last executing test programs: 10.620042495s ago: executing program 2 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x52, 0x0, &(0x7f0000000100)) timer_gettime(r1, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.3993121s ago: executing program 2 (id=436): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0081ebabd0000000002502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x22400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) ioctl(r7, 0x3b90, &(0x7f0000000200)="2800000000000000efbeadde0300000005") close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x6, 0x8, 0x2], 0x0, 0x200306}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000140)=0xfffffffffffffe2d) ioctl$KVM_RUN(r11, 0xae80, 0x0) 10.210329047s ago: executing program 2 (id=437): ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000480)={0x0}) 10.210057482s ago: executing program 2 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001280)='./binderfs/binder-control\x00', 0x800, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001300)='./dev\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x103, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0xfbf, &(0x7f0000000480)) stat(&(0x7f0000001340)='./mnt\x00', &(0x7f0000001380)) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x800, &(0x7f0000001440)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002000010318bd70000080cd8b02000000040000c6a4000000"], 0x1c}}, 0xc000) r6 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000009b40)='pagemap\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01) getgid() r8 = getpid() syz_pidfd_open(r8, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in=@dev, @in=@empty}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000018c0)=0xe8) getgroups(0x1, &(0x7f0000001900)=[0x0]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001980), 0x0, 0xc041) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) 10.079658402s ago: executing program 2 (id=440): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="2c67726f41b7079f90330d75", @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=r0]) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000010500)={&(0x7f00000103c0)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d40000000b000000040000000000000e0200000000000000090000000000000a010000000300000007000084000000001000000001000000f8ffffff0d0000000000000000fcffff0b00000005000000010000000b00000002000000000000000f00000003000000760000000e00000002000000090000000800000001000000090000000c0000000000000805000000000000000200000d0000000004000e0000000000000100000000670030010200000000000009030000000200000001000006040000000e00000004000000002e2e5f305f3000002e00"], &(0x7f00000104c0)=""/9, 0xf7, 0x9, 0x1, 0x23, 0x10000, @value=r0}, 0x28) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20800, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x140, 0x1, 0x7, 0xff, 0x401, 0x2, 0x1, 0x6, 0x8, 0xf, 0x2, 0x2, 0x800000f8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0xc, 0x8, 0x4, 0xf, 0x10, 0x7, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @multicast2}, 0xf49d, 0x0, 0x2}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='tracefs\x00', 0x10c891, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x0, 0x2, @qpsk={0xfffffffa, 0xb}}) read(r5, &(0x7f0000000500), 0x1000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c001000", @ANYRES16=r8, @ANYBLOB="010025bd7000dfdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000f000000"], 0x3c}}, 0x1004) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x193282, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2ffc, 0x2000, &(0x7f000000f000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000102c0)="660ffb33660fe3f50f01df0f0866b9800000c00f326635000800000f300f79c5670fc73f66b9610a000066b89248e41a66ba000000000f30440f20c0663507000000440f22c066b8000001000f23c80f21f86635000050000f23f8", 0x5b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000005c0)={[0xf, 0x1000000000000008, 0xab9f, 0x4000000000000e52, 0x8, 0x5479, 0x1043, 0x200000000006, 0x4, 0x20000000001, 0xfffffffffffffffe, 0x100000000, 0x8000000000000000, 0xfffffffc, 0x8000000000005, 0x5c], 0xf000, 0x42590}) 9.839524569s ago: executing program 2 (id=445): r0 = semget$private(0x0, 0x3, 0x2201e6ec71adfdc8) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/67) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r1, 0x40104d14, &(0x7f00000001c0)={0x2, 0x0, 0x1fffe, 0x0}) 9.759106515s ago: executing program 32 (id=445): r0 = semget$private(0x0, 0x3, 0x2201e6ec71adfdc8) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/67) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r1, 0x40104d14, &(0x7f00000001c0)={0x2, 0x0, 0x1fffe, 0x0}) 3.366646252s ago: executing program 4 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88201) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x2000) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'veth0_macvtap\x00', 0x41}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100000000", 0x26) 3.215670186s ago: executing program 4 (id=533): r0 = socket$inet6(0xa, 0x1, 0x100) r1 = io_uring_setup(0x404a, &(0x7f0000000000)={0x0, 0xbfba, 0x80000, 0x1, 0x351}) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bd, 0x10000, 0x10001, 0x35b, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@in6={0xa, 0x4e20, 0x4, @empty, 0x3}, 0x0, 0x0, 0x1}) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40, 0x0) 3.215495556s ago: executing program 4 (id=534): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff040140861246200001010203010902200001010080fa0904000002ff04010007058102000200070501020002"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x1c, r3, 0x1, 0x70bd25, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x80) 2.619182382s ago: executing program 0 (id=540): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007b0500000900000003000000a900000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x1, 0x2, 0x5, 0x2, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5703583a09a52f2c}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x24040040) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$SG_BLKTRACESTOP(r6, 0x1275, 0x0) close_range(r4, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x14}}}}], 0x20}, 0xe900) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4deff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x32, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0xfe33) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) write(r9, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="e73d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 2.618533426s ago: executing program 0 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xec) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x40000083, 0x0, 0x8}]}) 1.950015295s ago: executing program 0 (id=543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TCSETS(r1, 0x80480911, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x3c}}, 0x48040) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[], 0xf0}}, 0x4000) 1.949702462s ago: executing program 0 (id=544): r0 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000019340)={0x14, &(0x7f0000019080)={0x20, 0x21, 0x95, {0x95, 0x31, "8cfba3baedf5c7a1d1aa97695450e07142309caa5f133c6ce1595299bba7ad41bb1f680d795a33e551d026528a2e69209117d4a834883f15caef1d4e74f78a2dd933f0ff74e7e411c6bf0f8233047754d38d5f6cccc42e792450cefdcbe1be8bf2b18af8a890c98e12fd50544ea026671347497bb545050cd7847dbfd91d4f98e3c406170338c4e174f0fe3565ce33f7a140c8"}}, &(0x7f0000019240)={0x0, 0x3, 0xee, @string={0xee, 0x3, "e3641a24d2ac947c76dced5c3d286659a526277438a843c071d4f4da9daa9c7c49ba4fc6eb667f091038231154c5f33c70839586b9a786589bfd7f24c9347e07a2251f5a5c642cae9fe73cafdbabde88c734a55c99bd02fa21c59db3ca5721c2b8bc140255c8d90306b036298272073650bf0118e22db741302f2307a0073547440c0ba5f3ce3de148248d553dcb127ddcc2abd1b43f58427c0cc0cae9bbfd4575a17ee32297340c99a0a82a1c90f2185bcb34cb8131559416588b2368b4921a42e1afbb7e2f0dd45ac5c09ee6775a5a54b51ea2a2719deb1c6dd5ac047ffffe66ad757a258fc8b470175056"}}}, &(0x7f00000195c0)={0x34, &(0x7f0000019380)={0x0, 0xb, 0xf5, "790537961b855e5c65515a73ed053a88250a7eb051eca26f8c424164c7b71131e6eb608fab205e72b3504cc82516369b97b05eb8ed8724e70303db8faa16c9f28abc73593b003e98841c7046bc5fab5ce3af42114107376cce28c84c68aacd11fd95b427a85e549934b35fec78838063a7cdd9ae9cd154642ee4be8642a8e944db0b3815c8b8d9e8ad4c57f9a3d4267fe874038c1d761cd2e11f0eb556b11fc7fcdbe76b733d31d1fe1a763763c5a86f4e4cff28d6fcb9ca982a26f476004cfd5b9fa1fbdc6d2cdc08085ba7499ae28fb9127819305563c4da4b040b5ea05005f7701fb122e43bb4a74ed9494fb3590a847a4e0738"}, &(0x7f0000019480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000194c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000019500)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000019540)={0x40, 0xa0, 0x4, 0x80}, &(0x7f0000019580)={0xc0, 0xa2, 0x2f, "79791e7a2c4b1d6be8855feb41d8c8e792d643decb11f33d8a0d222352a9c3bcdf94f05939335bc2079fedef8d297d"}}) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) 1.479171135s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r2, r1, &(0x7f00000001c0)=0x1, 0x8) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r3, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil], &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000001840), 0x2) fallocate(r4, 0x100000000000011, 0x2000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x48981, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x6, 0x6}}, './bus\x00'}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x140044, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50d04000000000000382a0c1511fdf9435e3ffe460000", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/intel_ish_ipc\x00', 0x0, 0x0) r9 = openat(r8, &(0x7f0000000340)='bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000380)='0000:00:01.0', 0xc) 1.389735928s ago: executing program 3 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x458081, 0x114) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x2, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r4, 0x2}}, 0x10) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x240, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x36, &(0x7f0000000ec0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, 0xffff}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1208}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r9, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) getsockname(r9, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r7, 0x101, 0x2, 0x8, {{0x19}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x20}}, 0x0) 1.340129589s ago: executing program 3 (id=553): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.339701958s ago: executing program 3 (id=554): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000038455599e7c08f7d709015f026c16450245032d35d04476a5b1570d945437079258fb115160aa9919cc33e7cdf0fb194fe0af76d37d061a401afbcc65bf249f59262509c4c8ae46b320d47a35b9cf4015077c6233118594128ff6b9a0d6d", @ANYRES16=r0, @ANYBLOB="210325bd7000ffdbdf2567000000080001004200000008000300", @ANYRES32=0x0, @ANYBLOB="0800c400030000000800c30074130000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r2, 0x1000) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r3, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r4, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="2e0400ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b844ea1eb5820d8010faee801d11ee30a65d9a7b552c71b830281efc9efa43ba1e983285a87b5e75610f8f22ec776fbff364e5ff0548da29bd553af5e1ca09ca1200000000000000007baa1c18a6b116ccc6e379c217cd8069d4683b1bc03771823578d302201aa14391171db2c7880f", 0x8}], 0x1, 0x0, 0x0, 0x5865}, 0x40001) 1.250086425s ago: executing program 3 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0xb7, 0x2b418842, 0x6, 0xbd27}}, 0x50) open$dir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x280202, 0x10) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xf, {0x0, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x5, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0x80000000) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f00000006c0)="3b000000010001", 0x7) 569.520276ms ago: executing program 0 (id=566): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x64000600) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r2, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1d, 0x8, 0x70bd29, 0x25dfdbfd, {0x1c, 0x0, 0x0, r2, 0x2, 0x80, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x6b, 0x8, 0x1, 0xb}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) 458.898459ms ago: executing program 0 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030001000000"], 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e00000014000280080001006400000008000300", @ANYRES32=r4], 0x4c}}, 0x0) r5 = epoll_create(0x1008) epoll_pwait(r5, &(0x7f0000000000)=[{}, {}], 0x2, 0xa2e4, &(0x7f0000000080)={[0x101]}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c9008f53017bfa07cc8c90f669e3af8cc4385b5e719092e1b591a8e146ee24021701a14a84b68031ce92c1a73767a7f8c1d7334b52147679d7ec32b2d77af9b6d1817630d1ef0d4b56dd2c67138fbaa284271b1608e587ca2a22812ea42189dcddb4f391d1f7b963a83b976330a13f99f9c9e1357080c8738065521b08f8b0a4b853b183f52fccf2998c6be9a0c47433647a49a43c9b820c9de3c95acb44c18b955daba20512caf6d1c247119809d0081d01dcecac2d22586e47419f26ae15022e1b3780ee93161aae7c7afef3172d858e9d35987bf7093d8e4e1445b7cd2785c1db1a91bf84120bc5a51a"], 0x93) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32=r5, @ANYBLOB="9d"], 0x1c}}, 0x44) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='TCPOPTSTRIP\x00', &(0x7f0000000d00)="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", 0x1000) syz_emit_ethernet(0x56, 0x0, 0x0) gettid() setns(0xc9, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000c80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000090000000300"/72], 0x58) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r8 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0xd0, 0xd0, 0xd0, 0x428, 0xd0, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x5, "f775451f7c6e69d95a3929649c9332d7fe3c6fff65c0c39e298821db1745"}}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x0, 0xae, 0x4, 0x6, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xff], 0x0, 0xa0}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x428}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) socket$inet6_tcp(0xa, 0x1, 0x0) shmat(r8, &(0x7f0000d62000/0x4000)=nil, 0xa000) msync(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) semget$private(0x0, 0x4, 0x3f7) 405.432336ms ago: executing program 3 (id=570): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x153, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "3d9480", 0x11d, 0x6c, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x11, 0x8, 0x0, 0xca, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote]}, @routing={0x5e, 0x2, 0x2, 0x7, 0x0, [@mcast1]}, @hopopts={0x87, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x7, 0x5096, [0x81]}}]}, @srh={0x2f, 0x2, 0x4, 0x1, 0xb4, 0x20, 0x2, [@mcast2]}], "48ed8f2e9a9424b4d17a2ef853871b4596542b99b8f121e1804a390a0bdaf19f421be0c2debe22911a5659ee789f92593201ae73706ad440784b49194d45939c60e73d7d8ac494989246555281fe9d0b6e0a266802f945c5959f21682190185ff488374a50ffbf59406af3e5b2f8fadbca3d466b9a9f26a04b6ff12899bae83b8394522acd"}}}}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x800010100000, 0x4}, 0x0, &(0x7f00000000c0)={0x1b, 0x3, 0x0, 0x800000000000000, 0x0, 0x200000000, 0x6a9, 0x4000000000}, 0x0, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) clock_adjtime(0x0, &(0x7f0000004dc0)={0x0, 0x400000000045, 0xffffffff80000000, 0x30, 0x80000002, 0x0, 0x6, 0x5, 0x1000000000002, 0x8000000000000000, 0x38000000000004, 0x6, 0x7ff, 0x8c, 0xd01, 0x0, 0x4, 0x6b, 0x773, 0xfffffffffffffeff, 0x2, 0x9, 0x1, 0x9014, 0x11, 0xfffffffffffffffa}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 405.006827ms ago: executing program 1 (id=571): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000280), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='raid', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2', 0x1) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x11, r8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, 0x0) 250.134014ms ago: executing program 1 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4093}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 249.009636ms ago: executing program 1 (id=573): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000001c0)={0x18, r3, 0x9, 0x0, &(0x7f0000000100)=[{0x80, 0x5}, {0xf9, 0x6}, {0x9, 0x8}, {0xa2d, 0x1}, {0x3, 0xffffffffffffffe3}, {0x7, 0x21}, {0x4, 0x400}, {0x2, 0x4}, {0x8}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockname(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x80) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f00000002c0)={0x10, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, r4, 0x1, 0x6, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xac3, @remote, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x20004801) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) close_range(r5, r1, 0x0) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000580)={0xc, 0x0}) (rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r6}) (async) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000640)={0x18, r3, 0x7, 0x2}) (async) connect$pppoe(r1, &(0x7f0000000680)={0x18, 0x0, {0x1, @empty, 'ip6_vti0\x00'}}, 0x1e) (async, rerun: 32) write$P9_RCLUNK(r1, &(0x7f00000006c0)={0x7, 0x79, 0x1}, 0x7) (rerun: 32) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000700)={'vxcan0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x15c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x81, @private1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @local}}}}]}, @TIPC_NLA_LINK={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000980), 0x309482, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000009c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000a00)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000a40)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r8, 0xc03064ca, &(0x7f0000000b00)={&(0x7f0000000a80)=[0x0, r9, r10, 0x0, r11], &(0x7f0000000ac0)=[0x3, 