, 0x4, 0x5, 0xa75b, 0x0, 0x3, 0x80000000, 0x2, 0x2, 0x5, 0x2, 0x1a23, 0x4, 0x10, 0x0, 0x7, 0x5, 0x0, 0x7, 0x400, 0xfffffd48, 0x1, 0x7, 0x4, 0x0, 0x60f, 0xf61, 0x2, 0x1, 0x80, 0x9, 0xbe6, 0x861d, 0x6c8, 0x7, 0x4, 0x8, 0xe, 0x2, 0x3, 0x9, 0x7e53351d, 0x800, 0x4, 0x8, 0x1, 0x6, 0x4ed, 0xffffff81, 0xfff, 0x6, 0x0, 0x37, 0x6, 0xffff, 0x0, 0x4, 0x3, 0x4, 0xff, 0xde5, 0xf4, 0x9, 0x1, 0x8, 0x5dac, 0xd93, 0x4, 0x2, 0x5, 0x9, 0x9, 0x0, 0x7, 0x1, 0x9, 0x2, 0x7, 0x8, 0x1, 0x83, 0x2, 0x5, 0x2, 0x5, 0x2, 0x2, 0x4, 0xd1, 0x8, 0x1, 0x2, 0x2, 0x5, 0xb26, 0x7, 0x8000, 0x6, 0x2, 0x40, 0x3ff, 0x94d62c95, 0x9, 0x3, 0x66e, 0x7, 0xfff, 0x6, 0x2, 0x6, 0x1000, 0xd9e1, 0x10001, 0x9, 0x1, 0x9e2, 0x7fffffff, 0xff, 0x2, 0x7, 0xffffff01, 0xa0000000, 0x9, 0x80000001, 0x2, 0x5e, 0x3, 0x4, 0x3, 0x6, 0x401, 0xfffffff7, 0x572, 0x18b, 0xac5, 0xd7, 0x6, 0x3, 0x7fffffff, 0xa, 0x9, 0xfffffff7, 0x5, 0x300, 0x6, 0x1, 0x602, 0x1000, 0x6, 0xff, 0x6, 0xfffffffd, 0x6, 0xffffff22, 0x2f4, 0x3, 0x41a, 0x56bb, 0x8, 0xb, 0x3, 0x8, 0x4, 0x0, 0x4, 0x0, 0x5, 0x3, 0x7, 0x8, 0x80000000, 0x2, 0x3, 0x8, 0x4457, 0x4, 0xfffffffe, 0x0, 0x3, 0x7, 0x5, 0x9, 0x8, 0x5fd6, 0x1, 0x0, 0x4, 0x4, 0x9, 0x7, 0x8, 0x2, 0x8, 0x2, 0x0, 0x6, 0xab8, 0x9, 0xe3da, 0x8, 0x4, 0x9, 0x8, 0x80, 0x4, 0x7fff, 0x40, 0x8, 0x8, 0x7, 0x6, 0x2, 0x5, 0x5, 0xe3, 0x9, 0xaaa7, 0x8ed, 0xbaa, 0x8, 0x1, 0x8acb, 0xa7b2, 0x10, 0x4, 0x5, 0x80000001, 0x7fffffff, 0x2, 0x9492, 0xbfcd, 0x0, 0x1f, 0x3, 0xb3, 0x6, 0x7, 0x10000, 0x7, 0x3, 0xffffff01, 0x2, 0x6, 0x9, 0x8001, 0x800, 0x2, 0xb9f4, 0x3ff, 0xfffffffa, 0x8, 0x7ff, 0x0, 0x4a, 0x2, 0x1000, 0x2, 0xff, 0x2, 0x5, 0x9, 0x8, 0x0, 0x40, 0x7, 0x2, 0x4, 0x2, 0x7, 0x8, 0x36, 0x22, 0x0, 0x1, 0x5, 0x7, 0x5, 0x4, 0x400, 0xffff5b7a, 0x0, 0x2f, 0x3, 0x352, 0x7708, 0xe, 0x3bfb5237, 0x1, 0x9, 0x50, 0x5, 0x1, 0x85, 0x6, 0xffffffff, 0x9, 0x0, 0x10001, 0x3, 0x2, 0x3, 0x7, 0x675, 0x80000000, 0x3, 0x6, 0x9, 0x4, 0x5, 0x80, 0x2, 0x9, 0x33e9, 0xffff0000, 0x2, 0x357, 0x7fff, 0x4, 0xa19, 0x7, 0x40, 0xff, 0x84ea, 0x6, 0x0, 0x800, 0x1, 0xe, 0x4, 0x6, 0x6, 0x7, 0x9, 0x9fbd, 0x10000, 0x1, 0x1, 0x515a, 0x1, 0x2, 0x6, 0xb, 0x2, 0x6, 0x100, 0xfffffffb, 0x79, 0x1000, 0x4, 0x80000001, 0x0, 0x7, 0x8e6f, 0x4, 0x200, 0x9, 0xffffffff, 0x6, 0x8, 0x3, 0x8, 0x3, 0x8, 0x51d7, 0x9, 0x2, 0xffffffff, 0x2, 0x3, 0x9, 0x1, 0x46, 0x3, 0x8, 0xb, 0x7f, 0x5, 0x6, 0x4, 0x9, 0x7, 0x4, 0x8, 0x6000, 0x5, 0x0, 0x6, 0x4, 0x5, 0x86, 0x3, 0x8, 0x2f57, 0x6, 0x19a, 0x8, 0x6, 0x4, 0x6, 0x3b98, 0x0, 0x5, 0x2, 0xdf5a, 0x200, 0x2, 0x812, 0x1, 0x7, 0x7, 0x7, 0xfffffff9, 0x3332, 0xff, 0x3, 0x101, 0xffff0001, 0xf4e, 0x45, 0xa, 0xc5, 0x1bf, 0x10001, 0x401, 0x3, 0x8, 0x2, 0x7, 0x8, 0x7, 0x4, 0x9, 0xfffffffa, 0x31, 0xffff, 0x10001, 0x5, 0x2, 0x7, 0x0, 0x2, 0x8, 0xdacf, 0x6, 0x2, 0x6, 0x80000000, 0x1b723f2, 0x3, 0x9, 0x53, 0xc22, 0x6, 0x4, 0x9, 0x1, 0x800, 0x8000, 0xcaa, 0x8, 0xa310, 0xff, 0xfffffff7, 0x3, 0x1, 0x2, 0xd4, 0xf5f3, 0x3, 0x9, 0xfffffffa, 0xffffffff, 0x2, 0xa851, 0x3, 0x10000, 0x81, 0x3, 0x3, 0x0, 0x8000, 0xf332, 0xd4, 0x534c000, 0x3, 0xc204, 0xfffffffb, 0x6, 0x4, 0x4, 0x7, 0x4, 0x1, 0xb, 0x0, 0x6, 0x9, 0x80000000, 0x3, 0x5, 0x1000, 0xfffffffc, 0xef, 0x0, 0x11, 0x800, 0x2, 0x8, 0x3, 0x8, 0xe, 0x5, 0x1, 0xfffffffd, 0xe, 0x3b58, 0x2, 0xd, 0x16, 0x80000000, 0x0, 0x6, 0x0, 0xca4, 0x0, 0xcdf9, 0x0, 0xd741, 0x7fff, 0x6, 0xffff53f2, 0x9, 0xc, 0x3, 0xd6a, 0xdf, 0x200, 0x1, 0xa0, 0x59, 0x7ff, 0x9, 0x80000000, 0x8, 0x80, 0xfff, 0xffffffff, 0x6, 0x6, 0x1, 0x80000000, 0x162, 0xde60, 0x10, 0x2, 0x8241, 0x3, 0xe5e4, 0x5, 0x2, 0x0, 0x8, 0x6, 0x4, 0x8, 0x6, 0x9, 0x5, 0xfff, 0x0, 0x2, 0x7, 0x8, 0x7, 0x1, 0x8, 0x4, 0x2, 0x9, 0xeea1000, 0x7ff, 0x6, 0x2, 0x2, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x6, 0xf, 0xfffffffa, 0x9, 0xffff7fff, 0x8, 0x6, 0xff, 0x9, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0xffffffff, 0x200, 0x3, 0xe, 0x3, 0x6, 0x2, 0x5, 0x4, 0x2, 0x1000, 0x400, 0xfffffffc, 0x8, 0x5, 0x508f, 0x3, 0x0, 0x4, 0x2, 0xffffffff, 0xd4d8, 0x1, 0x7fff, 0x3, 0xffff, 0x4, 0x0, 0x1, 0x4, 0x4, 0xf86, 0x8, 0x9f6b, 0x5, 0x4, 0xbeb, 0x1, 0x9, 0x5, 0x0, 0xffff, 0x3, 0xf1, 0x3, 0x861, 0x3, 0x22, 0x6, 0x1, 0xff, 0xffffffff, 0x6, 0xa, 0x7, 0x0, 0x8, 0xfff, 0x3420800, 0x71, 0xb, 0x6, 0x5, 0xff, 0x78cd, 0x3, 0x1, 0x33, 0x2, 0x8, 0x6, 0x0, 0x6, 0x4, 0xe1d, 0x3, 0x6, 0x8, 0xffffffff, 0x5, 0xffffffff, 0xfffffffe, 0x3, 0xffffffff, 0x3, 0xfc, 0xa, 0x1, 0x0, 0x3, 0x10, 0x51, 0xcf8d7cba, 0x8001, 0x0, 0x3, 0x9, 0x7fff, 0x3, 0x3, 0x9, 0x7fffffff, 0x1, 0x101, 0x0, 0x70, 0x800, 0xf, 0xf, 0x5, 0xfffffffb, 0x5, 0x7, 0x80000000, 0x10, 0x4, 0x0, 0x8, 0xf0000000, 0x8000, 0x4, 0x0, 0x2, 0x5, 0xe5b6, 0x6, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0x4, 0x5, 0x401, 0x80000001, 0x9, 0xdeec, 0x6, 0x708, 0xb, 0x82, 0xed87, 0x401, 0x7ff, 0x8, 0xfff, 0x857b, 0x7, 0x1, 0x6, 0xc13, 0xde8, 0x401, 0xe, 0x7, 0xcc4, 0x1, 0xa, 0x100, 0x100, 0x57ebb1af, 0x2, 0x5, 0xa9f9, 0x9, 0x8, 0x7, 0x2, 0x4, 0x5, 0x7, 0x9f7, 0xffff0001, 0xe7c0, 0x3ff, 0x6, 0x5, 0xfffffffa, 0x8, 0x3, 0x6, 0x7, 0x1, 0x0, 0xe, 0x8001, 0x326, 0x6, 0x2, 0x6, 0x81, 0x100, 0x273, 0x3, 0x7, 0xd, 0x4, 0x5, 0x5, 0x4, 0x1000, 0x2, 0xc6d9, 0x2, 0x8, 0x0, 0xb, 0xff, 0x1, 0x473, 0xffffffff, 0x7fffffff, 0x3, 0x5, 0x3, 0x5, 0x0, 0x7, 0x9, 0xffff6273, 0x4, 0x5, 0x6, 0x10, 0x3, 0x200, 0xfffffff7, 0x2, 0x4, 0x0, 0x8, 0x6, 0x0, 0xb9, 0x3, 0x3, 0x9, 0xc31, 0x9, 0x80000000, 0x6, 0x5, 0x5, 0x3, 0x3, 0x81, 0x5, 0x10, 0x4, 0xfd75, 0x3, 0x52fe3333, 0xffffffff, 0x5, 0x9, 0xb, 0x1, 0x1, 0x5, 0x2, 0x6, 0x6, 0x3ff, 0xf, 0x0, 0x8, 0x1, 0x28b, 0x3, 0x9, 0x1, 0x81, 0xc792, 0x9, 0x3ff, 0x3, 0x800, 0x9, 0xdb, 0x2, 0x10, 0x2, 0x8, 0x0, 0x8, 0x8, 0xe, 0x0, 0x7, 0xb2, 0x0, 0x7, 0x8000, 0x0, 0x1, 0xfffffff9, 0xffffffff, 0x9, 0x7, 0x7, 0x0, 0x8, 0x1, 0x9, 0x3ff, 0x40, 0xa3, 0x1, 0x80000001, 0xc9, 0x5, 0x7, 0x4, 0x3, 0x400, 0xc1, 0x2, 0x4, 0x1, 0x1, 0xac6d, 0x4, 0xd02, 0xfffffff9, 0xfffffffd, 0x3, 0xd2cc, 0x0, 0x4, 0x5, 0x400, 0x40, 0xb847, 0x2, 0x190fe488, 0xffffffff, 0x8, 0x0, 0x4, 0x7, 0x8, 0x9, 0x6fe, 0x9], 0x1, 0x400, 0xfffffff8}) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) 211.275619ms ago: executing program 4 (id=877): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400fc23000008001b0000000000a1ec2b7c0a84c97a5246ba38486e5bca12bf2ba43dc48e1d4196240a522d6bef0c87ef210e0084f5fb6d657104db850e2d18a9a9ec5ad79e18ef133d9abb034b9401e585baf5e449fc49707ba264f4489fa1372db7c23a9d78502ae2561f0710bf2fecedc44edf4dd48d41a655649038f8d50531"], 0x30}, 0x1, 0x0, 0x0, 0xffc3}, 0x0) keyctl$session_to_parent(0x12) 210.602394ms ago: executing program 4 (id=878): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0xf}, 0x94) 209.845752ms ago: executing program 1 (id=879): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xe0, "2756cb1cc87abb9f75de78d2a771fe25a5abe03993f9def9bc464062afb53a71d950b0f48e3d3be3a9f3e34f2d6040bcf0756c1caa92d584e73c7ddad916e36adb63f5a72524ea43be6c5fb9f698a8b82ed4ee6c8d7a9137b5bd292883350796bd0f7aa1c0f67fb0d93df2649af1ca087d33b86b6a558999d6bc3a8b4eb53ff340195b7b4859bd741793fbf91cf4d60aa15204a51ca1369c5e6de31ffd657130c4c92111b94d773548b7b79acb64b5cd11497e4788eec9df6dcd58266c68ef58c944decadc88e64c5327b0e5c0b573e7def8252ba8c2212aa259fe29d9f47da9"}, &(0x7f0000000180)=0xe8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x929, 0x8, 0x2}, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000200)={0x8, 0x6}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x541, 0x0) write$binfmt_aout(r3, &(0x7f0000000280)={{0x108, 0x4, 0xc, 0x3bb, 0x31f, 0x5a820f1a, 0x33b}, "1dc557bbd49870dfeb12261723ce9c4bcabdc4da6883a45eb4a677e6023a8fe8f719f1227e59928ed8a80c558f407b7e714f409c7d5efaacf904f6581e6ca2f92d09cda6468fc87ae0962752105078d30d14d7e3b16e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x876) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0xb, "d6954bdc71c742b039d428002753b51b93843ffe3c33af57d034b15c1ceb62c3", 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x424b, 0x5, 0x7956, 0x2d, 0x2, 0x7, 0x3cf39545, 0x0, 0x0, 0x9, 0x7fffffff, 0x8000000000000000, 0xad, 0x400, 0xbbce]}, &(0x7f0000000c40)=0x100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000cc0)={&(0x7f0000000c80)=[{0x2, 0x0, 0x7fffffffffffffff, 0x1, 0x20b, 0x3, 0x5, 0x97}], 0x1}) sendfile(r3, r1, &(0x7f0000000d00)=0x4, 0xffff) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d80), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000e80)={&(0x7f0000000d40), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x964, 0x1000, 0xef0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000ec0)={0xa68, 0x7}) bpf$ITER_CREATE(0x21, &(0x7f0000000f00)={r3}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000f40)='net/mcfilter\x00') ioctl$FIBMAP(r6, 0x1, &(0x7f0000000f80)=0x8000) r7 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x9, 0x4204) r8 = pidfd_getfd(r7, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001000)={r2, @in={{0x2, 0x4e23, @broadcast}}, [0x3, 0x0, 0x56, 0x4, 0x7, 0x5, 0x6, 0x1, 0xffff, 0x8, 0x9, 0x1, 0x1ff, 0x7, 0x1]}, &(0x7f0000001100)=0x100) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000001140)={0xa000, 0x4000}) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000001180)=0x2) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x0) r10 = dup(r9) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r11, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) ioctl$SOUND_MIXER_READ_RECSRC(r10, 0x80044dff, &(0x7f0000001340)) 132.147619ms ago: executing program 4 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r1, 0x303, 0x4, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r4, r2, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r1, 0x303, 0x4, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) (async) socket(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00'}) (async) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) dup3(r4, r2, 0x80000) (async) 131.850146ms ago: executing program 1 (id=881): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}]}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00000000000000000003", [0x100000000, 0x82]}}) 131.56553ms ago: executing program 0 (id=882): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000300)={{r0, &(0x7f0000000040)='\x00', 0x0, &(0x7f0000000080)={@_ha_fsid={[0x8, 0xc54]}, {0x2, 0x991c, 0x0, 0x7}}, 0x9126, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, 0x1, &(0x7f00000002c0)=[{0x2, 0x4d, &(0x7f0000000140), &(0x7f0000000200)="825bcdb8e168c4b416978ab9f4f59a79db7b3dbbcffbd7757f4bc981bd1f24c59b039cb2e76dd8405a401cb471011419b477e7c725e38448ac541dd77b4affe5dba582af0d2c14dab38233e2d186d9beb8d0dad226aff32449612a2c2761996a5a8d5a4e2c514d075d5d9419e5000cff50175d9d3b7e15a236a809a1100d2a5763f5226c461f22a8ec02c83aa486d4f24fe8864123d962fbdf1224627cb4f00ae97a83b4dc7feba7856c00830fc23536d738", 0xb2}]}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0x5e, @loopback, 0x4e20, 0x3, 'sed\x00', 0x0, 0x7, 0x24}, {@multicast2, 0x4e24, 0x1, 0xc0ee, 0x0, 0x8001}}, 0x44) 131.22129ms ago: executing program 1 (id=883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x7}], 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60041, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendto$inet6(r4, &(0x7f0000000300), 0x1e, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='gfs2\x00', 0x8080, &(0x7f00000001c0)='discard') (async) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be02902bff060000000000000000000000000008aaff020000000000000000000000000001", @ANYRES16], 0xfdef) 81.98704ms ago: executing program 0 (id=884): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 81.791008ms ago: executing program 4 (id=885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a40000000010800054000007e2232136fc89692002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a300000000008000340000000000800044000000001140000001100010000000000000000000200000a", @ANYBLOB="864c9bbf3bd7567372bd8981f1d1eecec8174cf88de92b625718b99d3fec93576efdbb373635bb4fbadfb62a9954d12302", @ANYRES16=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2], 0x118}}, 0x0) 81.41235ms ago: executing program 0 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='vivid.0\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='vimc.0\x00', 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x53, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10d41, 0x1035}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000800001c00128009000100626f6e64000000000c0002800809090003001d00"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x400000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f00000001c0)={r0}) 198.024µs ago: executing program 4 (id=887): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400fc23000008001b0000000000a1ec2b7c0a84c97a5246ba38486e5bca12bf2ba43dc48e1d4196240a522d6bef0c87ef210e0084f5fb6d657104db850e2d18a9a9ec5ad79e18ef133d9abb034b9401e585baf5e449fc49707ba264f4489fa1372db7c23a9d78502ae2561f0710bf2fecedc44edf4dd48d41a655649038f8d50531"], 0x30}, 0x1, 0x0, 0x0, 0xfffd}, 0x0) keyctl$session_to_parent(0x12) 0s ago: executing program 1 (id=888): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x5d) 0s ago: executing program 4 (id=889): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) kernel console output (not intermixed with test programs): acvtap: left promiscuous mode [ 53.229034][ T5853] veth0_macvtap: left promiscuous mode [ 53.231479][ T5853] veth1_vlan: left promiscuous mode [ 53.233238][ T5853] veth0_vlan: left promiscuous mode [ 53.382590][ T5853] team0 (unregistering): Port device team_slave_1 removed [ 53.390599][ T5853] team0 (unregistering): Port device team_slave_0 removed [ 53.442545][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 53.566258][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 53.569384][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 53.571879][ T64] Bluetooth: hci2: hardware error 0x00 [ 54.435648][ T5745] Bluetooth: hci0: command tx timeout [ 54.436514][ T5096] Bluetooth: hci3: command tx timeout [ 55.635567][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 58.540684][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 58.540701][ T42] audit: type=1400 audit(1785545407.906:266): avc: denied { write } for pid=6049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.597750][ T42] audit: type=1400 audit(1785545407.966:267): avc: denied { write } for pid=6052 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.769992][ T42] audit: type=1400 audit(1785545409.136:268): avc: denied { create } for pid=6065 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.776306][ T42] audit: type=1400 audit(1785545409.146:269): avc: denied { setopt } for pid=6065 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.798193][ T42] audit: type=1400 audit(1785545409.166:270): avc: denied { mounton } for pid=6065 comm="syz.3.14" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 59.824546][ T42] audit: type=1400 audit(1785545409.186:271): avc: denied { ioctl } for pid=6070 comm="syz.1.15" path="socket:[9995]" dev="sockfs" ino=9995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.834764][ T6071] tipc: Started in network mode [ 59.834778][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.838525][ T6071] tipc: Node identity ac14140f, cluster identity 4711 [ 59.840464][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.841523][ T6071] tipc: New replicast peer: 172.30.0.2 [ 