last executing test programs: 2m58.292135746s ago: executing program 0 (id=64): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000071118400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x9}]}) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x15, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m58.20061845s ago: executing program 0 (id=66): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = inotify_init1(0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TCXONC(r0, 0x5608, 0x3) 2m58.131011054s ago: executing program 0 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x84080, 0x0) ioctl$MEMGETINFO(r2, 0x80204d01, &(0x7f0000000400)) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x1, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x601, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600655800000c000280080011"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) capset(&(0x7f0000000080)={0x20071026, r10}, &(0x7f0000000340)={0x0, 0x7ab0, 0x7fff}) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r11, r9, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r13 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r13, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) capget(&(0x7f0000000280)={0x20071026, r12}, &(0x7f00000002c0)={0x2, 0x4, 0x400, 0xd5d, 0x2, 0x9}) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 2m57.978526366s ago: executing program 0 (id=73): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, 0x0, 0x5e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f00000002c0)='./file0\x00', 0x200040, 0x4) unlink(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x1c, "112197e531f35a9000a93796a651fb0ae310c3aadf2cb0fce12e392e"}, &(0x7f0000000180)=0x24) 2m57.747146394s ago: executing program 0 (id=77): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000130700000000000000000a010100000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2], 0x13c}}, 0x4000050) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03000000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000070900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b400000000060000480340001800b000100657874686472000024000280080001400000000c08000340000000f608000440000000220500020007000000280001800d00010073796e70726f78790000000014000280050002000900000006000140007f00000900010073797a30"], 0xfc}}, 0x0) 2m57.330302084s ago: executing program 0 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) prctl$PR_GET_CHILD_SUBREAPER(0xe) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1, 0x0, 0xfffffffffffffecf}, 0x10000}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac404e1e", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@private=0xa010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4000000, 0x33}, @in=@private=0xa010101, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefd, 0x1000000000000}, {0x7b, 0x0, 0x9}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e22, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x20000800) 2m57.21357112s ago: executing program 32 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) prctl$PR_GET_CHILD_SUBREAPER(0xe) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1, 0x0, 0xfffffffffffffecf}, 0x10000}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac404e1e", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@private=0xa010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4000000, 0x33}, @in=@private=0xa010101, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefd, 0x1000000000000}, {0x7b, 0x0, 0x9}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e22, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x20000800) 1m54.029770805s ago: executing program 1 (id=983): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180), &(0x7f0000000200)=0x8) (fail_nth: 1) 1m53.93935741s ago: executing program 1 (id=985): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, 0x6eb1, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000001040)=ANY=[@ANYBLOB="02c900801f00000800"], 0x11) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f00000004c0)=[{0x0, 0x1000, 0x4b, &(0x7f0000000040)="8be136cd319e04d40d5c4e90e66cc4d95f01e1d206f89db118abcb6d69c2d0f596b6f5b3d24eb3fa61747eea6466656e6e0100d07629cda0158d9c7ccb713a7741b8ab"}, {0x9, 0xd401, 0xffffffffffffffdf, &(0x7f0000000140)="8ac7f053e65c515017d4c55c8009fda7718e6b6531ac2659860e196478421387cc1b6b114408dfad6b2ee6291014c5cb1131444a7e9134c339f1928834d6e5741a84a57b57372d107cec856881712694d996908668ab7eb5273dd9805f3c3381adcea76d8c2b82cc63a10000"}, {0xa, 0x4000, 0x0, &(0x7f0000000280)="aa7f81178dc3672876bce808d14dd12310b699abc44d73031d9e2583817cbc6938eea93e501cd2ba06a0dfed2ae0779d2fd19a2f474279be66987ac4c75286c8dbbdb5817560d1dc95c118a95410ef78478f55fb96f13ccfdf4058ccf60942636b041a96"}, {0x6, 0x15000, 