0x9, 0x9], 0x6, 0x5, 0x2}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x2004c081) 180.025379ms ago: executing program 1 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x8, 0x4, 0x8, 0x9}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$inet(r1, &(0x7f0000001700)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000300)="98b4727787a368c4565664f2c97eaf4c80306fcb09c52e508aa22d3441ce7f797356c7d32acc0a65ea76a9cf38c041aebffbcb2975898b0a1484eccdee132973e8d95109ea5da59a9f41a3e8ccd0c6af43bd17760eb01270f131c2bbc3b1704b095963d09211acc976c821a7cf9937281460671d673d37aa72dd443f9e4d3e6a0b5acb8dbc28ce32ba7ab950cb17f1fafaa41aeae99287da943374cdddaf4b967ffa5607d3813b35289b683c8389", 0xae}, {&(0x7f0000000440)="672db11686315473860852e026ebc0c6a82fb0a505cc7eb66337d294450e840a61ad558951", 0x25}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="2452e0f12194476d2b0e4c00ca405a9a827f7bade621e28c90d880a1a2c20ab89d1ed068aa6a9dd995f41a3e60737faec6266400611bb1acdb7b9af7fc3dfe27399fe2d354770d465957e14304d125ee170abae55e3abf1e8ad3b2ec2be3169713db2d2a816309c03b42ecc0ee564493506d22e372cc974715775ffb3200c2d19b61d9743b1162c130e2c8e64fd97d44c257ac397449e658d8c8ac772957fe0cae8085d31a68e26907034c47db2de45761891ba0522f3fa322b5b92c1cf6fa8aaaee2e8518b7bef0a73b07b5a65b06d938e15bc242abb82644ea829fd6acdc9b88d599f4748bedf325f652a4", 0xec}, {&(0x7f0000001580)="514184cd00cef6c68d1ff5ef2cce0e7a1149093b6f97c0098da970f3de081d82ec95b0155c71eee50749d486110a43a0f6ecac4af60b3a61583be7a778fce9924775cb7a0eebc21658b80443fb61", 0x4e}, {&(0x7f0000001600)="fea44d554d3d14f8a2f0bf7613a6e0784e1052808951a5b5978a6ba7eac8b207427bfab23d863fd5d4ef87f7028d8da8f8a9da5296803c87119a5e0fedb788351c9a47a15ac9a79cc2844409a2", 0x4d}], 0x6}, 0x4) 130.185243ms ago: executing program 4 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1110010, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000840)="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", 0x5c3, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0xa9, 0x20}, 0x0, &(0x7f0000000780)="010040b6dcb8c658c8b9a7dcffd1bbdae49b8764c8cfeeb2dd200f6d3cdf5c69138da8463ffda45302d788a5c3fd0d82add6092e4edc32ee1405ef00000e25e5dce03e1191cabfd7c6beacd97746cfda01ed0f52ff54a611fe424e3561dbba6794b02cc3ae989632507bf94633f947611862a9267e5612ceba7a66affb0983077dbc088c9a4b6b6293294a51c8214732e04a56638c7911d73ac25dd3e6c7d1cd8c928c357207fca2e9", 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) 78.376792ms ago: executing program 1 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x1e1) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror', 0x1e) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000003200a0010000380100000100") 77.917586ms ago: executing program 4 (id=577): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x4, 0x4, 0x5f8, 0xffffffff, 0x2f8, 0x228, 0x2f8, 0xfeffffff, 0xffffffff, 0x528, 0x528, 0x528, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x32, 0x4, 0x0, 0x1e}, 0x2f2, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'macvlan1\x00', {0x100000001, 0x8000, 0x48, 0x0, 0xffff, 0x5, 0x196, 0xf, 0x18, 0x8}, {0x4f400000}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x29, 0x8, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0xf, [0x0, 0x3], 0x1001000, 0x30, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, @private2, @rand_addr=' \x01\x00', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0xa}}, @common=@icmp6={{0x28}, {0x8, "b349", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x20000}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0xfffffd2e) setsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000ac1e01010000000000000000000000007f00000100000000000000000000000000000000000000000a002080", @ANYRESOCT=r3, @ANYRESOCT], 0xb8}}, 0x0) 77.597068ms ago: executing program 1 (id=578): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r1, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x2210088, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) lseek(r2, 0x7fffffff, 0x1) r3 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="660a0000000000006111580000000000180000608b782e37fa9900e6fcac6d000000000000000000004527a11759e1bfae834fe7b8ebf2653dd5e6cac4a0d0595ca8c901c51832e1a8da2fb2c111c8dd26fe5de558047a0a9d6b7eb8834bbc5545b2"], &(0x7f0000000000)='GPL\x00'}, 0x80) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r4, 0x3) accept4(r4, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000003b00010000000000d5c700000b000000250001"], 0x3c}}, 0x0) pivot_root(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000100)='./mnt/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=579): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x944}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48001}, 0x4040014) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="8b373c37531119fbff905c62cb45b9416cef834a5f7ee622c2dc3f8b6d88dc5ccae143e184ab7bdaa6dfc369d674fcae268f989cb033ca43c79fd3c27c21be454c43eaf890d45604e53c4e43dc3afee6edd2eb6882b5c24d1b8014db1d71793216ee87eb7a12758f9198fa6fb716e124be0898797677280981c0a1a181d734ddcc19", 0x82, r1) r3 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x8000) keyctl$link(0x8, r1, r1) socket(0x28, 0x1, 0xf) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = syz_usbip_server_init(0x1) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000380)={0x9, 0x3, 0x5, 0x7fffffff, 0xac37}) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x800, 0x1000000, 0x50, 0xffffffffffffffff, 0x8000000) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000003c0)={0x55, 0x6, 0x6}) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="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", 0x1000, r2) r6 = syz_usb_connect$uac2(0x3, 0xdd, &(0x7f0000001480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x12, 0x30, 0xc3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x8, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x9, 0x2b, 0x84}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x3, [0x6, 0x2, 0x6, 0x8, 0x2, 0x4]}, @sample_rate={0x11, 0x24, 0xd, 0x5, 0x3, 0x3, [0x1, 0x1, 0x2, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x401, 0x7f, "cf5c31da51c6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x43, 0x1, {0x8, 0x25, 0x1, 0x0, 0x0, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x5a, 0xe1, 0x5, 0xe}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x40, 0x1, 0x4, 0x8, "a374", "341ac8"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xff, 0xb4da, 0x81, "6d3a2c0a3c68803c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x8, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x7, 0x10, {0x8, 0x25, 0x1, 0x0, 0xf, 0x1, 0x1}}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x201, 0x0, 0x5, 0x6, 0x3fc808e34361c537, 0x9}, 0x1e, &(0x7f00000015c0)={0x5, 0xf, 0x1e, 0x1, [@generic={0x19, 0x10, 0xb, "1af81019cf51b47e4b3e9a73c61664662799eb1ddd0c"}]}, 0x1, [{0xc7, &(0x7f0000001600)=@string={0xc7, 0x3, "b8f88d5b8393b61720deafd7e625eef7db9b4f29090f1e034e6a8fdb8c6e7d6fe830fcfb42780ae841d1c719f5de037ccfe8952a7075f576896f7a9c8af8b2dbbecdf0b869c9079242d8e33dbd1a32a443e3cd938dfcbb4aeb975b2d967269215a6667d03ec22e5703ad6a7e0a05b3a4aa285dc2dfc41e34dd3226f3633eab994968ee55124e04e925996a7817ae158ae91bc55c469706f8673cae57923665e885b5d3a797a634a08c75605f8c532448a53942b1cee2ba0ccce78f2b14df2b3188a733ec6f"}}]}) syz_usb_disconnect(r6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000002780)={0x926, 0x0, 0x1, 'queue1\x00'}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000002840)={@desc={0x1, 0x0, @desc2}, 0x40, r2, '\x00', @a}) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, &(0x7f0000002900)=0x956) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000002940)) accept4$phonet_pipe(r7, &(0x7f0000002980), &(0x7f00000029c0)=0x10, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x9, 0x10010, r7, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000002a00), 0x4, 0x149082) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x20, 0x1409, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) pwrite64(r7, &(0x7f0000002b40)="9496c6de9a14103dd69e8e135d174d72a6c69835e48615f9c09187cd7336c70d62f5c8a0a4e83c1e36cee36f5bfbc6370028c5fcbc6626187a4c28213066360138461047a7bd5f14af827139891a7ac54b2bd535adbed97603765ebcf9a8f29efa009af4040eb33b742286034c8eef21a2dcd3443568ee25d51a4a96f01a1be40fc413250c439ef4babadc47b04d1ff1487f33b1b05e12fbb63204f911", 0x9d, 0x22488cbd) write$9p(r7, &(0x7f0000002c00)="87b57cd8db82e135ee", 0x9) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000002c40)='virt_wifi0\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000003d00)=@req3={0x5, 0x5, 0x64, 0xda, 0x800, 0x3, 0x7}, 0x1c) kernel console output (not intermixed with test programs): da RBX: 00007fa62a825fa0 RCX: 00007fa62a59e159 [ 56.226632][ T6101] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 56.226639][ T6101] RBP: 00007fa62a63506b R08: 0000000000000000 R09: 0000000000000000 [ 56.226647][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.226653][ T6101] R13: 00007fa62a826038 R14: 00007fa62a825fa0 R15: 00007fffcfc172a8 [ 56.226690][ T6101] [ 56.296364][ T6106] device-mapper: ioctl: Invalid geometry supplied. [ 56.403638][ T72] IPVS: starting estimator thread 0... [ 56.421726][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 56.427194][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 56.467864][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.467895][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.467914][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.467933][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.527426][ T6113] IPVS: using max 28 ests per chain, 67200 per kthread [ 56.777002][ T6125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6125 comm=syz.2.77 [ 56.851271][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.2.79'. [ 56.866615][ T6132] nbd: must specify at least one socket [ 56.977760][ T6143] syzkaller1: entered allmulticast mode [ 57.013913][ T6147] overlay: Unknown parameter 'subj_user' [ 57.167784][ T6155] mac80211_hwsim hwsim7 c@0Ù: renamed from wlan0 (while UP) [ 57.276342][ T6166] FAULT_INJECTION: forcing a failure. [ 57.276342][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 57.276377][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) [ 57.276401][ T6166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.276413][ T6166] Call Trace: [ 57.276420][ T6166] [ 57.276427][ T6166] dump_stack_lvl+0x100/0x190 [ 57.276463][ T6166] should_fail_ex.cold+0x5/0xa [ 57.276492][ T6166] should_failslab+0xc2/0x120 [ 57.276524][ T6166] __kmalloc_noprof+0xfc/0x840 [ 57.276550][ T6166] ? trace_kmalloc+0xeb/0x110 [ 57.276578][ T6166] ? lsm_blob_alloc+0x68/0x90 [ 57.276601][ T6166] lsm_blob_alloc+0x68/0x90 [ 57.276620][ T6166] security_sk_alloc+0x2d/0x290 [ 57.276667][ T6166] sk_prot_alloc+0x12a/0x2a0 [ 57.276692][ T6166] sk_alloc+0x36/0xe80 [ 57.276720][ T6166] __netlink_create+0x5e/0x2c0 [ 57.276741][ T6166] ? __wake_up+0x3f/0x60 [ 57.276762][ T6166] netlink_create+0x29b/0x610 [ 57.276784][ T6166] ? __pfx_rtnetlink_bind+0x10/0x10 [ 57.276811][ T6166] __sock_create+0x339/0x860 [ 57.276836][ T6166] __sys_socket+0x14d/0x260 [ 57.276859][ T6166] ? __pfx___sys_socket+0x10/0x10 [ 57.276889][ T6166] __x64_sys_socket+0x72/0xb0 [ 57.276909][ T6166] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.276931][ T6166] do_syscall_64+0x123/0x790 [ 57.276955][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.276976][ T6166] RIP: 0033:0x7fa62a59e159 [ 57.276995][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.277014][ T6166] RSP: 002b:00007fa6287f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 57.277034][ T6166] RAX: ffffffffffffffda RBX: 00007fa62a825fa0 RCX: 00007fa62a59e159 [ 57.277047][ T6166] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000400000000010 [ 57.277058][ T6166] RBP: 00007fa62a63506b R08: 0000000000000000 R09: 0000000000000000 [ 57.277070][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.277081][ T6166] R13: 00007fa62a826038 R14: 00007fa62a825fa0 R15: 00007fffcfc172a8 [ 57.277109][ T6166] [ 57.354914][ T43] kauditd_printk_skb: 142 callbacks suppressed [ 57.354930][ T43] audit: type=1400 audit(1791035060.541:392): avc: denied { mount } for pid=6167 comm="syz.2.97" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.575530][ T43] audit: type=1400 audit(1791035060.761:393): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 57.598252][ T43] audit: type=1400 audit(1791035060.791:394): avc: denied { bind } for pid=6179 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.631854][ T43] audit: type=1400 audit(1791035060.821:395): avc: denied { create } for pid=6182 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.632545][ T43] audit: type=1400 audit(1791035060.821:396): avc: denied { setopt } for pid=6182 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 57.632813][ T43] audit: type=1400 audit(1791035060.821:397): avc: denied { bind } for pid=6182 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 57.633002][ T43] audit: type=1400 audit(1791035060.821:398): avc: denied { connect } for pid=6182 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.633426][ T43] audit: type=1400 audit(1791035060.821:399): avc: denied { bind } for pid=6182 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.634564][ T43] audit: type=1400 audit(1791035060.821:400): avc: denied { write } for pid=6182 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.635272][ T43] audit: type=1400 audit(1791035060.821:401): avc: denied { ioctl } for pid=6182 comm="syz.0.99" path="socket:[10163]" dev="sockfs" ino=10163 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.638064][ T6183] loop4: detected capacity change from 0 to 7 [ 57.657025][ T6183] Dev loop4: unable to read RDB block 7 [ 57.657056][ T6183] loop4: unable to read partition table [ 57.657174][ T6183] loop4: partition table beyond EOD, truncated [ 57.657188][ T6183] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 57.725966][ T6187] syzkaller1: entered allmulticast mode [ 57.735393][ T6189] overlay: Unknown parameter 'subj_user' [ 57.869194][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 57.917518][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=6212 comm=syz.2.110 [ 57.924077][ T6213] binder: 6200:6213 ioctl c0306201 200000000640 returned -22 [ 57.985451][ T6198] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 57.985474][ T6198] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 57.986174][ T6198] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 58.076153][ T71] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 58.329436][ T6226] FAULT_INJECTION: forcing a failure. [ 58.329436][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 58.329460][ T6226] CPU: 2 UID: 0 PID: 6226 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT(full) [ 58.329472][ T6226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.329479][ T6226] Call Trace: [ 58.329483][ T6226] [ 58.329488][ T6226] dump_stack_lvl+0x100/0x190 [ 58.329509][ T6226] should_fail_ex.cold+0x5/0xa [ 58.329526][ T6226] should_failslab+0xc2/0x120 [ 58.329544][ T6226] __kmalloc_noprof+0xfc/0x840 [ 58.329558][ T6226] ? __memcg_list_lru_alloc+0x418/0x680 [ 58.329579][ T6226] __memcg_list_lru_alloc+0x418/0x680 [ 58.329597][ T6226] ? xa_load+0x149/0x2c0 [ 58.329614][ T6226] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 58.329635][ T6226] ? rcu_read_unlock+0x17/0x60 [ 58.329649][ T6226] memcg_list_lru_alloc+0xd3/0x100 [ 58.329662][ T6226] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 58.329679][ T6226] ? kasan_save_track+0x14/0x30 [ 58.329696][ T6226] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 58.329710][ T6226] ? __d_alloc+0x35/0xa50 [ 58.329733][ T6226] __d_alloc+0x35/0xa50 [ 58.329759][ T6226] d_alloc+0x4a/0x1e0 [ 58.329784][ T6226] lookup_one_qstr_excl+0x171/0x250 [ 58.329804][ T6226] ? mnt_want_write+0x164/0x420 [ 58.329829][ T6226] filename_rmdir+0x26b/0x5c0 [ 58.329858][ T6226] ? __pfx_filename_rmdir+0x10/0x10 [ 58.329885][ T6226] ? do_getname+0x191/0x390 [ 58.329897][ T6226] __x64_sys_unlinkat+0xf5/0x130 [ 58.329916][ T6226] do_syscall_64+0x123/0x790 [ 58.329931][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.329943][ T6226] RIP: 0033:0x7f0d9539e159 [ 58.329953][ T6226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.329964][ T6226] RSP: 002b:00007f0d961e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 58.329976][ T6226] RAX: ffffffffffffffda RBX: 00007f0d95625fa0 RCX: 00007f0d9539e159 [ 58.329983][ T6226] RDX: 0000000000000200 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 58.329989][ T6226] RBP: 00007f0d961e0090 R08: 0000000000000000 R09: 0000000000000000 [ 58.329996][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.330003][ T6226] R13: 00007f0d95626038 R14: 00007f0d95625fa0 R15: 00007ffdc6542de8 [ 58.330017][ T6226] [ 58.671651][ T6246] device-mapper: ioctl: Invalid geometry supplied. [ 58.717674][ T6249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.123'. [ 58.815482][ T6254] Bluetooth: MGMT ver 1.23 getty: ttyS0: read error: Resource temporarily unavailable [ 59.107589][ T6180] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.188909][ T71] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 59.237071][ T6275] syzkaller1: entered allmulticast mode [ 59.268908][ T6180] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.270249][ T6180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 59.270275][ T6180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 59.270296][ T6180] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.270326][ T6180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.275351][ T6180] usb 8-1: config 0 descriptor?? [ 59.276900][ T6257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.348943][ T71] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.349802][ T71] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 59.349826][ T71] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.349838][ T71] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.349860][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.355891][ T71] usbtmc 7-1:16.0: bulk endpoints not found [ 59.588702][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.142'. [ 59.692224][ T6180] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.692264][ T6180] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.692284][ T6180] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.692303][ T6180] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.692321][ T6180] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.692340][ T6180] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 59.726906][ T6180] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 60.044174][ T6308] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 60.263172][ T6331] fuse: fd is not a fuse device [ 60.286145][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 60.289667][ T6334] syzkaller1: entered allmulticast mode [ 60.677475][ T5623] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.847475][ T5623] usb 5-1: Using ep0 maxpacket: 8 [ 60.848268][ T5623] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 60.849800][ T5623] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 60.849826][ T5623] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.849855][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.856151][ T5623] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 60.863175][ T5623] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 61.161423][ T6344] syzkaller1: entered allmulticast mode [ 61.263447][ T6346] FAULT_INJECTION: forcing a failure. [ 61.263447][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 61.263479][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(full) [ 61.263498][ T6346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.263523][ T6346] Call Trace: [ 61.263529][ T6346] [ 61.263536][ T6346] dump_stack_lvl+0x100/0x190 [ 61.263568][ T6346] should_fail_ex.cold+0x5/0xa [ 61.263592][ T6346] should_failslab+0xc2/0x120 [ 61.263615][ T6346] __kmalloc_noprof+0xfc/0x840 [ 61.263634][ T6346] ? tcf_idr_create+0x62/0x880 [ 61.263662][ T6346] tcf_idr_create+0x62/0x880 [ 61.263685][ T6346] ? __nla_parse+0x40/0x60 [ 61.263707][ T6346] tcf_mpls_init+0x681/0x1490 [ 61.263736][ T6346] ? __pfx_tcf_mpls_init+0x10/0x10 [ 61.263766][ T6346] ? tcf_action_init_1+0x2d8/0x6c0 [ 61.263790][ T6346] ? __asan_memcpy+0x3c/0x60 [ 61.263812][ T6346] tcf_action_init_1+0x466/0x6c0 [ 61.263838][ T6346] ? __pfx_tcf_action_init_1+0x10/0x10 [ 61.263860][ T6346] ? tc_action_load_ops+0x1f5/0x3e0 [ 61.263895][ T6346] ? __nla_parse+0x40/0x60 [ 61.263913][ T6346] tcf_action_init+0x43f/0xa60 [ 61.263944][ T6346] ? __pfx_tcf_action_init+0x10/0x10 [ 61.263984][ T6346] ? __kernel_text_address+0xd/0x30 [ 61.264001][ T6346] ? unwind_get_return_address+0x59/0xa0 [ 61.264024][ T6346] ? arch_stack_walk+0xa6/0xf0 [ 61.264065][ T6346] ? __lock_acquire+0x5c0/0x1f40 [ 61.264088][ T6346] tcf_action_add+0xed/0x5c0 [ 61.264116][ T6346] ? __pfx_tcf_action_add+0x10/0x10 [ 61.264173][ T6346] ? __nla_parse+0x40/0x60 [ 61.264194][ T6346] tc_ctl_action+0x2e3/0x470 [ 61.264219][ T6346] ? __pfx_tc_ctl_action+0x10/0x10 [ 61.264250][ T6346] ? __pfx_tc_ctl_action+0x10/0x10 [ 61.264275][ T6346] rtnetlink_rcv_msg+0x3c9/0xe90 [ 61.264309][ T6346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.264343][ T6346] ? ref_tracker_free+0x37e/0x6c0 [ 61.264369][ T6346] netlink_rcv_skb+0x159/0x420 [ 61.264388][ T6346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.264414][ T6346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 61.264443][ T6346] ? netlink_deliver_tap+0x1ae/0xcc0 [ 61.264469][ T6346] netlink_unicast+0x585/0x850 [ 61.264493][ T6346] ? __pfx_netlink_unicast+0x10/0x10 [ 61.264521][ T6346] netlink_sendmsg+0x8b0/0xda0 [ 61.264546][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.264569][ T6346] ? selinux_socket_sendmsg+0x198/0x2f0 [ 61.264594][ T6346] ____sys_sendmsg+0xa4d/0xbe0 [ 61.264610][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.264633][ T6346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.264660][ T6346] ___sys_sendmsg+0x190/0x1e0 [ 61.264680][ T6346] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.264699][ T6346] ? futex_wait+0x11e/0x370 [ 61.264726][ T6346] ? find_held_lock+0x2b/0x80 [ 61.264764][ T6346] __sys_sendmsg+0x160/0x210 [ 61.264787][ T6346] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.264822][ T6346] do_syscall_64+0x123/0x790 [ 61.264836][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.264848][ T6346] RIP: 0033:0x7fa62a59e159 [ 61.264858][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.264870][ T6346] RSP: 002b:00007fa6287f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.264882][ T6346] RAX: ffffffffffffffda RBX: 00007fa62a825fa0 RCX: 00007fa62a59e159 [ 61.264889][ T6346] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 61.264895][ T6346] RBP: 00007fa62a63506b R08: 0000000000000000 R09: 0000000000000000 [ 61.264901][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.264907][ T6346] R13: 00007fa62a826038 R14: 00007fa62a825fa0 R15: 00007fffcfc172a8 [ 61.264922][ T6346] [ 61.514440][ T6355] syz_tun: entered allmulticast mode [ 61.521922][ T6355] pimreg: entered allmulticast mode [ 61.525485][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 61.547957][ T5807] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.548000][ T5807] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.548029][ T5807] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.548057][ T5807] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.585598][ T30] usb 5-1: USB disconnect, device number 2 [ 61.594771][ T30] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 61.595307][ T30] kobil_sct 5-1:1.0: device disconnected [ 61.734036][ T6354] syz_tun: left allmulticast mode [ 61.734123][ T6354] pimreg: left allmulticast mode [ 61.884679][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.162'. [ 61.884703][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.162'. [ 61.884715][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 61.964370][ T852] usb 7-1: USB disconnect, device number 2 [ 62.041783][ T6372] syzkaller1: entered allmulticast mode [ 62.067126][ T6374] capability: warning: `syz.1.167' uses deprecated v2 capabilities in a way that may be insecure [ 62.076438][ T6374] loop0: detected capacity change from 0 to 32768 [ 62.083250][ T6374] loop1: detected capacity change from 0 to 65536 [ 62.087711][ T6374] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.458752.0), cmd(9) [ 62.155053][ T6377] device-mapper: ioctl: Invalid geometry supplied. [ 62.181551][ T5623] usb 8-1: USB disconnect, device number 2 [ 62.267355][ T6389] FAULT_INJECTION: forcing a failure. [ 62.267355][ T6389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.267386][ T6389] CPU: 3 UID: 0 PID: 6389 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT(full) [ 62.267407][ T6389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.267418][ T6389] Call Trace: [ 62.267426][ T6389] [ 62.267433][ T6389] dump_stack_lvl+0x100/0x190 [ 62.267466][ T6389] should_fail_ex.cold+0x5/0xa [ 62.267494][ T6389] _copy_from_user+0x2e/0xd0 [ 62.267519][ T6389] __sys_bpf+0x2f5/0x4a30 [ 62.267545][ T6389] ? __pfx___sys_bpf+0x10/0x10 [ 62.267563][ T6389] ? find_held_lock+0x2b/0x80 [ 62.267591][ T6389] ? futex_wake+0x4ea/0x5e0 [ 62.267627][ T6389] ? rcu_read_lock_any_held+0x6a/0x90 [ 62.267655][ T6389] ? find_held_lock+0x2b/0x80 [ 62.267688][ T6389] ? ksys_write+0x190/0x250 [ 62.267711][ T6389] ? ksys_write+0x190/0x250 [ 62.267749][ T6389] ? __x64_sys_futex+0x34f/0x4d0 [ 62.267776][ T6389] ? __x64_sys_futex+0x358/0x4d0 [ 62.267806][ T6389] ? xfd_validate_state+0x129/0x190 [ 62.267832][ T6389] ? __x64_sys_bpf+0xce/0x140 [ 62.267851][ T6389] __x64_sys_bpf+0xce/0x140 [ 62.267870][ T6389] ? do_syscall_64+0xae/0x790 [ 62.267893][ T6389] do_syscall_64+0x123/0x790 [ 62.267915][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.267935][ T6389] RIP: 0033:0x7f0d9539e159 [ 62.267950][ T6389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.267968][ T6389] RSP: 002b:00007f0d961e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.267987][ T6389] RAX: ffffffffffffffda RBX: 00007f0d95625fa0 RCX: 00007f0d9539e159 [ 62.268000][ T6389] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 62.268011][ T6389] RBP: 00007f0d9543506b R08: 0000000000000000 R09: 0000000000000000 [ 62.268023][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.268033][ T6389] R13: 00007f0d95626038 R14: 00007f0d95625fa0 R15: 00007ffdc6542de8 [ 62.268061][ T6389] [ 62.458317][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 62.458338][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 62.458355][ T6399] netlink: 'syz.0.176': attribute type 6 has an invalid length. [ 62.547454][ T1046] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 62.698808][ T1046] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.702095][ T1046] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 62.702142][ T1046] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.702174][ T1046] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 62.702213][ T1046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.721416][ T1046] usbtmc 6-1:16.0: bulk endpoints not found [ 63.190131][ T6405] netlink: 80 bytes leftover after parsing attributes in process `syz.2.178'. [ 63.257785][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'. [ 63.412370][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 63.412383][ T43] audit: type=1400 audit(1791035066.601:476): avc: denied { read } for pid=6407 comm="syz.2.179" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.412408][ T43] audit: type=1400 audit(1791035066.601:477): avc: denied { open } for pid=6407 comm="syz.2.179" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.413886][ T43] audit: type=1400 audit(1791035066.601:478): avc: denied { ioctl } for pid=6407 comm="syz.2.179" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.572779][ T43] audit: type=1400 audit(1791035066.761:479): avc: denied { remount } for pid=6416 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.694742][ T43] audit: type=1400 audit(1791035066.881:480): avc: denied { listen } for pid=6423 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.696283][ T43] audit: type=1400 audit(1791035066.881:481): avc: denied { read } for pid=6423 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.792788][ T43] audit: type=1400 audit(1791035066.981:482): avc: denied { write } for pid=6428 comm="syz.0.186" name="sysname" dev="proc" ino=4026533334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.850450][ T43] audit: type=1400 audit(1791035067.041:483): avc: denied { create } for pid=6430 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.947011][ T43] audit: type=1400 audit(1791035067.131:484): avc: denied { write } for pid=6434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.953613][ T43] audit: type=1400 audit(1791035067.141:485): avc: denied { read } for pid=6436 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.988540][ T6440] device-mapper: ioctl: Invalid geometry supplied. [ 64.137395][ T6454] FAULT_INJECTION: forcing a failure. [ 64.137395][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.137420][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.0.193 Not tainted syzkaller #0 PREEMPT(full) [ 64.137433][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.137440][ T6454] Call Trace: [ 64.137444][ T6454] [ 64.137449][ T6454] dump_stack_lvl+0x100/0x190 [ 64.137471][ T6454] should_fail_ex.cold+0x5/0xa [ 64.137488][ T6454] _copy_from_iter+0x43a/0x1690 [ 64.137507][ T6454] ? __pfx__copy_from_iter+0x10/0x10 [ 64.137522][ T6454] ? __pfx___alloc_skb+0x10/0x10 [ 64.137543][ T6454] netlink_sendmsg+0x808/0xda0 [ 64.137562][ T6454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.137579][ T6454] ? selinux_socket_sendmsg+0x198/0x2f0 [ 64.137596][ T6454] ____sys_sendmsg+0xa4d/0xbe0 [ 64.137607][ T6454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.137624][ T6454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.137639][ T6454] ? lock_acquire+0x1d1/0x380 [ 64.137653][ T6454] ? get_pid_task+0x2a/0x250 [ 64.137671][ T6454] ___sys_sendmsg+0x190/0x1e0 [ 64.137685][ T6454] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.137810][ T6454] ? get_pid_task+0x106/0x250 [ 64.137832][ T6454] ? find_held_lock+0x2b/0x80 [ 64.137857][ T6454] __sys_sendmsg+0x160/0x210 [ 64.137875][ T6454] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.137899][ T6454] do_syscall_64+0x123/0x790 [ 64.137914][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.137926][ T6454] RIP: 0033:0x7f6bf6b9e159 [ 64.137936][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.137947][ T6454] RSP: 002b:00007f6bf79a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.137959][ T6454] RAX: ffffffffffffffda RBX: 00007f6bf6e25fa0 RCX: 00007f6bf6b9e159 [ 64.137966][ T6454] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 64.137973][ T6454] RBP: 00007f6bf79a3090 R08: 0000000000000000 R09: 0000000000000000 [ 64.137979][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.137986][ T6454] R13: 00007f6bf6e26038 R14: 00007f6bf6e25fa0 R15: 00007ffce1694888 [ 64.138000][ T6454] [ 64.375010][ T6471] device-mapper: ioctl: Invalid geometry supplied. [ 64.399447][ T5735] Bluetooth: hci2: command 0x2016 tx timeout [ 64.645128][ T6492] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 64.672081][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 64.691859][ T6492] bond1: (slave bridge1): making interface the new active one [ 64.695545][ T6492] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 64.809627][ T6499] device-mapper: ioctl: Invalid geometry supplied. [ 64.877589][ T5839] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.985662][ T6512] loop7: detected capacity change from 0 to 7 [ 65.045328][ T6512] Dev loop7: unable to read RDB block 7 [ 65.045362][ T6512] loop7: unable to read partition table [ 65.045521][ T6512] loop7: partition table beyond EOD, truncated [ 65.045555][ T6512] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 65.050132][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 65.050719][ C2] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 65.050782][ C2] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 65.051010][ T5839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.051997][ T5839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 65.052021][ T5839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 65.052040][ T5839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.052058][ T5839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.052089][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.265643][ T5839] usb 7-1: GET_CAPABILITIES returned 0 [ 65.265668][ T5839] usbtmc 7-1:16.0: can't read capabilities [ 65.306493][ T71] usb 6-1: USB disconnect, device number 3 [ 65.436492][ T6531] capability: warning: `syz.0.220' uses 32-bit capabilities (legacy support in use) [ 65.457445][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.474545][ T5623] usb 7-1: USB disconnect, device number 3 [ 65.524324][ T6538] syzkaller0: entered promiscuous mode [ 65.524345][ T6538] syzkaller0: entered allmulticast mode [ 65.528470][ T6538] 0: reclassify loop, rule prio 0, protocol 800 [ 65.529577][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 65.618386][ T30] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 65.618914][ T30] usb 8-1: config 57 has no interfaces? [ 65.620496][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 65.620514][ T30] usb 8-1: Product: syz [ 65.620524][ T30] usb 8-1: Manufacturer: syz [ 65.680387][ T6546] device-mapper: ioctl: Invalid geometry supplied. [ 65.815303][ T6555] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.851046][ T30] usb 8-1: USB disconnect, device number 3 [ 66.033163][ T6559] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 66.129630][ T6566] dlm: non-version read from control device 8224 [ 66.129644][ T6566] dlm: non-version read from control device 8224 [ 66.129650][ T6566] dlm: non-version read from control device 8224 [ 66.129656][ T6566] dlm: non-version read from control device 8224 [ 66.129663][ T6566] dlm: non-version read from control device 8224 [ 66.129683][ T6566] dlm: non-version read from control device 8224 [ 66.129691][ T6566] dlm: non-version read from control device 8224 [ 66.129699][ T6566] dlm: non-version read from control device 8224 [ 66.129707][ T6566] dlm: non-version read from control device 8224 [ 66.129715][ T6566] dlm: non-version read from control device 8224 [ 66.129723][ T6566] dlm: non-version read from control device 8224 [ 66.129732][ T6566] dlm: non-version read from control device 8224 [ 66.129747][ T6566] dlm: non-version read from control device 8224 [ 66.129760][ T6566] dlm: non-version read from control device 8224 [ 66.129771][ T6566] dlm: non-version read from control device 8224 [ 66.129781][ T6566] dlm: non-version read from control device 8224 [ 66.129792][ T6566] dlm: non-version read from control device 8224 [ 66.129801][ T6566] dlm: non-version read from control device 8224 [ 66.129810][ T6566] dlm: non-version read from control device 8224 [ 66.129819][ T6566] dlm: non-version read from control device 8224 [ 66.129828][ T6566] dlm: non-version read from control device 8224 [ 66.129838][ T6566] dlm: non-version read from control device 8224 [ 66.129847][ T6566] dlm: non-version read from control device 8224 [ 66.129856][ T6566] dlm: non-version read from control device 8224 [ 66.129865][ T6566] dlm: non-version read from control device 8224 [ 66.129875][ T6566] dlm: non-version read from control device 8224 [ 66.129884][ T6566] dlm: non-version read from control device 8224 [ 66.129893][ T6566] dlm: non-version read from control device 8224 [ 66.129902][ T6566] dlm: non-version read from control device 8224 [ 66.129910][ T6566] dlm: non-version read from control device 8224 [ 66.129920][ T6566] dlm: non-version read from control device 8224 [ 66.129929][ T6566] dlm: non-version read from control device 8224 [ 66.129938][ T6566] dlm: non-version read from control device 8224 [ 66.870560][ T6597] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 67.057166][ T6604] __nla_validate_parse: 4 callbacks suppressed [ 67.057181][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 67.058940][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 