59.844026][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.844819][ T6071] tipc: Enabled bearer , priority 10 [ 59.851211][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.855011][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.855679][ T42] audit: type=1400 audit(1785545409.226:272): avc: denied { create } for pid=6070 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.864467][ T42] audit: type=1400 audit(1785545409.226:273): avc: denied { write } for pid=6070 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.872273][ T42] audit: type=1400 audit(1785545409.226:274): avc: denied { nlmsg_write } for pid=6070 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.893262][ T42] audit: type=1400 audit(1785545409.256:275): avc: denied { sys_module } for pid=6072 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.984717][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 60.082334][ T6105] fuse: Bad value for 'user_id' [ 60.083941][ T6105] fuse: Bad value for 'user_id' [ 60.311359][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.314453][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.317681][ T6072] bridge_slave_0: entered allmulticast mode [ 60.321470][ T6072] bridge_slave_0: entered promiscuous mode [ 60.326090][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.329328][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.332387][ T6072] bridge_slave_1: entered allmulticast mode [ 60.336960][ T6072] bridge_slave_1: entered promiscuous mode [ 60.365184][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.373574][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.388335][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.391849][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.419060][ T6072] team0: Port device team_slave_0 added [ 60.424652][ T6072] team0: Port device team_slave_1 added [ 60.444953][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.447334][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.456023][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.461513][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.464262][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.472401][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.494716][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 60.494986][ T6072] hsr_slave_0: entered promiscuous mode [ 60.500971][ T6072] hsr_slave_1: entered promiscuous mode [ 60.502934][ T6072] debugfs: 'hsr0' already exists in 'hsr' [ 60.504764][ T6072] Cannot create hsr debugfs directory [ 60.560757][ T6144] capability: warning: `syz.0.35' uses 32-bit capabilities (legacy support in use) [ 60.621818][ T6148] ======================================================= [ 60.621818][ T6148] WARNING: The mand mount option has been deprecated and [ 60.621818][ T6148] and is ignored by this kernel. Remove the mand [ 60.621818][ T6148] option from the mount to silence this warning. [ 60.621818][ T6148] ======================================================= [ 60.665797][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 60.667916][ T6152] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 60.686799][ T6148] kvm: kvm [6142]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000074) [ 60.727746][ T6156] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 60.846893][ T5822] tipc: Node number set to 2886997007 [ 60.901016][ T6173] netlink: 'syz.1.38': attribute type 4 has an invalid length. [ 60.908457][ T6173] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 60.957359][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 60.964130][ T5822] IPVS: starting estimator thread 0... [ 61.055594][ T6177] IPVS: using max 44 ests per chain, 105600 per kthread [ 61.065703][ T6072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.074742][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.080985][ T6072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.087760][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.091445][ T6072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.098592][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.102322][ T6072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.109226][ T6072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.167842][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.179443][ T6072] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.193125][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.195733][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.200321][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.203249][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.312557][ T6208] 9pnet_virtio: no channels available for device syz [ 61.549506][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.602888][ T6072] veth0_vlan: entered promiscuous mode [ 61.610559][ T6072] veth1_vlan: entered promiscuous mode [ 61.627285][ T6072] veth0_macvtap: entered promiscuous mode [ 61.632682][ T6072] veth1_macvtap: entered promiscuous mode [ 61.640558][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.648349][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.709539][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.715487][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.726386][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.730991][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.733833][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.752248][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.754778][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.756301][ T5549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.775615][ T1355] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.779326][ T6245] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 61.876556][ T64] Bluetooth: hci1: command tx timeout [ 61.891417][ T6245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6245 comm=syz.3.48 [ 61.945631][ T1355] usb 6-1: Using ep0 maxpacket: 8 [ 61.949455][ T1355] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 61.952410][ T1355] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.956263][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.959881][ T1355] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.963534][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.967277][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.971558][ T1355] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.975817][ T1355] usb 6-1: config 168 interface 0 has no altsetting 0 [ 61.978996][ T1355] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 61.981468][ T1355] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.984861][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.989760][ T1355] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.993509][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.997067][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.000667][ T1355] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 62.004654][ T1355] usb 6-1: config 168 interface 0 has no altsetting 0 [ 62.010417][ T1355] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 62.015502][ T1355] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 62.019200][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.022633][ T1355] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.027086][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 62.031140][ T1355] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.034952][ T1355] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 62.040115][ T1355] usb 6-1: config 168 interface 0 has no altsetting 0 [ 62.048621][ T1355] usb 6-1: string descriptor 0 read error: -22 [ 62.050620][ T1355] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.053502][ T1355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.071175][ T1355] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 62.102771][ T6263] tipc: Started in network mode [ 62.104453][ T6263] tipc: Node identity e6376f6bd8a2, cluster identity 4711 [ 62.108871][ T6263] tipc: Enabled bearer , priority 0 [ 62.112265][ T6263] syzkaller0: MTU too low for tipc bearer [ 62.114326][ T6263] tipc: Disabling bearer [ 62.165728][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.297922][ T6280] fuse: Unknown parameter 'FnLSx0x0000000000000007' [ 62.297945][ T6279] fuse: Unknown parameter 'FnLSx0x0000000000000007' [ 62.319476][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.323518][ T50] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 62.327225][ T50] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 62.331093][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.340126][ T50] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 62.348044][ T50] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 62.425115][ T6287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.717048][ T6258] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 62.721383][ T6258] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 62.728631][ T6258] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 62.846082][ T6293] process 'syz.0.51' launched './file0' with NULL argv: empty string added [ 62.907809][ T6258] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 62.918107][ T50] usb 5-1: USB disconnect, device number 2 [ 62.952765][ T50] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 62.956927][ T50] spcp8x5 5-1:1.0: device disconnected [ 63.522835][ T6311] netlink: 'syz.2.67': attribute type 25 has an invalid length. [ 63.563752][ T42] kauditd_printk_skb: 118 callbacks suppressed [ 63.563764][ T42] audit: type=1804 audit(1785545412.926:394): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.70" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=66 res=1 errno=0 [ 63.573921][ T42] audit: type=1800 audit(1785545412.926:395): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.70" name="cgroup.controllers" dev="tmpfs" ino=66 res=0 errno=0 [ 63.645813][ T42] audit: type=1400 audit(1785545413.016:396): avc: denied { create } for pid=6322 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.651809][ T42] audit: type=1400 audit(1785545413.016:397): avc: denied { setopt } for pid=6322 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.659469][ T6323] syzkaller0: entered promiscuous mode [ 63.661818][ T6323] syzkaller0: entered allmulticast mode [ 63.666614][ T42] audit: type=1400 audit(1785545413.036:398): avc: denied { ioctl } for pid=6322 comm="syz.2.73" path="socket:[13443]" dev="sockfs" ino=13443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.677550][ T42] audit: type=1400 audit(1785545413.036:399): avc: denied { relabelfrom } for pid=6322 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.684696][ T42] audit: type=1400 audit(1785545413.036:400): avc: denied { relabelto } for pid=6322 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.800835][ T42] audit: type=1400 audit(1785545413.166:401): avc: denied { create } for pid=6328 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.815551][ T42] audit: type=1400 audit(1785545413.166:402): avc: denied { bind } for pid=6328 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.822754][ T42] audit: type=1400 audit(1785545413.166:403): avc: denied { write } for pid=6328 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.830352][ T6334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6334 comm=syz.3.76 [ 63.835628][ T6334] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 63.837958][ T6334] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.76'. [ 63.841622][ T6334] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 63.844719][ T6334] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.76'. [ 63.948978][ T6340] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 63.966570][ T64] Bluetooth: hci1: command tx timeout [ 64.356269][ T5822] usb 6-1: USB disconnect, device number 3 [ 65.034431][ T6373] capability: warning: `syz.1.90' uses deprecated v2 capabilities in a way that may be insecure [ 65.040795][ T6373] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 65.046156][ T6373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.050053][ T6373] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 65.055695][ T6373] binder_alloc: 6372: binder_alloc_buf size -16 failed, no address space [ 65.059497][ T6373] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 65.113747][ T6379] overlay: ./file0 is not a directory [ 65.138987][ T6381] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 65.145798][ T6002] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.688334][ T6418] cgroup: No subsys list or none specified [ 66.015847][ T6449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.116'. [ 66.035564][ T5096] Bluetooth: hci1: command tx timeout [ 66.137829][ T6463] 9pnet_virtio: no channels available for device syz [ 66.536047][ T6499] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 66.538797][ T6499] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.123'. [ 66.755347][ T6513] kvm: pic: non byte write [ 66.762452][ T6513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'. [ 66.912381][ T6528] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 66.924328][ T6528] CIFS mount error: No usable UNC path provided in device string! [ 66.924328][ T6528] [ 66.929148][ T6528] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 67.156634][ T5096] Bluetooth: hci4: command 0x1003 tx timeout [ 67.160076][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.125742][ T64] Bluetooth: hci1: command tx timeout [ 68.217428][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.220993][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.224457][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.228418][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.231293][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.408780][ T5549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.462461][ T6576] IPv6: sit1: Disabled Multicast RS [ 68.465761][ T6576] sit1: entered allmulticast mode [ 68.496950][ T5549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.540962][ T6578] netlink: 'syz.2.150': attribute type 2 has an invalid length. [ 68.543975][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.150'. [ 68.556255][ T6578] : entered promiscuous mode [ 68.621404][ T5549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.750779][ T5549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.826239][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.828957][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.831934][ T6561] bridge_slave_0: entered allmulticast mode [ 68.834738][ T6561] bridge_slave_0: entered promiscuous mode [ 68.846670][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.849071][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.851419][ T6561] bridge_slave_1: entered allmulticast mode [ 68.854220][ T6561] bridge_slave_1: entered promiscuous mode [ 68.879044][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.883651][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.952203][ T6561] team0: Port device team_slave_0 added [ 68.957155][ T6561] team0: Port device team_slave_1 added [ 68.957564][ T42] kauditd_printk_skb: 285 callbacks suppressed [ 68.957573][ T42] audit: type=1400 audit(1785545418.326:689): avc: denied { ioctl } for pid=6616 comm="syz.1.161" path="socket:[14422]" dev="sockfs" ino=14422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.001038][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.003696][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.013213][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.028485][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.030935][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.041538][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.055778][ T5549] bridge_slave_1: left allmulticast mode [ 69.057788][ T5549] bridge_slave_1: left promiscuous mode [ 69.060180][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.064372][ T5549] bridge_slave_0: left allmulticast mode [ 69.066347][ T5549] bridge_slave_0: left promiscuous mode [ 69.068364][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.148383][ T5549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.153618][ T5549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.162271][ T5549] bond0 (unregistering): Released all slaves [ 69.215052][ T6561] hsr_slave_0: entered promiscuous mode [ 69.218727][ T6561] hsr_slave_1: entered promiscuous mode [ 69.220938][ T6561] debugfs: 'hsr0' already exists in 'hsr' [ 69.222774][ T6561] Cannot create hsr debugfs directory [ 69.349339][ T42] audit: type=1400 audit(1785545418.716:690): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.402957][ T42] audit: type=1400 audit(1785545418.766:691): avc: denied { write } for pid=6629 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.429816][ T6561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.433770][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.436664][ T6561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.441195][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.444460][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 69.451059][ T6561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.455020][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.458698][ T6561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.462384][ T6561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.513913][ T5549] hsr_slave_0: left promiscuous mode [ 69.516638][ T5549] hsr_slave_1: left promiscuous mode [ 69.518679][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.524099][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.529182][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.530174][ T42] audit: type=1400 audit(1785545418.896:692): avc: denied { write } for pid=6638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.531585][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.556871][ T5549] veth1_macvtap: left promiscuous mode [ 69.559883][ T5549] veth0_macvtap: left promiscuous mode [ 69.562287][ T5549] veth1_vlan: left promiscuous mode [ 69.564507][ T5549] veth0_vlan: left promiscuous mode [ 69.576214][ T42] audit: type=1400 audit(1785545418.946:693): avc: denied { write } for pid=6643 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.595564][ T42] audit: type=1400 audit(1785545418.956:694): avc: denied { create } for pid=6644 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.604065][ T42] audit: type=1400 audit(1785545418.956:695): avc: denied { bind } for pid=6644 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.665308][ T6655] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 69.715982][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 69.723181][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 69.814538][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.818716][ T6659] tipc: New replicast peer: 127.0.0.1 [ 69.821671][ T6659] tipc: Enabled bearer , priority 10 [ 69.848721][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.856757][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.874491][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.877371][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.884825][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.887516][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.909245][ T42] audit: type=1400 audit(1785545419.266:696): avc: denied { write } for pid=6663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.911654][ T6561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.949934][ T42] audit: type=1400 audit(1785545419.316:697): avc: denied { write } for pid=6667 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.986543][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.058741][ T42] audit: type=1400 audit(1785545419.426:698): avc: denied { write } for pid=6674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.135761][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.147800][ T5549] IPVS: stop unused estimator thread 0... [ 70.162439][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.276485][ T64] Bluetooth: hci2: command tx timeout [ 70.296012][ T6561] veth0_vlan: entered promiscuous mode [ 70.311369][ T6561] veth1_vlan: entered promiscuous mode [ 70.346937][ T6561] veth0_macvtap: entered promiscuous mode [ 70.357336][ T6561] veth1_macvtap: entered promiscuous mode [ 70.370389][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.380607][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.435274][ T6717] syz.2.176 uses obsolete (PF_INET,SOCK_PACKET) [ 70.439686][ T6717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6717 comm=syz.2.176 [ 70.474560][ T5995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.480100][ T5995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.485541][ T5549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.490754][ T5549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.494302][ T5549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.537231][ T5549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.539245][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.543346][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.564890][ T6732] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.570555][ T6732] SELinux: failed to load policy [ 70.619012][ T6745] loop0: detected capacity change from 0 to 2640 [ 70.622426][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.624882][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.627747][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.630736][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.633124][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.636128][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.638609][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.641278][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.643755][ T6745] ldm_validate_partition_table(): Disk read failed. [ 70.646555][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.649628][ T6745] Buffer I/O error on dev loop0, logical block 0, async page read [ 70.652334][ T6745] Dev loop0: unable to read RDB block 0 [ 70.654733][ T6745] loop0: unable to read partition table [ 70.657456][ T6745] loop_reread_partitions: partition scan of loop0 (3 ) failed (rc=-5) [ 70.829377][ T6770] 9p: Bad value for 'version' [ 70.915827][ T6779] hugetlbfs: Bad value 'x' for mount option 'size' [ 70.915827][ T6779] [ 71.051800][ T6792] bond1: Removing last arp target with arp_interval on [ 71.091046][ T6799] 9p: Bad value for 'version' [ 71.292549][ T6811] netlink: 868 bytes leftover after parsing attributes in process `syz.4.209'. [ 71.399765][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.403018][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.438217][ T6823] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 71.557800][ T5849] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.666864][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 71.675710][ T1494] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 71.706092][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 71.709207][ T5849] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 71.712177][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.719313][ T5849] usb 5-1: config 0 descriptor?? [ 71.725008][ T5849] as10x_usb: device has been detected [ 71.727590][ T5849] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 71.740546][ T5849] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 71.752002][ T5849] as10x_usb: error during firmware upload part1 [ 71.754413][ T5849] Registered device nBox DVB-T Dongle [ 71.827329][ T1494] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid maxpacket 48091, setting to 64 [ 71.832569][ T1494] usb 9-1: config 0 interface 0 has no altsetting 0 [ 71.836712][ T1494] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.839659][ T1494] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.842182][ T1494] usb 9-1: Product: syz [ 71.843501][ T1494] usb 9-1: Manufacturer: syz [ 71.844965][ T1494] usb 9-1: SerialNumber: syz [ 71.849514][ T1494] usb 9-1: config 0 descriptor?? [ 71.915642][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.926377][ T5849] usb 5-1: USB disconnect, device number 3 [ 71.940367][ T5849] Unregistered device nBox DVB-T Dongle [ 71.941892][ T5849] as10x_usb: device has been disconnected [ 72.065411][ T1494] usb 9-1: selecting invalid altsetting 0 [ 72.065559][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 72.071294][ T5822] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 72.078709][ T5822] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 72.081674][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 72.084424][ T5822] usb 6-1: Product: syz [ 72.086484][ T5822] usb 6-1: Manufacturer: syz [ 72.088075][ T5822] usb 6-1: SerialNumber: syz [ 72.091375][ T5822] usb 6-1: config 0 descriptor?? [ 72.097093][ T6827] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 72.100429][ T5822] hub 6-1:0.0: bad descriptor, ignoring hub [ 72.101553][ T1494] usb 9-1: USB disconnect, device number 2 [ 72.105508][ T5822] hub 6-1:0.0: probe with driver hub failed with error -5 [ 72.151649][ T6831] udevd[6831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.278608][ T6834] 9p: Bad value for 'version' [ 72.308181][ T64] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 72.311177][ T64] Bluetooth: Wrong link type (-22) [ 72.355647][ T64] Bluetooth: hci2: command tx timeout [ 72.734123][ T6860] netlink: 'syz.4.224': attribute type 7 has an invalid length. [ 72.736940][ T6860] netlink: 'syz.4.224': attribute type 7 has an invalid length. [ 72.770735][ T6863] 9p: Bad value for 'version' [ 72.775388][ T6857] geneve2: entered promiscuous mode [ 72.777795][ T6857] geneve2: entered allmulticast mode [ 72.791762][ T6854] geneve2: entered promiscuous mode [ 72.793556][ T6854] geneve2: entered allmulticast mode [ 72.828898][ T6865] Bluetooth: MGMT ver 1.23 [ 73.099636][ T6001] raw-gadget.2 gadget.1: failed to queue suspend event [ 73.162648][ T6839] raw-gadget.2 gadget.1: failed to queue disconnect event [ 73.654925][ T6879] geneve2: entered promiscuous mode [ 73.656815][ T6879] geneve2: entered allmulticast mode [ 73.828636][ T6887] 9p: Bad value for 'version' [ 73.853435][ T6889] vivid-004: ================= START STATUS ================= [ 73.856590][ T6889] vivid-004: RDS Tx I/O Mode: Controls [ 73.860803][ T6889] vivid-004: RDS Program ID: 32904 [ 73.863098][ T6889] vivid-004: RDS Program Type: 3 [ 73.865078][ T6889] vivid-004: RDS PS Name: VIVID-TX [ 73.867650][ T6889] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 73.871458][ T6889] vivid-004: RDS Stereo: true [ 73.873247][ T6889] vivid-004: RDS Artificial Head: false [ 73.875029][ T6889] vivid-004: RDS Compressed: false [ 73.878738][ T6889] vivid-004: RDS Dynamic PTY: false [ 73.880432][ T6889] vivid-004: RDS Traffic Announcement: false [ 73.882357][ T6889] vivid-004: RDS Traffic Program: true [ 73.884473][ T6889] vivid-004: RDS Music: true [ 73.886934][ T6889] vivid-004: ================== END STATUS ================== [ 73.944546][ T6892] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.949521][ T6892] block device autoloading is deprecated and will be removed. [ 74.017958][ T6891] md: superblock version 12389 not known [ 74.020662][ T6891] md: couldn't set array info. -22 [ 74.058011][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 74.058022][ T42] audit: type=1400 audit(1785545423.426:741): avc: denied { connect } for pid=6900 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.066651][ T42] audit: type=1400 audit(1785545423.426:742): avc: denied { create } for pid=6897 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 74.099246][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.103010][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.107089][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.110574][ T42] audit: type=1400 audit(1785545423.476:743): avc: denied { write } for pid=6900 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.118261][ T42] audit: type=1400 audit(1785545423.476:744): avc: denied { ioctl } for pid=6900 comm="syz.0.240" path="socket:[16544]" dev="sockfs" ino=16544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.152208][ T42] audit: type=1400 audit(1785545423.516:745): avc: denied { mount } for pid=6909 comm="syz.0.242" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.212452][ T42] audit: type=1400 audit(1785545423.576:746): avc: denied { create } for pid=6909 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.220536][ T42] audit: type=1400 audit(1785545423.586:747): avc: denied { setopt } for pid=6909 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.221773][ T6554] vcan0 speed is unknown, defaulting to 1000 [ 74.228286][ T42] audit: type=1400 audit(1785545423.586:748): avc: denied { write } for pid=6909 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.231863][ T6904] infiniband syz1: set active [ 74.237116][ T42] audit: type=1400 audit(1785545423.586:749): avc: denied { read } for pid=6909 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.239061][ T6904] infiniband syz1: added vcan0 [ 74.253401][ T6904] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 74.258418][ T6904] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 74.263749][ T6904] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 74.269570][ T42] audit: type=1400 audit(1785545423.636:750): avc: denied { create } for pid=6909 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.278304][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 74.281813][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.242'. [ 74.290522][ T6904] RDS/IB: syz1: added [ 74.292832][ T6904] smc: adding ib device syz1 with port count 1 [ 74.295354][ T6904] smc: ib device syz1 port 1 has no pnetid [ 74.298683][ T6554] vcan0 speed is unknown, defaulting to 1000 [ 74.306407][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.393239][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.445749][ T64] Bluetooth: hci2: command tx timeout [ 74.488049][ T6918] 9p: Bad value for 'version' [ 74.496528][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.639299][ T6904] vcan0 speed is unknown, defaulting to 1000 [ 74.688394][ T6933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.250'. [ 74.693899][ T6933] fuse: Bad value for 'fd' [ 74.749818][ T6940] ptrace attach of "/syz-executor exec"[5737] was attempted by ""[6940] [ 74.779232][ T6944] 9p: Bad