last executing test programs: 12.413988406s ago: executing program 2 (id=2241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x1c, &(0x7f0000009680)={0x11, 0x5, 0x41}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x3, 0x2000000000005}) read(r4, &(0x7f0000000740)=""/377, 0x179) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x273}) io_uring_enter(r9, 0x0, 0x0, 0xf, &(0x7f0000000280), 0x8) socket$nl_generic(0x10, 0x3, 0x10) 12.353870389s ago: executing program 2 (id=2244): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x3f) 12.353715903s ago: executing program 2 (id=2245): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)=[{&(0x7f0000000180)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0xcf}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x40004}, 0x300) 12.22359499s ago: executing program 2 (id=2246): syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x101800) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 12.220858002s ago: executing program 2 (id=2249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf5", 0x92}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1", 0xb5}], 0x1}}], 0x3, 0x2090) 11.743064205s ago: executing program 2 (id=2268): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0x2, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async) fcntl$setlease(r0, 0x400, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42202, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a4f0ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b99cfda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1db6646952e2631b8d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68a3ab33a273a86e16c092f72990505eeaa9c2e9812fbc19c4188855f59f67e6fe5be19f3af785dc97ec8d586b9287fec94f57888660b93c4af9860b3b61256473885596b1252c224f728386834af868ae0e391dedb9e3642babddf29059f657036f2200bcd9d1e3bbb0e021ad61"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) 11.673260066s ago: executing program 32 (id=2268): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0x2, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async) fcntl$setlease(r0, 0x400, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42202, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) 2.802865804s ago: executing program 3 (id=2401): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = mq_open(&(0x7f0000000440)='\x87\xe2@\b<\xbf\x989\x95b\x8eLJdJ\xd8H3}g\xacOIUL\x1f\xf9-&\x7f\xa7\xaf\xd95\xac\xeb0\x9c\xcc\xebDbS,\xee_IO{\x9c?2\xb6\xe1\xd2\x99\xd8\xe5\n\x17\xd6\b\x03\xf7\x17\xdc%\x1a\xbe\xb4e\xd7\xd1\xd4(\xf3F^\xb1\x7f\xfa\xaa\xa1f\x81\xbbb\x8c\x02:\rd_9)>\x95A\xd69\xaf\xabY\x84$\xfb]\x85N~\xb4g*O\x0eZ\xd5\x88\xc1)A\xf1\x81\t\xabY\x89\xbf;\xc5\x913\xd66', 0x50f7bb45f81a15a, 0x120, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x80000004}) mq_timedsend(r0, 0x0, 0x0, 0x240, 0x0) 2.723854277s ago: executing program 3 (id=2402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 2.723605227s ago: executing program 3 (id=2403): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="86", 0x1, 0x20000100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2}, 0x8) 1.829723354s ago: executing program 3 (id=2415): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) lchown(0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_NAME(0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) r1 = getgid() setresgid(0x0, r1, 0xffffffffffffffff) keyctl$chown(0x4, 0x0, 0x0, r1) 1.513007845s ago: executing program 0 (id=2419): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @loopback, 0xa095}, {0xa, 0x4e20, 0x409, @mcast1, 0x9}, r1, 0x8001}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) 1.512661741s ago: executing program 0 (id=2420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0xfffc}, 0x8) 1.469465037s ago: executing program 0 (id=2422): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7fff, 0xfff, 0xfffffffb, 0x5, 0x2}, &(0x7f0000000040)=0x98) 1.376792725s ago: executing program 4 (id=2423): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffcd, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.331776782s ago: executing program 4 (id=2424): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 1.317522522s ago: executing program 4 (id=2426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000780)={0x1, 0x11, @ioapic={0xdddd1000, 0x81, 0x526, 0x80000000, 0x0, [{0x97, 0x2, 0x8, '\x00', 0x6}, {0xe, 0x3, 0x3, '\x00', 0x4}, {0x5b, 0x7f, 0x9}, {0x0, 0x9, 0x2, '\x00', 0x23}, {0x0, 0xb8, 0x1, '\x00', 0x11}, {0x6, 0xd, 0x5, '\x00', 0x1}, {0x81, 0x2, 0x9, '\x00', 0x40}, {0x5, 0x5, 0xff}, {0xb0, 0x4, 0x8, '\x00', 0x9}, {0x3, 0x7c, 0x2e, '\x00', 0x1}, {0x6, 0x9, 0x6, '\x00', 0x5}, {0x8, 0x1, 0x0, '\x00', 0xfd}, {0x46, 0x80, 0xfe, '\x00', 0x6}, {0x2, 0xfd, 0x2, '\x00', 0xb}, {0x5, 0xf, 0xc, '\x00', 0x2}, {0x4, 0x7, 0x12, '\x00', 0x74}, {0x7, 0xaa, 0xa, '\x00', 0xce}, {0x8d, 0x6, 0x2, '\x00', 0x83}, {0xfc, 0xfd, 0x3, '\x00', 0x8a}, {0x2, 0x80, 0x5, '\x00', 0x7}, {0xd, 0x7f, 0x7, '\x00', 0x3e}, {0x90, 0x2, 0x88, '\x00', 0x12}, {0x1, 0x1, 0xf, '\x00', 0xb5}, {0x4, 0x24, 0x0, '\x00', 0x5}]}}) 1.062529553s ago: executing program 1 (id=2430): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x7) 970.0486ms ago: executing program 1 (id=2431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x7f}, &(0x7f0000000100)=0x8) 969.809712ms ago: executing program 3 (id=2432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x274}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000840)={0xce, 0x0, r3}) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0xdddd1000, 0xfffffffe, 0x3, 0x80000000, 0x0, [{0x2, 0x8b, 0x8}, {0x15, 0x3, 0x3, '\x00', 0x7f}, {0x1, 0x7f, 0x9}, {0x1, 0x9, 0x8, '\x00', 0x28}, {0x4, 0xbb, 0x1, '\x00', 0x1}, {0x6, 0xd, 0x5, '\x00', 0x3}, {0x49, 0x2, 0x9, '\x00', 0x3}, {0x7, 0x5, 0x97}, {0xaf, 0x4, 0x8, '\x00', 0x9}, {0x1, 0x2, 0xfc, '\x00', 0x7}, {0x6, 0x40, 0x0, '\x00', 0x5}, {0x6, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x1, 0xfe, '\x00', 0x4}, {0x2, 0x2, 0x4, '\x00', 0xb}, {0x5, 0xc, 0xc}, {0x3, 0x7, 0x12, '\x00', 0x74}, {0x4, 0x6, 0x6, '\x00', 0xce}, {0x8d, 0x8, 0x2, '\x00', 0x3}, {0xfc, 0x0, 0x6, '\x00', 0xc}, {0x1e, 0x81, 0x5, '\x00', 0x7}, {0xf7, 0x7f, 0x5, '\x00', 0x40}, {0x40, 0x2, 0x1, '\x00', 0x7}, {0x5, 0x2, 0xf, '\x00', 0xb5}, {0x12, 0x4, 0x0, '\x00', 0xb}]}}) 913.605195ms ago: executing program 1 (id=2433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 802.843948ms ago: executing program 1 (id=2434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x40000020}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 593.517325ms ago: executing program 1 (id=2435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000001c0)) 593.278021ms ago: executing program 1 (id=2436): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0x9]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 318.471336ms ago: executing program 4 (id=2437): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0xfffc}, 0x8) 307.863602ms ago: executing program 0 (id=2445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="f30f08c4a1fd6f60ff66b86a008ee0650fe99261000000b9800000c00f3235004000000f30b9190b00000f32642645c1e588b8010000000f01d90f01d166b83a000f00d0", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 221.303198ms ago: executing program 4 (id=2438): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x100000000001, 0x0) sendfile(r0, r1, 0x0, 0x20000005) write$binfmt_script(r2, &(0x7f0000000bc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) 53.498942ms ago: executing program 0 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x20002000) 53.292957ms ago: executing program 4 (id=2440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 51.701384ms ago: executing program 0 (id=2449): creat(0x0, 0x182) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xfffffea3) fallocate(0xffffffffffffffff, 0x0, 0x10000, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fb) fallocate(r1, 0x8, 0x4000, 0x10000) 0s ago: executing program 3 (id=2441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x40, 0x3, 0xaa, '\x00', 0xaa7}) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x37}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 10873] slab_reclaimable:8756 slab_unreclaimable:70696 [ 161.410628][T10873] mapped:24688 shmem:2372 pagetables:3786 [ 161.410628][T10873] sec_pagetables:308 bounce:0 [ 161.410628][T10873] kernel_misc_reclaimable:0 [ 161.410628][T10873] free:464975 free_pcp:25819 free_cma:0 [ 161.437861][T10873] Node 0 active_anon:21212kB inactive_anon:12476kB active_file:29708kB inactive_file:56204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99212kB dirty:1436kB writeback:0kB shmem:5952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12832kB pagetables:12744kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 161.448744][T10873] Node 1 active_anon:68kB inactive_anon:0kB active_file:3088kB inactive_file:404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:2400kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 161.458960][T10873] Node 0 DMA free:15128kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:0kB free_cma:0kB [ 161.468513][T10873] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 161.470449][T10873] Node 0 DMA32 free:211136kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21212kB inactive_anon:12476kB active_file:29708kB inactive_file:56204kB unevictable:3536kB writepending:1436kB zspages:40kB present:2080628kB managed:1260988kB mlocked:0kB bounce:0kB free_pcp:100420kB local_pcp:33308kB free_cma:0kB [ 161.481353][T10873] lowmem_reserve[]: 0 0 0 0 0 [ 161.482924][T10873] Node 1 Normal free:1633116kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68kB inactive_anon:0kB active_file:3088kB inactive_file:404kB unevictable:3536kB writepending:0kB zspages:4368kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:4016kB local_pcp:16kB free_cma:0kB [ 161.493431][T10873] lowmem_reserve[]: 0 0 0 0 0 [ 161.495029][T10873] Node 0 DMA: 7*4kB (U) 8*8kB (U) 7*16kB (U) 9*32kB (U) 9*64kB (U) 6*128kB (U) 8*256kB (U) 6*512kB (U) 2*1024kB (U) 3*2048kB (U) 0*4096kB = 15148kB [ 161.500343][T10873] Node 0 DMA32: 1683*4kB (UME) 1845*8kB (UME) 1158*16kB (UM) 647*32kB (UME) 522*64kB (UME) 179*128kB (UME) 108*256kB (UME) 66*512kB (UME) 20*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 211252kB [ 161.506287][T10873] Node 1 Normal: 346*4kB (UME) 327*8kB (UME) 314*16kB (UME) 357*32kB (UME) 296*64kB (UME) 249*128kB (UME) 179*256kB (UME) 157*512kB (UM) 108*1024kB (UM) 11*2048kB (UME) 318*4096kB (M) = 1633120kB [ 161.512729][T10873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.515883][T10873] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 161.519010][T10873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.522462][T10873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.525448][T10873] 25551 total pagecache pages [ 161.526972][T10873] 833 pages in swap cache [ 161.528377][T10873] Free swap = 112244kB [ 161.529856][T10873] Total swap = 124996kB [ 161.531444][T10873] 1048443 pages RAM [ 161.532687][T10873] 0 pages HighMem/MovableOnly [ 161.534219][T10873] 283885 pages reserved [ 161.535587][T10873] 0 pages cma reserved [ 161.807383][ T40] audit: type=1400 audit(417.711:27385): avc: denied { append } for pid=10917 comm="syz.3.1878" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 161.924814][T10934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 161.979388][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1887'. [ 162.128013][T10941] FAULT_INJECTION: forcing a failure. [ 162.128013][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 162.133772][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.1.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.133800][T10941] Tainted: [L]=SOFTLOCKUP [ 162.133807][T10941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.133819][T10941] Call Trace: [ 162.133825][T10941] [ 162.133880][T10941] dump_stack_lvl+0x100/0x190 [ 162.133918][T10941] should_fail_ex.cold+0x5/0xa [ 162.133944][T10941] should_failslab+0xc2/0x120 [ 162.133974][T10941] __kmalloc_node_noprof+0xe6/0x850 [ 162.133998][T10941] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 162.134026][T10941] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 162.134052][T10941] ? vhost_task_create+0x1db/0x370 [ 162.134075][T10941] ? find_held_lock+0x2b/0x80 [ 162.134100][T10941] ? rcu_read_unlock+0x17/0x60 [ 162.134119][T10941] ? obj_cgroup_charge_account+0x46d/0x640 [ 162.134149][T10941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.134170][T10941] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 162.134193][T10941] ? rcu_is_watching+0x12/0xc0 [ 162.134216][T10941] ? trace_kmem_cache_alloc+0xf3/0x120 [ 162.134246][T10941] ? vhost_task_create+0x1db/0x370 [ 162.134265][T10941] __vmalloc_node_noprof+0xad/0xf0 [ 162.134285][T10941] ? vhost_task_create+0x1db/0x370 [ 162.134307][T10941] copy_process+0x5ec/0x7a10 [ 162.134346][T10941] ? __pfx_copy_process+0x10/0x10 [ 162.134374][T10941] ? lockdep_init_map_type+0x5c/0x250 [ 162.134395][T10941] ? lockdep_init_map_type+0x5c/0x250 [ 162.134413][T10941] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 162.134443][T10941] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 162.134468][T10941] vhost_task_create+0x1db/0x370 [ 162.134488][T10941] ? __pfx_vhost_task_create+0x10/0x10 [ 162.134509][T10941] ? trace_contention_end+0x140/0x180 [ 162.134535][T10941] ? __pfx_vhost_task_fn+0x10/0x10 [ 162.134557][T10941] ? __pfx___mutex_lock+0x10/0x10 [ 162.134575][T10941] ? kasan_quarantine_put+0x104/0x240 [ 162.134598][T10941] ? lockdep_hardirqs_on+0x78/0x100 [ 162.134624][T10941] kvm_mmu_post_init_vm+0x1b3/0x370 [ 162.134641][T10941] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 162.134660][T10941] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 162.134689][T10941] kvm_vcpu_ioctl+0x730/0x1730 [ 162.134716][T10941] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.134742][T10941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.134769][T10941] ? do_vfs_ioctl+0x226/0x13e0 [ 162.134796][T10941] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 162.134821][T10941] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 162.134853][T10941] ? __fget_files+0x215/0x3d0 [ 162.134869][T10941] ? hook_file_ioctl_common+0x146/0x410 [ 162.134900][T10941] ? selinux_file_ioctl+0x139/0x290 [ 162.134920][T10941] ? selinux_file_ioctl+0xb4/0x290 [ 162.134941][T10941] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 162.134969][T10941] __x64_sys_ioctl+0x18e/0x210 [ 162.134996][T10941] do_syscall_64+0x106/0xf80 [ 162.135013][T10941] ? clear_bhb_loop+0x40/0x90 [ 162.135037][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.135056][T10941] RIP: 0033:0x7fc40e59c629 [ 162.135073][T10941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.135090][T10941] RSP: 002b:00007fc40f431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.135107][T10941] RAX: ffffffffffffffda RBX: 00007fc40e815fa0 RCX: 00007fc40e59c629 [ 162.135118][T10941] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 162.135129][T10941] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000000 [ 162.135140][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.135180][T10941] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 162.135206][T10941] [ 162.662891][T10980] syz.2.1903 (10980): drop_caches: 2 [ 162.762006][T10991] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 162.818882][T10997] Cannot find set identified by id 3 to match [ 163.157388][T11024] ip6_tunnel: non-ECT from fc80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 163.165277][ T5928] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 163.445837][T11047] ip6_tunnel: non-ECT from fc80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 163.454174][ T5928] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 163.478921][ T40] audit: type=1400 audit(419.381:27386): avc: denied { mount } for pid=11048 comm="syz.2.1926" name="/" dev="configfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 163.491974][ T40] audit: type=1400 audit(419.381:27387): avc: denied { wake_alarm } for pid=11048 comm="syz.2.1926" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.500285][T11051] wg1: entered promiscuous mode [ 163.502117][T11051] wg1: entered allmulticast mode [ 163.579980][ T6944] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 163.734902][T11072] binder: 11071:11072 unknown command 1 [ 163.736898][T11072] binder: 11071:11072 ioctl c0306201 200000000300 returned -22 [ 163.741778][ T6944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.745899][ T6944] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.750018][ T6944] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.757459][ T6944] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.766921][ T6944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.770470][ T6944] usb 6-1: Product: syz [ 163.772525][ T6944] usb 6-1: Manufacturer: syz [ 163.774544][ T6944] usb 6-1: SerialNumber: syz [ 163.786137][ T6944] hub 6-1:1.0: bad descriptor, ignoring hub [ 163.788685][ T6944] hub 6-1:1.0: probe with driver hub failed with error -5 [ 163.800740][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1939'. [ 163.804334][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1939'. [ 163.851878][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1941'. [ 163.934378][T11084] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 163.937940][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1942'. [ 163.950722][T11083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.999138][ T6944] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 164.098986][ T40] audit: type=1400 audit(420.001:27388): avc: denied { execute } for pid=11098 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 164.111994][ T40] audit: type=1400 audit(420.001:27389): avc: denied { execute_no_trans } for pid=11098 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 164.239130][ T5933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.243231][T11102] trusted_key: encrypted_key: keylen parameter is missing [ 164.244155][ T5933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.247038][T11102] trusted_key: encrypted_key: keylen parameter is missing [ 164.250267][ T5933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.256736][ T5933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.261914][T11102] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 164.262214][ T5933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.302761][ T7986] usb 6-1: USB disconnect, device number 12 [ 164.309593][ T7986] usblp0: removed [ 164.435287][T11103] chnl_net:caif_netlink_parms(): no params data found [ 164.542360][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.545381][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.548362][T11103] bridge_slave_0: entered allmulticast mode [ 164.557685][T11103] bridge_slave_0: entered promiscuous mode [ 164.568037][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.570866][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.573234][T11103] bridge_slave_1: entered allmulticast mode [ 164.575981][T11103] bridge_slave_1: entered promiscuous mode [ 164.594822][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.600413][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.628061][T11103] team0: Port device team_slave_0 added [ 164.632542][T11103] team0: Port device team_slave_1 added [ 164.656727][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.659073][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.668844][ T6944] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 164.671695][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.682110][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.685234][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.693653][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.719978][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.793707][T11103] hsr_slave_0: entered promiscuous mode [ 164.796966][T11103] hsr_slave_1: entered promiscuous mode [ 164.801432][T11103] debugfs: 'hsr0' already exists in 'hsr' [ 164.803844][T11103] Cannot create hsr debugfs directory [ 164.823680][T11138] overlayfs: failed to resolve './file0': -2 [ 164.831469][ T6944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.832156][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.835576][ T6944] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.845803][ T6944] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.863625][ T6944] usb 6-1: language id specifier not provided by device, defaulting to English [ 164.882292][ T6944] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.886026][ T6944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.889313][ T6944] usb 6-1: SerialNumber: syz [ 164.905069][ T6944] hub 6-1:1.0: bad descriptor, ignoring hub [ 164.908049][ T6944] hub 6-1:1.0: probe with driver hub failed with error -5 [ 165.004731][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.051691][T11155] netlink: 'syz.2.1972': attribute type 10 has an invalid length. [ 165.054970][T11155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1972'. [ 165.059231][T11154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.076149][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.109431][ T6944] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.130711][ T6944] usb 6-1: USB disconnect, device number 13 [ 165.135136][ T6944] usblp0: removed [ 165.178639][T11157] FAULT_INJECTION: forcing a failure. [ 165.178639][T11157] name failslab, interval 1, probability 0, space 0, times 0 [ 165.184064][T11157] CPU: 0 UID: 0 PID: 11157 Comm: syz.2.1973 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.184092][T11157] Tainted: [L]=SOFTLOCKUP [ 165.184098][T11157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.184109][T11157] Call Trace: [ 165.184117][T11157] [ 165.184125][T11157] dump_stack_lvl+0x100/0x190 [ 165.184162][T11157] should_fail_ex.cold+0x5/0xa [ 165.184187][T11157] should_failslab+0xc2/0x120 [ 165.184216][T11157] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 165.184239][T11157] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.184275][T11157] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.184310][T11157] mmu_topup_memory_caches+0x25/0x170 [ 165.184333][T11157] kvm_mmu_load+0xd6/0x23e0 [ 165.184352][T11157] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 165.184377][T11157] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 165.184406][T11157] ? __pfx_kvm_mmu_load+0x10/0x10 [ 165.184424][T11157] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 165.184453][T11157] ? kvm_check_and_inject_events+0x961/0x10c0 [ 165.184475][T11157] ? record_steal_time+0x370/0xbe0 [ 165.184504][T11157] vcpu_run+0x39f4/0x5ca0 [ 165.184536][T11157] ? __pfx_vcpu_run+0x10/0x10 [ 165.184572][T11157] ? rcu_is_watching+0x12/0xc0 [ 165.184598][T11157] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 165.184618][T11157] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 165.184647][T11157] kvm_vcpu_ioctl+0x730/0x1730 [ 165.184676][T11157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.184703][T11157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.184730][T11157] ? do_vfs_ioctl+0x226/0x13e0 [ 165.184756][T11157] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.184782][T11157] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.184812][T11157] ? __fget_files+0x215/0x3d0 [ 165.184828][T11157] ? hook_file_ioctl_common+0x146/0x410 [ 165.184860][T11157] ? selinux_file_ioctl+0x139/0x290 [ 165.184879][T11157] ? selinux_file_ioctl+0xb4/0x290 [ 165.184927][T11157] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.184956][T11157] __x64_sys_ioctl+0x18e/0x210 [ 165.184983][T11157] do_syscall_64+0x106/0xf80 [ 165.185002][T11157] ? clear_bhb_loop+0x40/0x90 [ 165.185026][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.185058][T11157] RIP: 0033:0x7f207199c629 [ 165.185076][T11157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.185093][T11157] RSP: 002b:00007f207279e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.185112][T11157] RAX: ffffffffffffffda RBX: 00007f2071c15fa0 RCX: 00007f207199c629 [ 165.185123][T11157] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 165.185134][T11157] RBP: 00007f207279e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.185144][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.185155][T11157] R13: 00007f2071c16038 R14: 00007f2071c15fa0 R15: 00007ffd5c8da998 [ 165.185181][T11157] [ 165.341722][ T46] bridge_slave_1: left allmulticast mode [ 165.343819][ T46] bridge_slave_1: left promiscuous mode [ 165.347119][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.353926][ T46] bridge_slave_0: left allmulticast mode [ 165.356418][ T46] bridge_slave_0: left promiscuous mode [ 165.359093][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.577747][ T46] bond0 (unregistering): left promiscuous mode [ 165.582016][ T46] bond_slave_0: left promiscuous mode [ 165.584443][ T46] bond_slave_1: left promiscuous mode [ 165.588647][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.595252][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.600943][ T46] bond0 (unregistering): Released all slaves [ 165.608380][ T46] bond1 (unregistering): Released all slaves [ 165.852303][T11178] FAULT_INJECTION: forcing a failure. [ 165.852303][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 165.858662][T11178] CPU: 2 UID: 0 PID: 11178 Comm: syz.1.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.858694][T11178] Tainted: [L]=SOFTLOCKUP [ 165.858701][T11178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.858711][T11178] Call Trace: [ 165.858720][T11178] [ 165.858728][T11178] dump_stack_lvl+0x100/0x190 [ 165.859005][T11178] should_fail_ex.cold+0x5/0xa [ 165.859139][T11178] should_failslab+0xc2/0x120 [ 165.859337][T11178] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 165.859397][T11178] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.859467][T11178] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 165.859498][T11178] mmu_topup_memory_caches+0x25/0x170 [ 165.859563][T11178] kvm_mmu_load+0xd6/0x23e0 [ 165.859585][T11178] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 165.859609][T11178] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 165.859637][T11178] ? __pfx_kvm_mmu_load+0x10/0x10 [ 165.859655][T11178] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 165.859724][T11178] ? kvm_check_and_inject_events+0x961/0x10c0 [ 165.859749][T11178] ? record_steal_time+0x370/0xbe0 [ 165.859781][T11178] vcpu_run+0x39f4/0x5ca0 [ 165.859827][T11178] ? __pfx_vcpu_run+0x10/0x10 [ 165.859858][T11178] ? rcu_is_watching+0x12/0xc0 [ 165.859937][T11178] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 165.859960][T11178] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 165.859988][T11178] kvm_vcpu_ioctl+0x730/0x1730 [ 165.860017][T11178] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.860043][T11178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.860097][T11178] ? do_vfs_ioctl+0x226/0x13e0 [ 165.860146][T11178] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.860172][T11178] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.860352][T11178] ? __fget_files+0x215/0x3d0 [ 165.860369][T11178] ? hook_file_ioctl_common+0x146/0x410 [ 165.860403][T11178] ? selinux_file_ioctl+0x139/0x290 [ 165.860422][T11178] ? selinux_file_ioctl+0xb4/0x290 [ 165.860445][T11178] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.860472][T11178] __x64_sys_ioctl+0x18e/0x210 [ 165.860501][T11178] do_syscall_64+0x106/0xf80 [ 165.860756][T11178] ? clear_bhb_loop+0x40/0x90 [ 165.860781][T11178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.860799][T11178] RIP: 0033:0x7fc40e59c629 [ 165.860815][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.860832][T11178] RSP: 002b:00007fc40f431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.860851][T11178] RAX: ffffffffffffffda RBX: 00007fc40e815fa0 RCX: 00007fc40e59c629 [ 165.860863][T11178] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 165.860873][T11178] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000000 [ 165.860885][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.860920][T11178] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 165.860944][T11178] [ 166.293109][ T46] batadv0: left promiscuous mode [ 166.302381][ T46] hsr_slave_0: left promiscuous mode [ 166.305023][ T46] hsr_slave_1: left promiscuous mode [ 166.307688][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.310560][ T5933] Bluetooth: hci4: command tx timeout [ 166.313840][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.318860][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.321677][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.335942][ T46] veth1_macvtap: left promiscuous mode [ 166.338909][ T46] veth0_macvtap: left promiscuous mode [ 166.343420][ T46] veth1_vlan: left promiscuous mode [ 166.345784][ T46] veth0_vlan: left promiscuous mode [ 166.541228][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 166.568440][ T46] team0 (unregistering): Port device team_slave_0 removed [ 166.605443][ T40] audit: type=1400 audit(422.511:27390): avc: denied { ioctl } for pid=11215 comm="syz.1.1996" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.623431][T11220] XFS (nullb0): Invalid superblock magic number [ 166.714860][T11103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.722910][T11103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.732741][T11103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.739803][T11103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.846604][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.866869][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.874275][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.877162][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.891795][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.894641][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.029440][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.062730][T11103] veth0_vlan: entered promiscuous mode [ 167.067546][T11103] veth1_vlan: entered promiscuous mode [ 167.084419][T11103] veth0_macvtap: entered promiscuous mode [ 167.090002][T11103] veth1_macvtap: entered promiscuous mode [ 167.104704][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.110847][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.116459][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.121243][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.124074][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.130854][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.218121][T11283] FAULT_INJECTION: forcing a failure. [ 167.218121][T11283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.222437][T11283] CPU: 3 UID: 0 PID: 11283 Comm: syz.2.2015 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.222454][T11283] Tainted: [L]=SOFTLOCKUP [ 167.222458][T11283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.222464][T11283] Call Trace: [ 167.222469][T11283] [ 167.222474][T11283] dump_stack_lvl+0x100/0x190 [ 167.222498][T11283] should_fail_ex.cold+0x5/0xa [ 167.222513][T11283] _copy_to_user+0x32/0xd0 [ 167.222536][T11283] simple_read_from_buffer+0xcb/0x170 [ 167.222583][T11283] proc_fail_nth_read+0x1af/0x230 [ 167.222675][T11283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.222690][T11283] ? rw_verify_area+0xce/0x6d0 [ 167.222705][T11283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.222719][T11283] vfs_read+0x1e4/0xb30 [ 167.222736][T11283] ? __pfx_vfs_read+0x10/0x10 [ 167.222751][T11283] ? __fget_files+0x215/0x3d0 [ 167.222765][T11283] ? __fget_files+0x21f/0x3d0 [ 167.222779][T11283] ksys_read+0x12a/0x250 [ 167.222794][T11283] ? __pfx_ksys_read+0x10/0x10 [ 167.222814][T11283] do_syscall_64+0x106/0xf80 [ 167.222824][T11283] ? clear_bhb_loop+0x40/0x90 [ 167.222838][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.222849][T11283] RIP: 0033:0x7f207195cece [ 167.222859][T11283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.222870][T11283] RSP: 002b:00007f207279dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.222881][T11283] RAX: ffffffffffffffda RBX: 00007f207279e6c0 RCX: 00007f207195cece [ 167.222888][T11283] RDX: 000000000000000f RSI: 00007f207279e0a0 RDI: 0000000000000006 [ 167.222894][T11283] RBP: 00007f207279e090 R08: 0000000000000000 R09: 0000000000000000 [ 167.222901][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.222907][T11283] R13: 00007f2071c16038 R14: 00007f2071c15fa0 R15: 00007ffd5c8da998 [ 167.222922][T11283] [ 167.224929][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.239377][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.312821][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'. [ 167.335876][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.339243][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.359892][ T40] audit: type=1400 audit(423.261:27391): avc: denied { mounton } for pid=11103 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 167.369598][ T40] audit: type=1400 audit(423.271:27392): avc: denied { mounton } for pid=11103 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 167.576716][T11315] batman_adv: batadv0: Adding interface: dummy0 [ 167.579673][T11315] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.598163][T11315] batman_adv: batadv0: Interface activated: dummy0 [ 167.621121][T11315] batadv0: mtu less than device minimum [ 167.623579][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.626811][T11321] binder: 11320:11321 ioctl c0306201 200000000640 returned -22 [ 167.627541][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.634407][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.638257][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.642300][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.646335][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.650270][T11315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.672098][T11316] wireguard0: entered allmulticast mode [ 167.678663][T11316] binder: 11313:11316 unknown command 1 [ 167.681238][T11316] binder: 11313:11316 ioctl c0306201 200000000300 returned -22 [ 167.683816][T11325] netlink: 'syz.3.2032': attribute type 4 has an invalid length. [ 167.980793][T11353] FAULT_INJECTION: forcing a failure. [ 167.980793][T11353] name failslab, interval 1, probability 0, space 0, times 0 [ 167.984715][T11353] CPU: 3 UID: 0 PID: 11353 Comm: syz.2.2045 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.984732][T11353] Tainted: [L]=SOFTLOCKUP [ 167.984736][T11353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.984742][T11353] Call Trace: [ 167.984746][T11353] [ 167.984751][T11353] dump_stack_lvl+0x100/0x190 [ 167.984775][T11353] should_fail_ex.cold+0x5/0xa [ 167.984791][T11353] should_failslab+0xc2/0x120 [ 167.984810][T11353] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 167.984825][T11353] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 167.984850][T11353] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 167.984889][T11353] mmu_topup_memory_caches+0x25/0x170 [ 167.984906][T11353] kvm_mmu_load+0xd6/0x23e0 [ 167.984917][T11353] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 167.984933][T11353] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 167.984950][T11353] ? __pfx_kvm_mmu_load+0x10/0x10 [ 167.984960][T11353] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 167.984978][T11353] ? kvm_check_and_inject_events+0x961/0x10c0 [ 167.984991][T11353] ? record_steal_time+0x370/0xbe0 [ 167.985009][T11353] vcpu_run+0x39f4/0x5ca0 [ 167.985027][T11353] ? __pfx_vcpu_run+0x10/0x10 [ 167.985044][T11353] ? rcu_is_watching+0x12/0xc0 [ 167.985060][T11353] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 167.985072][T11353] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 167.985089][T11353] kvm_vcpu_ioctl+0x730/0x1730 [ 167.985106][T11353] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 167.985122][T11353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.985139][T11353] ? do_vfs_ioctl+0x226/0x13e0 [ 167.985155][T11353] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.985171][T11353] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 167.985190][T11353] ? __fget_files+0x215/0x3d0 [ 167.985200][T11353] ? hook_file_ioctl_common+0x146/0x410 [ 167.985219][T11353] ? selinux_file_ioctl+0x139/0x290 [ 167.985230][T11353] ? selinux_file_ioctl+0xb4/0x290 [ 167.985243][T11353] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 167.985259][T11353] __x64_sys_ioctl+0x18e/0x210 [ 167.985275][T11353] do_syscall_64+0x106/0xf80 [ 167.985287][T11353] ? clear_bhb_loop+0x40/0x90 [ 167.985301][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.985311][T11353] RIP: 0033:0x7f207199c629 [ 167.985322][T11353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.985332][T11353] RSP: 002b:00007f207279e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.985343][T11353] RAX: ffffffffffffffda RBX: 00007f2071c15fa0 RCX: 00007f207199c629 [ 167.985350][T11353] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 167.985356][T11353] RBP: 00007f207279e090 R08: 0000000000000000 R09: 0000000000000000 [ 167.985363][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.985369][T11353] R13: 00007f2071c16038 R14: 00007f2071c15fa0 R15: 00007ffd5c8da998 [ 167.985384][T11353] [ 168.267377][T11372] FAULT_INJECTION: forcing a failure. [ 168.267377][T11372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.271843][T11372] CPU: 2 UID: 0 PID: 11372 Comm: syz.1.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.271861][T11372] Tainted: [L]=SOFTLOCKUP [ 168.271865][T11372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.271872][T11372] Call Trace: [ 168.271876][T11372] [ 168.271881][T11372] dump_stack_lvl+0x100/0x190 [ 168.271913][T11372] should_fail_ex.cold+0x5/0xa [ 168.271935][T11372] _copy_to_user+0x32/0xd0 [ 168.271953][T11372] msr_io+0x3c4/0x480 [ 168.271966][T11372] ? __pfx_do_get_msr+0x10/0x10 [ 168.271982][T11372] ? __pfx_msr_io+0x10/0x10 [ 168.271994][T11372] ? __kernel_text_address+0xd/0x30 [ 168.272039][T11372] kvm_arch_vcpu_ioctl+0x1968/0x5740 [ 168.272053][T11372] ? kvm_arch_vcpu_ioctl+0x1940/0x5740 [ 168.272071][T11372] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 168.272083][T11372] ? __pfx_stack_trace_save+0x10/0x10 [ 168.272099][T11372] ? stack_depot_save_flags+0x27/0x9d0 [ 168.272116][T11372] ? __lock_acquire+0x4a5/0x2630 [ 168.272159][T11372] ? tomoyo_path_number_perm+0x46d/0x580 [ 168.272179][T11372] ? __lock_acquire+0x4a5/0x2630 [ 168.272196][T11372] ? do_syscall_64+0x106/0xf80 [ 168.272208][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.272225][T11372] ? lock_acquire+0x1cf/0x380 [ 168.272244][T11372] ? rcu_is_watching+0x12/0xc0 [ 168.272258][T11372] ? trace_contention_end+0x140/0x180 [ 168.272269][T11372] ? __mutex_lock+0x26a/0x1b90 [ 168.272282][T11372] ? kvm_vcpu_ioctl+0x322/0x1730 [ 168.272301][T11372] ? __pfx___mutex_lock+0x10/0x10 [ 168.272312][T11372] ? kasan_quarantine_put+0x104/0x240 [ 168.272347][T11372] ? lockdep_hardirqs_on+0x78/0x100 [ 168.272359][T11372] ? tomoyo_path_number_perm+0x28f/0x580 [ 168.272380][T11372] ? tomoyo_path_number_perm+0x188/0x580 [ 168.272399][T11372] ? kvm_vcpu_ioctl+0x8a0/0x1730 [ 168.272413][T11372] kvm_vcpu_ioctl+0x8a0/0x1730 [ 168.272430][T11372] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.272446][T11372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.272463][T11372] ? do_vfs_ioctl+0x226/0x13e0 [ 168.272479][T11372] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 168.272494][T11372] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 168.272511][T11372] ? __fget_files+0x215/0x3d0 [ 168.272520][T11372] ? hook_file_ioctl_common+0x146/0x410 [ 168.272539][T11372] ? selinux_file_ioctl+0x139/0x290 [ 168.272550][T11372] ? selinux_file_ioctl+0xb4/0x290 [ 168.272564][T11372] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 168.272583][T11372] __x64_sys_ioctl+0x18e/0x210 [ 168.272607][T11372] do_syscall_64+0x106/0xf80 [ 168.272619][T11372] ? clear_bhb_loop+0x40/0x90 [ 168.272633][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.272644][T11372] RIP: 0033:0x7fc40e59c629 [ 168.272654][T11372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.272664][T11372] RSP: 002b:00007fc40f431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.272676][T11372] RAX: ffffffffffffffda RBX: 00007fc40e815fa0 RCX: 00007fc40e59c629 [ 168.272683][T11372] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 168.272690][T11372] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000000 [ 168.272696][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.272702][T11372] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 168.272717][T11372] [ 168.433869][T11377] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 168.438755][T11377] overlayfs: missing 'lowerdir' [ 168.677326][ T40] audit: type=1400 audit(424.581:27393): avc: denied { connect } for pid=11381 comm="syz.2.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.854493][T11404] syzkaller1: entered promiscuous mode [ 168.856952][T11404] syzkaller1: entered allmulticast mode [ 169.086847][T11411] FAULT_INJECTION: forcing a failure. [ 169.086847][T11411] name failslab, interval 1, probability 0, space 0, times 0 [ 169.092682][T11411] CPU: 3 UID: 0 PID: 11411 Comm: syz.1.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.092711][T11411] Tainted: [L]=SOFTLOCKUP [ 169.092718][T11411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.092729][T11411] Call Trace: [ 169.092737][T11411] [ 169.092745][T11411] dump_stack_lvl+0x100/0x190 [ 169.092782][T11411] should_fail_ex.cold+0x5/0xa [ 169.092807][T11411] should_failslab+0xc2/0x120 [ 169.092843][T11411] __kvmalloc_node_noprof+0xfa/0xa00 [ 169.092891][T11411] ? seq_read_iter+0x819/0x1270 [ 169.092925][T11411] seq_read_iter+0x819/0x1270 [ 169.092963][T11411] seq_read+0x33b/0x4c0 [ 169.092991][T11411] ? __pfx_seq_read+0x10/0x10 [ 169.093023][T11411] ? avc_policy_seqno+0x9/0x20 [ 169.093047][T11411] ? selinux_file_permission+0x8f/0x6d0 [ 169.093072][T11411] ? rw_verify_area+0xce/0x6d0 [ 169.093096][T11411] ? __pfx_seq_read+0x10/0x10 [ 169.093123][T11411] vfs_read+0x1e4/0xb30 [ 169.093152][T11411] ? __pfx_vfs_read+0x10/0x10 [ 169.093175][T11411] ? __fget_files+0x215/0x3d0 [ 169.093198][T11411] ? __fget_files+0x21f/0x3d0 [ 169.093223][T11411] ksys_read+0x12a/0x250 [ 169.093248][T11411] ? __pfx_ksys_read+0x10/0x10 [ 169.093279][T11411] do_syscall_64+0x106/0xf80 [ 169.093298][T11411] ? clear_bhb_loop+0x40/0x90 [ 169.093321][T11411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.093339][T11411] RIP: 0033:0x7fc40e59c629 [ 169.093356][T11411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.093373][T11411] RSP: 002b:00007fc40f431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.093390][T11411] RAX: ffffffffffffffda RBX: 00007fc40e815fa0 RCX: 00007fc40e59c629 [ 169.093401][T11411] RDX: 0000000000002020 RSI: 00002000000040c0 RDI: 0000000000000003 [ 169.093413][T11411] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000000 [ 169.093423][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.093434][T11411] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 169.093459][T11411] [ 169.544304][T11420] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 169.547951][T11420] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2072'. [ 169.617880][ T40] audit: type=1400 audit(425.521:27394): avc: denied { setopt } for pid=11425 comm="syz.0.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.660826][ T5933] Bluetooth: hci4: command tx timeout [ 169.678848][ T40] audit: type=1400 audit(425.581:27395): avc: denied { ioctl } for pid=11425 comm="syz.0.2075" path="socket:[56413]" dev="sockfs" ino=56413 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.789938][T11449] i2c i2c-1: dtv_property_process_set: SET cmd 0x678ec0c0 undefined [ 169.793338][T11450] i2c i2c-1: dtv_property_process_set: SET cmd 0x678ec0c0 undefined [ 169.843932][T11455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2086'. [ 170.227620][T11468] FAULT_INJECTION: forcing a failure. [ 170.227620][T11468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.232018][T11468] CPU: 3 UID: 0 PID: 11468 Comm: syz.2.2091 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.232036][T11468] Tainted: [L]=SOFTLOCKUP [ 170.232041][T11468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.232048][T11468] Call Trace: [ 170.232053][T11468] [ 170.232058][T11468] dump_stack_lvl+0x100/0x190 [ 170.232249][T11468] should_fail_ex.cold+0x5/0xa [ 170.232329][T11468] _copy_from_iter+0x1f4/0x1690 [ 170.232423][T11468] ? ieee802154_header_create+0x3bf/0x5e0 [ 170.232579][T11468] ? __pfx__copy_from_iter+0x10/0x10 [ 170.232606][T11468] dgram_sendmsg+0x97e/0xf50 [ 170.232618][T11468] ? __pfx_dgram_sendmsg+0x10/0x10 [ 170.232635][T11468] ____sys_sendmsg+0xa54/0xc30 [ 170.232740][T11468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.232759][T11468] ___sys_sendmsg+0x190/0x1e0 [ 170.232775][T11468] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.232809][T11468] __sys_sendmsg+0x170/0x220 [ 170.232819][T11468] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.232838][T11468] do_syscall_64+0x106/0xf80 [ 170.232928][T11468] ? clear_bhb_loop+0x40/0x90 [ 170.232949][T11468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.232960][T11468] RIP: 0033:0x7f207199c629 [ 170.232970][T11468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.232981][T11468] RSP: 002b:00007f207279e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.232992][T11468] RAX: ffffffffffffffda RBX: 00007f2071c15fa0 RCX: 00007f207199c629 [ 170.232998][T11468] RDX: 0000000000000040 RSI: 0000200000000940 RDI: 0000000000000004 [ 170.233005][T11468] RBP: 00007f207279e090 R08: 0000000000000000 R09: 0000000000000000 [ 170.233011][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.233018][T11468] R13: 00007f2071c16038 R14: 00007f2071c15fa0 R15: 00007ffd5c8da998 [ 170.233032][T11468] [ 170.342710][T11470] net_ratelimit: 12 callbacks suppressed [ 170.342724][T11470] openvswitch: netlink: IP tunnel dst address not specified [ 170.373603][T11470] ptrace attach of "/syz-executor exec"[11472] was attempted by "/syz-executor exec"[11470] [ 170.478351][T11476] FAULT_INJECTION: forcing a failure. [ 170.478351][T11476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.482854][T11476] CPU: 2 UID: 0 PID: 11476 Comm: syz.2.