67.083504][ T6606] FAULT_INJECTION: forcing a failure. [ 67.083504][ T6606] name fail_futex, interval 1, probability 0, space 0, times 1 [ 67.083535][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.3.247 Not tainted syzkaller #0 PREEMPT(full) [ 67.083553][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.083560][ T6606] Call Trace: [ 67.083564][ T6606] [ 67.083569][ T6606] dump_stack_lvl+0x100/0x190 [ 67.083601][ T6606] should_fail_ex.cold+0x5/0xa [ 67.083617][ T6606] get_futex_key+0x1d0/0x14f0 [ 67.083634][ T6606] ? __pfx_get_futex_key+0x10/0x10 [ 67.083649][ T6606] ? __mutex_unlock_slowpath+0x35d/0x930 [ 67.083669][ T6606] futex_wake+0xf4/0x5e0 [ 67.083687][ T6606] ? __pfx_futex_wake+0x10/0x10 [ 67.083706][ T6606] ? lock_acquire+0x1d1/0x380 [ 67.083725][ T6606] ? detach_task_ctx_data+0x83/0x490 [ 67.083750][ T6606] do_futex+0x2b2/0x440 [ 67.083774][ T6606] ? __pfx_do_futex+0x10/0x10 [ 67.083794][ T6606] ? __might_fault+0xc5/0x140 [ 67.083818][ T6606] mm_exit_exec_release+0x256/0x2f0 [ 67.083839][ T6606] do_exit+0x707/0x2a50 [ 67.083860][ T6606] ? __pfx_do_exit+0x10/0x10 [ 67.083874][ T6606] ? do_raw_spin_lock+0x128/0x260 [ 67.083889][ T6606] ? find_held_lock+0x2b/0x80 [ 67.083905][ T6606] ? get_signal+0x7e0/0x21e0 [ 67.083919][ T6606] do_group_exit+0xd5/0x2a0 [ 67.083935][ T6606] get_signal+0x1ec7/0x21e0 [ 67.083950][ T6606] ? preempt_schedule_common+0x3c/0xb0 [ 67.083962][ T6606] ? __pfx_get_signal+0x10/0x10 [ 67.083975][ T6606] ? do_futex+0x190/0x440 [ 67.083992][ T6606] arch_do_signal_or_restart+0x91/0x7e0 [ 67.084009][ T6606] ? cap_task_prctl+0x104/0xa50 [ 67.084021][ T6606] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 67.084045][ T6606] exit_to_user_mode_loop+0x139/0x700 [ 67.084059][ T6606] ? rcu_is_watching+0x13/0xc0 [ 67.084076][ T6606] do_syscall_64+0x661/0x790 [ 67.084089][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.084101][ T6606] RIP: 0033:0x7fec8d79e159 [ 67.084111][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.084121][ T6606] RSP: 002b:00007fec8e6760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 67.084132][ T6606] RAX: fffffffffffffe00 RBX: 00007fec8da25fa8 RCX: 00007fec8d79e159 [ 67.084139][ T6606] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fec8da25fa8 [ 67.084145][ T6606] RBP: 00007fec8da25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 67.084151][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.084158][ T6606] R13: 00007fec8da26038 R14: 00007ffcfe573370 R15: 00007ffcfe573458 [ 67.084171][ T6606] [ 67.199022][ T6615] FAULT_INJECTION: forcing a failure. [ 67.199022][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 67.199049][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT(full) [ 67.199065][ T6615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.199074][ T6615] Call Trace: [ 67.199079][ T6615] [ 67.199085][ T6615] dump_stack_lvl+0x100/0x190 [ 67.199112][ T6615] should_fail_ex.cold+0x5/0xa [ 67.199131][ T6615] ? __pfx_audit_log_vformat+0x10/0x10 [ 67.199149][ T6615] should_failslab+0xc2/0x120 [ 67.199172][ T6615] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 67.199191][ T6615] ? sidtab_sid2str_get+0x84/0x670 [ 67.199213][ T6615] ? sidtab_sid2str_get+0x17a/0x670 [ 67.199238][ T6615] kmemdup_noprof+0x29/0x60 [ 67.199255][ T6615] sidtab_sid2str_get+0x17a/0x670 [ 67.199285][ T6615] security_sid_to_context_core+0x373/0x700 [ 67.199309][ T6615] avc_audit_post_callback+0x109/0x910 [ 67.199333][ T6615] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 67.199354][ T6615] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 67.199375][ T6615] ? skb_put+0x138/0x180 [ 67.199402][ T6615] ? audit_log_n_string+0x2a3/0x5a0 [ 67.199426][ T6615] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 67.199452][ T6615] common_lsm_audit+0x23f/0x2b0 [ 67.199478][ T6615] ? __pfx_common_lsm_audit+0x10/0x10 [ 67.199504][ T6615] ? avc_update_node.isra.0+0x578/0xb90 [ 67.199531][ T6615] ? psi_cgroup_restart+0x29b/0x6f0 [ 67.199552][ T6615] slow_avc_audit+0x186/0x210 [ 67.199576][ T6615] ? __pfx_slow_avc_audit+0x10/0x10 [ 67.199606][ T6615] ? avc_perm_nonode+0x164/0x180 [ 67.199631][ T6615] ? avc_perm_nonode+0xf8/0x180 [ 67.199660][ T6615] audit_inode_permission+0x1ea/0x2a0 [ 67.199682][ T6615] ? __pfx_audit_inode_permission+0x10/0x10 [ 67.199704][ T6615] ? avc_has_perm_noaudit+0x145/0x470 [ 67.199724][ T6615] selinux_inode_permission+0x7ed/0x1130 [ 67.199746][ T6615] ? devcgroup_check_permission+0x39/0x440 [ 67.199762][ T6615] ? __pfx_selinux_inode_permission+0x10/0x10 [ 67.199780][ T6615] ? find_held_lock+0x2b/0x80 [ 67.199798][ T6615] ? devcgroup_check_permission+0x174/0x440 [ 67.199814][ T6615] ? match_exception_partial+0x239/0x2d0 [ 67.199832][ T6615] security_inode_permission+0xda/0x250 [ 67.199847][ T6615] inode_permission+0x36c/0x620 [ 67.199862][ T6615] may_open+0x2b8/0x480 [ 67.199874][ T6615] path_openat+0x51f/0x2440 [ 67.199893][ T6615] ? __pfx_path_openat+0x10/0x10 [ 67.199913][ T6615] do_file_open+0x20e/0x430 [ 67.199931][ T6615] ? __pfx_do_file_open+0x10/0x10 [ 67.199957][ T6615] ? _raw_spin_unlock+0x28/0x50 [ 67.199976][ T6615] ? alloc_fd+0x471/0x7a0 [ 67.199996][ T6615] do_sys_openat2+0x10f/0x1e0 [ 67.200014][ T6615] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.200032][ T6615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.200046][ T6615] ? __fget_files+0x21f/0x3d0 [ 67.200064][ T6615] __x64_sys_openat+0x12d/0x210 [ 67.200083][ T6615] ? __pfx___x64_sys_openat+0x10/0x10 [ 67.200100][ T6615] ? ksys_write+0x1ac/0x250 [ 67.200119][ T6615] do_syscall_64+0x123/0x790 [ 67.200134][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.200146][ T6615] RIP: 0033:0x7fa62a59e159 [ 67.200157][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.200168][ T6615] RSP: 002b:00007fa6287f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.200180][ T6615] RAX: ffffffffffffffda RBX: 00007fa62a825fa0 RCX: 00007fa62a59e159 [ 67.200187][ T6615] RDX: 0000000000020d80 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 67.200194][ T6615] RBP: 00007fa6287f6090 R08: 0000000000000000 R09: 0000000000000000 [ 67.200201][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.200208][ T6615] R13: 00007fa62a826038 R14: 00007fa62a825fa0 R15: 00007fffcfc172a8 [ 67.200222][ T6615] [ 67.280793][ T6615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.280893][ T6615] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.308089][ T6622] MTD: Couldn't look up './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 67.322487][ T6615] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.336656][ T6615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.336794][ T6615] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.344796][ T6615] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.368372][ T6615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.368440][ T6615] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.374918][ T6615] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.381687][ T6615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.381761][ T6615] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.429967][ T6615] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.492489][ T6634] geneve2: entered allmulticast mode [ 67.652734][ T6631] mmap: syz.0.257 (6631) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.737049][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 67.845308][ T6651] FAULT_INJECTION: forcing a failure. [ 67.845308][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 67.845338][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.1.264 Not tainted syzkaller #0 PREEMPT(full) [ 67.845366][ T6651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.845376][ T6651] Call Trace: [ 67.845382][ T6651] [ 67.845390][ T6651] dump_stack_lvl+0x100/0x190 [ 67.845422][ T6651] should_fail_ex.cold+0x5/0xa [ 67.845449][ T6651] should_failslab+0xc2/0x120 [ 67.845475][ T6651] __kmalloc_noprof+0xfc/0x840 [ 67.845496][ T6651] ? __pfx_dynamic_dname+0x10/0x10 [ 67.845518][ T6651] ? tomoyo_encode2+0xfb/0x3c0 [ 67.845548][ T6651] tomoyo_encode2+0xfb/0x3c0 [ 67.845577][ T6651] tomoyo_encode+0x29/0x50 [ 67.845600][ T6651] tomoyo_realpath_from_path+0x18c/0x690 [ 67.845631][ T6651] tomoyo_path_number_perm+0x23c/0x580 [ 67.845652][ T6651] ? tomoyo_path_number_perm+0x22e/0x580 [ 67.845676][ T6651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 67.845708][ T6651] ? __lock_acquire+0x5c0/0x1f40 [ 67.845741][ T6651] ? __fget_files+0x34/0x3d0 [ 67.845766][ T6651] ? find_held_lock+0x2b/0x80 [ 67.845792][ T6651] ? hook_file_ioctl_common+0x140/0x440 [ 67.845825][ T6651] ? __fget_files+0x21f/0x3d0 [ 67.845853][ T6651] security_file_ioctl+0xd3/0x230 [ 67.845877][ T6651] __x64_sys_ioctl+0xb7/0x210 [ 67.845901][ T6651] do_syscall_64+0x123/0x790 [ 67.845924][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.845943][ T6651] RIP: 0033:0x7fa62a59e159 [ 67.845958][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.845975][ T6651] RSP: 002b:00007fa6287f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.845993][ T6651] RAX: ffffffffffffffda RBX: 00007fa62a825fa0 RCX: 00007fa62a59e159 [ 67.846005][ T6651] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 00000000000000b4 [ 67.846016][ T6651] RBP: 00007fa6287f6090 R08: 0000000000000000 R09: 0000000000000000 [ 67.846026][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.846037][ T6651] R13: 00007fa62a826038 R14: 00007fa62a825fa0 R15: 00007fffcfc172a8 [ 67.846062][ T6651] [ 67.846078][ T6651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 67.983261][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 68.001464][ T6658] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.267'. [ 68.087521][ T6669] netlink: 'syz.2.271': attribute type 23 has an invalid length. [ 68.088632][ T6669] ./dev/urandom: Can't lookup blockdev [ 68.092423][ T6669] jffs2: notice: (6669) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.152027][ T5735] Bluetooth: hci2: unexpected event for opcode 0x200d [ 68.158155][ T6667] sg_write: data in/out 603979740/251 bytes for SCSI command 0x0-- guessing data in; [ 68.158155][ T6667] program syz.1.270 not setting count and/or reply_len properly [ 68.161218][ T6682] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 68.166175][ T5735] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 68.355981][ T6693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=6693 comm=syz.3.279 [ 68.834029][ T43] kauditd_printk_skb: 58 callbacks suppressed [ 68.834049][ T43] audit: type=1400 audit(1791035072.021:544): avc: denied { net_admin } for pid=5532 comm="getty" capability=12 scontext=system_u:system_r:getty_t tcontext=system_u:system_r:getty_t tclass=capability permissive=1 [ 69.063929][ T6702] batman_adv: batadv0: Adding interface: syzkaller0 [ 69.063941][ T6702] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.063956][ T6702] batman_adv: batadv0: Interface activated: syzkaller0 [ 69.328983][ T6701] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 69.336592][ T6701] batman_adv: batadv0: Removing interface: syzkaller0 [ 69.346426][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 69.357887][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.357972][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.375708][ T43] audit: type=1400 audit(1791035072.561:545): avc: denied { create } for pid=6705 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.377979][ T43] audit: type=1400 audit(1791035072.561:546): avc: denied { connect } for pid=6705 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.392437][ T6708] syz_tun: entered allmulticast mode [ 69.400394][ T43] audit: type=1400 audit(1791035072.591:547): avc: denied { mounton } for pid=6707 comm="syz.0.285" path="/87/file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 69.423504][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.423519][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.466582][ T6718] tc action pedit offset must be on 32 bit boundaries [ 69.570167][ T43] audit: type=1400 audit(1791035072.761:548): avc: denied { accept } for pid=6724 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.599126][ T6729] device-mapper: ioctl: Invalid geometry supplied. [ 69.614318][ T6734] netlink: 'syz.3.295': attribute type 21 has an invalid length. [ 69.640346][ T6736] vivid-000: ================= START STATUS ================= [ 69.640358][ T6736] vivid-000: Test Pattern: 75% Colorbar [ 69.640370][ T6736] vivid-000: Fill Percentage of Frame: 100 [ 69.640381][ T6736] vivid-000: Horizontal Movement: No Movement [ 69.640391][ T6736] vivid-000: Vertical Movement: No Movement [ 69.640403][ T6736] vivid-000: OSD Text Mode: All [ 69.640413][ T6736] vivid-000: Show Border: false [ 69.640423][ T6736] vivid-000: Show Square: false [ 69.640433][ T6736] vivid-000: Sensor Flipped Horizontally: false [ 69.640444][ T6736] vivid-000: Sensor Flipped Vertically: false [ 69.640454][ T6736] vivid-000: Insert SAV Code in Image: false [ 69.640464][ T6736] vivid-000: Insert EAV Code in Image: false [ 69.640475][ T6736] vivid-000: Insert Video Guard Band: false [ 69.640485][ T6736] vivid-000: Reduced Framerate: false [ 69.640495][ T6736] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 69.641402][ T6736] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 69.641415][ T6736] vivid-000: Enable Capture Cropping: false [ 69.641425][ T6736] vivid-000: Enable Capture Composing: true [ 69.641436][ T6736] vivid-000: Enable Capture Scaler: true [ 69.641446][ T6736] vivid-000: Timestamp Source: End of Frame [ 69.641456][ T6736] vivid-000: Colorspace: sRGB [ 69.641466][ T6736] vivid-000: Transfer Function: Default [ 69.641476][ T6736] vivid-000: Y'CbCr Encoding: Default [ 69.641487][ T6736] vivid-000: HSV Encoding: Hue 0-179 [ 69.641497][ T6736] vivid-000: Quantization: Default [ 69.641507][ T6736] vivid-000: Apply Alpha To Red Only: false [ 69.641517][ T6736] vivid-000: Standard Aspect Ratio: 4x3 [ 69.641527][ T6736] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 69.641541][ T6736] vivid-000: DV Timings: 640x480p59 inactive [ 69.641553][ T6736] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 69.641564][ T6736] vivid-000: Maximum EDID Blocks: 2 [ 69.641574][ T6736] vivid-000: Limited RGB Range (16-235): false [ 69.641584][ T6736] vivid-000: Rx RGB Quantization Range: Automatic [ 69.641594][ T6736] vivid-000: Power Present: 0x00000001 [ 69.641604][ T6736] tpg source WxH: 1280x960 (HSV) [ 69.641610][ T6736] tpg field: 1 [ 69.641614][ T6736] tpg crop: (0,0)/1280x960 [ 69.641620][ T6736] tpg compose: (0,0)/1280x960 [ 69.641627][ T6736] tpg colorspace: 3 [ 69.641630][ T6736] tpg transfer function: 2/2 [ 69.641635][ T6736] tpg HSV encoding: 128/128 [ 69.641640][ T6736] tpg quantization: 2/2 [ 69.641644][ T6736] tpg RGB range: 0/2 [ 69.641649][ T6736] vivid-000: ================== END STATUS ================== [ 69.793910][ T6751] FAULT_INJECTION: forcing a failure. [ 69.793910][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 69.793940][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 69.793962][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.793972][ T6751] Call Trace: [ 69.793978][ T6751] [ 69.793987][ T6751] dump_stack_lvl+0x100/0x190 [ 69.794030][ T6751] should_fail_ex.cold+0x5/0xa [ 69.794056][ T6751] should_failslab+0xc2/0x120 [ 69.794086][ T6751] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 69.794116][ T6751] ? x509_cert_parse+0x3bd/0x910 [ 69.794143][ T6751] kmemdup_noprof+0x29/0x60 [ 69.794162][ T6751] x509_cert_parse+0x3bd/0x910 [ 69.794189][ T6751] x509_key_preparse+0x65/0x9c0 [ 69.794217][ T6751] asymmetric_key_preparse+0xce/0x1d0 [ 69.794235][ T6751] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 69.794252][ T6751] __key_create_or_update+0x463/0xe30 [ 69.794280][ T6751] ? __pfx___key_create_or_update+0x10/0x10 [ 69.794309][ T6751] ? lookup_user_key+0x3f3/0x1300 [ 69.794343][ T6751] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 69.794370][ T6751] key_create_or_update+0x42/0x60 [ 69.794399][ T6751] __do_sys_add_key+0x2e8/0x460 [ 69.794418][ T6751] ? __pfx___do_sys_add_key+0x10/0x10 [ 69.794447][ T6751] do_syscall_64+0x123/0x790 [ 69.794478][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.794498][ T6751] RIP: 0033:0x7fa62a59e159 [ 69.794515][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.794533][ T6751] RSP: 002b:00007fa6287f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 69.794551][ T6751] RAX: ffffffffffffffda RBX: 00007fa62a825fa0 RCX: 00007fa62a59e159 [ 69.794564][ T6751] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 69.794574][ T6751] RBP: 00007fa62a63506b R08: ffffffffffffffff R09: 0000000000000000 [ 69.794586][ T6751] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 69.794598][ T6751] R13: 00007fa62a826038 R14: 00007fa62a825fa0 R15: 00007fffcfc172a8 [ 69.794649][ T6751] [ 69.870930][ T43] audit: type=1400 audit(1791035073.061:549): avc: denied { search } for pid=6754 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.871798][ T43] audit: type=1400 audit(1791035073.061:550): avc: denied { read write } for pid=6754 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 69.872041][ T43] audit: type=1400 audit(1791035073.061:551): avc: denied { open } for pid=6754 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 69.872225][ T43] audit: type=1400 audit(1791035073.061:552): avc: denied { lock } for pid=6754 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 69.872782][ T43] audit: type=1400 audit(1791035073.061:553): avc: denied { read } for pid=6754 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 69.884925][ T6758] FAULT_INJECTION: forcing a failure. [ 69.884925][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 69.884944][ T6758] CPU: 2 UID: 0 PID: 6758 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(full) [ 69.884958][ T6758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.884966][ T6758] Call Trace: [ 69.884976][ T6758] [ 69.884981][ T6758] dump_stack_lvl+0x100/0x190 [ 69.885010][ T6758] should_fail_ex.cold+0x5/0xa [ 69.885027][ T6758] should_failslab+0xc2/0x120 [ 69.885047][ T6758] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.885061][ T6758] ? proc_net_ns_init+0x42/0x420 [ 69.885075][ T6758] ? __pfx_proc_net_ns_init+0x10/0x10 [ 69.885088][ T6758] proc_net_ns_init+0x42/0x420 [ 69.885102][ T6758] ? __pfx_proc_net_ns_init+0x10/0x10 [ 69.885114][ T6758] ops_init+0x1e2/0x5f0 [ 69.885136][ T6758] setup_net+0x118/0x3a0 [ 69.885152][ T6758] ? __pfx_setup_net+0x10/0x10 [ 69.885173][ T6758] copy_net_ns+0x345/0x7a0 [ 69.885185][ T6758] create_new_namespaces+0x3ea/0xac0 [ 69.885213][ T6758] unshare_nsproxy_namespaces+0xf2/0x220 [ 69.885231][ T6758] ksys_unshare+0x4a2/0xa70 [ 69.885244][ T6758] ? __pfx_ksys_unshare+0x10/0x10 [ 69.885263][ T6758] __x64_sys_unshare+0x31/0x40 [ 69.885276][ T6758] do_syscall_64+0x123/0x790 [ 69.885298][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.885311][ T6758] RIP: 0033:0x7fec8d79e159 [ 69.885321][ T6758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.885332][ T6758] RSP: 002b:00007fec8e676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 69.885348][ T6758] RAX: ffffffffffffffda RBX: 00007fec8da25fa0 RCX: 00007fec8d79e159 [ 69.885356][ T6758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 69.885363][ T6758] RBP: 00007fec8d83506b R08: 0000000000000000 R09: 0000000000000000 [ 69.885369][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.885375][ T6758] R13: 00007fec8da26038 R14: 00007fec8da25fa0 R15: 00007ffcfe573458 [ 69.885390][ T6758] [ 70.035059][ T6763] device-mapper: ioctl: Invalid geometry supplied. [ 70.145145][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 70.204336][ T6783] SELinux: policydb version -1651263517 does not match my version range 15-35 [ 70.204534][ T6783] SELinux: failed to load policy [ 70.223776][ T6707] syz_tun: left allmulticast mode [ 70.273827][ T6793] device-mapper: ioctl: Invalid geometry supplied. [ 70.328697][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.487975][ T30] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 70.488000][ T30] usb 7-1: too many configurations: 102, using maximum allowed: 8 [ 70.488809][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.488821][ T30] usb 7-1: config 1 has no interface number 0 [ 70.490054][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.490066][ T30] usb 7-1: config 1 has no interface number 0 [ 70.490847][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.490858][ T30] usb 7-1: config 1 has no interface number 0 [ 70.491741][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.491752][ T30] usb 7-1: config 1 has no interface number 0 [ 70.494633][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.494646][ T30] usb 7-1: config 1 has no interface number 0 [ 70.495445][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.495457][ T30] usb 7-1: config 1 has no interface number 0 [ 70.496231][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.496242][ T30] usb 7-1: config 1 has no interface number 0 [ 70.497533][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.497544][ T30] usb 7-1: config 1 has no interface number 0 [ 70.499131][ T30] usb 7-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 70.499143][ T30] usb 7-1: Product: syz [ 70.499151][ T30] usb 7-1: Manufacturer: syz [ 70.499158][ T30] usb 7-1: SerialNumber: syz [ 70.508166][ T30] usb 7-1: 3:0 : does not exist [ 70.508178][ T30] usb 7-1: 3:0 : does not exist [ 70.534659][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 70.704732][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.705895][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.706090][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.708587][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.717486][ T6773] FAULT_INJECTION: forcing a failure. [ 70.717486][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 70.717506][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(full) [ 70.717518][ T6773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.717524][ T6773] Call Trace: [ 70.717528][ T6773] [ 70.717533][ T6773] dump_stack_lvl+0x100/0x190 [ 70.717553][ T6773] should_fail_ex.cold+0x5/0xa [ 70.717570][ T6773] should_failslab+0xc2/0x120 [ 70.717586][ T6773] kmem_cache_alloc_noprof+0x92/0x6a0 [ 70.717600][ T6773] ? do_getname+0x35/0x390 [ 70.717613][ T6773] do_getname+0x35/0x390 [ 70.717625][ T6773] do_sys_openat2+0xc7/0x1e0 [ 70.717643][ T6773] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.717660][ T6773] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.717677][ T6773] __x64_sys_openat+0x12d/0x210 [ 70.717697][ T6773] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.717720][ T6773] do_syscall_64+0x123/0x790 [ 70.717733][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.717744][ T6773] RIP: 0033:0x7f0d9539e159 [ 70.717754][ T6773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.717765][ T6773] RSP: 002b:00007f0d961e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.717776][ T6773] RAX: ffffffffffffffda RBX: 00007f0d95625fa0 RCX: 00007f0d9539e159 [ 70.717783][ T6773] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 70.717790][ T6773] RBP: 00007f0d9543506b R08: 0000000000000000 R09: 0000000000000000 [ 70.717796][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.717803][ T6773] R13: 00007f0d95626038 R14: 00007f0d95625fa0 R15: 00007ffdc6542de8 [ 70.717817][ T6773] [ 70.719786][ T30] usb 7-1: USB disconnect, device number 4 [ 70.850337][ T6818] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 70.850357][ T6818] device-mapper: ioctl: error adding target to table [ 71.189620][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190901][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.193701][ T1484] cfg80211: failed to load regulatory.db [ 71.282407][ T6849] random: crng reseeded on system resumption [ 71.430222][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.430258][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.633443][ T6874] tmpfs: Unknown parameter 'indo64' [ 71.780964][ T6896] netlink: 'syz.2.345': attribute type 39 has an invalid length. [ 71.811094][ T6890] futex_wake_op: syz.3.344 tries to shift op by 144; fix this program [ 71.812383][ T6890] netlink: 'syz.3.344': attribute type 4 has an invalid length. [ 71.978218][ T6902] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.183007][ T6913] SELinux: security_context_str_to_sid () failed with errno=-22 [ 72.323471][ T6925] virtio_net virtio3 eth2: entered allmulticast mode [ 72.323730][ T6925] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode [ 72.324012][ T6925] lapb7: entered allmulticast mode [ 72.527448][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.677384][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 72.677844][ T57] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 72.678672][ T57] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 72.678691][ T57] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 72.678710][ T57] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 72.678722][ T57] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 72.678734][ T57] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 72.678747][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.680458][ T57] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 72.680479][ T57] usb 8-1: Product: syz [ 72.680491][ T57] usb 8-1: Manufacturer: syz [ 72.680503][ T57] usb 8-1: SerialNumber: syz [ 72.682269][ T57] usb 8-1: config 0 descriptor?? [ 72.686694][ T57] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 72.689260][ T57] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 72.697412][ T5839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 72.762555][ T6942] __nla_validate_parse: 5 callbacks suppressed [ 72.762568][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 72.847453][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 72.848207][ T5839] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.849170][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.849206][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.851323][ T5839] usb 7-1: config 0 descriptor?? [ 72.885035][ T6923] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -90 [ 72.888022][ T1046] usb 8-1: USB disconnect, device number 4 [ 72.894126][ T1046] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 73.056854][ T5839] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 73.341736][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 73.344461][ T6944] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 73.344973][ T6944] /dev/sg0: Can't lookup blockdev [ 73.507464][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.507486][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.559531][ T6960] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.374'. [ 73.567852][ T42] e1000 0000:00:06.0 eth0: Reset adapter [ 73.598764][ T6958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.661174][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 73.677775][ T42] e1000 0000:00:06.0 eth0: Reset adapter [ 73.737106][ T6970] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 73.737128][ T6970] device-mapper: ioctl: error adding target to table [ 73.894280][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 73.894298][ T43] audit: type=1400 audit(1791035077.081:586): avc: denied { write } for pid=6983 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.970940][ T43] audit: type=1400 audit(1791035077.161:587): avc: denied { write } for pid=6985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.019797][ T43] audit: type=1400 audit(1791035077.211:588): avc: denied { write } for pid=6990 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.108533][ T43] audit: type=1400 audit(1791035077.301:589): avc: denied { write } for pid=6993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.165564][ T43] audit: type=1400 audit(1791035077.351:590): avc: denied { write } for pid=6996 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.206559][ T5807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.280744][ T5807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.340734][ T5807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.412831][ T5807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.535050][ T43] audit: type=1400 audit(1791035077.721:591): avc: denied { execute } for pid=6998 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.536572][ T43] audit: type=1400 audit(1791035077.721:592): avc: denied { execute_no_trans } for pid=6998 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.563628][ T5807] bridge_slave_1: left allmulticast mode [ 74.563656][ T5807] bridge_slave_1: left promiscuous mode [ 74.564324][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.571995][ T5807] bridge_slave_0: left allmulticast mode [ 74.572011][ T5807] bridge_slave_0: left promiscuous mode [ 74.572138][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.602815][ T43] audit: type=1400 audit(1791035077.791:593): avc: denied { write } for pid=7000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.649181][ T43] audit: type=1400 audit(1791035077.841:594): avc: denied { write } for pid=7003 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.713489][ T5807] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 74.724815][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.726988][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.733398][ T5807] bond0 (unregistering): Released all slaves [ 74.737834][ T5807] bond1 (unregistering): Released all slaves [ 74.743759][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 74.807559][ T43] audit: type=1400 audit(1791035077.991:595): avc: denied { write } for pid=7006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.944656][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 75.110907][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 75.150294][ T5807] hsr_slave_0: left promiscuous mode [ 75.150809][ T5807] hsr_slave_1: left promiscuous mode [ 75.151245][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.151266][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.151968][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.151978][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.161748][ T5807] veth1_macvtap: left promiscuous mode [ 75.161824][ T5807] veth0_macvtap: left promiscuous mode [ 75.161906][ T5807] veth1_vlan: left promiscuous mode [ 75.161974][ T5807] veth0_vlan: left promiscuous mode [ 75.323859][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 75.336577][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 75.397163][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 75.458449][ T76] usb 7-1: USB disconnect, device number 5 [ 75.828448][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 78.994878][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 78.994898][ T43] audit: type=1400 audit(1791035082.181:601): avc: denied { write } for pid=7036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.056269][ T43] audit: type=1400 audit(1791035082.241:602): avc: denied { write } for pid=7039 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.148498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.551845][ T43] audit: type=1400 audit(1791035084.741:603): avc: denied { write } for pid=7044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.620743][ T43] audit: type=1400 audit(1791035084.811:604): avc: denied { write } for pid=7047 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.832648][ T43] audit: type=1400 audit(1791035085.021:605): avc: denied { write } for pid=7050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.876878][ T43] audit: type=1400 audit(1791035085.061:606): avc: denied { write } for pid=7053 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.260218][ T43] audit: type=1400 audit(1791035089.451:607): avc: denied { write } for pid=7066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.305655][ T43] audit: type=1400 audit(1791035089.491:608): avc: denied { write } for pid=7069 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.343118][ T7073] syzkaller0: entered promiscuous mode [ 86.343140][ T7073] syzkaller0: entered allmulticast mode [ 86.394355][ T43] audit: type=1400 audit(1791035089.581:609): avc: denied { connect } for pid=7071 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.405620][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.416938][ T43] audit: type=1400 audit(1791035089.601:610): avc: denied { write } for pid=7079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.421685][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.422104][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.422477][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.422731][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.471584][ T43] audit: type=1400 audit(1791035089.661:611): avc: denied { write } for pid=7086 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.743964][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.744114][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.744210][ T7080] bridge_slave_0: entered allmulticast mode [ 86.745556][ T7080] bridge_slave_0: entered promiscuous mode [ 86.749093][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.749165][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.749222][ T7080] bridge_slave_1: entered allmulticast mode [ 86.750811][ T7080] bridge_slave_1: entered promiscuous mode [ 86.772641][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.775547][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.800981][ T7080] team0: Port device team_slave_0 added [ 86.803664][ T7080] team0: Port device team_slave_1 added [ 86.819320][ T43] audit: type=1400 audit(1791035090.011:612): avc: denied { write } for pid=7103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.825328][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.825344][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.825366][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.827363][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.827377][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.827398][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.866569][ T7080] hsr_slave_0: entered promiscuous mode [ 86.867519][ T7080] hsr_slave_1: entered promiscuous mode [ 86.868188][ T7080] debugfs: 'hsr0' already exists in 'hsr' [ 86.868207][ T7080] Cannot create hsr debugfs directory [ 86.876814][ T43] audit: type=1400 audit(1791035090.061:613): avc: denied { write } for pid=7106 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.982805][ T43] audit: type=1400 audit(1791035090.171:614): avc: denied { write } for pid=7109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.026554][ T43] audit: type=1400 audit(1791035090.211:615): avc: denied { write } for pid=7112 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.107698][ T43] audit: type=1400 audit(1791035090.291:616): avc: denied { write } for pid=7114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.355279][ T7080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.360230][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.360926][ T7080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.364960][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.378622][ T7080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.385311][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.385913][ T7080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.388610][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.404820][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.404876][ T7080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.405843][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.405892][ T7080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.451594][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.463203][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.464401][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.467194][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.483167][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.483216][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.487578][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.487625][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.735401][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.764258][ T7080] veth0_vlan: entered promiscuous mode [ 87.769924][ T7080] veth1_vlan: entered promiscuous mode [ 87.791066][ T7080] veth0_macvtap: entered promiscuous mode [ 87.793129][ T7080] veth1_macvtap: entered promiscuous mode [ 87.801079][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.803149][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.858090][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858239][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858259][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858277][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.882630][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.882647][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.890772][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.890793][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.467503][ T5743] Bluetooth: hci1: command tx timeout [ 90.547526][ T5743] Bluetooth: hci1: command tx timeout [ 92.388836][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 92.388857][ T43] audit: type=1400 audit(1791035095.571:643): avc: denied { bpf } for pid=7190 comm="syz.0.383" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.389387][ T43] audit: type=1400 audit(1791035095.581:644): avc: denied { perfmon } for pid=7190 comm="syz.0.383" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.389872][ T7196] FAULT_INJECTION: forcing a failure. [ 92.389872][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 92.389893][ T7196] CPU: 2 UID: 0 PID: 7196 Comm: syz.2.