value for 'version' [ 74.873514][ T6951] netlink: 156 bytes leftover after parsing attributes in process `syz.0.256'. [ 74.877341][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 75.011281][ T6961] ip_tables: iptables: counters copy to user failed while replacing table [ 75.025598][ T6964] dns_resolver: Unsupported content type (234) [ 75.098899][ T6971] 9p: Bad value for 'version' [ 75.164126][ T6974] vcan0 speed is unknown, defaulting to 1000 [ 75.185653][ T5822] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.338265][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 75.342504][ T5822] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 75.349048][ T5822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 75.353506][ T5822] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 75.356808][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.359360][ T5822] usb 5-1: Product: syz [ 75.360694][ T5822] usb 5-1: Manufacturer: syz [ 75.362206][ T5822] usb 5-1: SerialNumber: syz [ 75.415412][ T6997] 9p: Bad value for 'version' [ 75.681875][ T7019] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 75.722771][ T7021] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 75.725279][ T7021] netlink: 224 bytes leftover after parsing attributes in process `syz.2.281'. [ 76.095091][ T7030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 76.100944][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 76.104159][ T7030] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 76.161468][ T7031] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 76.339019][ T1494] vcan0 speed is unknown, defaulting to 1000 [ 76.428284][ T56] usb 6-1: USB disconnect, device number 4 [ 76.516595][ T64] Bluetooth: hci2: command tx timeout [ 76.526602][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.531217][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.552353][ T7047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.753894][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 76.827230][ T7056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.295'. [ 76.845591][ T56] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.985527][ T56] usb 6-1: device descriptor read/64, error -71 [ 77.098293][ T5533] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 77.212312][ T7068] tipc: Enabling of bearer rejected, failed to enable media [ 77.225604][ T56] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.245789][ T5533] usb 9-1: Using ep0 maxpacket: 32 [ 77.250286][ T5533] usb 9-1: config index 0 descriptor too short (expected 15270, got 18) [ 77.256981][ T5533] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 77.260688][ T5533] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.264881][ T5533] usb 9-1: Product: syz [ 77.266702][ T5533] usb 9-1: Manufacturer: syz [ 77.268882][ T5533] usb 9-1: SerialNumber: syz [ 77.279471][ T5533] usb 9-1: config 0 descriptor?? [ 77.287399][ T5533] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 77.290844][ T5533] dvb-usb: bulk message failed: -22 (4/0) [ 77.293356][ T5533] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.297640][ T5533] dvb-usb: bulk message failed: -22 (5/0) [ 77.301205][ T5533] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.314596][ T5533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.341363][ T5533] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 77.345072][ T5533] usb 9-1: media controller created [ 77.361368][ T5533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.375532][ T56] usb 6-1: device descriptor read/64, error -71 [ 77.377211][ T5533] usb 9-1: selecting invalid altsetting 3 [ 77.380026][ T5533] ttusb2: set interface to alts=3 failed [ 77.410667][ T5533] DVB: Unable to find symbol tda10086_attach() [ 77.412706][ T5533] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 77.428315][ T5533] dvb-usb: bulk message failed: -22 (4/0) [ 77.430172][ T5533] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.437253][ T5533] dvb-usb: bulk message failed: -22 (5/0) [ 77.439175][ T5533] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.442490][ T5533] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 77.486025][ T56] usb usb6-port1: attempt power cycle [ 77.488379][ T7058] dvb-usb: bulk message failed: -22 (7/0) [ 77.492382][ T7058] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 77.495808][ T7058] ttusb2: i2c transfer failed. [ 77.504574][ T5849] usb 9-1: USB disconnect, device number 3 [ 77.536721][ T5849] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 77.699619][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 77.703924][ T7092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7092 comm=syz.2.306 [ 77.825570][ T56] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.844855][ T5822] usbhid 5-1:1.0: can't add hid device: -71 [ 77.847070][ T5822] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 77.857888][ T5822] usb 5-1: USB disconnect, device number 4 [ 77.858463][ T56] usb 6-1: device descriptor read/8, error -71 [ 77.867778][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 77.891303][ T7098] binder: BINDER_SET_CONTEXT_MGR already set [ 77.894842][ T7098] binder: 7097:7098 ioctl 4018620d 200000004a80 returned -16 [ 77.894889][ T7099] binder: 7097:7099 ioctl c0306201 2000000004c0 returned -22 [ 77.906152][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 77.970156][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 77.973022][ T7107] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 77.983276][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 78.046126][ T7110] Cache volume key already in use (9p,syz,) [ 78.105577][ T56] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 78.136572][ T56] usb 6-1: device descriptor read/8, error -71 [ 78.156321][ T7112] FAULT_INJECTION: forcing a failure. [ 78.156321][ T7112] name failslab, interval 1, probability 0, space 0, times 1 [ 78.160203][ T7112] CPU: 3 UID: 0 PID: 7112 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT(full) [ 78.160217][ T7112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.160223][ T7112] Call Trace: [ 78.160237][ T7112] [ 78.160241][ T7112] dump_stack_lvl+0x100/0x190 [ 78.160336][ T7112] should_fail_ex.cold+0x5/0xa [ 78.160356][ T7112] should_failslab+0xc2/0x120 [ 78.160386][ T7112] kmem_cache_alloc_noprof+0x91/0x6a0 [ 78.160401][ T7112] ? do_getname+0x35/0x390 [ 78.160456][ T7112] do_getname+0x35/0x390 [ 78.160483][ T7112] do_sys_openat2+0xc7/0x1e0 [ 78.160498][ T7112] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.160512][ T7112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.160573][ T7112] ? __fget_files+0x21f/0x3d0 [ 78.160588][ T7112] __x64_sys_openat+0x12d/0x210 [ 78.160601][ T7112] ? __pfx___x64_sys_openat+0x10/0x10 [ 78.160614][ T7112] ? ksys_write+0x1ac/0x250 [ 78.160635][ T7112] do_syscall_64+0x115/0x870 [ 78.160648][ T7112] ? clear_bhb_loop+0x40/0x90 [ 78.160661][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.160672][ T7112] RIP: 0033:0x7fb56739e019 [ 78.160681][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.160691][ T7112] RSP: 002b:00007fb568197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.160702][ T7112] RAX: ffffffffffffffda RBX: 00007fb567625fa0 RCX: 00007fb56739e019 [ 78.160708][ T7112] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 78.160714][ T7112] RBP: 00007fb568197090 R08: 0000000000000000 R09: 0000000000000000 [ 78.160720][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.160726][ T7112] R13: 00007fb567626038 R14: 00007fb567625fa0 R15: 00007ffd33846aa8 [ 78.160739][ T7112] [ 78.247055][ T56] usb usb6-port1: unable to enumerate USB device [ 78.547514][ T7135] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 78.550901][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.633507][ T7141] FAULT_INJECTION: forcing a failure. [ 78.633507][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.639392][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) [ 78.639414][ T7141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.639424][ T7141] Call Trace: [ 78.639431][ T7141] [ 78.639438][ T7141] dump_stack_lvl+0x100/0x190 [ 78.639468][ T7141] should_fail_ex.cold+0x5/0xa [ 78.639492][ T7141] strncpy_from_user+0x3b/0x2d0 [ 78.639567][ T7141] do_getname+0x78/0x390 [ 78.639595][ T7141] do_sys_openat2+0xc7/0x1e0 [ 78.639620][ T7141] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.639644][ T7141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.639670][ T7141] ? __fget_files+0x21f/0x3d0 [ 78.639695][ T7141] __x64_sys_openat+0x12d/0x210 [ 78.639717][ T7141] ? __pfx___x64_sys_openat+0x10/0x10 [ 78.639739][ T7141] ? ksys_write+0x1ac/0x250 [ 78.639773][ T7141] do_syscall_64+0x115/0x870 [ 78.639795][ T7141] ? clear_bhb_loop+0x40/0x90 [ 78.639817][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.639834][ T7141] RIP: 0033:0x7f081fd9e019 [ 78.639850][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.639866][ T7141] RSP: 002b:00007f0820c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.639884][ T7141] RAX: ffffffffffffffda RBX: 00007f0820025fa0 RCX: 00007f081fd9e019 [ 78.639896][ T7141] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 78.639913][ T7141] RBP: 00007f0820c07090 R08: 0000000000000000 R09: 0000000000000000 [ 78.639924][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.639934][ T7141] R13: 00007f0820026038 R14: 00007f0820025fa0 R15: 00007ffce69caac8 [ 78.639959][ T7141] [ 78.756051][ T7145] Cache volume key already in use (9p,syz,) [ 78.962870][ T7151] Cache volume key already in use (9p,syz,) [ 79.161077][ T7167] syzkaller0: entered promiscuous mode [ 79.163488][ T7167] syzkaller0: entered allmulticast mode [ 79.172852][ T7167] tipc: Started in network mode [ 79.175005][ T7167] tipc: Node identity 9ea3f714142e, cluster identity 4711 [ 79.178397][ T7167] tipc: Enabled bearer , priority 0 [ 79.179556][ T7168] FAULT_INJECTION: forcing a failure. [ 79.179556][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 79.180960][ T7167] 9pnet_virtio: no channels available for device syz [ 79.185873][ T7168] CPU: 3 UID: 0 PID: 7168 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) [ 79.185886][ T7168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.185893][ T7168] Call Trace: [ 79.185904][ T7168] [ 79.185908][ T7168] dump_stack_lvl+0x100/0x190 [ 79.185975][ T7168] should_fail_ex.cold+0x5/0xa [ 79.186013][ T7168] should_failslab+0xc2/0x120 [ 79.186038][ T7168] kmem_cache_alloc_noprof+0x91/0x6a0 [ 79.186052][ T7168] ? stack_trace_save+0x8e/0xc0 [ 79.186077][ T7168] ? alloc_empty_file+0x5b/0x1c0 [ 79.186095][ T7168] alloc_empty_file+0x5b/0x1c0 [ 79.186109][ T7168] path_openat+0xe7/0x4280 [ 79.186127][ T7168] ? __kasan_slab_alloc+0x89/0x90 [ 79.186141][ T7168] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 79.186153][ T7168] ? do_getname+0x35/0x390 [ 79.186166][ T7168] ? do_sys_openat2+0xc7/0x1e0 [ 79.186178][ T7168] ? __x64_sys_openat+0x12d/0x210 [ 79.186192][ T7168] ? do_syscall_64+0x115/0x870 [ 79.186234][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.186250][ T7168] ? __pfx_path_openat+0x10/0x10 [ 79.186264][ T7168] do_file_open+0x20e/0x430 [ 79.186277][ T7168] ? __pfx_do_file_open+0x10/0x10 [ 79.186297][ T7168] ? alloc_fd+0x471/0x7a0 [ 79.186310][ T7168] ? do_getname+0x191/0x390 [ 79.186325][ T7168] do_sys_openat2+0x10f/0x1e0 [ 79.186338][ T7168] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.186352][ T7168] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.186366][ T7168] ? __fget_files+0x21f/0x3d0 [ 79.186379][ T7168] __x64_sys_openat+0x12d/0x210 [ 79.186393][ T7168] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.186405][ T7168] ? ksys_write+0x1ac/0x250 [ 79.186426][ T7168] do_syscall_64+0x115/0x870 [ 79.186437][ T7168] ? clear_bhb_loop+0x40/0x90 [ 79.186450][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.186460][ T7168] RIP: 0033:0x7f081fd9e019 [ 79.186470][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.186480][ T7168] RSP: 002b:00007f0820c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.186490][ T7168] RAX: ffffffffffffffda RBX: 00007f0820025fa0 RCX: 00007f081fd9e019 [ 79.186497][ T7168] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 79.186503][ T7168] RBP: 00007f0820c07090 R08: 0000000000000000 R09: 0000000000000000 [ 79.186509][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.186514][ T7168] R13: 00007f0820026038 R14: 00007f0820025fa0 R15: 00007ffce69caac8 [ 79.186528][ T7168] [ 79.276008][ T7165] tipc: Resetting bearer [ 79.292959][ T7165] tipc: Disabling bearer [ 79.400647][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 79.462463][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 79.462474][ T42] audit: type=1400 audit(1785545428.826:789): avc: denied { read } for pid=7182 comm="syz.0.342" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 79.474629][ T42] audit: type=1400 audit(1785545428.836:790): avc: denied { open } for pid=7182 comm="syz.0.342" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 79.485417][ T42] audit: type=1400 audit(1785545428.836:791): avc: denied { ioctl } for pid=7182 comm="syz.0.342" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 79.558527][ T7196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7196 comm=syz.1.346 [ 79.566947][ T7194] FAULT_INJECTION: forcing a failure. [ 79.566947][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 79.570820][ T7194] CPU: 2 UID: 0 PID: 7194 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) [ 79.570833][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.570840][ T7194] Call Trace: [ 79.570851][ T7194] [ 79.570855][ T7194] dump_stack_lvl+0x100/0x190 [ 79.570920][ T7194] should_fail_ex.cold+0x5/0xa [ 79.570941][ T7194] should_failslab+0xc2/0x120 [ 79.570967][ T7194] kmem_cache_alloc_noprof+0x91/0x6a0 [ 79.570980][ T7194] ? trace_kmem_cache_alloc+0xdd/0x100 [ 79.570995][ T7194] ? security_file_alloc+0x34/0x2c0 [ 79.571036][ T7194] security_file_alloc+0x34/0x2c0 [ 79.571046][ T7194] init_file+0x95/0x480 [ 79.571060][ T7194] alloc_empty_file+0x79/0x1c0 [ 79.571074][ T7194] path_openat+0xe7/0x4280 [ 79.571090][ T7194] ? __kasan_slab_alloc+0x89/0x90 [ 79.571122][ T7194] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 79.571134][ T7194] ? do_getname+0x35/0x390 [ 79.571147][ T7194] ? do_sys_openat2+0xc7/0x1e0 [ 79.571159][ T7194] ? __x64_sys_openat+0x12d/0x210 [ 79.571172][ T7194] ? do_syscall_64+0x115/0x870 [ 79.571213][ T7194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.571229][ T7194] ? __pfx_path_openat+0x10/0x10 [ 79.571244][ T7194] do_file_open+0x20e/0x430 [ 79.571256][ T7194] ? __pfx_do_file_open+0x10/0x10 [ 79.571283][ T7194] ? alloc_fd+0x471/0x7a0 [ 79.571298][ T7194] ? do_getname+0x191/0x390 [ 79.571313][ T7194] do_sys_openat2+0x10f/0x1e0 [ 79.571326][ T7194] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.571340][ T7194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.571354][ T7194] ? __fget_files+0x21f/0x3d0 [ 79.571367][ T7194] __x64_sys_openat+0x12d/0x210 [ 79.571380][ T7194] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.571393][ T7194] ? ksys_write+0x1ac/0x250 [ 79.571414][ T7194] do_syscall_64+0x115/0x870 [ 79.571425][ T7194] ? clear_bhb_loop+0x40/0x90 [ 79.571438][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.571448][ T7194] RIP: 0033:0x7f081fd9e019 [ 79.571457][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.571467][ T7194] RSP: 002b:00007f0820c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.571477][ T7194] RAX: ffffffffffffffda RBX: 00007f0820025fa0 RCX: 00007f081fd9e019 [ 79.571484][ T7194] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 79.571490][ T7194] RBP: 00007f0820c07090 R08: 0000000000000000 R09: 0000000000000000 [ 79.571496][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.571502][ T7194] R13: 00007f0820026038 R14: 00007f0820025fa0 R15: 00007ffce69caac8 [ 79.571515][ T7194] [ 79.572017][ T7196] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 79.711256][ T7210] macvtap1: entered allmulticast mode [ 79.718640][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 79.723051][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 79.742084][ T7196] bond1: (slave bridge2): making interface the new active one [ 79.745939][ T7196] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 79.842198][ T7214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.868772][ T7226] loop5: detected capacity change from 0 to 2640 [ 79.874658][ T7226] buffer_io_error: 9 callbacks suppressed [ 79.874669][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.879413][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.882116][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.884702][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.887678][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.890298][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.894664][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.898588][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.901115][ T7226] ldm_validate_partition_table(): Disk read failed. [ 79.901189][ T6106] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.911035][ T7226] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.914823][ T7226] Dev loop5: unable to read RDB block 0 [ 79.917001][ T7226] loop5: unable to read partition table [ 79.919757][ T7226] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 80.038438][ T7246] FAULT_INJECTION: forcing a failure. [ 80.038438][ T7246] name failslab, interval 1, probability 0, space 0, times 0 [ 80.045367][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.4.361 Not tainted syzkaller #0 PREEMPT(full) [ 80.045390][ T7246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.045400][ T7246] Call Trace: [ 80.045407][ T7246] [ 80.045413][ T7246] dump_stack_lvl+0x100/0x190 [ 80.045459][ T7246] should_fail_ex.cold+0x5/0xa [ 80.045483][ T7246] should_failslab+0xc2/0x120 [ 80.045505][ T7246] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 80.045527][ T7246] ? __d_alloc+0x35/0xa50 [ 80.045554][ T7246] __d_alloc+0x35/0xa50 [ 80.045571][ T7246] ? __lock_acquire+0x49f/0x1a40 [ 80.045617][ T7246] d_alloc_parallel+0x105/0x14b0 [ 80.045651][ T7246] ? __pfx_d_alloc_parallel+0x10/0x10 [ 80.045675][ T7246] ? __d_lookup+0x25c/0x4a0 [ 80.045705][ T7246] ? __d_lookup+0x266/0x4a0 [ 80.045737][ T7246] path_openat+0x271c/0x4280 [ 80.045768][ T7246] ? __pfx_path_openat+0x10/0x10 [ 80.045792][ T7246] do_file_open+0x20e/0x430 [ 80.045812][ T7246] ? __pfx_do_file_open+0x10/0x10 [ 80.045855][ T7246] ? alloc_fd+0x471/0x7a0 [ 80.045876][ T7246] ? do_getname+0x191/0x390 [ 80.045901][ T7246] do_sys_openat2+0x10f/0x1e0 [ 80.045925][ T7246] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.045947][ T7246] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.045970][ T7246] ? __fget_files+0x21f/0x3d0 [ 80.045993][ T7246] __x64_sys_openat+0x12d/0x210 [ 80.046016][ T7246] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.046038][ T7246] ? ksys_write+0x1ac/0x250 [ 80.046074][ T7246] do_syscall_64+0x115/0x870 [ 80.046094][ T7246] ? clear_bhb_loop+0x40/0x90 [ 80.046115][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.046132][ T7246] RIP: 0033:0x7f081fd9e019 [ 80.046147][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.046163][ T7246] RSP: 002b:00007f0820c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.046180][ T7246] RAX: ffffffffffffffda RBX: 00007f0820025fa0 RCX: 00007f081fd9e019 [ 80.046191][ T7246] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 80.046202][ T7246] RBP: 00007f0820c07090 R08: 0000000000000000 R09: 0000000000000000 [ 80.046212][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.046222][ T7246] R13: 00007f0820026038 R14: 00007f0820025fa0 R15: 00007ffce69caac8 [ 80.046246][ T7246] [ 80.149628][ T7252] vcan0 speed is unknown, defaulting to 1000 [ 80.255677][ T1494] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.327187][ T7262] trusted_key: encrypted_key: insufficient parameters specified [ 80.353114][ T7261] XFS (nbd1): SB validate failed with error -5. [ 80.385575][ T1494] usb 7-1: device descriptor read/64, error -71 [ 80.450170][ T7281] FAULT_INJECTION: forcing a failure. [ 80.450170][ T7281] name failslab, interval 1, probability 0, space 0, times 0 [ 80.453994][ T7281] CPU: 2 UID: 0 PID: 7281 Comm: syz.4.373 Not tainted syzkaller #0 PREEMPT(full) [ 80.454009][ T7281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.454015][ T7281] Call Trace: [ 80.454019][ T7281] [ 80.454023][ T7281] dump_stack_lvl+0x100/0x190 [ 80.454043][ T7281] should_fail_ex.cold+0x5/0xa [ 80.454057][ T7281] should_failslab+0xc2/0x120 [ 80.454073][ T7281] __kmalloc_flags_noprof+0x122/0x8b0 [ 80.454092][ T7281] ? alloc_slab_obj_exts+0x5a/0x160 [ 80.454104][ T7281] alloc_slab_obj_exts+0x5a/0x160 [ 80.454115][ T7281] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 80.454136][ T7281] ? kasan_save_track+0x14/0x30 [ 80.454150][ T7281] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 80.454164][ T7281] ? __d_alloc+0x35/0xa50 [ 80.454179][ T7281] __d_alloc+0x35/0xa50 [ 80.454190][ T7281] ? __lock_acquire+0x49f/0x1a40 [ 80.454206][ T7281] d_alloc_parallel+0x105/0x14b0 [ 80.454227][ T7281] ? __pfx_d_alloc_parallel+0x10/0x10 [ 80.454243][ T7281] ? __d_lookup+0x25c/0x4a0 [ 80.454260][ T7281] ? __d_lookup+0x266/0x4a0 [ 80.454279][ T7281] path_openat+0x271c/0x4280 [ 80.454296][ T7281] ? __pfx_path_openat+0x10/0x10 [ 80.454311][ T7281] do_file_open+0x20e/0x430 [ 80.454323][ T7281] ? __pfx_do_file_open+0x10/0x10 [ 80.454344][ T7281] ? alloc_fd+0x471/0x7a0 [ 80.454357][ T7281] ? do_getname+0x191/0x390 [ 80.454371][ T7281] do_sys_openat2+0x10f/0x1e0 [ 80.454385][ T7281] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.454403][ T7281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.454418][ T7281] ? __fget_files+0x21f/0x3d0 [ 80.454431][ T7281] __x64_sys_openat+0x12d/0x210 [ 80.454445][ T7281] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.454458][ T7281] ? ksys_write+0x1ac/0x250 [ 80.454479][ T7281] do_syscall_64+0x115/0x870 [ 80.454491][ T7281] ? clear_bhb_loop+0x40/0x90 [ 80.454504][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.454515][ T7281] RIP: 0033:0x7f081fd9e019 [ 80.454525][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.454535][ T7281] RSP: 002b:00007f0820c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.454545][ T7281] RAX: ffffffffffffffda RBX: 00007f0820025fa0 RCX: 00007f081fd9e019 [ 80.454552][ T7281] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 80.454558][ T7281] RBP: 00007f0820c07090 R08: 0000000000000000 R09: 0000000000000000 [ 80.454564][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.454569][ T7281] R13: 00007f0820026038 R14: 00007f0820025fa0 R15: 00007ffce69caac8 [ 80.454583][ T7281] [ 80.572466][ T7286] Process accounting resumed [ 80.647922][ T1494] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.672816][ T42] audit: type=1400 audit(1785545430.036:792): avc: denied { accept } for pid=7301 comm="syz.0.381" lport=47521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.755357][ T7315] netlink: 'syz.4.376': attribute type 3 has an invalid length. [ 80.758009][ T7315] netlink: 'syz.4.376': attribute type 6 has an invalid length. [ 80.765554][ T42] audit: type=1400 audit(1785545430.126:793): avc: denied { getattr } for pid=7311 comm="syz.0.384" name="/" dev="9p" ino=78395227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.789316][ T1494] usb 7-1: device descriptor read/64, error -71 [ 80.793402][ T7319] qnx4: no qnx4 filesystem (no root dir). [ 80.797013][ T42] audit: type=1400 audit(1785545430.166:794): avc: denied { write } for pid=7318 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.816358][ T42] audit: type=1400 audit(1785545430.186:795): avc: denied { append } for pid=7320 comm="syz.1.387" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.852217][ T42] audit: type=1400 audit(1785545430.216:796): avc: denied { write } for pid=7323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.869686][ T7327] netlink: 'syz.4.385': attribute type 32 has an invalid length. [ 80.896732][ T1494] usb usb7-port1: attempt power cycle [ 80.902463][ T42] audit: type=1400 audit(1785545430.266:797): avc: denied { write } for pid=7329 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.978235][ T7335] FAULT_INJECTION: forcing a failure. [ 80.978235][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 80.989810][ T7335] CPU: 2 UID: 0 PID: 7335 Comm: syz.0.386 Not tainted syzkaller #0 PREEMPT(full) [ 80.989827][ T7335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.989833][ T7335] Call Trace: [ 80.989837][ T7335] [ 80.989842][ T7335] dump_stack_lvl+0x100/0x190 [ 80.989862][ T7335] should_fail_ex.cold+0x5/0xa [ 80.989877][ T7335] should_failslab+0xc2/0x120 [ 80.989892][ T7335] __kmalloc_cache_noprof+0x91/0x6c0 [ 80.989910][ T7335] ? do_raw_spin_lock+0x128/0x260 [ 80.989927][ T7335] ? p9_fid_create+0x45/0x460 [ 80.989962][ T7335] p9_fid_create+0x45/0x460 [ 80.989977][ T7335] p9_client_attach+0x91/0x2b0 [ 80.989994][ T7335] ? __pfx_p9_client_attach+0x10/0x10 [ 80.990009][ T7335] ? v9fs_fid_lookup+0x500/0xf50 [ 80.990052][ T7335] v9fs_fid_lookup+0x9a4/0xf50 [ 80.990068][ T7335] v9fs_vfs_lookup+0x1a1/0x5c0 [ 80.990086][ T7335] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 80.990103][ T7335] ? d_alloc_parallel+0x9ed/0x14b0 [ 80.990124][ T7335] v9fs_vfs_atomic_open+0x41e/0x900 [ 80.990142][ T7335] ? __pfx_d_alloc_parallel+0x10/0x10 [ 80.990158][ T7335] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 80.990179][ T7335] atomic_open+0x179/0x430 [ 80.990193][ T7335] ? __pfx_v9fs_vfs_atomic_open+0x10/0x10 [ 80.990211][ T7335] path_openat+0x1ce9/0x4280 [ 80.990228][ T7335] ? __pfx_path_openat+0x10/0x10 [ 80.990244][ T7335] do_file_open+0x20e/0x430 [ 80.990256][ T7335] ? __pfx_do_file_open+0x10/0x10 [ 80.990277][ T7335] ? alloc_fd+0x471/0x7a0 [ 80.990296][ T7335] ? do_getname+0x191/0x390 [ 80.990310][ T7335] do_sys_openat2+0x10f/0x1e0 [ 80.990325][ T7335] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.990339][ T7335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.990355][ T7335] ? __fget_files+0x21f/0x3d0 [ 80.990368][ T7335] __x64_sys_openat+0x12d/0x210 [ 80.990382][ T7335] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.990395][ T7335] ? ksys_write+0x1ac/0x250 [ 80.990416][ T7335] do_syscall_64+0x115/0x870 [ 80.990428][ T7335] ? clear_bhb_loop+0x40/0x90 [ 80.990441][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.990452][ T7335] RIP: 0033:0x7fb56739e019 [ 80.990461][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.990472][ T7335] RSP: 002b:00007fb568197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.990482][ T7335] RAX: ffffffffffffffda RBX: 00007fb567625fa0 RCX: 00007fb56739e019 [ 80.990489][ T7335] RDX: 0000000000052001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 80.990496][ T7335] RBP: 00007fb568197090 R08: 0000000000000000 R09: 0000000000000000 [ 80.990502][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.990508][ T7335] R13: 00007fb567626038 R14: 00007fb567625fa0 R15: 00007ffd33846aa8 [ 80.990522][ T7335] [ 81.245536][ T1494] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 81.276190][ T1494] usb 7-1: device descriptor read/8, error -71 [ 81.395602][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.399368][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.403159][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.411905][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.431310][ T42] audit: type=1400 audit(1785545430.796:798): avc: denied { write } for pid=7364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.525587][ T1494] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.546310][ T1494] usb 7-1: device descriptor read/8, error -71 [ 81.642169][ T29] cfg80211: failed to load regulatory.db [ 81.666758][ T1494] usb usb7-port1: unable to enumerate USB device [ 81.794228][ T7336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.913786][ T7385] binder: 7384:7385 ioctl c0306201 200000000080 returned -14 [ 81.919738][ T7385] binder: 7384:7385 ioctl c0306201 2000000003c0 returned -14 [ 81.946458][ T7391] 9pnet_virtio: no channels available for device syz [ 81.950333][ T7391] FAULT_INJECTION: forcing a failure. [ 81.950333][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.957413][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.0.400 Not tainted syzkaller #0 PREEMPT(full) [ 81.957437][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.957448][ T7391] Call Trace: [ 81.957456][ T7391] [ 81.957469][ T7391] dump_stack_lvl+0x100/0x190 [ 81.957500][ T7391] should_fail_ex.cold+0x5/0xa [ 81.957525][ T7391] _copy_from_user+0x2e/0xd0 [ 81.957581][ T7391] kstrtouint_from_user+0xd6/0x1d0 [ 81.957602][ T7391] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 81.957620][ T7391] ? __lock_acquire+0x49f/0x1a40 [ 81.957653][ T7391] proc_fail_nth_write+0x83/0x220 [ 81.957694][ T7391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.957729][ T7391] vfs_write+0x2aa/0x1050 [ 81.957777][ T7391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.957808][ T7391] ? __pfx_vfs_write+0x10/0x10 [ 81.957834][ T7391] ? __fget_files+0x215/0x3d0 [ 81.957861][ T7391] ? __fget_files+0x21f/0x3d0 [ 81.957887][ T7391] ksys_write+0x12a/0x250 [ 81.957913][ T7391] ? __pfx_ksys_write+0x10/0x10 [ 81.957946][ T7391] do_syscall_64+0x115/0x870 [ 81.957968][ T7391] ? clear_bhb_loop+0x40/0x90 [ 81.957987][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.958006][ T7391] RIP: 0033:0x7fb56735e84e [ 81.958022][ T7391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.958038][ T7391] RSP: 002b:00007fb568196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.958056][ T7391] RAX: ffffffffffffffda RBX: 00007fb5681976c0 RCX: 00007fb56735e84e [ 81.958069][ T7391] RDX: 0000000000000001 RSI: 00007fb5681970a0 RDI: 0000000000000003 [ 81.958079][ T7391] RBP: 00007fb568197090 R08: 0000000000000000 R09: 0000000000000000 [ 81.958089][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.958100][ T7391] R13: 00007fb567626038 R14: 00007fb567625fa0 R15: 00007ffd33846aa8 [ 81.958125][ T7391] [ 81.994226][ T7395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7395 comm=syz.0.402 [ 82.114213][ T7396] /dev/sg0: Can't lookup blockdev [ 82.120970][ T7396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7396 comm=syz.0.402 [ 82.272849][ T7411] overlayfs: conflicting lowerdir path [ 82.307533][ T7408] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 83.228690][ T7476] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.301414][ T7476] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 83.306273][ T7476] overlayfs: failed to look up (tracing) for ino (-66) [ 83.692712][ T7509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7509 comm=syz.4.439 [ 83.699577][ T64] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 83.770904][ T7511] __nla_validate_parse: 7 callbacks suppressed [ 83.770917][ T7511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.440'. [ 83.817767][ T7516] IPv6: syztnl0: Disabled Multicast RS [ 83.872808][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 83.897942][ T7520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.904420][ T7520] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 83.911464][ T7520] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 83.916108][ T7520] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 83.920691][ T7523] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 84.011714][ T7531] trusted_key: encrypted_key: insufficient parameters specified [ 84.103435][ T7537] macvlan0: entered promiscuous mode [ 84.295724][ T5533] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.462124][ T7569] xt_hashlimit: size too large, truncated to 1048576 [ 84.467686][ T5533] usb 7-1: Using ep0 maxpacket: 8 [ 84.470618][ T5533] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 84.473302][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 84.474565][ T5533] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 84.481905][ T5533] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.485081][ T5533] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 84.489938][ T5533] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 84.493181][ T5533] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.497240][ T5533] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.500556][ T5533] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.560600][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 84.560612][ T42] audit: type=1400 audit(1785545433.926:821): avc: denied { search } for pid=7572 comm="syz.4.463" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.683128][ T42] audit: type=1400 audit(1785545434.046:822): avc: denied { append } for pid=7594 comm="syz.1.470" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.684122][ T7596] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 84.700491][ T7596] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 84.704474][ T7596] cramfs: wrong magic [ 84.707903][ T7600] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 84.711653][ T7600] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 84.715252][ T7600] cramfs: wrong magic [ 84.761771][ T5533] usb 7-1: usb_control_msg returned -71 [ 84.765028][ T5533] usbtmc 7-1:16.0: can't read capabilities [ 84.792160][ T5533] usb 7-1: USB disconnect, device number 7 [ 84.798816][ T7610] fuse: Bad value for 'fd' [ 84.828175][ T42] audit: type=1400 audit(1785545434.196:823): avc: denied { unmount } for pid=5749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.877891][ T42] audit: type=1400 audit(1785545434.246:824): avc: denied { execute } for pid=7613 comm="syz.2.474" path="/dev/adsp1" dev="devtmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 84.937744][ T42] audit: type=1400 audit(1785545434.306:825): avc: denied { bind } for pid=7621 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.984644][ T7624] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 85.010778][ T7624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.034891][ T7624] veth3: entered promiscuous mode [ 85.039363][ T7624] bond3: (slave veth3): Enslaving as an active interface with a down link [ 85.052424][ T7624] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 85.096932][ T42] audit: type=1400 audit(1785545434.466:826): avc: denied { read write } for pid=7623 comm="syz.2.477" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.107210][ T42] audit: type=1400 audit(1785545434.466:827): avc: denied { open } for pid=7623 comm="syz.2.477" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.118005][ T42] audit: type=1400 audit(1785545434.466:828): avc: denied { ioctl } for pid=7623 comm="syz.2.477" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 85.130818][ T42] audit: type=1400 audit(1785545434.466:829): avc: denied { ioctl } for pid=7630 comm="syz.1.480" path="socket:[19566]" dev="sockfs" ino=19566 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.204241][ T42] audit: type=1326 audit(1785545434.566:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7633 comm="syz.1.481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53079e019 code=0x7ffc0000 [ 85.358661][ T7646] netlink: 80 bytes leftover after parsing attributes in process `syz.0.483'. [ 85.362105][ T7646] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.483'. [ 85.365693][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.483'. [ 85.617006][ T7662] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 85.621273][ T7662] VFS: Can't find a romfs filesystem on dev nullb0. [ 85.621273][ T7662] [ 85.673845][ T7668] efs: device does not support 512 byte blocks [ 85.676438][ T7668] device does not support 512 byte blocks [ 85.676438][ T7668] [ 85.706794][ T7673] l2tp_ppp: sess 2/0: no socket in recv [ 85.910221][ T7689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.995515][ T5525] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 86.080449][ T7693] rdma_rxe: rxe_newlink: failed to add syz_tun [ 86.145591][ T5533] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.150583][ T5525] usb 6-1: not running at top speed; connect to a high speed hub [ 86.161227][ T5525] usb 6-1: config 1 interface 0 altsetting 249 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 86.167265][ T5525] usb 6-1: config 1 interface 0 altsetting 249 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 86.175514][ T5525] usb 6-1: config 1 interface 0 has no altsetting 0 [ 86.179108][ T5525] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 86.182048][ T5525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.184672][ T5525] usb 6-1: Product: syz [ 86.186498][ T5525] usb 6-1: Manufacturer: ᐄ [ 86.188082][ T5525] usb 6-1: SerialNumber: syz [ 86.191627][ T7679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.193830][ T7679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.297557][ T5533] usb 5-1: Dual-Role OTG device on HNP port [ 86.302265][ T5533] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 86.306124][ T5533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.316989][ C1] configfs-gadget.g1 gadget.0: Using interface 1 [ 86.325569][ T56] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 86.332339][ T5533] gspca_main: spca501-2.14.0 probing 0000:0000 [ 86.338201][ T5533] gspca_spca501: reg write: error -32 [ 86.340406][ T5533] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 86.343264][ T5533] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 86.356422][ T5533] usblp 5-1:1.1: usblp0: USB Bidirectional printer dev 5 if 1 alt 0 proto 2 vid 0x0000 pid 0x0000 [ 86.475993][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 86.481190][ T56] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.484888][ T56] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 86.489989][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.496956][ T56] usb 9-1: config 0 descriptor?? [ 86.504829][ T56] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 86.597684][ T7709] l2tp_ppp: sess 2/0: no socket in recv [ 86.606818][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 86.622745][ T5525] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 249 proto 1 vid 0x0525 pid 0xA4A8 [ 86.640632][ T5525] usb 6-1: USB disconnect, device number 9 [ 86.651100][ T5525] usblp1: removed [ 86.805492][ T5909] usb 9-1: USB disconnect, device number 4 [ 87.142334][ T7748] l2tp_ppp: sess 2/0: no socket in recv [ 87.360540][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 87.365185][ T7767] 8021q: VLANs not supported on ip6_vti0 [ 87.373900][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 87.509184][ T7783] l2tp_ppp: sess 2/0: no socket in recv [ 87.721711][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.730539][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.109345][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'. [ 88.156017][ T7804] affs: No valid root block on device sr0 [ 88.488744][ T7806] l2tp_ppp: sess 2/0: no socket in recv [ 88.570574][ T7810] overlay: ./file0 is not a directory [ 88.575975][ T7810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.662632][ T7822] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 88.667301][ T7822] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 88.812507][ T7837] tmpfs: Cannot change global quota limit on remount [ 88.824126][ T7838] tmpfs: Cannot change global quota limit on remount [ 88.899504][ T7842] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 88.902952][ T7842] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 88.910244][ T7842] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 88.911594][ T7845] netlink: 27 bytes leftover after parsing attributes in process `syz.4.549'. [ 89.013498][ T7866] l2tp_ppp: sess 2/0: no socket in recv [ 89.724678][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 90.221051][ T6002] smc: removing ib device syz1 [ 90.237988][ T5533] vcan0 speed is unknown, defaulting to 1000 [ 90.239951][ T5533] syz1: Port: 1 Link DOWN [ 90.258011][ T42] kauditd_printk_skb: 154 callbacks suppressed [ 90.258022][ T42] audit: type=1400 audit(1785545439.626:985): avc: denied { write } for pid=7884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.265334][ T6002] smbdirect: ib_dev[syz1] removed [ 90.323664][ T42] audit: type=1400 audit(1785545439.686:986): avc: denied { write } for pid=7891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.336857][ T42] audit: type=1400 audit(1785545439.706:987): avc: denied { ioctl } for pid=7892 comm="syz.4.560" path="socket:[20708]" dev="sockfs" ino=20708 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.488326][ T42] audit: type=1400 audit(1785545439.856:988): avc: denied { accept } for pid=7899 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.537697][ T7909] l2tp_ppp: sess 2/0: no socket in recv [ 90.604386][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 90.608058][ T7915] netlink: 31 bytes leftover after parsing attributes in process `syz.0.569'. [ 90.610760][ T7915] netlink: 'syz.0.569': attribute type 3 has an invalid length. [ 90.613359][ T7915] netlink: 'syz.0.569': attribute type 2 has an invalid length. [ 90.618315][ T7915] netlink: 31 bytes leftover after parsing attributes in process `syz.0.569'. [ 90.667943][ T7918] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 90.668614][ T7912] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 90.818831][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 90.822507][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 90.844711][ T56] IPVS: starting estimator thread 0... [ 90.945757][ T7932] IPVS: using max 45 ests per chain, 108000 per kthread [ 91.000636][ T42] audit: type=1400 audit(1785545440.366:989): avc: denied { mmap_zero } for pid=7933 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 91.028549][ T42] audit: type=1400 audit(1785545440.396:990): avc: denied { bind } for pid=7944 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.049162][ T42] audit: type=1400 audit(1785545440.396:991): avc: denied { write } for pid=7944 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.104648][ T42] audit: type=1400 audit(1785545440.466:992): avc: denied { remount } for pid=7959 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.373905][ T64] Bluetooth: hci3: hcon ffff88803f5a4000 sent 1 < count 65531 [ 91.413222][ T64] Bluetooth: hci3: hcon ffff88803f5a4000 sent 0 < count 8 [ 91.415863][ T64] Bluetooth: hci3: hcon ffff8880283e8000 sent 3 < count 129 [ 91.418684][ T64] Bluetooth: hci3: hcon ffff8880283e8000 sent 0 < count 1 [ 91.421660][ T64] Bluetooth: hci3: hcon ffff8880283e8000 sent 0 < count 6 [ 91.424623][ T64] Bluetooth: hci3: hcon ffff8880283e8000 sent 0 < count 4 [ 91.452018][ T7968] l2tp_ppp: sess 2/0: no socket in recv [ 91.481511][ T7970] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.618798][ T42] audit: type=1400 audit(1785545440.986:993): avc: denied { mount } for pid=7975 comm="syz.1.590" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 91.782456][ T7981] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.859267][ T7992] l2tp_ppp: sess 2/0: no socket in recv [ 91.898907][ T7998] syz.4.600 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.932725][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.2.601 [ 91.933853][ T42] audit: type=1400 audit(1785545441.296:994): avc: denied { ioctl } for pid=7993 comm="syz.1.597" path="socket:[20794]" dev="sockfs" ino=20794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.968023][ T8009] input: syz0 as /devices/virtual/input/input5 [ 91.970206][ T8008] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 92.002352][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.004762][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.013527][ T8012] bond2 (unregistering): Released all slaves [ 92.137847][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.140093][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.143513][ T8012] bond2 (unregistering): Released all slaves [ 92.192955][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 92.197273][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 92.254094][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.256688][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.260786][ T8029] l2tp_ppp: sess 2/0: no socket in recv [ 92.262143][ T8012] bond2 (unregistering): Released all slaves [ 92.292307][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 92.325649][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.328594][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.331971][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.335378][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.401338][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.404089][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.411037][ T8012] bond2 (unregistering): Released all slaves [ 92.520900][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.523310][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.536754][ T8012] bond2 (unregistering): Released all slaves [ 92.619621][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.622360][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.631216][ T8012] bond2 (unregistering): Released all slaves [ 92.721530][ T8012] bond2: (slave batadv0): Device is not bonding slave [ 92.724354][ T8012] bond2: option active_slave: invalid value (batadv0) [ 92.729432][ T8012] bond2 (unregistering): Released all slaves [ 92.853033][ T8051] binder: 8050:8051 ioctl c018937a 2000000001c0 returned -22 [ 92.856618][ T8051] binder: 8050:8051 ioctl 84009422 200000000fc0 returned -22 [ 92.979164][ T8056] l2tp_ppp: sess 2/0: no socket in recv [ 93.302725][ T8067] syz.4.624 (8067) used greatest stack depth: 17864 bytes