0x0, &(0x7f0000000400)="cde08d5e1b7cac708940b72b39102fd3ba2c402827d9d200116c76061d0943628846a2f21136bdcef5c6b6e21cf54ace5ef1c490dbb2286a378804c91daef92b7a788902f0e23443c1452541f97aa950"}], 0x2}) 1m52.289605358s ago: executing program 1 (id=1023): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="8b4efad9459f08282d662cbb788a96bffed9d0bacd80657f3cac600356fe667d18f545a3b175a706442b241be0a2567c90703acce7d9a42940c375c89c1bb489f90616095f98a44bbdc43262ebb02f06c2203b51c10ed0dc402d9edeaf264f445dac81ee8ff173582bb39e1ed1fbe15dc78029f2f7251fb4a913a7b44102935204dd07d88b7cf62bc026f175d50f6244cff261aa08d00e8280396cf056fe22da23925ea986992276abcfd3ba5f78037fd7a49ad210e7e7127045394c6e2bbac8fa73314835c081a485b889ca6f7f059ff12e8353c8c1e363dfaad21d6b38ebfaf720291f65256b3346856669fe973e8f0ecfc03038", 0xf5}, {&(0x7f00000002c0)="09fc78155339fd56888a", 0xa}, {&(0x7f0000000700)="d37bfb8dec7dbf90596df3a23d191c12c5921ed44a65995ea43ab31c51bcf1d1a35e7bfbb94883b24cc0d91389a28427421bb379ee59d8d93a93609b153b669f188b9a8351f6d0eb98864087f515df577f3730fd820a4a44517cd95e839696e1d6b7648a5a163e4274acf3009bc55dd915e7e67ce66cae83c3cfe58709e973bb4014a4debf44caa6d3d8df63b2bf3397c20daa52a81d39a4f4ae477f6024b5d0ecbfb6403de22be84e2bbb1edaf9648c5b3831943c269ec87dd067d8cfcf4e6f1f16be63b06d7544deceb015", 0xcc}, {&(0x7f0000000440)="d90e04221b2bbd394d3ed59b42da93f1951ca9348e4075b977a344d7746014818a1315cfab76ffa85fb4491283b269604b0cff9b968ed8e8041991c49b0743f1e981dab5dc9e1ffc70bdcbcbdd3422e72208146dcf8ee2440fe2e3243b3b75be3408eed14aae70fe7f9434a9418a062d20b9", 0x72}, {&(0x7f0000001fc0)="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", 0xd83}], 0x5, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4051}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) 1m52.288733628s ago: executing program 1 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x48815) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1de) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000028c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESOCT=0x0]) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000002940)=ANY=[@ANYBLOB="0000000094fc0ef2fed44f00000000000000000000000000ecf25ded3c1277f30b61d4175546bf170eb40299d4c7a901a7d831fe9371772788fdcde0d982e48065228c504629e186a760872deb08a2288c4e62525b1bdb80e744b45b44ab34736a8916f165237e26074dc41385fa7a059c30a86da0e6881e1de9e532587c4a26df8c6917f26fddd118cac867d78ee05f3c889b0f6af5d7c2f9716ba0a6bc6b551e566de31a7c81a231e4fb19ce439bede19975e39e8da3a5c17b6ad0510efdc431b1db", @ANYRES32=r3, @ANYBLOB="00002dbd7000ffdbdf250600000008000500000000004c00028006000b000a00000006000b000200000006000b000a000000060002004e21000006000b000200000008000300000000000800050006c7000005000d000100000008000600000001000800040000003000080004007e4b00000c0002800800050006000000080004000800000008000600000000000c00018008000500000000000800060002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x48084}, 0x80d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000000000001000084ffff00000000000001000000000000e5"], 0x0, 0x3e, 0x0, 0x0, 0x7}, 0x28) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000005900)={&(0x7f00000027c0)={0x50, 0x0, 0x2144, {0x7, 0x2d, 0x4, 0x2800, 0xa8, 0x1000, 0x40007fe, 0x5558, 0x0, 0x0, 0x100, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x20) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x60041, 0xe, 0x2e}, 0x18) unlinkat(r4, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @pic={0x9, 0x0, 0x9, 0x1, 0xff, 0x3, 0xac, 0x80, 0x9, 0x8, 0x7, 0x1, 0x5, 0x2, 0x6, 0x7}}) r5 = syz_open_dev$vim2m(&(0x7f0000000700), 0xa5b, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000340)=@mmap={0x3, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}, 0x9, 0x1, {}, 0x6}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000520001042bbd7000fbdbdf251c08000600070000000800060009000000080006000000001008000100", @ANYRES32=0x0, @ANYBLOB="0800842719c7e93b644c"], 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x8047) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00008b9000/0x3000)=nil, 0x3000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1m52.22765703s ago: executing program 1 (id=1030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x12021, 0x0) (fail_nth: 2) 1m51.575532076s ago: executing program 1 (id=1054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000440)) 1m51.563904504s ago: executing program 33 (id=1054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000440)) 7.398784094s ago: executing program 5 (id=2899): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44040) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r4) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@private2, 0x18, r9}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 7.350030575s ago: executing program 5 (id=2900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c3}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000002c0)) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000340)=[@register_looper, @transaction={0x40406300, {0x83, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {0x6, 0xfff1}, {0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c8}, 0x20004804) 7.149369772s ago: executing program 5 (id=2902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCDELRT(r0, 0x80108906, &(0x7f0000005480)={0x0, @isdn={0x22, 0xa, 0x9b, 0x3, 0x80}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, @can, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x8, 0x7}) 7.089371307s ago: executing program 5 (id=2904): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x878959f38623260a, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000600)="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", 0x1000, 0xc800, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 7.040424789s ago: executing program 5 (id=2905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 47) 6.748825767s ago: executing program 5 (id=2912): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(r1, 0x0, 0x0) 6.576315616s ago: executing program 34 (id=2912): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(r1, 0x0, 0x0) 3.458569809s ago: executing program 3 (id=2958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x7, 0x0, 0x1, {0x9, @sliced={0x3, [0x3, 0x47, 0x8, 0xc800, 0x5, 0x2, 0x7, 0xffff, 0x7ff, 0x8000, 0x9, 0xa, 0x1b0, 0x0, 0x400, 0x2, 0x7, 0x8000, 0x8, 0x1, 0x2, 0x1, 0x4, 0x6, 0x6, 0x6, 0x6, 0x0, 0xd89, 0xfff, 0x80, 0xeb4, 0x40, 0x100, 0xa, 0xcf69, 0xee, 0x2, 0x3, 0x716, 0x9, 0x0, 0x100, 0xfdee, 0x5, 0x6, 0x0, 0x1ff], 0x8a}}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2.50893814s ago: executing program 3 (id=2963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x7000000, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.508663268s ago: executing program 3 (id=2964): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44040) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r4) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@private2, 0x18, r9}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 2.409744786s ago: executing program 3 (id=2965): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00200000000000"], 0x18}, 0xfc00) 2.350459191s ago: executing program 3 (id=2966): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}]}}}]}, 0x38}, 0x1, 0x2000000000000000, 0x0, 0x200040c4}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x4c, 0x28, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x3}, {0x4, 0x8}, {0x10, 0x9}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000540)={'gre0\x00', r3, 0x8000, 0x80, 0x8, 0x1, {{0x3d, 0x4, 0x0, 0x3, 0xf4, 0x67, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0x5, "379aee"}, {0x5, 0x8, "67168831113f"}, {0x2, 0xc, "1f338d4e047e1bc04bff"}, {0x2, 0x5, "f2cfa7"}]}, @timestamp_addr={0x44, 0x4c, 0x4b, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x1}, {@empty, 0x8}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xd}, {@empty}, {@local, 0x80000000}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x4}, {@broadcast, 0x7fffffff}]}, @timestamp={0x44, 0x24, 0xd1, 0x0, 0x3, [0x8, 0x9, 0xfffffff0, 0x2, 0x4a, 0x9, 0xf1, 0x400]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x1f, [@broadcast, @broadcast, @multicast2, @empty]}, @lsrr={0x83, 0x7, 0x63, [@broadcast]}, @rr={0x7, 0xf, 0x58, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x55, 0x0, 0x8, [0x7, 0x5]}, @generic={0x89, 0x11, "22be949e25f00100b6340c0c45c6d7"}]}}}}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$I2C(&(0x7f0000000340), 0x2, 0x48842) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000500)={&(0x7f0000000040)=[{0xb22, 0x5a00, 0x0, 0x0}], 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, 0x0, 0x0) 970.446712ms ago: executing program 3 (id=2970): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000340), 0x2, 0x48842) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f00000001c0)=[{0x1900, 0x5a00, 0x0, 0x0}], 0x1}) 789.609541ms ago: executing program 2 (id=2979): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x40000000}, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="4d004609fbd768f681c2a441aa79af18a2af349df61d4fd219c8385f62655a062c746c00000100000000009376025b387ee6ccb9ad7c20c158de7804f939d03b8d8b3c3da96c0bb36565220dcb09f6b6179bd11ab5bb135111cc1e7f69e6"]) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040)=0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x10000, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x0, 0x1}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000002d00)={0x28, 0x5d, 0x0, r2, &(0x7f0000001d00)="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", 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r6}}, 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) setresuid(r3, r4, r7) 610.789518ms ago: executing