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.482882][T11476] Tainted: [L]=SOFTLOCKUP [ 170.482888][T11476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.482900][T11476] Call Trace: [ 170.482907][T11476] [ 170.482915][T11476] dump_stack_lvl+0x100/0x190 [ 170.482951][T11476] should_fail_ex.cold+0x5/0xa [ 170.482972][T11476] ? prepare_alloc_pages+0x16d/0x5f0 [ 170.483077][T11476] should_fail_alloc_page+0xeb/0x140 [ 170.483150][T11476] prepare_alloc_pages+0x1f0/0x5f0 [ 170.483173][T11476] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 170.483198][T11476] ? filter_irq_stacks+0x11/0x90 [ 170.483260][T11476] ? stack_depot_save_flags+0x27/0x9d0 [ 170.483293][T11476] ? kasan_save_stack+0x3f/0x50 [ 170.483316][T11476] ? kasan_save_stack+0x30/0x50 [ 170.483339][T11476] ? kasan_save_track+0x14/0x30 [ 170.483361][T11476] ? __kasan_kmalloc+0xaa/0xb0 [ 170.483381][T11476] ? __kvmalloc_node_noprof+0x360/0xa00 [ 170.483406][T11476] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 170.483454][T11476] ? mmu_topup_memory_caches+0xbc/0x170 [ 170.483494][T11476] ? kvm_mmu_load+0xd6/0x23e0 [ 170.483512][T11476] ? vcpu_run+0x39f4/0x5ca0 [ 170.483553][T11476] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 170.483574][T11476] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.483597][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.483636][T11476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.483689][T11476] ? policy_nodemask+0xed/0x4f0 [ 170.483722][T11476] alloc_pages_mpol+0x1fb/0x550 [ 170.483751][T11476] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 170.483779][T11476] ? __kasan_kmalloc+0xaa/0xb0 [ 170.483809][T11476] alloc_pages_noprof+0x131/0x390 [ 170.483843][T11476] get_free_pages_noprof+0x10/0xb0 [ 170.483872][T11476] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 170.483907][T11476] mmu_topup_memory_caches+0xbc/0x170 [ 170.483927][T11476] kvm_mmu_load+0xd6/0x23e0 [ 170.483945][T11476] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 170.483972][T11476] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 170.484001][T11476] ? __pfx_kvm_mmu_load+0x10/0x10 [ 170.484019][T11476] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 170.484047][T11476] ? kvm_check_and_inject_events+0x961/0x10c0 [ 170.484066][T11476] ? record_steal_time+0x370/0xbe0 [ 170.484096][T11476] vcpu_run+0x39f4/0x5ca0 [ 170.484127][T11476] ? __pfx_vcpu_run+0x10/0x10 [ 170.484157][T11476] ? rcu_is_watching+0x12/0xc0 [ 170.484184][T11476] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 170.484203][T11476] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 170.484228][T11476] kvm_vcpu_ioctl+0x730/0x1730 [ 170.484257][T11476] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.484284][T11476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.484309][T11476] ? do_vfs_ioctl+0x226/0x13e0 [ 170.484360][T11476] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.484385][T11476] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 170.484436][T11476] ? __fget_files+0x215/0x3d0 [ 170.484451][T11476] ? hook_file_ioctl_common+0x146/0x410 [ 170.484484][T11476] ? selinux_file_ioctl+0x139/0x290 [ 170.484503][T11476] ? selinux_file_ioctl+0xb4/0x290 [ 170.484524][T11476] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.484552][T11476] __x64_sys_ioctl+0x18e/0x210 [ 170.484577][T11476] do_syscall_64+0x106/0xf80 [ 170.484596][T11476] ? clear_bhb_loop+0x40/0x90 [ 170.484619][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.484637][T11476] RIP: 0033:0x7f207199c629 [ 170.484653][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.484670][T11476] RSP: 002b:00007f207279e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.484688][T11476] RAX: ffffffffffffffda RBX: 00007f2071c15fa0 RCX: 00007f207199c629 [ 170.484699][T11476] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 170.484710][T11476] RBP: 00007f207279e090 R08: 0000000000000000 R09: 0000000000000000 [ 170.484721][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.484731][T11476] R13: 00007f2071c16038 R14: 00007f2071c15fa0 R15: 00007ffd5c8da998 [ 170.484756][T11476] [ 170.830012][T11483] FAULT_INJECTION: forcing a failure. [ 170.830012][T11483] name failslab, interval 1, probability 0, space 0, times 0 [ 170.834751][T11483] CPU: 1 UID: 0 PID: 11483 Comm: syz.2.2096 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.834782][T11483] Tainted: [L]=SOFTLOCKUP [ 170.834788][T11483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.834798][T11483] Call Trace: [ 170.834807][T11483] [ 170.834814][T11483] dump_stack_lvl+0x100/0x190 [ 170.834846][T11483] should_fail_ex.cold+0x5/0xa [ 170.834869][T11483] should_failslab+0xc2/0x120 [ 170.834890][T11483] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 170.834905][T11483] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 170.834926][T11483] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 170.834947][T11483] mmu_topup_memory_caches+0x25/0x170 [ 170.834961][T11483] kvm_mmu_load+0xd6/0x23e0 [ 170.834973][T11483] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 170.834988][T11483] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 170.835005][T11483] ? __pfx_kvm_mmu_load+0x10/0x10 [ 170.835016][T11483] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 170.835033][T11483] ? kvm_check_and_inject_events+0x961/0x10c0 [ 170.835045][T11483] ? record_steal_time+0x370/0xbe0 [ 170.835063][T11483] vcpu_run+0x39f4/0x5ca0 [ 170.835080][T11483] ? __pfx_vcpu_run+0x10/0x10 [ 170.835098][T11483] ? rcu_is_watching+0x12/0xc0 [ 170.835113][T11483] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 170.835126][T11483] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 170.835142][T11483] kvm_vcpu_ioctl+0x730/0x1730 [ 170.835159][T11483] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.835175][T11483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.835192][T11483] ? do_vfs_ioctl+0x226/0x13e0 [ 170.835209][T11483] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 170.835224][T11483] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 170.835242][T11483] ? __fget_files+0x215/0x3d0 [ 170.835251][T11483] ? hook_file_ioctl_common+0x146/0x410 [ 170.835270][T11483] ? selinux_file_ioctl+0x139/0x290 [ 170.835281][T11483] ? selinux_file_ioctl+0xb4/0x290 [ 170.835293][T11483] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 170.835309][T11483] __x64_sys_ioctl+0x18e/0x210 [ 170.835325][T11483] do_syscall_64+0x106/0xf80 [ 170.835338][T11483] ? clear_bhb_loop+0x40/0x90 [ 170.835364][T11483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.835375][T11483] RIP: 0033:0x7f207199c629 [ 170.835385][T11483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.835396][T11483] RSP: 002b:00007f207277d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.835407][T11483] RAX: ffffffffffffffda RBX: 00007f2071c16090 RCX: 00007f207199c629 [ 170.835414][T11483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 170.835420][T11483] RBP: 00007f207277d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.835426][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.835433][T11483] R13: 00007f2071c16128 R14: 00007f2071c16090 R15: 00007ffd5c8da998 [ 170.835447][T11483] [ 170.968917][T11487] netlink: 'syz.1.2098': attribute type 5 has an invalid length. [ 171.060839][T11495] misc userio: Begin command sent, but we're already running [ 171.063965][T11495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2102'. [ 171.163360][T11500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.238916][T11500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.263381][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 171.297085][T11500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.392016][T11500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.537500][ T40] audit: type=1400 audit(427.441:27396): avc: denied { append } for pid=11510 comm="syz.3.2108" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 171.587253][ T120] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.596754][ T120] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.606794][ T1157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.615962][ T1157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.740146][ T5928] Bluetooth: hci4: command tx timeout [ 171.782642][ T6944] libceph: connect (1)[c::]:6789 error -101 [ 171.785071][ T6944] libceph: mon0 (1)[c::]:6789 connect error [ 171.827193][ T6944] libceph: connect (1)[b::]:6789 error -101 [ 171.829319][ T6944] libceph: mon0 (1)[b::]:6789 connect error [ 171.869981][T11524] ceph: No mds server is up or the cluster is laggy [ 171.870259][T11530] ceph: No mds server is up or the cluster is laggy [ 171.932265][T11536] tmpfs: Bad value for 'mpol' [ 171.934001][T11536] tmpfs: Bad value for 'mpol' [ 171.936311][T11536] xt_hashlimit: size too large, truncated to 1048576 [ 171.947202][ T40] audit: type=1400 audit(427.851:27397): avc: denied { mount } for pid=11538 comm="syz.3.2117" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 172.667761][ T40] audit: type=1400 audit(428.571:27398): avc: denied { connect } for pid=11570 comm="syz.1.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.739512][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 173.172774][T11600] FAULT_INJECTION: forcing a failure. [ 173.172774][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 173.178219][T11600] CPU: 3 UID: 0 PID: 11600 Comm: syz.0.2140 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.178247][T11600] Tainted: [L]=SOFTLOCKUP [ 173.178253][T11600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.178264][T11600] Call Trace: [ 173.178271][T11600] [ 173.178279][T11600] dump_stack_lvl+0x100/0x190 [ 173.178314][T11600] should_fail_ex.cold+0x5/0xa [ 173.178338][T11600] ? tomoyo_encode2+0xfb/0x3c0 [ 173.178358][T11600] should_failslab+0xc2/0x120 [ 173.178387][T11600] __kmalloc_noprof+0xe0/0x850 [ 173.178409][T11600] ? d_absolute_path+0x136/0x1b0 [ 173.178495][T11600] tomoyo_encode2+0xfb/0x3c0 [ 173.178519][T11600] tomoyo_encode+0x29/0x50 [ 173.178539][T11600] tomoyo_realpath_from_path+0x18c/0x690 [ 173.178566][T11600] tomoyo_path_number_perm+0x23c/0x580 [ 173.178594][T11600] ? tomoyo_path_number_perm+0x22e/0x580 [ 173.178623][T11600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.178678][T11600] ? find_held_lock+0x2b/0x80 [ 173.178742][T11600] ? __fget_files+0x215/0x3d0 [ 173.178757][T11600] ? hook_file_ioctl_common+0x146/0x410 [ 173.178785][T11600] ? __fget_files+0x21f/0x3d0 [ 173.178807][T11600] security_file_ioctl+0xd3/0x230 [ 173.178829][T11600] __x64_sys_ioctl+0xb7/0x210 [ 173.178856][T11600] do_syscall_64+0x106/0xf80 [ 173.178876][T11600] ? clear_bhb_loop+0x40/0x90 [ 173.178899][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.178917][T11600] RIP: 0033:0x7fdf00f9c629 [ 173.178943][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.178960][T11600] RSP: 002b:00007fdf01da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.178977][T11600] RAX: ffffffffffffffda RBX: 00007fdf01215fa0 RCX: 00007fdf00f9c629 [ 173.178990][T11600] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 173.179001][T11600] RBP: 00007fdf01da7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.179012][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.179022][T11600] R13: 00007fdf01216038 R14: 00007fdf01215fa0 R15: 00007fffc3f3cf58 [ 173.179047][T11600] [ 173.179082][T11600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.339841][ T5933] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 173.340029][ T63] Bluetooth: hci3: command 0x1003 tx timeout [ 173.476353][T11615] netlink: 'syz.3.2147': attribute type 14 has an invalid length. [ 173.503223][ T40] audit: type=1400 audit(429.411:27399): avc: denied { bind } for pid=11608 comm="syz.2.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.510181][ T40] audit: type=1400 audit(429.411:27400): avc: denied { write } for pid=11608 comm="syz.2.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.599062][T11627] binder: 11626:11627 ioctl c0306201 200000000300 returned -22 [ 173.623907][T11629] ip6gre1: entered allmulticast mode [ 173.628269][T11629] team0: Device ip6gre1 is of different type [ 173.883423][T11652] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2163'. [ 173.887472][T11652] batman_adv: batadv0: Interface deactivated: dummy0 [ 173.906645][T11652] batman_adv: batadv0: Removing interface: dummy0 [ 174.097446][T11658] overlayfs: missing 'lowerdir' [ 174.124558][ T40] audit: type=1400 audit(430.031:27401): avc: denied { listen } for pid=11659 comm="syz.2.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 174.381649][T11674] FAULT_INJECTION: forcing a failure. [ 174.381649][T11674] name failslab, interval 1, probability 0, space 0, times 0 [ 174.386853][T11674] CPU: 1 UID: 0 PID: 11674 Comm: syz.1.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.386871][T11674] Tainted: [L]=SOFTLOCKUP [ 174.386875][T11674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.386882][T11674] Call Trace: [ 174.386889][T11674] [ 174.386895][T11674] dump_stack_lvl+0x100/0x190 [ 174.386921][T11674] should_fail_ex.cold+0x5/0xa [ 174.386936][T11674] ? tomoyo_realpath_from_path+0xb6/0x690 [ 174.386951][T11674] should_failslab+0xc2/0x120 [ 174.386969][T11674] __kmalloc_noprof+0xe0/0x850 [ 174.386988][T11674] tomoyo_realpath_from_path+0xb6/0x690 [ 174.387004][T11674] tomoyo_path_number_perm+0x23c/0x580 [ 174.387020][T11674] ? tomoyo_path_number_perm+0x22e/0x580 [ 174.387038][T11674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.387069][T11674] ? find_held_lock+0x2b/0x80 [ 174.387083][T11674] ? __fget_files+0x215/0x3d0 [ 174.387094][T11674] ? hook_file_ioctl_common+0x146/0x410 [ 174.387111][T11674] ? __fget_files+0x21f/0x3d0 [ 174.387124][T11674] security_file_ioctl+0xd3/0x230 [ 174.387136][T11674] __x64_sys_ioctl+0xb7/0x210 [ 174.387152][T11674] do_syscall_64+0x106/0xf80 [ 174.387164][T11674] ? clear_bhb_loop+0x40/0x90 [ 174.387178][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.387189][T11674] RIP: 0033:0x7fc40e59c629 [ 174.387199][T11674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.387209][T11674] RSP: 002b:00007fc40f431028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.387221][T11674] RAX: ffffffffffffffda RBX: 00007fc40e815fa0 RCX: 00007fc40e59c629 [ 174.387228][T11674] RDX: 0000200000000740 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 174.387235][T11674] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000000 [ 174.387241][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.387247][T11674] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 174.387261][T11674] [ 174.387266][T11674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.465964][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 174.520994][T11683] overlayfs: missing 'lowerdir' [ 174.850091][ T40] audit: type=1400 audit(430.761:27402): avc: denied { append } for pid=11699 comm="syz.2.2180" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.972378][T11698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=11698 comm=syz.1.2185 [ 175.045606][T11705] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.049414][T11705] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 175.149353][ T40] audit: type=1400 audit(431.051:27403): avc: denied { map } for pid=11708 comm="syz.2.2189" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 175.340154][ T5933] Bluetooth: hci5: command 0x1003 tx timeout [ 175.341498][ T5928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.270212][ T40] audit: type=1400 audit(432.181:27404): avc: denied { mount } for pid=11732 comm="syz.0.2198" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.579506][ T40] audit: type=1400 audit(432.481:27405): avc: denied { getopt } for pid=11746 comm="syz.1.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.605342][T11760] FAULT_INJECTION: forcing a failure. [ 176.605342][T11760] name failslab, interval 1, probability 0, space 0, times 0 [ 176.610999][T11760] CPU: 3 UID: 0 PID: 11760 Comm: syz.3.