left [ 93.582176][ T8085] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 93.584500][ T8085] PKCS7: Only support pkcs7_signedData type [ 93.591604][ T8085] netlink: 'syz.2.632': attribute type 39 has an invalid length. [ 93.617379][ T8087] NILFS (loop4): device size too small [ 93.849446][ T8058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.855521][ T8058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.888863][ T8058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.893838][ T8058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.896053][ T8058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.899248][ T8058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.903304][ T8058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.905320][ T8058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.908569][ T8058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.945090][ T8100] binder: 8099:8100 ioctl c0306201 200000000640 returned -22 [ 93.948990][ T8100] binder: 8099:8100 ioctl 8924 200000000180 returned -22 [ 93.973146][ T8100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.029006][ T8100] md: loop0 has zero or unknown size, marking faulty! [ 94.032124][ T8100] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 94.083643][ T8100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.089860][ T8100] bond3: (slave bond4): making interface the new active one [ 94.093418][ T8100] bond3: (slave bond4): Enslaving as an active interface with an up link [ 94.100536][ T8101] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 94.152866][ T8116] netlink: 'syz.1.643': attribute type 6 has an invalid length. [ 94.186492][ T8114] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 94.448993][ T8129] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 94.457613][ T64] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 94.672050][ T64] Bluetooth: hci1: unexpected cc 0x0403 length: 9 > 1 [ 94.678140][ T64] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 95.085586][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.436612][ T8165] ubi16: attaching mtd0 [ 95.441225][ T8165] ubi16: scanning is finished [ 95.443214][ T8165] ubi16: empty MTD device detected [ 95.544275][ T8165] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 95.546746][ T8165] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 95.549101][ T8165] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 95.554793][ T8165] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 95.557290][ T8165] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 95.559453][ T8165] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 95.562016][ T8165] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3372963843 [ 95.565079][ T8165] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 95.568354][ T8166] ubi16: background thread "ubi_bgt16d" started, PID 8166 [ 95.660268][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 95.660284][ T42] audit: type=1400 audit(1785545445.026:1014): avc: denied { bind } for pid=8171 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.673668][ T42] audit: type=1400 audit(1785545445.036:1015): avc: denied { ioctl } for pid=8171 comm="syz.2.666" path="socket:[23324]" dev="sockfs" ino=23324 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.694332][ T42] audit: type=1400 audit(1785545445.056:1016): avc: denied { setopt } for pid=8171 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.704084][ T42] audit: type=1400 audit(1785545445.056:1017): avc: denied { mounton } for pid=8173 comm="syz.0.667" path="/proc/436/task" dev="proc" ino=23618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.706760][ T8175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.717866][ T8175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.722644][ T42] audit: type=1400 audit(1785545445.086:1018): avc: denied { append } for pid=8173 comm="syz.0.667" name="001" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.735719][ T42] audit: type=1400 audit(1785545445.096:1019): avc: denied { name_bind } for pid=8173 comm="syz.0.667" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.955580][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.015623][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 96.177388][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.181978][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.186026][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.189693][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.199388][ T8179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.210446][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.328370][ T42] audit: type=1400 audit(1785545445.696:1020): avc: denied { name_bind } for pid=8182 comm="syz.0.670" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 96.328697][ T8183] l2tp_ppp: sess 2/0: no socket in recv [ 96.408484][ T42] audit: type=1400 audit(1785545445.776:1021): avc: denied { bpf } for pid=8186 comm="syz.0.672" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.417888][ T42] audit: type=1400 audit(1785545445.776:1022): avc: denied { perfmon } for pid=8186 comm="syz.0.672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.477842][ T56] usb 7-1: USB disconnect, device number 8 [ 96.529428][ T8195] overlay: Unknown parameter ':' [ 96.573167][ T42] audit: type=1400 audit(1785545445.936:1023): avc: denied { getopt } for pid=8197 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.625400][ T8205] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 96.643520][ T8208] l2tp_ppp: sess 2/0: no socket in recv [ 96.699531][ T8212] __nla_validate_parse: 3 callbacks suppressed [ 96.699546][ T8212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 96.720355][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.681'. [ 96.786648][ T8222] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.884793][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'. [ 96.961864][ T8240] l2tp_ppp: sess 2/0: no socket in recv [ 96.984555][ T8242] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 97.165940][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.273958][ T8269] netlink: 124 bytes leftover after parsing attributes in process `syz.0.698'. [ 97.278001][ T8260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.331952][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.341782][ T8270] input: syz1 as /devices/virtual/input/input6 [ 97.391127][ T8275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.445823][ T8278] l2tp_ppp: sess 2/0: no socket in recv [ 97.456601][ T8279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'. [ 97.544354][ T8285] /dev/nullb0: Can't open blockdev [ 97.549330][ T8285] /dev/nullb0: Can't open blockdev [ 97.552048][ T8285] /dev/nullb0: Can't open blockdev [ 97.554640][ T8285] /dev/nullb0: Can't open blockdev [ 97.559544][ T8285] /dev/nullb0: Can't open blockdev [ 97.562303][ T8285] /dev/nullb0: Can't open blockdev [ 97.564983][ T8285] /dev/nullb0: Can't open blockdev [ 97.569688][ T8285] /dev/nullb0: Can't open blockdev [ 97.572432][ T8285] /dev/nullb0: Can't open blockdev [ 97.575084][ T8285] /dev/nullb0: Can't open blockdev [ 97.577780][ T8285] /dev/nullb0: Can't open blockdev [ 97.580594][ T8285] /dev/nullb0: Can't open blockdev [ 97.583445][ T8285] /dev/nullb0: Can't open blockdev [ 97.586289][ T8285] /dev/nullb0: Can't open blockdev [ 97.589112][ T8285] /dev/nullb0: Can't open blockdev [ 97.591748][ T8285] /dev/nullb0: Can't open blockdev [ 97.730041][ T8301] loop5: detected capacity change from 0 to 7 [ 97.738052][ T8301] Dev loop5: unable to read RDB block 7 [ 97.740050][ T8301] loop5: AHDI p2 [ 97.741235][ T8301] loop5: partition table partially beyond EOD, truncated [ 97.753066][ T8303] l2tp_ppp: sess 2/0: no socket in recv [ 97.874209][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 97.878109][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 98.045534][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.090560][ T8327] l2tp_ppp: sess 2/0: no socket in recv [ 98.177046][ T8335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 98.179621][ T8335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.184842][ T8335] vhci_hcd vhci_hcd.0: Device attached [ 98.264454][ T8339] vhci_hcd: connection closed [ 98.269790][ T12] vhci_hcd vhci_hcd.0: stop threads [ 98.274344][ T12] vhci_hcd vhci_hcd.0: release socket [ 98.279297][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 98.301471][ T8355] bridge0: port 3(wlan1) entered blocking state [ 98.304480][ T8355] bridge0: port 3(wlan1) entered disabled state [ 98.307864][ T8355] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 98.314034][ T8355] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 98.317836][ T8355] bridge0: port 3(wlan1) entered blocking state [ 98.321210][ T8355] bridge0: port 3(wlan1) entered forwarding state [ 98.403384][ T8365] l2tp_ppp: sess 2/0: no socket in recv [ 98.405200][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 98.477366][ T8374] JFS: discard option not supported on device [ 98.481361][ T8374] Mount JFS Failure: -5 [ 98.593764][ T8385] ehci-pci 0000:00:1d.7: remove, state 1 [ 98.599648][ T8385] usb usb2: USB disconnect, device number 1 [ 98.602342][ T8385] usb 2-1: USB disconnect, device number 2 [ 98.678784][ T8373] mmap: syz.0.733 (8373) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.699668][ T8385] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 98.765921][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 98.773709][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 98.777484][ T8388] uhci_hcd 0000:00:1d.0: remove, state 1 [ 98.780369][ T5096] Bluetooth: hci1: hardware error 0x00 [ 98.815841][ T171] bridge0: port 3(wlan1) entered disabled state [ 98.835891][ T56] hub 1-0:1.0: activate --> -108 [ 98.843717][ T8388] usb usb1: USB disconnect, device number 1 [ 98.882200][ T8388] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 99.059778][ T8492] l2tp_ppp: sess 2/0: no socket in recv [ 99.101878][ T8501] overlay: ./file0 is not a directory [ 99.235539][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.596717][ T8552] netlink: 'syz.4.746': attribute type 7 has an invalid length. [ 99.748140][ T8557] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 100.125569][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.166797][ T8567] l2tp_ppp: sess 2/0: no socket in recv [ 100.212919][ T8569] syzkaller1: entered promiscuous mode [ 100.214783][ T8569] syzkaller1: entered allmulticast mode [ 100.343335][ T8571] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.472899][ T8574] ima: policy update failed [ 100.697631][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 100.697642][ T42] audit: type=1400 audit(1785545450.066:1046): avc: denied { write } for pid=8606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.715304][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 100.762515][ T42] audit: type=1400 audit(1785545450.126:1047): avc: denied { write } for pid=8617 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.777758][ T8620] binder: 8618:8620 ioctl 400c620e 200000000180 returned -22 [ 100.851786][ T42] audit: type=1400 audit(1785545450.216:1048): avc: denied { write } for pid=8622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.865832][ T5533] e1000 0000:00:06.0 eth0: Reset adapter [ 100.878836][ T8615] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 100.900850][ T42] audit: type=1400 audit(1785545450.266:1049): avc: denied { write } for pid=8628 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.918200][ T5096] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 100.973234][ T42] audit: type=1400 audit(1785545450.336:1050): avc: denied { write } for pid=8631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.994361][ T8615] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 101.027894][ T42] audit: type=1400 audit(1785545450.386:1051): avc: denied { write } for pid=8634 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.097045][ T42] audit: type=1400 audit(1785545450.466:1052): avc: denied { write } for pid=8638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.147964][ T42] audit: type=1400 audit(1785545450.516:1053): avc: denied { write } for pid=8644 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.218954][ T42] audit: type=1400 audit(1785545450.586:1054): avc: denied { write } for pid=8647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.263764][ T42] audit: type=1400 audit(1785545450.626:1055): avc: denied { write } for pid=8652 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.425960][ T5533] e1000 0000:00:06.0 eth0: Reset adapter [ 101.430613][ T8658] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 101.552536][ T8658] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 102.040160][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 103.716538][ T5533] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 107.201461][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 107.201478][ T42] audit: type=1400 audit(1785545456.566:1064): avc: denied { write } for pid=8687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.273955][ T42] audit: type=1400 audit(1785545456.636:1065): avc: denied { write } for pid=8690 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.402413][ T42] audit: type=1400 audit(1785545460.766:1066): avc: denied { write } for pid=8693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.457574][ T42] audit: type=1400 audit(1785545460.826:1067): avc: denied { write } for pid=8696 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.547175][ T42] audit: type=1400 audit(1785545462.916:1068): avc: denied { write } for pid=8699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.595712][ T42] audit: type=1400 audit(1785545462.956:1069): avc: denied { write } for pid=8702 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.310229][ T42] audit: type=1400 audit(1785545463.676:1070): avc: denied { bind } for pid=8707 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.310733][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.777'. [ 114.311151][ T8708] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.775'. [ 114.311173][ T8708] veth0_to_bond: default FDB implementation only supports local addresses [ 114.317417][ T42] audit: type=1400 audit(1785545463.676:1071): avc: denied { ioctl } for pid=8707 comm="syz.0.774" path="socket:[24912]" dev="sockfs" ino=24912 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.346233][ T8712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.352695][ T42] audit: type=1400 audit(1785545463.716:1072): avc: denied { set_context_mgr } for pid=8716 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.362602][ T8719] binder: BINDER_SET_CONTEXT_MGR already set [ 114.366021][ T8719] binder: 8716:8719 ioctl 4018620d 200000000040 returned -16 [ 114.438966][ T8719] binder: 8716:8719 ioctl 8004f50c 200000000300 returned -22 [ 114.451793][ T8728] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=15934209 (31868418 ns) > initial count (16783362 ns). Using initial count to start timer. [ 114.516996][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 114.519669][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 114.522257][ T8740] netlink: 'syz.2.783': attribute type 7 has an invalid length. [ 114.572895][ T8749] netlink: 112 bytes leftover after parsing attributes in process `syz.2.785'. [ 114.577254][ T8749] block nbd0: not configured, cannot reconfigure [ 114.643024][ T8749] team0: Port device syz_tun added [ 114.703880][ T8759] overlayfs: missing 'lowerdir' [ 114.714284][ T8760] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 114.804519][ T42] audit: type=1400 audit(1785545464.166:1073): avc: denied { nlmsg_read } for pid=8758 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.812971][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 115.265880][ T42] audit: type=1400 audit(1785545464.636:1074): avc: denied { map } for pid=8769 comm="syz.4.793" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.274931][ T42] audit: type=1400 audit(1785545464.636:1075): avc: denied { execute } for pid=8769 comm="syz.4.793" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.279386][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 115.287166][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 115.408853][ T64] Bluetooth: hci2: hardware error 0x00 [ 115.573949][ T8773] netlink: 68 bytes leftover after parsing attributes in process `syz.4.794'. [ 115.589373][ T8774] netlink: 68 bytes leftover after parsing attributes in process `syz.4.794'. [ 115.619595][ T8776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 115.691392][ T42] audit: type=1400 audit(1785545465.056:1076): avc: denied { ioctl } for pid=8775 comm="syz.1.795" path="socket:[25099]" dev="sockfs" ino=25099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.747040][ T42] audit: type=1400 audit(1785545465.116:1077): avc: denied { audit_write } for pid=8786 comm="syz.2.797" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.886480][ T8802] netlink: 'syz.2.801': attribute type 2 has an invalid length. [ 115.952048][ T8809] program syz.2.