program 4 (id=2984): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfd, &(0x7f0000001480)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 610.490815ms ago: executing program 6 (id=2985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xb2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = msgget$private(0x0, 0x100) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000006c0)=""/4096) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e2a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 610.144572ms ago: executing program 2 (id=2986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, &(0x7f0000000340)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000402bbbbbbbbbbbbffffffffffffaaaaaa98aa2501"]) close(r4) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(r5, 0x5323, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1f) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000000c0)=0x6) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000080)={0x1, 0x53}) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300010000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001800000000000000000"], 0x0, 0x66}, 0x28) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r9 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x10}) 606.800179ms ago: executing program 6 (id=2987): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000070000004dfff800000000004500000000000000950000000000000009c9bc6631c1248c81933e3784b658d0c4baeecff9b457e5a861fd3aa4017a72ab04501be580e00b22e241ad7bea36e2e3dfad39cc4e5967bb8f32b1aeab77fa7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000300)="3c00000058001f000307f4f9002304000a04d65f08000100020100021700513500b0406700912deb5b859322340433b6156b5c11109c8c489786fcdc", 0x3c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000070000004dfff800000000004500000000000000950000000000000009c9bc6631c1248c81933e3784b658d0c4baeecff9b457e5a861fd3aa4017a72ab04501be580e00b22e241ad7bea36e2e3dfad39cc4e5967bb8f32b1aeab77fa7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000300)="3c00000058001f000307f4f9002304000a04d65f08000100020100021700513500b0406700912deb5b859322340433b6156b5c11109c8c489786fcdc", 0x3c) (async) 540.657273ms ago: executing program 4 (id=2988): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setresuid(0x0, 0xee00, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1f, 0x4000000) 538.234885ms ago: executing program 2 (id=2989): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_key={0x2, 0x8, 0x8, 0x0, "c3"}]}, 0x70}, 0x1, 0x7}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3ff}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRES64=r1]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 488.000285ms ago: executing program 4 (id=2990): r0 = socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x20940, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000480)=0x1, 0x4) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a8340081001f0086dd601600003afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff0000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) 487.805689ms ago: executing program 6 (id=2991): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, 0x0, 0xfc00) 399.988502ms ago: executing program 4 (id=2992): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00", @ANYRES32, @ANYBLOB="000000000000000010"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0xf0) 397.592513ms ago: executing program 6 (id=2993): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) dup(r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4044015}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000010}, 0x20044000) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x6, &(0x7f0000000200)=[{0x13, '\x00', @buffer={"eb4de66fe5a05cc2520bb3cb000722e64dc432bca0ee9d99c7d8751b80c2c208", 0x20}, 0x6}]}) 320.381892ms ago: executing program 6 (id=2994): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x79f, 0x0, 0x1, r1}, &(0x7f0000000200)={0x1008, 0x0, 0x0, 0x7, 0xfffe, r1, 0x0, 0x0, 0x7, 0x0, 0x3, r1}]) 319.527749ms ago: executing program 4 (id=2995): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0xb3, 0x7, 0x100, 0x494e4f4b, [0x4b6fb5c, 0x8], [0x3], 0x1}}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000000)={0x9f634221288d0807, 0x0, {[0x200000000000008c, 0x0, 0x6, 0x800000000005, 0xffbffffffffffffc, 0x10000, 0xffffffff7fffffff, 0xfffffffffffffffe]}}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="66baf80cb8adc5648e48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d6666000400000f30", 0x86}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x7fff, 0x15f9) syz_clone(0x4d000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x505000, 0x0) socket(0x28, 0x801, 0x0) 209.872885ms ago: executing program 2 (id=2996): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44040) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r4) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@private2, 0x18, r9}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 209.521227ms ago: executing program 6 (id=2997): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) 115.634203ms ago: executing program 2 (id=2998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300ffffffffd439c5920800024000000001"], 0xfea1}}, 0x800) 737.396µs ago: executing program 2 (id=2999): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 0s ago: executing program 4 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x81]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48005}, 0x4000000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffa35}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x158}}, 0x4810) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f00000003c0)=0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000400)={0xcb7}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4000}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048800}, 0x40050) r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000640)=0x10, 0x0) getsockname$llc(r6, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40901}, 0x2404c004) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000840)=0xfffffbff, 0x4) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffd}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x408000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2085978e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fffffff, @remote, 0xe5f}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004015}, 0x80) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b80)={0x280, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf0a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc7b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x182}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x341c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x95}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd2}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4040080}, 0x8004) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e80), 0x40001, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x158, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4040810}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x104, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12e3354c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008044}, 0x10) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001340), 0x450002, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000001480)={&(0x7f0000001380), 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x70, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0xb8, r8, 0x210, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xa1, 0xa8, @random="9210535cbdbfbeccdc8864f3cc654c96528f5fa678f5b97d7b08fa343639271c005732b41e3666fe0fa61a9aaf1008b6502050eadf34f0a92dfedfd0bb2d4aed2ae1670c69e0f2666c95878402ce3ae318875639602f85db7873eded52a531254c5aae0130f7f352ae67b9c444db4dd79434f735a9996024aa7ef621efe46f4e3827382e7cf885ae81c1341cc38094a0c4b261517ff287e116afd7c7c2"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000001640)={0x7ff, 0x7, 0x5, 0x4, 0xd2, 0x7a, 0xa}, 0xc) ioctl$SNDCTL_SEQ_GETINCOUNT(r9, 0x80045105, &(0x7f0000001680)) kernel console output (not intermixed with test programs): bulk message failed: -22 (6/0) [ 216.451469][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 216.451801][ T943] dw2102: i2c transfer failed. [ 216.454566][ T9] dw2102: command 0x0e transfer failed. [ 216.456082][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 216.456107][ T943] dw2102: i2c transfer failed. [ 216.456121][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 216.456137][ T943] dw2102: i2c transfer failed. [ 216.456158][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 216.458632][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 216.460647][ T943] dw2102: i2c transfer failed. [ 216.460659][ T943] dvb-usb: MAC address: 02:02:02:02:02:02 [ 216.478191][ T9] dw2102: command 0x0e transfer failed. [ 216.481259][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 216.481744][ T62] DVB: Unable to find symbol ds3000_attach() [ 216.481799][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.483651][ T9] dw2102: command 0x51 transfer failed. [ 216.486151][ T62] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 216.490041][T12315] dvb-usb: bulk message failed: -22 (3/0) [ 216.499202][T12315] dw2102: i2c transfer failed. [ 216.505884][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 216.512030][ T943] dw2102: command 0x0e transfer failed. [ 216.523899][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 216.526408][ T943] dw2102: command 0x0e transfer failed. [ 216.527967][ T9] DVB: Unable to find symbol ds3000_attach() [ 