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.611017][T11760] Tainted: [L]=SOFTLOCKUP [ 176.611022][T11760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.611029][T11760] Call Trace: [ 176.611032][T11760] [ 176.611038][T11760] dump_stack_lvl+0x100/0x190 [ 176.611071][T11760] should_fail_ex.cold+0x5/0xa [ 176.611086][T11760] should_failslab+0xc2/0x120 [ 176.611105][T11760] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 176.611120][T11760] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 176.611141][T11760] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 176.611161][T11760] mmu_topup_memory_caches+0x25/0x170 [ 176.611175][T11760] kvm_mmu_load+0xd6/0x23e0 [ 176.611186][T11760] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 176.611202][T11760] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 176.611218][T11760] ? __pfx_kvm_mmu_load+0x10/0x10 [ 176.611229][T11760] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 176.611251][T11760] ? kvm_check_and_inject_events+0x961/0x10c0 [ 176.611270][T11760] ? record_steal_time+0x370/0xbe0 [ 176.611330][T11760] vcpu_run+0x39f4/0x5ca0 [ 176.611348][T11760] ? __pfx_vcpu_run+0x10/0x10 [ 176.611373][T11760] ? rcu_is_watching+0x12/0xc0 [ 176.611418][T11760] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 176.611436][T11760] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 176.611464][T11760] kvm_vcpu_ioctl+0x730/0x1730 [ 176.611491][T11760] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.611515][T11760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.611544][T11760] ? do_vfs_ioctl+0x226/0x13e0 [ 176.611571][T11760] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.611596][T11760] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.611626][T11760] ? __fget_files+0x215/0x3d0 [ 176.611643][T11760] ? hook_file_ioctl_common+0x146/0x410 [ 176.611679][T11760] ? selinux_file_ioctl+0x139/0x290 [ 176.611697][T11760] ? selinux_file_ioctl+0xb4/0x290 [ 176.611717][T11760] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.611744][T11760] __x64_sys_ioctl+0x18e/0x210 [ 176.611768][T11760] do_syscall_64+0x106/0xf80 [ 176.611785][T11760] ? clear_bhb_loop+0x40/0x90 [ 176.611809][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.611828][T11760] RIP: 0033:0x7f7057b9c629 [ 176.611844][T11760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.611862][T11760] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.611880][T11760] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 176.611892][T11760] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 176.611903][T11760] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000000 [ 176.611915][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.611925][T11760] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 176.611951][T11760] [ 176.635981][T11763] netlink: 'syz.1.2208': attribute type 9 has an invalid length. [ 176.724782][T11763] netlink: 'syz.1.2208': attribute type 11 has an invalid length. [ 176.727832][T11763] netlink: 'syz.1.2208': attribute type 12 has an invalid length. [ 176.730997][T11763] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2208'. [ 176.734693][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 176.871821][T11769] FAULT_INJECTION: forcing a failure. [ 176.871821][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 176.876752][T11769] CPU: 3 UID: 0 PID: 11769 Comm: syz.3.2211 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.876770][T11769] Tainted: [L]=SOFTLOCKUP [ 176.876774][T11769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.876781][T11769] Call Trace: [ 176.876786][T11769] [ 176.876813][T11769] dump_stack_lvl+0x100/0x190 [ 176.876846][T11769] should_fail_ex.cold+0x5/0xa [ 176.876868][T11769] should_failslab+0xc2/0x120 [ 176.876887][T11769] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 176.876902][T11769] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 176.876923][T11769] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 176.876944][T11769] mmu_topup_memory_caches+0x25/0x170 [ 176.876958][T11769] kvm_mmu_load+0xd6/0x23e0 [ 176.876969][T11769] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 176.876985][T11769] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 176.877001][T11769] ? __pfx_kvm_mmu_load+0x10/0x10 [ 176.877012][T11769] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 176.877030][T11769] ? kvm_check_and_inject_events+0x961/0x10c0 [ 176.877043][T11769] ? record_steal_time+0x370/0xbe0 [ 176.877060][T11769] vcpu_run+0x39f4/0x5ca0 [ 176.877078][T11769] ? __pfx_vcpu_run+0x10/0x10 [ 176.877095][T11769] ? rcu_is_watching+0x12/0xc0 [ 176.877110][T11769] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 176.877123][T11769] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 176.877140][T11769] kvm_vcpu_ioctl+0x730/0x1730 [ 176.877157][T11769] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.877173][T11769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.877189][T11769] ? do_vfs_ioctl+0x226/0x13e0 [ 176.877206][T11769] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.877221][T11769] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.877240][T11769] ? __fget_files+0x215/0x3d0 [ 176.877250][T11769] ? hook_file_ioctl_common+0x146/0x410 [ 176.877269][T11769] ? selinux_file_ioctl+0x139/0x290 [ 176.877281][T11769] ? selinux_file_ioctl+0xb4/0x290 [ 176.877293][T11769] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.877309][T11769] __x64_sys_ioctl+0x18e/0x210 [ 176.877325][T11769] do_syscall_64+0x106/0xf80 [ 176.877336][T11769] ? clear_bhb_loop+0x40/0x90 [ 176.877351][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.877362][T11769] RIP: 0033:0x7f7057b9c629 [ 176.877371][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.877382][T11769] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.877395][T11769] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 176.877401][T11769] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 176.877408][T11769] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000000 [ 176.877414][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.877421][T11769] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 176.877437][T11769] [ 176.885258][T11775] overlayfs: missing 'workdir' [ 177.091093][T11778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57373 sclass=netlink_route_socket pid=11778 comm=syz.1.2214 [ 177.464720][T11802] overlayfs: missing 'workdir' [ 177.525891][T11809] FAULT_INJECTION: forcing a failure. [ 177.525891][T11809] name failslab, interval 1, probability 0, space 0, times 0 [ 177.531453][T11809] CPU: 3 UID: 0 PID: 11809 Comm: syz.3.2224 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.531481][T11809] Tainted: [L]=SOFTLOCKUP [ 177.531489][T11809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.531500][T11809] Call Trace: [ 177.531507][T11809] [ 177.531514][T11809] dump_stack_lvl+0x100/0x190 [ 177.531551][T11809] should_fail_ex.cold+0x5/0xa [ 177.531577][T11809] ? tomoyo_realpath_from_path+0xb6/0x690 [ 177.531598][T11809] should_failslab+0xc2/0x120 [ 177.531625][T11809] __kmalloc_noprof+0xe0/0x850 [ 177.531657][T11809] tomoyo_realpath_from_path+0xb6/0x690 [ 177.531691][T11809] tomoyo_path_number_perm+0x23c/0x580 [ 177.531719][T11809] ? tomoyo_path_number_perm+0x22e/0x580 [ 177.531749][T11809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.531805][T11809] ? find_held_lock+0x2b/0x80 [ 177.531829][T11809] ? __fget_files+0x215/0x3d0 [ 177.531847][T11809] ? hook_file_ioctl_common+0x146/0x410 [ 177.531874][T11809] ? __fget_files+0x21f/0x3d0 [ 177.531896][T11809] security_file_ioctl+0xd3/0x230 [ 177.531919][T11809] __x64_sys_ioctl+0xb7/0x210 [ 177.531943][T11809] do_syscall_64+0x106/0xf80 [ 177.531963][T11809] ? clear_bhb_loop+0x40/0x90 [ 177.531987][T11809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.532003][T11809] RIP: 0033:0x7f7057b9c629 [ 177.532019][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.532038][T11809] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.532055][T11809] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 177.532065][T11809] RDX: 0000000000000001 RSI: 0000000000005330 RDI: 0000000000000003 [ 177.532075][T11809] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000000 [ 177.532086][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.532097][T11809] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 177.532123][T11809] [ 177.532131][T11809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.652752][T11814] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.661977][ T40] audit: type=1400 audit(433.571:27406): avc: denied { write } for pid=11810 comm="syz.1.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.743078][T11821] FAULT_INJECTION: forcing a failure. [ 177.743078][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 177.748330][T11821] CPU: 1 UID: 0 PID: 11821 Comm: syz.3.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.748357][T11821] Tainted: [L]=SOFTLOCKUP [ 177.748364][T11821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.748376][T11821] Call Trace: [ 177.748383][T11821] [ 177.748392][T11821] dump_stack_lvl+0x100/0x190 [ 177.748428][T11821] should_fail_ex.cold+0x5/0xa [ 177.748452][T11821] ? io_cache_alloc_new+0x45/0xe0 [ 177.748472][T11821] should_failslab+0xc2/0x120 [ 177.748501][T11821] __kmalloc_noprof+0xe0/0x850 [ 177.748533][T11821] io_cache_alloc_new+0x45/0xe0 [ 177.748554][T11821] io_arm_apoll+0x8c9/0xa80 [ 177.748583][T11821] ? __pfx_io_arm_apoll+0x10/0x10 [ 177.748615][T11821] ? __io_issue_sqe+0x14a/0x7a0 [ 177.748642][T11821] io_arm_poll_handler+0x21f/0x2b0 [ 177.748671][T11821] io_queue_async+0x159/0x290 [ 177.748698][T11821] io_submit_sqes+0x17ab/0x22f0 [ 177.748743][T11821] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 177.748775][T11821] ? __fget_files+0x21f/0x3d0 [ 177.748820][T11821] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 177.748865][T11821] ? fput+0x79/0x100 [ 177.748887][T11821] ? ksys_write+0x1ac/0x250 [ 177.748913][T11821] ? __pfx_ksys_write+0x10/0x10 [ 177.748945][T11821] do_syscall_64+0x106/0xf80 [ 177.748962][T11821] ? clear_bhb_loop+0x40/0x90 [ 177.748985][T11821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.749003][T11821] RIP: 0033:0x7f7057b9c629 [ 177.749019][T11821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.749035][T11821] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 177.749054][T11821] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 177.749065][T11821] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 177.749076][T11821] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000020 [ 177.749086][T11821] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 177.749097][T11821] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 177.749122][T11821] [ 177.873603][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2231'. [ 177.909354][T11827] FAULT_INJECTION: forcing a failure. [ 177.909354][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 177.913997][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.3.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.914016][T11827] Tainted: [L]=SOFTLOCKUP [ 177.914020][T11827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.914027][T11827] Call Trace: [ 177.914032][T11827] [ 177.914037][T11827] dump_stack_lvl+0x100/0x190 [ 177.914061][T11827] should_fail_ex.cold+0x5/0xa [ 177.914077][T11827] should_failslab+0xc2/0x120 [ 177.914096][T11827] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 177.914111][T11827] ? skb_clone+0x190/0x400 [ 177.914126][T11827] skb_clone+0x190/0x400 [ 177.914137][T11827] netlink_deliver_tap+0xaed/0xcc0 [ 177.914153][T11827] netlink_unicast+0x70c/0x870 [ 177.914167][T11827] ? __pfx_netlink_unicast+0x10/0x10 [ 177.914179][T11827] ? __alloc_skb+0x5b7/0x710 [ 177.914195][T11827] ? genl_rcv_msg+0x4be/0x800 [ 177.914213][T11827] netlink_ack+0x655/0xb80 [ 177.914229][T11827] netlink_rcv_skb+0x333/0x420 [ 177.914253][T11827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.914270][T11827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.914289][T11827] ? netlink_deliver_tap+0x1ae/0xcc0 [ 177.914302][T11827] genl_rcv+0x28/0x40 [ 177.914314][T11827] netlink_unicast+0x5aa/0x870 [ 177.914328][T11827] ? __pfx_netlink_unicast+0x10/0x10 [ 177.914345][T11827] netlink_sendmsg+0x8b0/0xda0 [ 177.914360][T11827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.914372][T11827] ? __might_fault+0x20/0x140 [ 177.914425][T11827] ____sys_sendmsg+0xa54/0xc30 [ 177.914440][T11827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.914463][T11827] ___sys_sendmsg+0x190/0x1e0 [ 177.914478][T11827] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.914510][T11827] __sys_sendmsg+0x170/0x220 [ 177.914521][T11827] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.914541][T11827] do_syscall_64+0x106/0xf80 [ 177.914553][T11827] ? clear_bhb_loop+0x40/0x90 [ 177.914567][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.914578][T11827] RIP: 0033:0x7f7057b9c629 [ 177.914588][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.914599][T11827] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.914610][T11827] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 177.914617][T11827] RDX: 0000000040002084 RSI: 0000200000000440 RDI: 0000000000000003 [ 177.914624][T11827] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000000 [ 177.914630][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.914636][T11827] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 177.914651][T11827] [ 178.149543][T11831] FAULT_INJECTION: forcing a failure. [ 178.149543][T11831] name failslab, interval 1, probability 0, space 0, times 0 [ 178.153941][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.3.2233 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.153959][T11831] Tainted: [L]=SOFTLOCKUP [ 178.153963][T11831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.153970][T11831] Call Trace: [ 178.153985][T11831] [ 178.153991][T11831] dump_stack_lvl+0x100/0x190 [ 178.154015][T11831] should_fail_ex.cold+0x5/0xa [ 178.154031][T11831] should_failslab+0xc2/0x120 [ 178.154049][T11831] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 178.154064][T11831] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.154085][T11831] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.154106][T11831] mmu_topup_memory_caches+0x25/0x170 [ 178.154120][T11831] kvm_mmu_load+0xd6/0x23e0 [ 178.154131][T11831] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 178.154146][T11831] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 178.154163][T11831] ? __pfx_kvm_mmu_load+0x10/0x10 [ 178.154174][T11831] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 178.154191][T11831] ? kvm_check_and_inject_events+0x961/0x10c0 [ 178.154205][T11831] ? record_steal_time+0x370/0xbe0 [ 178.154223][T11831] vcpu_run+0x39f4/0x5ca0 [ 178.154241][T11831] ? __pfx_vcpu_run+0x10/0x10 [ 178.154258][T11831] ? rcu_is_watching+0x12/0xc0 [ 178.154273][T11831] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 178.154286][T11831] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 178.154303][T11831] kvm_vcpu_ioctl+0x730/0x1730 [ 178.154320][T11831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.154335][T11831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.154352][T11831] ? do_vfs_ioctl+0x226/0x13e0 [ 178.154368][T11831] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.154383][T11831] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.154402][T11831] ? __fget_files+0x215/0x3d0 [ 178.154411][T11831] ? hook_file_ioctl_common+0x146/0x410 [ 178.154430][T11831] ? selinux_file_ioctl+0x139/0x290 [ 178.154441][T11831] ? selinux_file_ioctl+0xb4/0x290 [ 178.154456][T11831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.154472][T11831] __x64_sys_ioctl+0x18e/0x210 [ 178.154488][T11831] do_syscall_64+0x106/0xf80 [ 178.154499][T11831] ? clear_bhb_loop+0x40/0x90 [ 178.154513][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.154524][T11831] RIP: 0033:0x7f7057b9c629 [ 178.154534][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.154545][T11831] RSP: 002b:00007f7058a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.154556][T11831] RAX: ffffffffffffffda RBX: 00007f7057e16180 RCX: 00007f7057b9c629 [ 178.154563][T11831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 178.154569][T11831] RBP: 00007f7058a79090 R08: 0000000000000000 R09: 0000000000000000 [ 178.154576][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.154582][T11831] R13: 00007f7057e16218 R14: 00007f7057e16180 R15: 00007fff497838c8 [ 178.154596][T11831] [ 178.519176][ T40] audit: type=1400 audit(434.421:27407): avc: denied { getopt } for pid=11839 comm="syz.0.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.540173][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 178.545103][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 178.557507][T11850] FAULT_INJECTION: forcing a failure. [ 178.557507][T11850] name failslab, interval 1, probability 0, space 0, times 0 [ 178.563096][T11850] CPU: 0 UID: 0 PID: 11850 Comm: syz.3.