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.065745][ T8818] loop5: detected capacity change from 0 to 7 [ 116.120194][ T8820] batadv0: entered promiscuous mode [ 116.124930][ T8820] macsec1: entered promiscuous mode [ 116.130612][ T8820] macsec1: entered allmulticast mode [ 116.133307][ T8820] batadv0: entered allmulticast mode [ 116.136306][ T8820] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 116.145549][ T8820] batadv0: left allmulticast mode [ 116.151787][ T8820] batadv0: left promiscuous mode [ 116.224080][ T8826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8826 comm=syz.4.810 [ 116.237083][ T56] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 116.245227][ T8818] Dev loop5: unable to read RDB block 7 [ 116.247111][ T8818] loop5: unable to read partition table [ 116.252023][ T8818] loop5: partition table beyond EOD, truncated [ 116.254011][ T8818] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 116.387563][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 116.405922][ T56] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 116.409986][ T56] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.414191][ T56] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.418782][ T56] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 116.423875][ T56] usb 6-1: config 7 interface 0 has no altsetting 0 [ 116.429637][ T56] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 116.433294][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.472663][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.845264][ T56] usbhid 6-1:7.0: can't add hid device: -71 [ 116.848893][ T56] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 116.852353][ T56] usb 6-1: USB disconnect, device number 10 [ 117.295553][ T5849] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 117.391817][ T8863] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 117.418011][ T8863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.456549][ T5849] usb 9-1: Using ep0 maxpacket: 8 [ 117.458973][ T8870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8870 comm=syz.1.827 [ 117.461793][ T5849] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.464476][ T8870] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 117.469449][ T5849] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.473175][ T5849] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.479531][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 117.483537][ T64] Bluetooth: hci2: hardware error 0x00 [ 117.488404][ T5849] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.497840][ T5849] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.501058][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.516803][ T8870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.556467][ T8874] bond5: (slave dummy0): making interface the new active one [ 117.563189][ T8874] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 117.718401][ T5849] usb 9-1: GET_CAPABILITIES returned 0 [ 117.720723][ T5849] usbtmc 9-1:16.0: can't read capabilities [ 117.885421][ T8902] ucma_write: process 621 (syz.0.837) changed security contexts after opening file descriptor, this is not allowed. [ 117.924383][ T5525] usb 9-1: USB disconnect, device number 5 [ 117.945024][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.948868][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.078577][ T1355] IPVS: starting estimator thread 0... [ 118.165662][ T8923] IPVS: using max 44 ests per chain, 105600 per kthread [ 118.225553][ T56] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 118.385944][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 118.388139][ T56] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 118.391325][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.395129][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.399521][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.403646][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.408042][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.412055][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.417318][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.421527][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.425804][ T56] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 118.429487][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 118.432074][ T56] usb 7-1: SerialNumber: syz [ 118.436470][ T56] usb 7-1: config 0 descriptor?? [ 118.447953][ T56] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 118.467663][ T8937] bridge0: port 3(syz_tun) entered blocking state [ 118.474031][ T8937] bridge0: port 3(syz_tun) entered disabled state [ 118.477638][ T8937] syz_tun: entered allmulticast mode [ 118.483140][ T8937] syz_tun: entered promiscuous mode [ 118.487501][ T8937] bridge0: port 3(syz_tun) entered blocking state [ 118.490296][ T8937] bridge0: port 3(syz_tun) entered forwarding state [ 118.572711][ T8945] could not allocate digest TFM handle digest_null [ 118.630069][ T8956] bond0: entered promiscuous mode [ 118.631727][ T8956] bond_slave_0: entered promiscuous mode [ 118.633964][ T8956] bond_slave_1: entered promiscuous mode [ 118.637986][ T8956] batadv0: entered promiscuous mode [ 118.644547][ T8956] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 118.650745][ T8956] bond0: left promiscuous mode [ 118.652366][ T8956] bond_slave_0: left promiscuous mode [ 118.654165][ T8956] bond_slave_1: left promiscuous mode [ 118.657959][ T5131] bcm5974 7-1:0.0: could not read from device [ 118.666354][ T8956] batadv0: left promiscuous mode [ 118.687929][ T5131] bcm5974 7-1:0.0: could not read from device [ 118.693851][ T8962] syz.4.852 (8962): drop_caches: 0 [ 118.704032][ T8964] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 118.717978][ T56] usb 7-1: USB disconnect, device number 9 [ 118.720284][ T5131] bcm5974 7-1:0.0: could not read from device [ 118.729388][ T5131] bcm5974 7-1:0.0: could not read from device [ 118.740783][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 118.740797][ T42] audit: type=1326 audit(1785545468.106:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8967 comm="syz.1.855" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe53079e019 code=0x0 [ 118.808105][ T8971] 9p: Could not find request transport: viXRio [ 118.920850][ T42] audit: type=1400 audit(1785545468.286:1086): avc: denied { map } for pid=8983 comm="syz.2.860" path="socket:[27518]" dev="sockfs" ino=27518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 119.003811][ T8991] overlayfs: missing 'workdir' [ 119.020875][ T42] audit: type=1400 audit(1785545468.386:1087): avc: denied { listen } for pid=8994 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.285546][ T9008] netlink: 'syz.4.867': attribute type 9 has an invalid length. [ 119.359311][ T42] audit: type=1400 audit(1785545468.726:1088): avc: denied { create } for pid=9011 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.520099][ T9024] SET target dimension over the limit! [ 119.556426][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 119.565274][ T42] audit: type=1400 audit(1785545468.926:1089): avc: denied { unmount } for pid=5749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 119.605135][ T9023] Process accounting resumed [ 119.629898][ T9032] MINIX-fs: blocksize too small for device [ 119.754542][ T9049] syzkaller1: entered promiscuous mode [ 119.758278][ T9049] syzkaller1: entered allmulticast mode [ 119.775108][ T9056] __nla_validate_parse: 7 callbacks suppressed [ 119.775122][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 119.813404][ T9058] vivid-000: unregistering video7 [ 119.833866][ T9058] vivid-000: unregistering video8 [ 119.842196][ T9058] vivid-000: unregistering vbi0 [ 119.857483][ T9058] vivid-000: unregistering vbi1 [ 119.917863][ T9066] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 119.921679][ T9066] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 119.924552][ T9066] CPU: 0 UID: 0 PID: 9066 Comm: syz.4.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.927891][ T9066] Tainted: [L]=SOFTLOCKUP [ 119.929227][ T9066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.932371][ T9066] RIP: 0010:subdev_open+0x193/0x510 [ 119.934125][ T9066] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 bc 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2c 24 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 04 03 00 00 48 8b 6d 00 48 85 ed 0f 84 95 00 00 [ 119.940220][ T9066] RSP: 0018:ffffc900036af8a0 EFLAGS: 00010246 [ 119.942146][ T9066] RAX: dffffc0000000000 RBX: ffff88802b52dc00 RCX: 0000000000000000 [ 119.944699][ T9066] RDX: 0000000000000000 RSI: ffffffff8818dc63 RDI: ffff88802ef5b3d0 [ 119.947143][ T9066] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 119.949535][ T9066] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ef66020 [ 119.952051][ T9066] R13: ffff88802ef59000 R14: ffff888037e3d340 R15: ffff88802b52dd38 [ 119.954509][ T9066] FS: 00007f0820be66c0(0000) GS:ffff8880d5dda000(0000) knlGS:0000000000000000 [ 119.957355][ T9066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.958524][ T9067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.959466][ T9066] CR2: 00007f081fd87640 CR3: 000000005c50f000 CR4: 0000000000352ef0 [ 119.964254][ T9067] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 119.964466][ T9066] Call Trace: [ 119.967960][ T9066] [ 119.968895][ T9066] v4l2_open+0x1d2/0x490 [ 119.970281][ T9066] ? __pfx_v4l2_open+0x10/0x10 [ 119.971825][ T9066] chrdev_open+0x234/0x6a0 [ 119.973276][ T9066] ? __pfx_chrdev_open+0x10/0x10 [ 119.974837][ T9066] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 119.976862][ T9066] do_dentry_open+0x6ab/0x14d0 [ 119.978428][ T9066] ? __pfx_chrdev_open+0x10/0x10 [ 119.980014][ T9066] vfs_open+0x82/0x3f0 [ 119.981272][ T9066] path_openat+0x2873/0x4280 [ 119.982748][ T9066] ? __pfx_path_openat+0x10/0x10 [ 119.984375][ T9066] do_file_open+0x20e/0x430 [ 119.985824][ T9066] ? __pfx_do_file_open+0x10/0x10 [ 119.987460][ T9066] ? alloc_fd+0x471/0x7a0 [ 119.988850][ T9066] ? do_getname+0x191/0x390 [ 119.990400][ T9066] do_sys_openat2+0x10f/0x1e0 [ 119.991904][ T9066] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.993610][ T9066] __x64_sys_openat+0x12d/0x210 [ 119.995309][ T9066] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.997040][ T9066] do_syscall_64+0x115/0x870 [ 119.998779][ T9066] ? clear_bhb_loop+0x40/0x90 [ 120.000456][ T9066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.002650][ T9066] RIP: 0033:0x7f081fd5e84e [ 120.004160][ T9066] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.010271][ T9066] RSP: 002b:00007f0820be5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.012901][ T9066] RAX: ffffffffffffffda RBX: 00007f0820be66c0 RCX: 00007f081fd5e84e [ 120.015396][ T9066] RDX: 0000000000000000 RSI: 00007f0820be5c00 RDI: ffffffffffffff9c [ 120.017889][ T9066] RBP: 00007f0820be5c00 R08: 0000000000000000 R09: 0000000000000000 [ 120.020499][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 120.023147][ T9066] R13: 00007f0820026128 R14: 00007f0820026090 R15: 00007ffce69caac8 [ 120.025654][ T9066] [ 120.026635][ T9066] Modules linked in: [ 120.028398][ T42] audit: type=1400 audit(1785545469.336:1090): avc: denied { read } for pid=5128 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.028582][ T9066] ---[ end trace 0000000000000000 ]--- [ 120.039155][ T42] audit: type=1400 audit(1785545469.336:1091): avc: denied { search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.039400][ T9066] RIP: 0010:subdev_open+0x193/0x510 [ 120.047122][ T42] audit: type=1400 audit(1785545469.336:1092): avc: denied { write search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.047605][ T9066] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 bc 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2c 24 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 04 03 00 00 48 8b 6d 00 48 85 ed 0f 84 95 00 00 [ 120.058510][ T9058] vivid-000: unregistering swradio0 [ 120.061417][ T9066] RSP: 0018:ffffc900036af8a0 EFLAGS: 00010246 [ 120.062777][ T42] audit: type=1400 audit(1785545469.336:1093): avc: denied { add_name } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.065354][ T9066] RAX: dffffc0000000000 RBX: ffff88802b52dc00 RCX: 0000000000000000 [ 120.071775][ T42] audit: type=1400 audit(1785545469.336:1094): avc: denied { create } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.074936][ T9066] RDX: 0000000000000000 RSI: ffffffff8818dc63 RDI: ffff88802ef5b3d0 [ 120.085142][ T9066] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 120.088455][ T9066] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802ef66020 [ 120.091937][ T9066] R13: ffff88802ef59000 R14: ffff888037e3d340 R15: ffff88802b52dd38 [ 120.092371][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 120.094974][ T9066] FS: 00007f0820be66c0(0000) GS:ffff8880d5dda000(0000) knlGS:0000000000000000 [ 120.100225][ T9058] vivid-000: unregistering radio0 [ 120.102209][ T9066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.105093][ T9058] vivid-000: unregistering radio1 [ 120.106761][ T9066] CR2: 00007f7d17b909c0 CR3: 000000005c50f000 CR4: 0000000000352ef0 [ 120.111522][ T9066] Kernel panic - not syncing: Fatal exception [ 120.114633][ T9066] Kernel Offset: disabled [ 120.116312][ T9066] Rebooting in 86400 seconds..