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.389909][ T7196] Tainted: [L]=SOFTLOCKUP [ 92.389912][ T7196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.389920][ T7196] Call Trace: [ 92.389924][ T7196] [ 92.389929][ T7196] dump_stack_lvl+0x100/0x190 [ 92.389961][ T7196] should_fail_ex.cold+0x5/0xa [ 92.389978][ T7196] should_failslab+0xc2/0x120 [ 92.389997][ T7196] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.390011][ T7196] ? do_getname+0x35/0x390 [ 92.390029][ T7196] do_getname+0x35/0x390 [ 92.390041][ T7196] user_path_at+0x26/0x60 [ 92.390055][ T7196] __x64_sys_mount+0x1fb/0x310 [ 92.390067][ T7196] ? __pfx___x64_sys_mount+0x10/0x10 [ 92.390082][ T7196] do_syscall_64+0x123/0x790 [ 92.390099][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.390111][ T7196] RIP: 0033:0x7f0d9539e159 [ 92.390120][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.390131][ T7196] RSP: 002b:00007f0d961e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.390142][ T7196] RAX: ffffffffffffffda RBX: 00007f0d95625fa0 RCX: 00007f0d9539e159 [ 92.390149][ T7196] RDX: 0000200000000040 RSI: 0000200000003c40 RDI: 0000000000000000 [ 92.390156][ T7196] RBP: 00007f0d961e0090 R08: 0000200000000000 R09: 0000000000000000 [ 92.390163][ T7196] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 92.390169][ T7196] R13: 00007f0d95626038 R14: 00007f0d95625fa0 R15: 00007ffdc6542de8 [ 92.390183][ T7196] [ 92.391000][ T7198] netlink: 'syz.3.386': attribute type 16 has an invalid length. [ 92.391018][ T7198] netlink: 'syz.3.386': attribute type 3 has an invalid length. [ 92.391028][ T7198] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 92.391037][ T7198] netlink: 112 bytes leftover after parsing attributes in process `syz.3.386'. [ 92.449643][ T5743] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 92.450014][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 92.453215][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 92.457014][ T43] audit: type=1400 audit(1791035095.641:645): avc: denied { bind } for pid=7199 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.460763][ T43] audit: type=1400 audit(1791035095.651:646): avc: denied { module_request } for pid=7199 comm="syz.2.387" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.622553][ T43] audit: type=1400 audit(1791035095.811:647): avc: denied { setopt } for pid=7215 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.637617][ T5743] Bluetooth: hci1: command tx timeout [ 92.670423][ T7218] netlink: 5188 bytes leftover after parsing attributes in process `syz.2.392'. [ 92.715408][ T43] audit: type=1400 audit(1791035095.901:648): avc: denied { execute } for pid=7219 comm="syz.2.393" name="file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.715645][ T7220] process 'syz.2.393' launched './file0' with NULL argv: empty string added [ 92.715913][ T43] audit: type=1400 audit(1791035095.901:649): avc: denied { execute_no_trans } for pid=7219 comm="syz.2.393" path="/87/file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.749863][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 93.062290][ T43] audit: type=1400 audit(1791035096.251:650): avc: denied { create } for pid=7227 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.062414][ T43] audit: type=1400 audit(1791035096.251:651): avc: denied { connect } for pid=7227 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.064772][ T43] audit: type=1400 audit(1791035096.251:652): avc: denied { write } for pid=7227 comm="syz.1.396" path="socket:[15263]" dev="sockfs" ino=15263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.334775][ T7242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.334792][ T7242] IPv6: NLM_F_CREATE should be set when creating new route [ 93.334831][ T7242] IPv6: NLM_F_CREATE should be set when creating new route [ 93.583835][ T7260] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 93.916842][ T7268] FAULT_INJECTION: forcing a failure. [ 93.916842][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 93.916866][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.0.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.916882][ T7268] Tainted: [L]=SOFTLOCKUP [ 93.916886][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.916892][ T7268] Call Trace: [ 93.916896][ T7268] [ 93.916901][ T7268] dump_stack_lvl+0x100/0x190 [ 93.916922][ T7268] should_fail_ex.cold+0x5/0xa [ 93.916938][ T7268] should_failslab+0xc2/0x120 [ 93.916954][ T7268] __kmalloc_noprof+0xfc/0x840 [ 93.916967][ T7268] ? __pfx___mutex_lock+0x10/0x10 [ 93.916980][ T7268] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 93.917012][ T7268] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 93.917033][ T7268] genl_start+0x18f/0x970 [ 93.917051][ T7268] __netlink_dump_start+0x60e/0x990 [ 93.917068][ T7268] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 93.917086][ T7268] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 93.917107][ T7268] ? __pfx_genl_get_cmd+0x10/0x10 [ 93.917121][ T7268] ? __pfx_genl_start+0x10/0x10 [ 93.917136][ T7268] ? __pfx_genl_dumpit+0x10/0x10 [ 93.917151][ T7268] ? __pfx_genl_done+0x10/0x10 [ 93.917169][ T7268] ? netlink_sendmsg+0x680/0xda0 [ 93.917185][ T7268] ? ____sys_sendmsg+0xa4d/0xbe0 [ 93.917196][ T7268] ? __radix_tree_lookup+0x217/0x2b0 [ 93.917209][ T7268] genl_rcv_msg+0x471/0x800 [ 93.917227][ T7268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.917244][ T7268] ? __lock_acquire+0x5c0/0x1f40 [ 93.917270][ T7268] ? __pfx_ethnl_default_start+0x10/0x10 [ 93.917285][ T7268] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 93.917298][ T7268] ? __pfx_ethnl_default_done+0x10/0x10 [ 93.917312][ T7268] ? __lock_acquire+0x5c0/0x1f40 [ 93.917328][ T7268] netlink_rcv_skb+0x159/0x420 [ 93.917343][ T7268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.917360][ T7268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.917381][ T7268] ? netlink_deliver_tap+0x1ae/0xcc0 [ 93.917397][ T7268] genl_rcv+0x28/0x40 [ 93.917412][ T7268] netlink_unicast+0x585/0x850 [ 93.917429][ T7268] ? __pfx_netlink_unicast+0x10/0x10 [ 93.917447][ T7268] netlink_sendmsg+0x8b0/0xda0 [ 93.917465][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.917481][ T7268] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.917498][ T7268] ____sys_sendmsg+0xa4d/0xbe0 [ 93.917508][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.917524][ T7268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.917539][ T7268] ? lock_acquire+0x1d1/0x380 [ 93.917551][ T7268] ? get_pid_task+0x2a/0x250 [ 93.917568][ T7268] ___sys_sendmsg+0x190/0x1e0 [ 93.917581][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.917594][ T7268] ? get_pid_task+0x106/0x250 [ 93.917614][ T7268] ? find_held_lock+0x2b/0x80 [ 93.917639][ T7268] __sys_sendmsg+0x160/0x210 [ 93.917656][ T7268] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.917685][ T7268] do_syscall_64+0x123/0x790 [ 93.917699][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.917710][ T7268] RIP: 0033:0x7f6bf6b9e159 [ 93.917720][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.917730][ T7268] RSP: 002b:00007f6bf79a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.917742][ T7268] RAX: ffffffffffffffda RBX: 00007f6bf6e25fa0 RCX: 00007f6bf6b9e159 [ 93.917749][ T7268] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 93.917756][ T7268] RBP: 00007f6bf79a3090 R08: 0000000000000000 R09: 0000000000000000 [ 93.917762][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.917769][ T7268] R13: 00007f6bf6e26038 R14: 00007f6bf6e25fa0 R15: 00007ffce1694888 [ 93.917783][ T7268] [ 93.932852][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 93.991962][ T7276] FAULT_INJECTION: forcing a failure. [ 93.991962][ T7276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.991998][ T7276] CPU: 2 UID: 0 PID: 7276 Comm: syz.0.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.992027][ T7276] Tainted: [L]=SOFTLOCKUP [ 93.992034][ T7276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.992046][ T7276] Call Trace: [ 93.992061][ T7276] [ 93.992070][ T7276] dump_stack_lvl+0x100/0x190 [ 93.992107][ T7276] should_fail_ex.cold+0x5/0xa [ 93.992138][ T7276] _copy_to_user+0x32/0xd0 [ 93.992165][ T7276] simple_read_from_buffer+0xcb/0x170 [ 93.992196][ T7276] proc_fail_nth_read+0x1af/0x230 [ 93.992224][ T7276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.992254][ T7276] ? rw_verify_area+0xce/0x6d0 [ 93.992275][ T7276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.992301][ T7276] vfs_read+0x1e4/0xb40 [ 93.992326][ T7276] ? lock_acquire+0x1d1/0x380 [ 93.992349][ T7276] ? __fget_files+0x34/0x3d0 [ 93.992376][ T7276] ? __pfx_vfs_read+0x10/0x10 [ 93.992396][ T7276] ? find_held_lock+0x2b/0x80 [ 93.992427][ T7276] ? __fget_files+0x215/0x3d0 [ 93.992457][ T7276] ? __fget_files+0x21f/0x3d0 [ 93.992491][ T7276] ksys_read+0x12a/0x250 [ 93.992514][ T7276] ? __pfx_ksys_read+0x10/0x10 [ 93.992545][ T7276] do_syscall_64+0x123/0x790 [ 93.992570][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.992591][ T7276] RIP: 0033:0x7f6bf6b5e98e [ 93.992608][ T7276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.992628][ T7276] RSP: 002b:00007f6bf79a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.992649][ T7276] RAX: ffffffffffffffda RBX: 00007f6bf79a36c0 RCX: 00007f6bf6b5e98e [ 93.992662][ T7276] RDX: 000000000000000f RSI: 00007f6bf79a30a0 RDI: 0000000000000003 [ 93.992674][ T7276] RBP: 00007f6bf79a3090 R08: 0000000000000000 R09: 0000000000000000 [ 93.992686][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.992698][ T7276] R13: 00007f6bf6e26038 R14: 00007f6bf6e25fa0 R15: 00007ffce1694888 [ 93.992726][ T7276] [ 94.437405][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.493335][ T7300] syzkaller0: entered promiscuous mode [ 94.493355][ T7300] syzkaller0: entered allmulticast mode [ 94.535067][ T7302] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 94.570872][ T7302] veth3: entered allmulticast mode [ 94.588805][ T57] usb 5-1: device descriptor read/64, error -71 [ 94.717574][ T5743] Bluetooth: hci1: command tx timeout [ 94.836019][ T7312] NILFS (nullb0): couldn't find nilfs on the device [ 94.837454][ T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.903209][ T7317] evm: overlay not supported [ 94.904819][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 94.987648][ T57] usb 5-1: device descriptor read/64, error -71 [ 95.111451][ T57] usb usb5-port1: attempt power cycle [ 95.383597][ T7324] kvm: apic: phys broadcast and lowest prio [ 95.395816][ T7326] binder: 7325:7326 ioctl c0306201 0 returned -14 [ 95.457435][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.488016][ T57] usb 5-1: device descriptor read/8, error -71 [ 95.609289][ T7337] netlink: 'syz.3.430': attribute type 21 has an invalid length. [ 95.612864][ T7337] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.614572][ T7337] @0Ù: renamed from bond_slave_1 (while UP) [ 95.737714][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.758446][ T57] usb 5-1: device descriptor read/8, error -71 [ 95.869018][ T57] usb usb5-port1: unable to enumerate USB device [ 96.141409][ T7351] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.183143][ T7351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.403145][ T7357] jffs2: notice: (7357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 96.487394][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 96.605585][ T7369] i2c i2c-0: delete_device: Extra parameters [ 96.610253][ T7368] i2c i2c-0: delete_device: Extra parameters [ 96.667997][ T7372] ptrace attach of "/syz-executor exec"[7080] was attempted by ""[7372] [ 96.790194][ T5743] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 96.790590][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.876144][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.877491][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.881624][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.882392][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.882842][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.077389][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 97.238124][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.238990][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.239010][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.239030][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.273285][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.273473][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.273635][ T7380] bridge_slave_0: entered allmulticast mode [ 97.275559][ T7380] bridge_slave_0: entered promiscuous mode [ 97.281801][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.281874][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.282022][ T7380] bridge_slave_1: entered allmulticast mode [ 97.283399][ T7380] bridge_slave_1: entered promiscuous mode [ 97.307813][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.309210][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.324267][ T7380] team0: Port device team_slave_0 added [ 97.326374][ T7380] team0: Port device team_slave_1 added [ 97.340029][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.340041][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.340054][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.341511][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.341519][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.341532][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.391588][ T7380] hsr_slave_0: entered promiscuous mode [ 97.392036][ T7380] hsr_slave_1: entered promiscuous mode [ 97.392362][ T7380] debugfs: 'hsr0' already exists in 'hsr' [ 97.392373][ T7380] Cannot create hsr debugfs directory [ 97.448453][ T9] usb 8-1: usb_control_msg returned -32 [ 97.448477][ T9] usbtmc 8-1:16.0: can't read capabilities [ 97.556176][ T7380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.559316][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.560145][ T7380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.565068][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.566265][ T7380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.569743][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.570401][ T7380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.575948][ T7380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.626100][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.635439][ T7380] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.642003][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.642053][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.649650][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.649758][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.760104][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 97.912433][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.929077][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.929660][ T9] usb 5-1: config 0 has no interfaces? [ 97.929690][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.932077][ T9] usb 5-1: config 0 descriptor?? [ 98.006037][ T25] usb 8-1: USB disconnect, device number 5 [ 98.100264][ T7380] veth0_vlan: entered promiscuous mode [ 98.105153][ T7380] veth1_vlan: entered promiscuous mode [ 98.123019][ T7380] veth0_macvtap: entered promiscuous mode [ 98.125736][ T7380] veth1_macvtap: entered promiscuous mode [ 98.139301][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.142931][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.172625][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172821][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172842][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172859][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.214136][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.214152][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.239216][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.239233][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.298120][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 98.298137][ T43] audit: type=1400 audit(1791035101.491:670): avc: denied { read } for pid=7423 comm="syz.4.447" dev="nsfs" ino=4026533520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.298323][ T43] audit: type=1400 audit(1791035101.491:671): avc: denied { open } for pid=7423 comm="syz.4.447" path="net:[4026533520]" dev="nsfs" ino=4026533520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.345588][ T43] audit: type=1400 audit(1791035101.531:672): avc: denied { bind } for pid=7426 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.347595][ T43] audit: type=1400 audit(1791035101.541:673): avc: denied { listen } for pid=7426 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.446061][ T7431] device-mapper: ioctl: Invalid ioctl structure: name t, dev f803 [ 98.718575][ T5735] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 98.957925][ T5735] Bluetooth: hci4: command tx timeout [ 99.170552][ T7456] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 99.328741][ T25] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 99.407443][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.479286][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.480406][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.480429][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.480461][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.579560][ T57] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 99.580530][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.580551][ T57] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.580631][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.583453][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 99.583471][ T57] usb 6-1: Product: syz [ 99.583483][ T57] usb 6-1: Manufacturer: syz [ 99.583494][ T57] usb 6-1: SerialNumber: syz [ 99.688217][ T25] usb 8-1: usb_control_msg returned -32 [ 99.688257][ T25] usbtmc 8-1:16.0: can't read capabilities [ 99.690881][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 99.761698][ T43] audit: type=1400 audit(1791035102.951:674): avc: denied { watch watch_reads } for pid=7469 comm="syz.4.466" path="/9" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 99.796258][ T57] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.999040][ T5816] usb 6-1: USB disconnect, device number 4 [ 100.001001][ T5816] usblp1: removed [ 100.242459][ T57] usb 8-1: USB disconnect, device number 6 [ 100.256409][ T42] usb 5-1: USB disconnect, device number 7 [ 100.399418][ T7483] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.0), cmd(9) [ 100.588301][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 100.683031][ T25] libceph: connect (1)[c::]:6789 error -101 [ 100.683256][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 100.687969][ T25] libceph: connect (1)[c::]:6789 error -101 [ 100.688077][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 100.779254][ T7508] ceph: No mds server is up or the cluster is laggy [ 100.820068][ T7515] FAULT_INJECTION: forcing a failure. [ 100.820068][ T7515] name failslab, interval 1, probability 0, space 0, times 0 [ 100.820105][ T7515] CPU: 2 UID: 0 PID: 7515 Comm: syz.3.