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.563124][T11850] Tainted: [L]=SOFTLOCKUP [ 178.563131][T11850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.563142][T11850] Call Trace: [ 178.563149][T11850] [ 178.563157][T11850] dump_stack_lvl+0x100/0x190 [ 178.563193][T11850] should_fail_ex.cold+0x5/0xa [ 178.563219][T11850] ? tomoyo_encode2+0xfb/0x3c0 [ 178.563241][T11850] should_failslab+0xc2/0x120 [ 178.563272][T11850] __kmalloc_noprof+0xe0/0x850 [ 178.563303][T11850] tomoyo_encode2+0xfb/0x3c0 [ 178.563328][T11850] tomoyo_encode+0x29/0x50 [ 178.563347][T11850] tomoyo_realpath_from_path+0x18c/0x690 [ 178.563375][T11850] tomoyo_path_number_perm+0x23c/0x580 [ 178.563404][T11850] ? tomoyo_path_number_perm+0x22e/0x580 [ 178.563433][T11850] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.563487][T11850] ? find_held_lock+0x2b/0x80 [ 178.563511][T11850] ? __fget_files+0x215/0x3d0 [ 178.563544][T11850] ? hook_file_ioctl_common+0x146/0x410 [ 178.563576][T11850] ? __fget_files+0x21f/0x3d0 [ 178.563598][T11850] security_file_ioctl+0xd3/0x230 [ 178.563621][T11850] __x64_sys_ioctl+0xb7/0x210 [ 178.563648][T11850] do_syscall_64+0x106/0xf80 [ 178.563673][T11850] ? clear_bhb_loop+0x40/0x90 [ 178.563696][T11850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.563715][T11850] RIP: 0033:0x7f7057b9c629 [ 178.563731][T11850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.563748][T11850] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.563767][T11850] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 178.563779][T11850] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 178.563790][T11850] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000000 [ 178.563802][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.563812][T11850] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 178.563838][T11850] [ 178.563927][T11850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.598407][T11853] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2243' sets config #4 [ 178.739227][T11865] netlink: 'syz.1.2247': attribute type 4 has an invalid length. [ 178.741800][T11865] netlink: 'syz.1.2247': attribute type 1 has an invalid length. [ 178.744238][T11865] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2247'. [ 178.837434][T11879] overlayfs: missing 'lowerdir' [ 178.894870][ T40] audit: type=1400 audit(434.801:27408): avc: denied { setopt } for pid=11884 comm="syz.3.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.925433][T11890] FAULT_INJECTION: forcing a failure. [ 178.925433][T11890] name failslab, interval 1, probability 0, space 0, times 0 [ 178.930852][T11890] CPU: 0 UID: 0 PID: 11890 Comm: syz.1.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.930877][T11890] Tainted: [L]=SOFTLOCKUP [ 178.930883][T11890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.930893][T11890] Call Trace: [ 178.930899][T11890] [ 178.930907][T11890] dump_stack_lvl+0x100/0x190 [ 178.930940][T11890] should_fail_ex.cold+0x5/0xa [ 178.930962][T11890] ? io_cache_alloc_new+0x45/0xe0 [ 178.930980][T11890] should_failslab+0xc2/0x120 [ 178.931006][T11890] __kmalloc_noprof+0xe0/0x850 [ 178.931032][T11890] io_cache_alloc_new+0x45/0xe0 [ 178.931051][T11890] __io_prep_rw+0x21d/0xfa0 [ 178.931073][T11890] ? __pfx___io_prep_rw+0x10/0x10 [ 178.931091][T11890] ? __pfx_io_accept+0x10/0x10 [ 178.931111][T11890] ? __fget_files+0x21f/0x3d0 [ 178.931132][T11890] io_prep_rw+0x76/0x2c0 [ 178.931151][T11890] ? __pfx_io_prep_rw+0x10/0x10 [ 178.931171][T11890] ? io_issue_sqe+0xbe/0x1410 [ 178.931198][T11890] io_submit_sqes+0x99b/0x22f0 [ 178.931232][T11890] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 178.931260][T11890] ? __fget_files+0x21f/0x3d0 [ 178.931275][T11890] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 178.931302][T11890] ? fput+0x79/0x100 [ 178.931320][T11890] ? ksys_write+0x1ac/0x250 [ 178.931342][T11890] ? __pfx_ksys_write+0x10/0x10 [ 178.931371][T11890] do_syscall_64+0x106/0xf80 [ 178.931388][T11890] ? clear_bhb_loop+0x40/0x90 [ 178.931408][T11890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.931424][T11890] RIP: 0033:0x7fc40e59c629 [ 178.931438][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.931452][T11890] RSP: 002b:00007fc40f431028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 178.931469][T11890] RAX: ffffffffffffffda RBX: 00007fc40e815fa0 RCX: 00007fc40e59c629 [ 178.931479][T11890] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 178.931489][T11890] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000020 [ 178.931498][T11890] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 178.931508][T11890] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 178.931530][T11890] [ 179.173990][T11914] overlayfs: missing 'lowerdir' [ 179.333543][T11924] FAULT_INJECTION: forcing a failure. [ 179.333543][T11924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.340108][T11924] CPU: 2 UID: 0 PID: 11924 Comm: syz.3.2271 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.340127][T11924] Tainted: [L]=SOFTLOCKUP [ 179.340131][T11924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.340138][T11924] Call Trace: [ 179.340142][T11924] [ 179.340147][T11924] dump_stack_lvl+0x100/0x190 [ 179.340171][T11924] should_fail_ex.cold+0x5/0xa [ 179.340184][T11924] ? prepare_alloc_pages+0x16d/0x5f0 [ 179.340197][T11924] should_fail_alloc_page+0xeb/0x140 [ 179.340217][T11924] prepare_alloc_pages+0x1f0/0x5f0 [ 179.340230][T11924] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 179.340246][T11924] ? rcu_is_watching+0x12/0xc0 [ 179.340262][T11924] ? __lock_acquire+0x4a5/0x2630 [ 179.340283][T11924] ? __lock_acquire+0x4a5/0x2630 [ 179.340300][T11924] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.340317][T11924] ? do_raw_spin_lock+0x128/0x260 [ 179.340329][T11924] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.340341][T11924] ? find_held_lock+0x2b/0x80 [ 179.340359][T11924] ? __lock_acquire+0x4a5/0x2630 [ 179.340376][T11924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.340393][T11924] ? policy_nodemask+0xed/0x4f0 [ 179.340411][T11924] alloc_pages_mpol+0x1fb/0x550 [ 179.340429][T11924] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.340446][T11924] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 179.340502][T11924] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 179.340520][T11924] folio_alloc_mpol_noprof+0x36/0x340 [ 179.340533][T11924] shmem_alloc_folio+0x135/0x160 [ 179.340546][T11924] shmem_alloc_and_add_folio+0x371/0xd40 [ 179.340564][T11924] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 179.340580][T11924] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 179.340594][T11924] ? __lock_acquire+0x480/0x2630 [ 179.340614][T11924] shmem_get_folio_gfp+0x6ab/0x1900 [ 179.340632][T11924] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 179.340669][T11924] ? __pfx___might_resched+0x10/0x10 [ 179.340709][T11924] ? noop_dirty_folio+0xfd/0x160 [ 179.340730][T11924] shmem_fallocate+0x6d7/0x1060 [ 179.340752][T11924] ? __pfx_shmem_fallocate+0x10/0x10 [ 179.340802][T11924] ? __lock_acquire+0x4a5/0x2630 [ 179.340822][T11924] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 179.340913][T11924] ? __vfs_getxattr+0x145/0x1a0 [ 179.340925][T11924] ? __pfx___vfs_getxattr+0x10/0x10 [ 179.340941][T11924] ? ovl_lowerdata_redirect+0x79/0xb0 [ 179.340965][T11924] ? __pfx_shmem_fallocate+0x10/0x10 [ 179.340980][T11924] vfs_fallocate+0x576/0x10d0 [ 179.341000][T11924] ? __pfx_vfs_fallocate+0x10/0x10 [ 179.341015][T11924] ? __pfx_ovl_real_file+0x10/0x10 [ 179.341032][T11924] ovl_fallocate+0x10d/0x1a0 [ 179.341046][T11924] ? __pfx_ovl_fallocate+0x10/0x10 [ 179.341059][T11924] vfs_fallocate+0x576/0x10d0 [ 179.341077][T11924] ? __pfx_vfs_fallocate+0x10/0x10 [ 179.341096][T11924] __x64_sys_fallocate+0xd5/0x140 [ 179.341115][T11924] do_syscall_64+0x106/0xf80 [ 179.341126][T11924] ? clear_bhb_loop+0x40/0x90 [ 179.341140][T11924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.341152][T11924] RIP: 0033:0x7f7057b9c629 [ 179.341162][T11924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.341172][T11924] RSP: 002b:00007f7058abb028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 179.341183][T11924] RAX: ffffffffffffffda RBX: 00007f7057e15fa0 RCX: 00007f7057b9c629 [ 179.341190][T11924] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 179.341196][T11924] RBP: 00007f7058abb090 R08: 0000000000000000 R09: 0000000000000000 [ 179.341203][T11924] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 179.341210][T11924] R13: 00007f7057e16038 R14: 00007f7057e15fa0 R15: 00007fff497838c8 [ 179.341224][T11924] [ 179.376624][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.491462][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.495566][ T5933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.511444][ T5933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.513668][T11933] overlayfs: missing 'lowerdir' [ 179.516689][ T5933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.611803][T11936] netlink: 'syz.3.2275': attribute type 2 has an invalid length. [ 179.638765][T11941] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 179.642029][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2277'. [ 179.692406][T11936] openvswitch: netlink: Duplicate or invalid key (type 0). [ 179.694891][T11936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.698106][T11926] chnl_net:caif_netlink_parms(): no params data found [ 179.763924][T11926] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.765227][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 179.767047][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.776387][T11926] bridge_slave_0: entered allmulticast mode [ 179.780318][T11926] bridge_slave_0: entered promiscuous mode [ 179.784438][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.787159][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.791400][T11926] bridge_slave_1: entered allmulticast mode [ 179.794160][T11926] bridge_slave_1: entered promiscuous mode [ 179.809116][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.813672][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.821450][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 179.828787][T11926] team0: Port device team_slave_0 added [ 179.842337][T11926] team0: Port device team_slave_1 added [ 179.868666][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.871655][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.873681][ T40] audit: type=1400 audit(435.781:27409): avc: denied { nlmsg_read } for pid=11955 comm="syz.3.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.874152][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2281'. [ 179.880223][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.897486][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.909887][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.919313][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.958205][T11926] hsr_slave_0: entered promiscuous mode [ 179.962199][T11926] hsr_slave_1: entered promiscuous mode [ 180.024876][T11967] FAULT_INJECTION: forcing a failure. [ 180.024876][T11967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.026376][T11968] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2286'. [ 180.034743][T11967] CPU: 0 UID: 0 PID: 11967 Comm: syz.1.2287 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.034762][T11967] Tainted: [L]=SOFTLOCKUP [ 180.034766][T11967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.034774][T11967] Call Trace: [ 180.034778][T11967] [ 180.034784][T11967] dump_stack_lvl+0x100/0x190 [ 180.034809][T11967] should_fail_ex.cold+0x5/0xa [ 180.034824][T11967] _copy_to_user+0x32/0xd0 [ 180.034841][T11967] simple_read_from_buffer+0xcb/0x170 [ 180.034861][T11967] proc_fail_nth_read+0x1af/0x230 [ 180.034933][T11967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.034948][T11967] ? rw_verify_area+0xce/0x6d0 [ 180.034964][T11967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.034978][T11967] vfs_read+0x1e4/0xb30 [ 180.034996][T11967] ? __pfx_vfs_read+0x10/0x10 [ 180.035010][T11967] ? __fget_files+0x215/0x3d0 [ 180.035025][T11967] ? __fget_files+0x21f/0x3d0 [ 180.035039][T11967] ksys_read+0x12a/0x250 [ 180.035054][T11967] ? __pfx_ksys_read+0x10/0x10 [ 180.035074][T11967] do_syscall_64+0x106/0xf80 [ 180.035085][T11967] ? clear_bhb_loop+0x40/0x90 [ 180.035099][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.035110][T11967] RIP: 0033:0x7fc40e55cece [ 180.035120][T11967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.035130][T11967] RSP: 002b:00007fc40f430fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.035142][T11967] RAX: ffffffffffffffda RBX: 00007fc40f4316c0 RCX: 00007fc40e55cece [ 180.035149][T11967] RDX: 000000000000000f RSI: 00007fc40f4310a0 RDI: 0000000000000005 [ 180.035156][T11967] RBP: 00007fc40f431090 R08: 0000000000000000 R09: 0000000000000000 [ 180.035162][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.035168][T11967] R13: 00007fc40e816038 R14: 00007fc40e815fa0 R15: 00007ffeb1c57708 [ 180.035183][T11967] [ 180.054397][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.132117][T11926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.139477][T11926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.145867][T11926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.154796][T11926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.193514][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.196649][T11926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.237097][T11926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.247578][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.268673][T11926] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.275251][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.277666][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.292630][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.295047][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.416506][ T40] audit: type=1400 audit(436.321:27410): avc: denied { setopt } for pid=12002 comm="syz.1.