216.531617][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 216.561018][ T62] rc_core: IR keymap rc-su3000 not found [ 216.563756][ T62] Registered IR keymap rc-empty [ 216.566834][ T62] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 216.577895][ T62] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input30 [ 216.585834][ T62] dvb-usb: schedule remote query interval to 150 msecs. [ 216.589282][ T62] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.591115][ T9] rc_core: IR keymap rc-su3000 not found [ 216.592024][ T62] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 216.594514][ T9] Registered IR keymap rc-empty [ 216.608957][ T62] usb 9-1: USB disconnect, device number 14 [ 216.609867][T12327] dvb-usb: bulk message failed: -22 (3/0) [ 216.614257][T12327] dw2102: i2c transfer failed. [ 216.635627][ T9] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc1 [ 216.646303][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc1/input31 [ 216.683210][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 216.693487][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.699759][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 216.720643][ T9] usb 8-1: USB disconnect, device number 24 [ 216.741763][ T62] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 216.805463][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 216.832562][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 216.835723][ T943] dw2102: command 0x0e transfer failed. [ 216.837800][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 216.839996][ T943] dw2102: command 0x0e transfer failed. [ 216.843958][ T943] dvb-usb: bulk message failed: -22 (1/0) [ 216.846982][ T943] dw2102: command 0x51 transfer failed. [ 216.880282][ T943] DVB: Unable to find symbol ds3000_attach() [ 216.883101][ T943] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 216.884463][T12352] __nla_validate_parse: 7 callbacks suppressed [ 216.884583][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 216.923489][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 216.951217][ T943] rc_core: IR keymap rc-su3000 not found [ 216.953534][ T943] Registered IR keymap rc-empty [ 216.965597][ T943] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 216.967121][T12355] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 216.975545][ T943] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input32 [ 216.977853][ T943] dvb-usb: schedule remote query interval to 150 msecs. [ 216.986756][ T943] dw2102: su3000_power_ctrl: 0, initialized 1 [ 216.990545][ T943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 216.997144][ T943] usb 10-1: USB disconnect, device number 10 [ 217.019448][ T943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 217.054879][T12362] binder: 12359:12362 ioctl c0306201 0 returned -14 [ 217.068037][T12363] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2391'. [ 217.343331][T12381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51016 sclass=netlink_route_socket pid=12381 comm=syz.2.2398 [ 217.348603][T12381] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2398'. [ 217.352461][T12381] veth0_to_bond: default FDB implementation only supports local addresses [ 217.360406][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 217.375315][T12379] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 217.377685][T12379] UDF-fs: Scanning with blocksize 2048 failed [ 217.385192][T12379] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 217.385232][T12384] Bluetooth: hci0: unsupported parameter 255 [ 217.388215][T12379] UDF-fs: Scanning with blocksize 4096 failed [ 217.394403][T12384] Bluetooth: hci0: unsupported parameter 255 [ 217.486964][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 217.548700][T12395] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2403'. [ 217.982585][T12415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12415 comm=syz.2.2410 [ 217.990623][T12415] FAULT_INJECTION: forcing a failure. [ 217.990623][T12415] name failslab, interval 1, probability 0, space 0, times 0 [ 218.001040][T12415] CPU: 0 UID: 0 PID: 12415 Comm: syz.2.2410 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.001072][T12415] Tainted: [L]=SOFTLOCKUP [ 218.001078][T12415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.001112][T12415] Call Trace: [ 218.001140][T12415] [ 218.001148][T12415] dump_stack_lvl+0x100/0x190 [ 218.001682][T12415] should_fail_ex.cold+0x5/0xa [ 218.001786][T12415] should_failslab+0xc2/0x120 [ 218.001921][T12415] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 218.001962][T12415] ? __alloc_skb+0x5b7/0x710 [ 218.002048][T12415] ? __alloc_skb+0x140/0x710 [ 218.002068][T12415] __alloc_skb+0x140/0x710 [ 218.002084][T12415] ? __alloc_skb+0x5b7/0x710 [ 218.002101][T12415] ? __pfx___alloc_skb+0x10/0x10 [ 218.002122][T12415] netlink_alloc_large_skb+0x69/0x150 [ 218.002212][T12415] netlink_sendmsg+0x680/0xda0 [ 218.002231][T12415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.002245][T12415] ? __might_fault+0x20/0x140 [ 218.002287][T12415] ____sys_sendmsg+0xa4d/0xbe0 [ 218.002302][T12415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.002319][T12415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.002335][T12415] ? __pfx__kstrtoull+0x10/0x10 [ 218.002530][T12415] ___sys_sendmsg+0x190/0x1e0 [ 218.002546][T12415] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.002567][T12415] ? find_held_lock+0x2b/0x80 [ 218.002649][T12415] __sys_sendmmsg+0x20c/0x440 [ 218.002662][T12415] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.002673][T12415] ? ksys_write+0x190/0x250 [ 218.002772][T12415] ? fput+0x79/0x100 [ 218.002783][T12415] ? ksys_write+0x1ac/0x250 [ 218.002799][T12415] ? __pfx_ksys_write+0x10/0x10 [ 218.002817][T12415] __x64_sys_sendmmsg+0x9c/0x100 [ 218.002828][T12415] ? lockdep_hardirqs_on+0x78/0x100 [ 218.002973][T12415] do_syscall_64+0x115/0x870 [ 218.002989][T12415] ? clear_bhb_loop+0x40/0x90 [ 218.003005][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.003018][T12415] RIP: 0033:0x7f8baf99de59 [ 218.003031][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.003046][T12415] RSP: 002b:00007f8bb0793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.003115][T12415] RAX: ffffffffffffffda RBX: 00007f8bafc25fa0 RCX: 00007f8baf99de59 [ 218.003126][T12415] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 218.003134][T12415] RBP: 00007f8bb0793090 R08: 0000000000000000 R09: 0000000000000000 [ 218.003141][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.003148][T12415] R13: 00007f8bafc26038 R14: 00007f8bafc25fa0 R15: 00007ffdd1fa7128 [ 218.003178][T12415] [ 218.086171][T12422] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2413'. [ 218.124835][T12425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2415'. [ 218.326911][T12435] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 218.416198][T12442] overlayfs: missing 'lowerdir' [ 218.426327][T12442] tmpfs: Unknown parameter '@/file0' [ 218.449469][T12444] Bluetooth: MGMT ver 1.23 [ 218.494643][T12448] cgroup: No subsys list or none specified [ 218.793440][T12467] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2433'. [ 219.034628][T12473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51016 sclass=netlink_route_socket pid=12473 comm=syz.2.2435 [ 219.039805][T12473] veth0_to_bond: default FDB implementation only supports local addresses [ 219.247822][T12482] FAULT_INJECTION: forcing a failure. [ 219.247822][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 219.248212][T12479] Cannot find add_set index 65532 as target [ 219.253598][T12482] CPU: 2 UID: 0 PID: 12482 Comm: syz.2.2438 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.253632][T12482] Tainted: [L]=SOFTLOCKUP [ 219.253640][T12482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.253675][T12482] Call Trace: [ 219.253683][T12482] [ 219.253691][T12482] dump_stack_lvl+0x100/0x190 [ 219.254050][T12482] should_fail_ex.cold+0x5/0xa [ 219.254157][T12482] should_failslab+0xc2/0x120 [ 219.254288][T12482] kmem_cache_alloc_noprof+0x91/0x6a0 [ 219.254332][T12482] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 219.254393][T12482] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 219.254423][T12482] mmu_topup_memory_caches+0x25/0x170 [ 219.254477][T12482] kvm_mmu_load+0xd6/0x23e0 [ 219.254500][T12482] ? lockdep_hardirqs_on+0x78/0x100 [ 219.254626][T12482] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 219.254647][T12482] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 219.254682][T12482] ? __pfx_kvm_mmu_load+0x10/0x10 [ 219.254705][T12482] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 219.254729][T12482] ? kvm_check_and_inject_events+0x961/0x1070 [ 219.254759][T12482] ? vcpu_run+0x4640/0x5d50 [ 219.254787][T12482] vcpu_run+0x3a57/0x5d50 [ 219.254822][T12482] ? __pfx_vcpu_run+0x10/0x10 [ 219.254856][T12482] ? rcu_is_watching+0x12/0xc0 [ 219.254946][T12482] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 219.254971][T12482] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 219.255004][T12482] kvm_vcpu_ioctl+0x730/0x1700 [ 219.255027][T12482] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 219.255048][T12482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.255093][T12482] ? do_vfs_ioctl+0x226/0x13e0 [ 219.255166][T12482] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 219.255190][T12482] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.255331][T12482] ? __fget_files+0x215/0x3d0 [ 219.255358][T12482] ? hook_file_ioctl_common+0x140/0x440 [ 219.255397][T12482] ? selinux_file_ioctl+0x13b/0x290 [ 219.255420][T12482] ? selinux_file_ioctl+0xb6/0x290 [ 219.255445][T12482] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 