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.820129][ T7515] Tainted: [L]=SOFTLOCKUP [ 100.820140][ T7515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.820152][ T7515] Call Trace: [ 100.820159][ T7515] [ 100.820167][ T7515] dump_stack_lvl+0x100/0x190 [ 100.820239][ T7515] should_fail_ex.cold+0x5/0xa [ 100.820268][ T7515] should_failslab+0xc2/0x120 [ 100.820299][ T7515] __kmalloc_noprof+0xfc/0x840 [ 100.820324][ T7515] ? rcu_is_watching+0x13/0xc0 [ 100.820347][ T7515] ? tomoyo_realpath_from_path+0xb6/0x690 [ 100.820378][ T7515] tomoyo_realpath_from_path+0xb6/0x690 [ 100.820412][ T7515] tomoyo_check_open_permission+0x2af/0x3c0 [ 100.820438][ T7515] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 100.820462][ T7515] ? do_syscall_64+0x123/0x790 [ 100.820496][ T7515] ? hook_file_open+0x248/0x8e0 [ 100.820531][ T7515] ? path_get+0x61/0x80 [ 100.820578][ T7515] tomoyo_file_open+0x6b/0x90 [ 100.820599][ T7515] security_file_open+0xb5/0x1e0 [ 100.820627][ T7515] do_dentry_open+0x588/0x14d0 [ 100.820659][ T7515] vfs_open+0x82/0x3f0 [ 100.820691][ T7515] path_openat+0x19fa/0x2440 [ 100.820719][ T7515] ? __pfx_path_openat+0x10/0x10 [ 100.820753][ T7515] do_file_open+0x20e/0x430 [ 100.820782][ T7515] ? __pfx_do_file_open+0x10/0x10 [ 100.820827][ T7515] ? alloc_fd+0x471/0x7a0 [ 100.820860][ T7515] ? do_getname+0x191/0x390 [ 100.820878][ T7515] do_sys_openat2+0x10f/0x1e0 [ 100.820905][ T7515] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.820942][ T7515] __x64_sys_open+0xfe/0x1d0 [ 100.820968][ T7515] ? __pfx___x64_sys_open+0x10/0x10 [ 100.821007][ T7515] do_syscall_64+0x123/0x790 [ 100.821029][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.821052][ T7515] RIP: 0033:0x7f504f39e159 [ 100.821069][ T7515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.821087][ T7515] RSP: 002b:00007f5050236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 100.821107][ T7515] RAX: ffffffffffffffda RBX: 00007f504f625fa0 RCX: 00007f504f39e159 [ 100.821121][ T7515] RDX: 0000000000000022 RSI: 0000000000000100 RDI: 0000200000000200 [ 100.821133][ T7515] RBP: 00007f504f43506b R08: 0000000000000000 R09: 0000000000000000 [ 100.821145][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.821157][ T7515] R13: 00007f504f626038 R14: 00007f504f625fa0 R15: 00007ffe4624e578 [ 100.821183][ T7515] [ 100.821462][ T7515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.034625][ T7527] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 101.393320][ T7529] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 101.508922][ T43] audit: type=1400 audit(1791035104.701:675): avc: denied { wake_alarm } for pid=7535 comm="syz.1.490" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.530569][ T43] audit: type=1400 audit(1791035104.721:676): avc: denied { map } for pid=7535 comm="syz.1.490" path="socket:[19488]" dev="sockfs" ino=19488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.599574][ T43] audit: type=1326 audit(1791035104.791:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.1.495" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa62a59e159 code=0x0 [ 101.646020][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.493'. [ 101.646055][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.493'. [ 101.683471][ T106] IPVS: starting estimator thread 0... [ 101.704206][ T43] audit: type=1326 audit(1791035104.891:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.4.498" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac7039e159 code=0x0 [ 101.757682][ T43] audit: type=1400 audit(1791035104.951:679): avc: denied { create } for pid=7556 comm="syz.4.498" name="loop0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.764931][ T7561] XFS (loop0): Invalid device [./loop0], error=-16 [ 101.777515][ T7555] IPVS: using max 28 ests per chain, 67200 per kthread [ 101.824560][ T7565] team0: entered allmulticast mode [ 101.824582][ T7565] team_slave_0: entered allmulticast mode [ 101.824598][ T7565] team_slave_1: entered allmulticast mode [ 101.836008][ T7565] team0 (unregistering): left allmulticast mode [ 101.836027][ T7565] team_slave_0: left allmulticast mode [ 101.836038][ T7565] team_slave_1: left allmulticast mode [ 101.857724][ T7565] team0 (unregistering): Port device team_slave_0 removed [ 101.863520][ T7565] team0 (unregistering): Port device team_slave_1 removed [ 102.043513][ T7570] bond0: no command found in slaves file - use +ifname or -ifname [ 102.198739][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 102.199347][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 102.289816][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 102.307979][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 102.363260][ T7585] kvm: user requested TSC rate below hardware speed [ 102.390509][ T7585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 102.488718][ T71] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.494771][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.512'. [ 102.553002][ T7598] Device name not specified. [ 102.553002][ T7598] [ 102.657467][ T71] usb 5-1: Using ep0 maxpacket: 32 [ 102.659344][ T71] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 102.664190][ T71] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 102.664212][ T71] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 102.664234][ T71] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 102.664247][ T71] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 102.664258][ T71] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 102.664271][ T71] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.669412][ T71] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 102.669429][ T71] usb 5-1: Product: syz [ 102.669437][ T71] usb 5-1: Manufacturer: syz [ 102.669445][ T71] usb 5-1: SerialNumber: syz [ 102.673426][ T71] usb 5-1: config 0 descriptor?? [ 102.676013][ T71] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 102.685357][ T71] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 102.688867][ T7614] tipc: Failed to remove unknown binding: 66,0,0/0:1390291942/1390291944 [ 102.688892][ T7614] tipc: Failed to remove unknown binding: 66,0,0/0:1390291942/1390291943 [ 102.689120][ T7614] tipc: Failed to remove unknown binding: 66,0,0/0:1390291942/1390291944 [ 102.689140][ T7614] tipc: Failed to remove unknown binding: 66,0,0/0:1390291942/1390291943 [ 102.692301][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'. [ 103.004890][ T7627] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 103.117555][ T7639] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 103.193465][ T7648] tipc: Started in network mode [ 103.193482][ T7648] tipc: Node identity eafc9780d265, cluster identity 4711 [ 103.193589][ T7648] tipc: Enabled bearer , priority 1 [ 103.197128][ T7647] tipc: Disabling bearer [ 103.294898][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.309981][ T25] usb 5-1: USB disconnect, device number 8 [ 103.324635][ T25] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 103.388106][ T7662] can: request_module (can-proto-0) failed. [ 103.437038][ T7670] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.599522][ T1484] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 103.748495][ T1484] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 103.752085][ T1484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.752114][ T1484] usb 9-1: Product: syz [ 103.752126][ T1484] usb 9-1: Manufacturer: syz [ 103.752138][ T1484] usb 9-1: SerialNumber: syz [ 103.771525][ T1484] usb 9-1: NFC: intf ffff888028373000 id ffffffff8fe92de0 [ 103.800375][ T1484] nfcmrvl 9-1:1.0: NFC: registered with nci successfully [ 103.831072][ T5735] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 103.831112][ T5735] Bluetooth: hci4: Injecting HCI hardware error event [ 103.832545][ T5735] Bluetooth: hci4: hardware error 0x00 [ 103.887491][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 103.899881][ T7686] fuse: fd is not a fuse device [ 103.948319][ T5743] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 104.047855][ T57] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 104.048914][ T57] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.050200][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 104.050213][ T57] usb 8-1: Product: syz [ 104.050220][ T57] usb 8-1: Manufacturer: syz [ 104.058214][ T57] usb 8-1: selecting invalid altsetting 1 [ 104.058716][ T57] dvb_ttusb_budget: ttusb_init_controller: error [ 104.058787][ T57] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 104.089406][ T57] DVB: Unable to find symbol cx22700_attach() [ 104.105635][ T57] DVB: Unable to find symbol tda10046_attach() [ 104.105650][ T57] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 104.172177][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 104.172194][ T43] audit: type=1400 audit(1791035107.361:685): avc: denied { setopt } for pid=7692 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.173523][ T43] audit: type=1400 audit(1791035107.361:686): avc: denied { read } for pid=7692 comm="syz.1.542" path="socket:[18106]" dev="sockfs" ino=18106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.257509][ T7680] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 104.259171][ T57] usb 8-1: USB disconnect, device number 7 [ 104.567533][ T7697] IPVS: Unknown mcast interface: pimreg0 [ 104.833314][ T43] audit: type=1400 audit(1791035108.021:687): avc: denied { setattr } for pid=7702 comm="syz.3.546" name="" dev="pipefs" ino=19097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 104.847445][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.999830][ T57] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.002302][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.002320][ T57] usb 5-1: Product: syz [ 105.002328][ T57] usb 5-1: Manufacturer: syz [ 105.002336][ T57] usb 5-1: SerialNumber: syz [ 105.024964][ T7714] syz_tun: entered allmulticast mode [ 105.025916][ T7713] syz_tun: left allmulticast mode [ 105.132519][ T7724] ip_tables: iptables: counters copy to user failed while replacing table [ 105.172337][ T7726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7726 comm=syz.3.553 [ 105.209341][ T43] audit: type=1400 audit(1791035108.401:688): avc: denied { execute } for pid=7727 comm="syz.3.554" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.211335][ T43] audit: type=1400 audit(1791035108.401:689): avc: denied { map } for pid=7727 comm="syz.3.554" path="socket:[20516]" dev="sockfs" ino=20516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.211421][ T43] audit: type=1400 audit(1791035108.401:690): avc: denied { read } for pid=7727 comm="syz.3.554" path="socket:[20516]" dev="sockfs" ino=20516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.411261][ T57] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 105.411323][ T57] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 105.411855][ T57] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 105.411881][ T57] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.431858][ T7741] qrtr: Invalid version 0 [ 105.432877][ T7741] syzkaller0: left promiscuous mode [ 105.432888][ T7741] syzkaller0: left allmulticast mode [ 105.440039][ T57] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.443824][ T57] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 105.446853][ T57] usb 5-1: USB disconnect, device number 9 [ 105.463553][ T7741] can: request_module (can-proto-3) failed. [ 105.504414][ T7746] ceph: Path missing in source [ 105.594006][ T7750] bond0: entered promiscuous mode [ 105.594022][ T7750] bond_slave_0: entered promiscuous mode [ 105.594119][ T7750] bond_slave_1: entered promiscuous mode [ 105.670645][ T7752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.866898][ T7758] tipc: Started in network mode [ 105.869332][ T7758] tipc: Node identity f6935db03c12, cluster identity 4711 [ 105.870045][ T7758] tipc: Enabled bearer , priority 0 [ 105.909799][ T7760] Bluetooth: MGMT ver 1.23 [ 105.910183][ T7760] __nla_validate_parse: 4 callbacks suppressed [ 105.910192][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 105.910208][ T7760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 105.911644][ T43] audit: type=1400 audit(1791035109.101:691): avc: denied { setopt } for pid=7759 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.917398][ T5735] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 105.985775][ T7766] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 105.986037][ T7766] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.007170][ T7766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.568'. [ 106.023001][ T7762] FAULT_INJECTION: forcing a failure. [ 106.023001][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 106.023026][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.0.566 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.023045][ T7762] Tainted: [L]=SOFTLOCKUP [ 106.023049][ T7762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.023057][ T7762] Call Trace: [ 106.023062][ T7762] [ 106.023067][ T7762] dump_stack_lvl+0x100/0x190 [ 106.023090][ T7762] should_fail_ex.cold+0x5/0xa [ 106.023109][ T7762] should_failslab+0xc2/0x120 [ 106.023128][ T7762] __kvmalloc_node_noprof+0x113/0x9b0 [ 106.023147][ T7762] ? handler_new_ref+0x603/0xc60 [ 106.023172][ T7762] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 106.023188][ T7762] v4l2_ctrl_new+0x4a6/0x23a0 [ 106.023207][ T7762] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 106.023222][ T7762] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 106.023236][ T7762] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 106.023250][ T7762] v4l2_ctrl_new_custom+0x41b/0xa20 [ 106.023272][ T7762] ? __pfx_v4l2_ctrl_new_custom+0x10/0x10 [ 106.023285][ T7762] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 106.023301][ T7762] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 106.023320][ T7762] ? media_request_object_init+0x105/0x180 [ 106.023343][ T7762] vim2m_open+0x193/0x830 [ 106.023364][ T7762] v4l2_open+0x1d2/0x490 [ 106.023376][ T7762] ? __pfx_v4l2_open+0x10/0x10 [ 106.023388][ T7762] chrdev_open+0x234/0x6a0 [ 106.023407][ T7762] ? __pfx_chrdev_open+0x10/0x10 [ 106.023424][ T7762] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 106.023439][ T7762] do_dentry_open+0x6ab/0x14d0 [ 106.023453][ T7762] ? __pfx_chrdev_open+0x10/0x10 [ 106.023471][ T7762] vfs_open+0x82/0x3f0 [ 106.023490][ T7762] path_openat+0x19fa/0x2440 [ 106.023509][ T7762] ? __pfx_path_openat+0x10/0x10 [ 106.023552][ T7762] do_file_open+0x20e/0x430 [ 106.023575][ T7762] ? __pfx_do_file_open+0x10/0x10 [ 106.023612][ T7762] ? _raw_spin_unlock+0x28/0x50 [ 106.023640][ T7762] ? alloc_fd+0x471/0x7a0 [ 106.023675][ T7762] do_sys_openat2+0x10f/0x1e0 [ 106.023703][ T7762] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.023729][ T7762] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 106.023752][ T7762] __x64_sys_openat+0x12d/0x210 [ 106.023770][ T7762] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.023794][ T7762] do_syscall_64+0x123/0x790 [ 106.023809][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.023821][ T7762] RIP: 0033:0x7f6bf6b5e98e [ 106.023831][ T7762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.023842][ T7762] RSP: 002b:00007f6bf79a2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.023854][ T7762] RAX: ffffffffffffffda RBX: 00007f6bf79a36c0 RCX: 00007f6bf6b5e98e [ 106.023861][ T7762] RDX: 0000000000000002 RSI: 00007f6bf79a2c00 RDI: ffffffffffffff9c [ 106.023869][ T7762] RBP: 00007f6bf79a2c00 R08: 0000000000000000 R09: 0000000000000000 [ 106.023876][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 106.023883][ T7762] R13: 00007f6bf6e26038 R14: 00007f6bf6e25fa0 R15: 00007ffce1694888 [ 106.023898][ T7762] [ 106.163263][ T5735] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 106.179795][ T43] audit: type=1800 audit(1791035109.371:692): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.569" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 106.180448][ T7775] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.205320][ T7779] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 106.361169][ T76] usb 9-1: USB disconnect, device number 2 [ 106.362156][ T76] usb 9-1: NFC: intf ffff888028373000 [ 106.434911][ T7797] xt_hashlimit: invalid rate [ 106.435883][ T7794] device-mapper: table: 248:3: mirror: Insufficient mirror log arguments (-EINVAL) [ 106.435897][ T7794] device-mapper: ioctl: error adding target to table [ 106.437851][ T7797] FAULT_INJECTION: forcing a failure. [ 106.437851][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 106.437879][ T7797] CPU: 0 UID: 0 PID: 7797 Comm: syz.4.