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 180.457502][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.576736][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'. [ 180.632658][T11926] veth0_vlan: entered promiscuous mode [ 180.646421][T11926] veth1_vlan: entered promiscuous mode [ 180.666235][T11926] veth0_macvtap: entered promiscuous mode [ 180.673628][T11926] veth1_macvtap: entered promiscuous mode [ 180.690718][T11926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.744683][T11926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.756152][ T92] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.763856][ T92] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.767138][ T92] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.770670][ T92] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.834538][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.837781][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.878335][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.882118][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.979884][ T40] audit: type=1400 audit(436.881:27411): avc: denied { ioctl } for pid=12027 comm="syz.1.2306" path="socket:[58050]" dev="sockfs" ino=58050 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.176132][ T5933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.182198][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.185998][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.189947][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.193757][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.449319][T12038] chnl_net:caif_netlink_parms(): no params data found [ 181.532015][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.534863][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.537733][T12038] bridge_slave_0: entered allmulticast mode [ 181.541171][T12038] bridge_slave_0: entered promiscuous mode [ 181.547323][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.550312][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.552860][T12038] bridge_slave_1: entered allmulticast mode [ 181.556231][T12038] bridge_slave_1: entered promiscuous mode [ 181.590271][ T5928] Bluetooth: hci2: command tx timeout [ 181.605195][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.628736][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.650758][T12038] team0: Port device team_slave_0 added [ 181.654175][T12038] team0: Port device team_slave_1 added [ 181.683901][T12060] overlayfs: missing 'lowerdir' [ 181.686029][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.688391][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.696796][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.702634][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.705015][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.720593][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.753051][T12038] hsr_slave_0: entered promiscuous mode [ 181.756048][T12038] hsr_slave_1: entered promiscuous mode [ 181.758403][T12038] debugfs: 'hsr0' already exists in 'hsr' [ 181.760642][T12038] Cannot create hsr debugfs directory [ 181.947751][T12038] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.952166][T12038] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.994892][T12070] comedi comedi3: comedi_config --init_data is deprecated [ 182.043291][T12038] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.047062][T12038] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.057767][ T40] audit: type=1400 audit(437.961:27412): avc: denied { mount } for pid=12072 comm="syz.3.2321" name="/" dev="hugetlbfs" ino=60219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 182.119453][ T40] audit: type=1400 audit(438.021:27413): avc: denied { unmount } for pid=11103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 182.134059][T12038] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.138246][T12038] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.231303][T12038] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.235428][T12038] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.288928][T12092] netlink: get zone limit has 4 unknown bytes [ 182.323659][ T40] audit: type=1400 audit(438.231:27414): avc: denied { accept } for pid=12091 comm="syz.0.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 182.499049][T12038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.504794][T12038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.513326][T12038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.519420][T12038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.574926][T12038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.584619][T12038] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.592378][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.595168][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.603494][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.606253][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.736883][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.750498][ T1335] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 182.765473][T12038] veth0_vlan: entered promiscuous mode [ 182.774083][T12038] veth1_vlan: entered promiscuous mode [ 182.789472][T12038] veth0_macvtap: entered promiscuous mode [ 182.795123][T12038] veth1_macvtap: entered promiscuous mode [ 182.805020][T12038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.811820][T12038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.817902][ T92] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.821064][ T92] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.824611][ T92] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.827737][ T92] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.867983][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.871172][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.886714][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.890205][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.921348][ T1335] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.924371][ T1335] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.927350][ T1335] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.933738][ T1335] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.936633][ T1335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.939318][ T1335] usb 9-1: Product: syz [ 182.940893][ T1335] usb 9-1: Manufacturer: syz [ 182.942359][ T1335] usb 9-1: SerialNumber: syz [ 182.949396][ T1335] hub 9-1:1.0: bad descriptor, ignoring hub [ 182.951812][ T1335] hub 9-1:1.0: probe with driver hub failed with error -5 [ 183.130402][ T40] audit: type=1400 audit(439.041:27415): avc: denied { read } for pid=12123 comm="syz.1.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.154456][ T1335] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 183.269950][ T5928] Bluetooth: hci3: command tx timeout [ 183.418037][T12137] FAULT_INJECTION: forcing a failure. [ 183.418037][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 183.424425][T12137] CPU: 2 UID: 0 PID: 12137 Comm: syz.1.2339 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.424453][T12137] Tainted: [L]=SOFTLOCKUP [ 183.424461][T12137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.424472][T12137] Call Trace: [ 183.424479][T12137] [ 183.424486][T12137] dump_stack_lvl+0x100/0x190 [ 183.424835][T12137] should_fail_ex.cold+0x5/0xa [ 183.424925][T12137] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 183.425043][T12137] should_failslab+0xc2/0x120 [ 183.425159][T12137] __kmalloc_noprof+0xe0/0x850 [ 183.425212][T12137] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 183.425237][T12137] ? cred_has_capability.isra.0+0x186/0x300 [ 183.425345][T12137] genl_family_rcv_msg_doit+0xc7/0x300 [ 183.425371][T12137] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.425404][T12137] ? bpf_lsm_capable+0x9/0x10 [ 183.425455][T12137] ? security_capable+0x80/0x260 [ 183.425483][T12137] ? ns_capable+0xd2/0xf0 [ 183.425548][T12137] genl_rcv_msg+0x560/0x800 [ 183.425575][T12137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.425598][T12137] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 183.425728][T12137] ? __pfx_nl80211_set_station+0x10/0x10 [ 183.425755][T12137] ? __pfx_nl80211_post_doit+0x10/0x10 [ 183.425791][T12137] netlink_rcv_skb+0x159/0x420 [ 183.425813][T12137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.425839][T12137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.425871][T12137] ? netlink_deliver_tap+0x1ae/0xcc0 [ 183.425896][T12137] genl_rcv+0x28/0x40 [ 183.425918][T12137] netlink_unicast+0x5aa/0x870 [ 183.425943][T12137] ? __pfx_netlink_unicast+0x10/0x10 [ 183.425975][T12137] netlink_sendmsg+0x8b0/0xda0 [ 183.426001][T12137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.426021][T12137] ? __might_fault+0x20/0x140 [ 183.426077][T12137] ____sys_sendmsg+0xa54/0xc30 [ 183.426106][T12137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.426140][T12137] ___sys_sendmsg+0x190/0x1e0 [ 183.426166][T12137] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.426221][T12137] __sys_sendmsg+0x170/0x220 [ 183.426240][T12137] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.426276][T12137] do_syscall_64+0x106/0xf80 [ 183.426336][T12137] ? clear_bhb_loop+0x40/0x90 [ 183.426360][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.426377][T12137] RIP: 0033:0x7fba4619c629 [ 183.426394][T12137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.426409][T12137] RSP: 002b:00007fba470da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.426427][T12137] RAX: ffffffffffffffda RBX: 00007fba46415fa0 RCX: 00007fba4619c629 [ 183.426439][T12137] RDX: 0000000040002084 RSI: 0000200000000440 RDI: 0000000000000003 [ 183.426449][T12137] RBP: 00007fba470da090 R08: 0000000000000000 R09: 0000000000000000 [ 183.426460][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.426471][T12137] R13: 00007fba46416038 R14: 00007fba46415fa0 R15: 00007fff2fe05998 [ 183.426498][T12137] [ 183.460210][ T7986] usb 9-1: USB disconnect, device number 2 [ 183.554445][ T7986] usblp0: removed [ 183.640874][T12148] FAULT_INJECTION: forcing a failure. [ 183.640874][T12148] name failslab, interval 1, probability 0, space 0, times 0 [ 183.647145][T12148] CPU: 2 UID: 0 PID: 12148 Comm: syz.0.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.647174][T12148] Tainted: [L]=SOFTLOCKUP [ 183.647181][T12148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.647192][T12148] Call Trace: [ 183.647200][T12148] [ 183.647208][T12148] dump_stack_lvl+0x100/0x190 [ 183.647262][T12148] should_fail_ex.cold+0x5/0xa [ 183.647288][T12148] should_failslab+0xc2/0x120 [ 183.647318][T12148] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 183.647343][T12148] ? __anon_vma_prepare+0x344/0x5e0 [ 183.647371][T12148] __anon_vma_prepare+0x344/0x5e0 [ 183.647393][T12148] ? rcu_read_unlock+0x2d/0xb0 [ 183.647419][T12148] __vmf_anon_prepare+0x11f/0x250 [ 183.647440][T12148] do_wp_page+0xe4d/0x4f00 [ 183.647466][T12148] ? __pfx_do_wp_page+0x10/0x10 [ 183.647488][T12148] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 183.647551][T12148] __handle_mm_fault+0x1ac8/0x2b60 [ 183.647581][T12148] ? __pfx___handle_mm_fault+0x10/0x10 [ 183.647606][T12148] ? pte_offset_map_lock+0x174/0x320 [ 183.647636][T12148] ? vm_normal_page+0x1b6/0x330 [ 183.647664][T12148] ? find_held_lock+0x2b/0x80 [ 183.647696][T12148] ? follow_page_pte+0x5b3/0x1400 [ 183.647720][T12148] handle_mm_fault+0x36d/0xa20 [ 183.647747][T12148] __get_user_pages+0xf9c/0x34d0 [ 183.647776][T12148] ? __pfx___get_user_pages+0x10/0x10 [ 183.647793][T12148] ? find_held_lock+0x2b/0x80 [ 183.647823][T12148] get_user_pages_remote+0x3d2/0xb10 [ 183.647847][T12148] ? __pfx_get_user_pages_remote+0x10/0x10 [ 183.647877][T12148] uprobe_write+0x227/0x2760 [ 183.647931][T12148] ? __pfx_verify_opcode+0x10/0x10 [ 183.647964][T12148] ? __pfx_uprobe_write+0x10/0x10 [ 183.647987][T12148] ? mtree_load+0x32d/0xa40 [ 183.648019][T12148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.648076][T12148] uprobe_write_opcode+0x99/0x1a0 [ 183.648104][T12148] ? __pfx_uprobe_write_opcode+0x10/0x10 [ 183.648129][T12148] ? __pfx_arch_uprobe_analyze_insn+0x10/0x10 [ 183.648182][T12148] set_swbp+0x115/0x200 [ 183.648201][T12148] ? __pfx_set_swbp+0x10/0x10 [ 183.648222][T12148] ? up_write+0x290/0x4f0 [ 183.648245][T12148] install_breakpoint+0x684/0x9f0 [ 183.648281][T12148] register_for_each_vma+0xa31/0xdb0 [ 183.648318][T12148] uprobe_register+0x815/0xa90 [ 183.648349][T12148] bpf_uprobe_multi_link_attach+0xa75/0x13d0 [ 183.648416][T12148] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 183.648444][T12148] ? __fget_files+0x21f/0x3d0 [ 183.648494][T12148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.648525][T12148] __sys_bpf+0x3faf/0x4b90 [ 183.648551][T12148] ? __pfx___sys_bpf+0x10/0x10 [ 183.648568][T12148] ? proc_fail_nth_write+0x9f/0x220 [ 183.648661][T12148] ? find_held_lock+0x2b/0x80 [ 183.648689][T12148] ? find_held_lock+0x2b/0x80 [ 183.648711][T12148] ? ksys_write+0x190/0x250 [ 183.648768][T12148] ? __mutex_unlock_slowpath+0x15c/0x790 [ 183.648790][T12148] ? __fget_files+0x215/0x3d0 [ 183.648821][T12148] ? fput+0x79/0x100 [ 183.648842][T12148] ? ksys_write+0x1ac/0x250 [ 183.648867][T12148] ? __pfx_ksys_write+0x10/0x10 [ 183.648898][T12148] __x64_sys_bpf+0x7b/0xc0 [ 183.648917][T12148] ? lockdep_hardirqs_on+0x78/0x100 [ 183.648936][T12148] do_syscall_64+0x106/0xf80 [ 183.648954][T12148] ? clear_bhb_loop+0x40/0x90 [ 183.648977][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.648996][T12148] RIP: 0033:0x7fdf00f9c629 [ 183.649013][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.649030][T12148] RSP: 002b:00007fdf01da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.649048][T12148] RAX: ffffffffffffffda RBX: 00007fdf01215fa0 RCX: 00007fdf00f9c629 [ 183.649059][T12148] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 183.649070][T12148] RBP: 00007fdf01da7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.649080][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.649090][T12148] R13: 00007fdf01216038 R14: 00007fdf01215fa0 R15: 00007fffc3f3cf58 [ 183.649117][T12148] [ 183.661316][ T5928] Bluetooth: hci2: command tx timeout [ 184.174539][T12161] FAULT_INJECTION: forcing a failure. [ 184.174539][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 184.180973][T12161] CPU: 2 UID: 0 PID: 12161 Comm: syz.4.2350 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.181002][T12161] Tainted: [L]=SOFTLOCKUP [ 184.181010][T12161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.181022][T12161] Call Trace: [ 184.181028][T12161] [ 184.181036][T12161] dump_stack_lvl+0x100/0x190 [ 184.181074][T12161] should_fail_ex.cold+0x5/0xa [ 184.181101][T12161] should_failslab+0xc2/0x120 [ 184.181130][T12161] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 184.181155][T12161] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 184.181223][T12161] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 184.181257][T12161] mmu_topup_memory_caches+0x25/0x170 [ 184.181309][T12161] kvm_mmu_load+0xd6/0x23e0 [ 184.181331][T12161] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 184.181356][T12161] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 184.181385][T12161] ? __pfx_kvm_mmu_load+0x10/0x10 [ 184.181404][T12161] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 184.181469][T12161] ? kvm_check_and_inject_events+0x961/0x10c0 [ 184.181490][T12161] ? record_steal_time+0x370/0xbe0 [ 184.181522][T12161] vcpu_run+0x39f4/0x5ca0 [ 184.181552][T12161] ? __pfx_vcpu_run+0x10/0x10 [ 184.181584][T12161] ? rcu_is_watching+0x12/0xc0 [ 184.181641][T12161] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.181664][T12161] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 184.181692][T12161] kvm_vcpu_ioctl+0x730/0x1730 [ 184.181720][T12161] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.181746][T12161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.181774][T12161] ? do_vfs_ioctl+0x226/0x13e0 [ 184.181829][T12161] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 184.181855][T12161] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 184.181886][T12161] ? __fget_files+0x215/0x3d0 [ 184.181903][T12161] ? hook_file_ioctl_common+0x146/0x410 [ 184.181935][T12161] ? selinux_file_ioctl+0x139/0x290 [ 184.181955][T12161] ? selinux_file_ioctl+0xb4/0x290 [ 184.181977][T12161] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 184.182003][T12161] __x64_sys_ioctl+0x18e/0x210 [ 184.182031][T12161] do_syscall_64+0x106/0xf80 [ 184.182050][T12161] ? clear_bhb_loop+0x40/0x90 [ 184.182073][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.182093][T12161] RIP: 0033:0x7f3776d9c629 [ 184.182110][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.182126][T12161] RSP: 002b:00007f3777c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.182145][T12161] RAX: ffffffffffffffda RBX: 00007f3777015fa0 RCX: 00007f3776d9c629 [ 184.182157][T12161] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 184.182168][T12161] RBP: 00007f3777c86090 R08: 0000000000000000 R09: 0000000000000000 [ 184.182179][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.182189][T12161] R13: 00007f3777016038 R14: 00007f3777015fa0 R15: 00007ffc2b7adc88 [ 184.182215][T12161] [ 184.461271][T12165] __nla_validate_parse: 5 callbacks suppressed [ 184.461289][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 184.468115][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'. [ 184.483036][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 184.483103][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.487142][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'. [ 184.495674][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.499156][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.503062][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.575830][T12166] binder: BINDER_SET_CONTEXT_MGR already set [ 184.578557][T12166] binder: 12164:12166 ioctl 4018620d 2000000002c0 returned -16 [ 184.949862][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 185.108887][ T24] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 185.112905][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 185.116357][ T24] usb 6-1: Product: syz [ 185.118217][ T24] usb 6-1: Manufacturer: syz [ 185.120531][ T24] usb 6-1: SerialNumber: syz [ 185.124900][ T24] usb 6-1: config 0 descriptor?? [ 185.129987][ T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 185.133506][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 185.141523][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.145325][ T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 185.148903][ T24] usb 6-1: media controller created [ 185.161247][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.330121][T12168] dvb-usb: bulk message failed: -22 (4/0) [ 185.333631][T12168] cxusb: i2c read failed [ 185.339820][ T5933] Bluetooth: hci3: command tx timeout [ 185.394927][ T24] cxusb: set interface failed [ 185.396564][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 185.420910][ T24] DVB: Unable to find symbol mt352_attach() [ 185.423199][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 185.426147][ T24] zl10353_read_register: readreg error (reg=127, ret==-121) [ 185.428654][ T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 185.479841][ T24] rc_core: IR keymap rc-dvico-mce not found [ 185.482696][ T24] Registered IR keymap rc-empty [ 185.487725][ T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 185.494728][ T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input20 [ 185.504121][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 185.507150][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 185.515918][ T24] usb 6-1: USB disconnect, device number 14 [ 185.573153][ T40] audit: type=1400 audit(441.481:27416): avc: denied { write } for pid=12184 comm="syz.4.2357" path="socket:[62618]" dev="sockfs" ino=62618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.630193][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 185.631662][T12185] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 185.637096][T12185] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2357'. [ 185.641101][T12185] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2357'. [ 185.644109][T12185] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2357'. [ 185.767905][ T40] audit: type=1400 audit(441.671:27417): avc: denied { create } for pid=12192 comm="syz.4.2361" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 185.775400][ T40] audit: type=1400 audit(441.681:27418): avc: denied { create } for pid=12192 comm="syz.4.2361" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.786150][ T40] audit: type=1400 audit(441.691:27419): avc: denied { setattr } for pid=12192 comm="syz.4.2361" name="file0" dev="9p" ino=72614267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.819836][ T5933] Bluetooth: hci2: command tx timeout [ 185.972081][T12197] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2363'. [ 185.975176][T12197] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2363'. [ 186.104477][T12201] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2362'. [ 186.143363][T12203] FAULT_INJECTION: forcing a failure. [ 186.143363][T12203] name failslab, interval 1, probability 0, space 0, times 0 [ 186.148876][T12203] CPU: 0 UID: 0 PID: 12203 Comm: syz.1.2365 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.148903][T12203] Tainted: [L]=SOFTLOCKUP [ 186.148909][T12203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.148919][T12203] Call Trace: [ 186.148925][T12203] [ 186.148932][T12203] dump_stack_lvl+0x100/0x190 [ 186.148965][T12203] should_fail_ex.cold+0x5/0xa [ 186.148987][T12203] should_failslab+0xc2/0x120 [ 186.149014][T12203] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 186.149037][T12203] ? __alloc_skb+0x140/0x710 [ 186.149065][T12203] __alloc_skb+0x140/0x710 [ 186.149088][T12203] ? __alloc_skb+0x5b7/0x710 [ 186.149111][T12203] ? __pfx___alloc_skb+0x10/0x10 [ 186.149132][T12203] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 186.149167][T12203] netlink_alloc_large_skb+0x69/0x150 [ 186.149187][T12203] netlink_sendmsg+0x680/0xda0 [ 186.149206][T12203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.149217][T12203] ? __might_fault+0x20/0x140 [ 186.149243][T12203] ____sys_sendmsg+0xa54/0xc30 [ 186.149265][T12203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.149295][T12203] ___sys_sendmsg+0x190/0x1e0 [ 186.149317][T12203] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.149363][T12203] __sys_sendmsg+0x170/0x220 [ 186.149380][T12203] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.149411][T12203] do_syscall_64+0x106/0xf80 [ 186.149428][T12203] ? clear_bhb_loop+0x40/0x90 [ 186.149448][T12203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.149465][T12203] RIP: 0033:0x7fba4619c629 [ 186.149480][T12203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.149495][T12203] RSP: 002b:00007fba470da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.149513][T12203] RAX: ffffffffffffffda RBX: 00007fba46415fa0 RCX: 00007fba4619c629 [ 186.149524][T12203] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 186.149534][T12203] RBP: 00007fba470da090 R08: 0000000000000000 R09: 0000000000000000 [ 186.149544][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.149553][T12203] R13: 00007fba46416038 R14: 00007fba46415fa0 R15: 00007fff2fe05998 [ 186.149576][T12203] [ 186.231379][ T5933] Bluetooth: hci0: command 0x0406 tx timeout [ 186.325214][T12210] FAULT_INJECTION: forcing a failure. [ 186.325214][T12210] name failslab, interval 1, probability 0, space 0, times 0 [ 186.330588][T12210] CPU: 3 UID: 0 PID: 12210 Comm: syz.4.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.330617][T12210] Tainted: [L]=SOFTLOCKUP [ 186.330623][T12210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.330632][T12210] Call Trace: [ 186.330637][T12210] [ 186.330643][T12210] dump_stack_lvl+0x100/0x190 [ 186.330683][T12210] should_fail_ex.cold+0x5/0xa [ 186.330706][T12210] ? tomoyo_encode2+0xfb/0x3c0 [ 186.330724][T12210] should_failslab+0xc2/0x120 [ 186.330748][T12210] __kmalloc_noprof+0xe0/0x850 [ 186.330774][T12210] tomoyo_encode2+0xfb/0x3c0 [ 186.330794][T12210] tomoyo_encode+0x29/0x50 [ 186.330814][T12210] tomoyo_realpath_from_path+0x18c/0x690 [ 186.330841][T12210] tomoyo_path_number_perm+0x23c/0x580 [ 186.330866][T12210] ? tomoyo_path_number_perm+0x22e/0x580 [ 186.330894][T12210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.330940][T12210] ? find_held_lock+0x2b/0x80 [ 186.330960][T12210] ? __fget_files+0x215/0x3d0 [ 186.330973][T12210] ? hook_file_ioctl_common+0x146/0x410 [ 186.331001][T12210] ? __fget_files+0x21f/0x3d0 [ 186.331020][T12210] security_file_ioctl+0xd3/0x230 [ 186.331041][T12210] __x64_sys_ioctl+0xb7/0x210 [ 186.331063][T12210] do_syscall_64+0x106/0xf80 [ 186.331075][T12210] ? clear_bhb_loop+0x40/0x90 [ 186.331089][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.331100][T12210] RIP: 0033:0x7f3776d9c629 [ 186.331110][T12210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.331120][T12210] RSP: 002b:00007f3777c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.331131][T12210] RAX: ffffffffffffffda RBX: 00007f3777015fa0 RCX: 00007f3776d9c629 [ 186.331138][T12210] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 186.331145][T12210] RBP: 00007f3777c86090 R08: 0000000000000000 R09: 0000000000000000 [ 186.331152][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.331158][T12210] R13: 00007f3777016038 R14: 00007f3777015fa0 R15: 00007ffc2b7adc88 [ 186.331172][T12210] [ 186.331183][T12210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.299190][T12265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.430944][ T5928] Bluetooth: hci3: command tx timeout [ 187.901998][ T5928] Bluetooth: hci2: command tx timeout [ 189.499946][ T5928] Bluetooth: hci3: command tx timeout [ 191.048178][T12401] ------------[ cut here ]------------ [ 191.051324][T12401] enable_ept && !allow_smaller_maxphyaddr [ 191.051339][T12401] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#3: syz.4.2440/12401 [ 191.058493][T12401] Modules linked in: [ 191.060943][T12401] CPU: 3 UID: 0 PID: 12401 Comm: syz.4.2440 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.066042][T12401] Tainted: [L]=SOFTLOCKUP [ 191.068091][T12401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.072946][T12401] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 191.075848][T12401] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d b6 ac 39 0f 31 ff 44 89 ee e8 e1 fc 68 00 45 84 ed 0f 85 b5 0e 00 00 e8 83 02 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 25 fd 68 00 45 85 e4 0f 85 7f 0b 00 00 [ 191.084368][T12401] RSP: 0018:ffffc900036379d8 EFLAGS: 00010287 [ 191.087219][T12401] RAX: 000000000001593c RBX: ffff888057d68000 RCX: ffffc9000d3a1000 [ 191.090854][T12401] RDX: 0000000000080000 RSI: ffffffff819f9cdd RDI: ffff88802fe30000 [ 191.094438][T12401] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 191.098052][T12401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 191.101691][T12401] R13: 0000000000000000 R14: ffff88803acb7000 R15: ffff888057d680d8 [ 191.105338][T12401] FS: 00007f3777c866c0(0000) GS:ffff8880d664a000(0000) knlGS:0000000000000000 [ 191.109449][T12401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.112631][T12401] CR2: 000000000f6632eb CR3: 0000000036bed000 CR4: 0000000000352ef0 [ 191.116234][T12401] Call Trace: [ 191.117862][T12401] [ 191.119267][T12401] ? __pfx_handle_exception_nmi+0x10/0x10 [ 191.121988][T12401] vmx_handle_exit+0x84d/0x1f40 [ 191.124260][T12401] vcpu_run+0x34cf/0x5ca0 [ 191.126340][T12401] ? __pfx_vcpu_run+0x10/0x10 [ 191.128552][T12401] ? rcu_is_watching+0x12/0xc0 [ 191.131025][T12401] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 191.133579][T12401] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 191.135887][T12401] kvm_vcpu_ioctl+0x730/0x1730 [ 191.137924][T12401] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.140359][T12401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.143067][T12401] ? do_vfs_ioctl+0x226/0x13e0 [ 191.145294][T12401] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.147366][T12401] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.150498][T12401] ? __fget_files+0x215/0x3d0 [ 191.152297][T12401] ? hook_file_ioctl_common+0x146/0x410 [ 191.154267][T12401] ? selinux_file_ioctl+0x139/0x290 [ 191.156071][T12401] ? selinux_file_ioctl+0xb4/0x290 [ 191.158106][T12401] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.160101][T12401] __x64_sys_ioctl+0x18e/0x210 [ 191.161874][T12401] do_syscall_64+0x106/0xf80 [ 191.163625][T12401] ? clear_bhb_loop+0x40/0x90 [ 191.165352][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.167431][T12401] RIP: 0033:0x7f3776d9c629 [ 191.169022][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.175893][T12401] RSP: 002b:00007f3777c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.178819][T12401] RAX: ffffffffffffffda RBX: 00007f3777015fa0 RCX: 00007f3776d9c629 [ 191.182001][T12401] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 191.184793][T12401] RBP: 00007f3776e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 191.187533][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.190447][T12401] R13: 00007f3777016038 R14: 00007f3777015fa0 R15: 00007ffc2b7adc88 [ 191.193252][T12401] [ 191.194373][T12401] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.196930][T12401] CPU: 3 UID: 0 PID: 12401 Comm: syz.4.2440 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.200752][T12401] Tainted: [L]=SOFTLOCKUP [ 191.202310][T12401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.205843][T12401] Call Trace: [ 191.207042][T12401] [ 191.208105][T12401] dump_stack_lvl+0x100/0x190 [ 191.209839][T12401] vpanic+0x552/0x970 [ 191.211318][T12401] ? __pfx_vpanic+0x10/0x10 [ 191.212924][T12401] panic+0xd1/0xe0 [ 191.214267][T12401] ? __pfx_panic+0x10/0x10 [ 191.215872][T12401] check_panic_on_warn.cold+0x19/0x34 [ 191.217782][T12401] ? handle_exception_nmi+0xa6e/0x1bb0 [ 191.219695][T12401] __warn.cold+0x191/0x348 [ 191.221315][T12401] __report_bug+0x296/0x3d0 [ 191.222934][T12401] ? handle_exception_nmi+0xa6e/0x1bb0 [ 191.224876][T12401] ? __pfx___report_bug+0x10/0x10 [ 191.226666][T12401] ? kvm_sched_in+0x9a/0xf0 [ 191.228279][T12401] ? finish_task_switch.isra.0+0x4b8/0xb80 [ 191.230382][T12401] ? rcu_is_watching+0x12/0xc0 [ 191.232257][T12401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.234444][T12401] ? handle_exception_nmi+0xa6e/0x1bb0 [ 191.236413][T12401] report_bug+0xb2/0x220 [ 191.238011][T12401] ? handle_exception_nmi+0xa6e/0x1bb0 [ 191.239961][T12401] handle_bug+0x166/0x2a0 [ 191.241587][T12401] exc_invalid_op+0x17/0x50 [ 191.243215][T12401] asm_exc_invalid_op+0x1a/0x20 [ 191.244963][T12401] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 191.247119][T12401] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d b6 ac 39 0f 31 ff 44 89 ee e8 e1 fc 68 00 45 84 ed 0f 85 b5 0e 00 00 e8 83 02 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 25 fd 68 00 45 85 e4 0f 85 7f 0b 00 00 [ 191.253878][T12401] RSP: 0018:ffffc900036379d8 EFLAGS: 00010287 [ 191.256043][T12401] RAX: 000000000001593c RBX: ffff888057d68000 RCX: ffffc9000d3a1000 [ 191.258855][T12401] RDX: 0000000000080000 RSI: ffffffff819f9cdd RDI: ffff88802fe30000 [ 191.261692][T12401] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 191.264514][T12401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 191.267330][T12401] R13: 0000000000000000 R14: ffff88803acb7000 R15: ffff888057d680d8 [ 191.270168][T12401] ? handle_exception_nmi+0xa6d/0x1bb0 [ 191.272122][T12401] ? handle_exception_nmi+0xa6d/0x1bb0 [ 191.274068][T12401] ? __pfx_handle_exception_nmi+0x10/0x10 [ 191.276088][T12401] vmx_handle_exit+0x84d/0x1f40 [ 191.277843][T12401] vcpu_run+0x34cf/0x5ca0 [ 191.279394][T12401] ? __pfx_vcpu_run+0x10/0x10 [ 191.281080][T12401] ? rcu_is_watching+0x12/0xc0 [ 191.282813][T12401] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 191.284834][T12401] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 191.286800][T12401] kvm_vcpu_ioctl+0x730/0x1730 [ 191.288523][T12401] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.290382][T12401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.292521][T12401] ? do_vfs_ioctl+0x226/0x13e0 [ 191.294258][T12401] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.296064][T12401] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.298486][T12401] ? __fget_files+0x215/0x3d0 [ 191.300167][T12401] ? hook_file_ioctl_common+0x146/0x410 [ 191.302186][T12401] ? selinux_file_ioctl+0x139/0x290 [ 191.304037][T12401] ? selinux_file_ioctl+0xb4/0x290 [ 191.305861][T12401] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 191.307684][T12401] __x64_sys_ioctl+0x18e/0x210 [ 191.309420][T12401] do_syscall_64+0x106/0xf80 [ 191.311062][T12401] ? clear_bhb_loop+0x40/0x90 [ 191.312788][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.314903][T12401] RIP: 0033:0x7f3776d9c629 [ 191.316514][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.323305][T12401] RSP: 002b:00007f3777c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.326241][T12401] RAX: ffffffffffffffda RBX: 00007f3777015fa0 RCX: 00007f3776d9c629 [ 191.329076][T12401] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 191.332054][T12401] RBP: 00007f3776e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 191.334870][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.337675][T12401] R13: 00007f3777016038 R14: 00007f3777015fa0 R15: 00007ffc2b7adc88 [ 191.340471][T12401] [ 191.342325][T12401] Kernel Offset: disabled [ 191.343875][T12401] Rebooting in 86400 seconds..