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.437903][ T7797] Tainted: [L]=SOFTLOCKUP [ 106.437909][ T7797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.437916][ T7797] Call Trace: [ 106.437920][ T7797] [ 106.437925][ T7797] dump_stack_lvl+0x100/0x190 [ 106.437945][ T7797] should_fail_ex.cold+0x5/0xa [ 106.437962][ T7797] should_failslab+0xc2/0x120 [ 106.437983][ T7797] kmem_cache_alloc_noprof+0x92/0x6a0 [ 106.438003][ T7797] ? d_instantiate+0x8a/0xb0 [ 106.438019][ T7797] ? alloc_empty_file+0x5b/0x1c0 [ 106.438050][ T7797] alloc_empty_file+0x5b/0x1c0 [ 106.438075][ T7797] alloc_file_pseudo+0x183/0x290 [ 106.438101][ T7797] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 106.438135][ T7797] ? alloc_fd+0x471/0x7a0 [ 106.438165][ T7797] sock_alloc_file+0x50/0x210 [ 106.438193][ T7797] __sys_socket+0x1c0/0x260 [ 106.438213][ T7797] ? __pfx___sys_socket+0x10/0x10 [ 106.438239][ T7797] __x64_sys_socket+0x72/0xb0 [ 106.438258][ T7797] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.438277][ T7797] do_syscall_64+0x123/0x790 [ 106.438298][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.438315][ T7797] RIP: 0033:0x7fac7039e159 [ 106.438331][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.438350][ T7797] RSP: 002b:00007fac6e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 106.438367][ T7797] RAX: ffffffffffffffda RBX: 00007fac70625fa0 RCX: 00007fac7039e159 [ 106.438378][ T7797] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 000000000000000a [ 106.438388][ T7797] RBP: 00007fac7043506b R08: 0000000000000000 R09: 0000000000000000 [ 106.438398][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.438408][ T7797] R13: 00007fac70626038 R14: 00007fac70625fa0 R15: 00007fff83495858 [ 106.438430][ T7797] [ 106.498408][ T43] audit: type=1400 audit(1791035109.681:693): avc: denied { mount } for pid=7798 comm="syz.1.578" name="/" dev="ecryptfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 106.503390][ T43] audit: type=1400 audit(1791035109.691:694): avc: denied { create } for pid=7798 comm="syz.1.578" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.542699][ T7801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 106.542719][ T7801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.545008][ T7801] vhci_hcd vhci_hcd.0: Device attached [ 106.564412][ T7804] ================================================================== [ 106.564426][ T7804] BUG: KASAN: slab-out-of-bounds in md5_block+0x95/0x8d0 [ 106.564448][ T7804] Read of size 64 at addr ffff88803dfe04e0 by task syz.1.578/7804 [ 106.564465][ T7804] [ 106.564476][ T7804] CPU: 3 UID: 0 PID: 7804 Comm: syz.1.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.564504][ T7804] Tainted: [L]=SOFTLOCKUP [ 106.564510][ T7804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.564523][ T7804] Call Trace: [ 106.564530][ T7804] [ 106.564537][ T7804] dump_stack_lvl+0x100/0x190 [ 106.564564][ T7804] print_report+0x13d/0x4b0 [ 106.564592][ T7804] ? __virt_addr_valid+0x239/0x430 [ 106.564613][ T7804] ? md5_block+0x95/0x8d0 [ 106.564631][ T7804] kasan_report+0xdf/0x1c0 [ 106.564656][ T7804] ? md5_block+0x95/0x8d0 [ 106.564676][ T7804] kasan_check_range+0x10f/0x1e0 [ 106.564717][ T7804] __asan_memcpy+0x23/0x60 [ 106.564737][ T7804] md5_block+0x95/0x8d0 [ 106.564755][ T7804] ? __pfx_md5_block+0x10/0x10 [ 106.564773][ T7804] ? simple_strntoull+0xdf/0x170 [ 106.564799][ T7804] md5_update+0xf7/0x210 [ 106.564819][ T7804] md5+0xc7/0x120 [ 106.564840][ T7804] ? __pfx_md5+0x10/0x10 [ 106.564858][ T7804] ? simple_strtol+0x6d/0xc0 [ 106.564887][ T7804] ? __kmalloc_noprof+0x350/0x840 [ 106.564908][ T7804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.564932][ T7804] ecryptfs_write_tag_70_packet+0x880/0x1410 [ 106.564960][ T7804] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 106.564980][ T7804] ? __kmalloc_noprof+0x350/0x840 [ 106.564999][ T7804] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 106.565023][ T7804] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 106.565043][ T7804] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 106.565057][ T7804] ? d_alloc_parallel+0x9f6/0x14c0 [ 106.565072][ T7804] ecryptfs_lookup+0x1f7/0x830 [ 106.565087][ T7804] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 106.565103][ T7804] ? down_read+0x13b/0x4c0 [ 106.565115][ T7804] ? __pfx_down_read+0x10/0x10 [ 106.565128][ T7804] __lookup_slow+0x155/0x320 [ 106.565139][ T7804] lookup_slow+0x50/0x70 [ 106.565149][ T7804] path_lookupat+0x5e8/0xc40 [ 106.565162][ T7804] filename_lookup+0x202/0x590 [ 106.565176][ T7804] ? __pfx_filename_lookup+0x10/0x10 [ 106.565199][ T7804] ? strncpy_from_user+0x19d/0x2d0 [ 106.565222][ T7804] ? do_getname+0x191/0x390 [ 106.565239][ T7804] user_path_at+0x3c/0x60 [ 106.565261][ T7804] __x64_sys_pivot_root+0x170/0x1c0 [ 106.565279][ T7804] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 106.565299][ T7804] do_syscall_64+0x123/0x790 [ 106.565318][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.565336][ T7804] RIP: 0033:0x7fa62a59e159 [ 106.565349][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.565367][ T7804] RSP: 002b:00007fa6287d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 106.565386][ T7804] RAX: ffffffffffffffda RBX: 00007fa62a826090 RCX: 00007fa62a59e159 [ 106.565398][ T7804] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 106.565408][ T7804] RBP: 00007fa62a63506b R08: 0000000000000000 R09: 0000000000000000 [ 106.565419][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.565429][ T7804] R13: 00007fa62a826128 R14: 00007fa62a826090 R15: 00007fffcfc172a8 [ 106.565444][ T7804] [ 106.565451][ T7804] [ 106.565455][ T7804] Allocated by task 7799: [ 106.565463][ T7804] kasan_save_stack+0x30/0x50 [ 106.565482][ T7804] kasan_save_track+0x14/0x30 [ 106.565501][ T7804] __kasan_kmalloc+0xaa/0xb0 [ 106.565519][ T7804] __kmalloc_flags_noprof+0x370/0x8e0 [ 106.565535][ T7804] __pcs_replace_empty_main+0x3fa/0x650 [ 106.565550][ T7804] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 106.565568][ T7804] ecryptfs_add_new_key_tfm+0xa9/0x590 [ 106.565583][ T7804] ecryptfs_get_tree+0xd72/0x15b0 [ 106.565598][ T7804] vfs_get_tree+0x92/0x320 [ 106.565611][ T7804] path_mount+0x7d0/0x24c0 [ 106.565624][ T7804] __x64_sys_mount+0x293/0x310 [ 106.565638][ T7804] do_syscall_64+0x123/0x790 [ 106.565654][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.565669][ T7804] [ 106.565673][ T7804] The buggy address belongs to the object at ffff88803dfe0400 [ 106.565673][ T7804] which belongs to the cache kmalloc-256 of size 256 [ 106.565686][ T7804] The buggy address is located 224 bytes inside of [ 106.565686][ T7804] allocated 256-byte region [ffff88803dfe0400, ffff88803dfe0500) [ 106.565703][ T7804] [ 106.565707][ T7804] The buggy address belongs to the physical page: [ 106.565714][ T7804] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3dfe0 [ 106.565729][ T7804] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 106.565741][ T7804] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 106.565756][ T7804] page_type: f5(slab) [ 106.565769][ T7804] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 106.565785][ T7804] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 106.565799][ T7804] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 106.565817][ T7804] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 106.565831][ T7804] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 106.565846][ T7804] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 106.565855][ T7804] page dumped because: kasan: bad access detected [ 106.565863][ T7804] page_owner tracks the page as allocated [ 106.565869][ T7804] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5732, tgid 5732 (syz-executor), ts 49213438685 [ 106.565892][ T7804] post_alloc_hook+0xfd/0x120 [ 106.565910][ T7804] get_page_from_freelist+0x110d/0x35d0 [ 106.565928][ T7804] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 106.565947][ T7804] new_slab+0xa9/0x6e0 [ 106.565962][ T7804] refill_objects+0xe3/0x410 [ 106.565978][ T7804] __pcs_replace_empty_main+0x35e/0x650 [ 106.565994][ T7804] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 106.566004][ T7804] ____ip_mc_inc_group+0x40b/0x10d0 [ 106.566020][ T7804] br_ip4_multicast_join_snoopers.isra.0+0x152/0x400 [ 106.566034][ T7804] br_multicast_join_snoopers+0x8b/0x120 [ 106.566044][ T7804] br_dev_open+0x112/0x150 [ 106.566055][ T7804] __dev_open+0x3ad/0x8f0 [ 106.566064][ T7804] __dev_change_flags+0x596/0x850 [ 106.566077][ T7804] netif_change_flags+0x8d/0x160 [ 106.566095][ T7804] do_setlink.isra.0+0x1ac4/0x3e60 [ 106.566118][ T7804] rtnl_newlink+0x13c1/0x2620 [ 106.566139][ T7804] page last free pid 0 tgid 0 ts 49057690218 stack trace: [ 106.566149][ T7804] __free_frozen_pages+0x79f/0x10f0 [ 106.566170][ T7804] rcu_core+0x5f0/0x1260 [ 106.566197][ T7804] handle_softirqs+0x1e6/0x9d0 [ 106.566214][ T7804] __irq_exit_rcu+0x16a/0x210 [ 106.566228][ T7804] irq_exit_rcu+0x9/0x30 [ 106.566242][ T7804] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 106.566257][ T7804] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.566274][ T7804] [ 106.566278][ T7804] Memory state around the buggy address: [ 106.566286][ T7804] ffff88803dfe0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.566297][ T7804] ffff88803dfe0480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.566308][ T7804] >ffff88803dfe0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.566317][ T7804] ^ [ 106.566325][ T7804] ffff88803dfe0580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.566335][ T7804] ffff88803dfe0600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.566343][ T7804] ================================================================== [ 106.566490][ T7804] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.819664][ T7804] CPU: 3 UID: 0 PID: 7804 Comm: syz.1.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.823112][ T7804] Tainted: [L]=SOFTLOCKUP [ 106.824477][ T7804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.827647][ T7804] Call Trace: [ 106.828728][ T7804] [ 106.829681][ T7804] dump_stack_lvl+0x100/0x190 [ 106.831250][ T7804] vpanic+0x553/0x970 [ 106.832698][ T7804] ? __pfx_vpanic+0x10/0x10 [ 106.834313][ T7804] ? mark_held_locks+0x40/0x70 [ 106.836147][ T7804] ? md5_block+0x95/0x8d0 [ 106.837595][ T7804] panic+0xd1/0xe0 [ 106.838825][ T7804] ? __pfx_panic+0x10/0x10 [ 106.840255][ T7804] ? md5_block+0x95/0x8d0 [ 106.841666][ T7804] ? preempt_schedule_common+0x3c/0xb0 [ 106.843391][ T7804] check_panic_on_warn.cold+0x19/0x34 [ 106.845070][ T7804] end_report.part.0+0x3a/0x90 [ 106.846591][ T7804] kasan_report.cold+0xe/0x18 [ 106.848067][ T7804] ? md5_block+0x95/0x8d0 [ 106.849426][ T7804] kasan_check_range+0x10f/0x1e0 [ 106.851019][ T7804] __asan_memcpy+0x23/0x60 [ 106.852436][ T7804] md5_block+0x95/0x8d0 [ 106.853751][ T7804] ? __pfx_md5_block+0x10/0x10 [ 106.855276][ T7804] ? simple_strntoull+0xdf/0x170 [ 106.856918][ T7804] md5_update+0xf7/0x210 [ 106.858337][ T7804] md5+0xc7/0x120 [ 106.859591][ T7804] ? __pfx_md5+0x10/0x10 [ 106.861085][ T7804] ? simple_strtol+0x6d/0xc0 [ 106.862937][ T7804] ? __kmalloc_noprof+0x350/0x840 [ 106.864547][ T7804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.866392][ T7804] ecryptfs_write_tag_70_packet+0x880/0x1410 [ 106.868289][ T7804] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 106.870292][ T7804] ? __kmalloc_noprof+0x350/0x840 [ 106.871896][ T7804] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 106.873988][ T7804] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 106.876013][ T7804] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 106.878419][ T7804] ? d_alloc_parallel+0x9f6/0x14c0 [ 106.880595][ T7804] ecryptfs_lookup+0x1f7/0x830 [ 106.882647][ T7804] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 106.884333][ T7804] ? down_read+0x13b/0x4c0 [ 106.885754][ T7804] ? __pfx_down_read+0x10/0x10 [ 106.887282][ T7804] __lookup_slow+0x155/0x320 [ 106.888802][ T7804] lookup_slow+0x50/0x70 [ 106.890094][ T7804] path_lookupat+0x5e8/0xc40 [ 106.891534][ T7804] filename_lookup+0x202/0x590 [ 106.893028][ T7804] ? __pfx_filename_lookup+0x10/0x10 [ 106.894686][ T7804] ? strncpy_from_user+0x19d/0x2d0 [ 106.896305][ T7804] ? do_getname+0x191/0x390 [ 106.897827][ T7804] user_path_at+0x3c/0x60 [ 106.899304][ T7804] __x64_sys_pivot_root+0x170/0x1c0 [ 106.901246][ T7804] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 106.903371][ T7804] do_syscall_64+0x123/0x790 [ 106.905092][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.907079][ T7804] RIP: 0033:0x7fa62a59e159 [ 106.908498][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.914494][ T7804] RSP: 002b:00007fa6287d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 106.917141][ T7804] RAX: ffffffffffffffda RBX: 00007fa62a826090 RCX: 00007fa62a59e159 [ 106.919732][ T7804] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 106.922405][ T7804] RBP: 00007fa62a63506b R08: 0000000000000000 R09: 0000000000000000 [ 106.924930][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.927425][ T7804] R13: 00007fa62a826128 R14: 00007fa62a826090 R15: 00007fffcfc172a8 [ 106.929948][ T7804] [ 106.931708][ T7804] Kernel Offset: disabled [ 106.933021][ T7804] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:45:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000010c761 RBX=ffffffff8ea91580 RCX=ffffffff8bd2c215 RDX=0000000000000001 RSI=ffffffff8e38edcf RDI=ffffffff8c623a80 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd2a74f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fac70750300 CR3=0000000022837000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=00000000fffffffe Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557ab85b78d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557ab85b4fe0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aebbf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aebb52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004d 0000557feff780e4 0000000000000021 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aebbf1ff0 00007f3aebbf1ff0 00000000000007a1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff82149fff RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff91455b58 RBP=ffffc9000320ff38 RSP=ffffc9000320fee8 R8 =0000000000000000 R9 =fffffbfff228ab6b R10=ffffffff91455b5f R11=0000000000000000 R12=ffff888035b80000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8214a007 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4345ab9c80 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29c785 CR3=0000000026fae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000202 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005651a468e600 00005651a468e600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00727474617465 6763740070726770 7465736374005954 544353434f495400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00575151445140 4246510055574255 5140564651005954 544353434f495400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000a167d RBX=ffff88801f69a580 RCX=ffffffff8bd2c215 RDX=0000000000000001 RSI=ffffffff8e38edcf RDI=ffffffff8c623a80 RBP=ffffed1003ed34b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd2a74f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa6287d5d58 CR3=00000000272b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62b35d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcfc17796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcfc17796 00007fffcfc1779c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62a63564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62a63568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62a6357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62a635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62a7f2600 00007fa62a7f25e0 00007fa62a7f25e8 00007fa62a7f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62b35d020 00007fa62a7f25c0 00007fa62a7f25d0 00007fa62a7f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa62a7f25f8 00007fa62a7f25c8 00007fa62a7f2600 00007fa62a7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b1bb90 RDI=ffffffff9bc76f60 RBP=ffffffff9bc76f20 RSP=ffffc90003a66d40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000030383754 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff378ee41 R15=dffffc0000000000 RIP=ffffffff85b1bbb7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa6287d56c0 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b330ffff8 CR3=00000000272b3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81769cc3 ffffffff81aee5fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81769cc3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4624ea66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4624ea66 00007ffe4624ea6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504f43564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504f43568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504f4357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f504f435680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81769cdf ffffffff81769cdf ffffffff81769cdf ffffffff81769cdf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81769cdf ffffffff81769cc3 ffffffff81769cc3 ffffffff81769cc3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000