219.255466][T12482] __x64_sys_ioctl+0x18e/0x210 [ 219.255497][T12482] do_syscall_64+0x115/0x870 [ 219.255522][T12482] ? clear_bhb_loop+0x40/0x90 [ 219.255546][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.255565][T12482] RIP: 0033:0x7f8baf99de59 [ 219.255584][T12482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.255601][T12482] RSP: 002b:00007f8bb0793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.255620][T12482] RAX: ffffffffffffffda RBX: 00007f8bafc25fa0 RCX: 00007f8baf99de59 [ 219.255632][T12482] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 219.255643][T12482] RBP: 00007f8bb0793090 R08: 0000000000000000 R09: 0000000000000000 [ 219.255655][T12482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.255666][T12482] R13: 00007f8bafc26038 R14: 00007f8bafc25fa0 R15: 00007ffdd1fa7128 [ 219.255692][T12482] [ 219.587854][T12504] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.601000][ T5907] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 219.630792][T12507] loop2: detected capacity change from 0 to 7 [ 219.643023][T12507] Dev loop2: unable to read RDB block 7 [ 219.645806][T12507] loop2: AHDI p1 p2 p3 [ 219.647817][T12507] loop2: partition table partially beyond EOD, truncated [ 219.657226][T12507] loop2: p1 start 1601398130 is beyond EOD, truncated [ 219.660338][T12507] loop2: p2 start 1702059890 is beyond EOD, truncated [ 219.751044][ T5907] usb 8-1: Using ep0 maxpacket: 8 [ 219.754784][ T5907] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 219.757913][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.775334][ T5907] pvrusb2: Hardware description: Terratec Grabster AV400 [ 219.777703][ T5907] pvrusb2: ********** [ 219.779131][ T5907] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 219.782842][ T5907] pvrusb2: Important functionality might not be entirely working. [ 219.785642][ T5907] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 219.789873][ T5907] pvrusb2: ********** [ 219.850954][ T943] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 219.984145][ T2514] pvrusb2: Invalid write control endpoint [ 220.005594][ T42] kauditd_printk_skb: 278 callbacks suppressed [ 220.005773][ T42] audit: type=1400 audit(2000000043.739:5198): avc: denied { accept } for pid=12506 comm="syz.4.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.021095][ T943] usb 7-1: Using ep0 maxpacket: 32 [ 220.026946][ T943] usb 7-1: unable to get BOS descriptor or descriptor too short [ 220.046065][ T943] usb 7-1: string descriptor 0 read error: -22 [ 220.047954][ T943] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 220.054990][ T943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.060208][ T2514] pvrusb2: Invalid write control endpoint [ 220.066603][ T2514] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 220.074215][ T2514] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 220.077998][ T943] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 220.085811][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 220.088988][ T943] dw2102: su3000_power_ctrl: 1, initialized 0 [ 220.090958][ T943] dvb-usb: bulk message failed: -22 (2/0) [ 220.094604][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.100955][ T2514] pvrusb2: Device being rendered inoperable [ 220.103330][ T943] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 220.107072][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 220.109647][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 220.113093][ T943] usb 7-1: media controller created [ 220.115259][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 220.117151][ T943] dw2102: i2c transfer failed. [ 220.118706][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 220.120467][ T943] dw2102: i2c transfer failed. [ 220.128478][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 220.130474][ T943] dw2102: i2c transfer failed. [ 220.132128][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 220.134245][ T943] dw2102: i2c transfer failed. [ 220.135808][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 220.137647][ T943] dw2102: i2c transfer failed. [ 220.139186][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 220.141092][ T943] dw2102: i2c transfer failed. [ 220.142871][ T943] dvb-usb: MAC address: 02:02:02:02:02:02 [ 220.151459][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.155511][ T2514] pvrusb2: Attached sub-driver cx25840 [ 220.159321][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 220.162840][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 220.168249][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 220.171125][ T943] dw2102: command 0x0e transfer failed. [ 220.173147][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 220.175024][ T943] dw2102: command 0x0e transfer failed. [ 220.178212][ T42] audit: type=1400 audit(2000000043.909:5199): avc: denied { read } for pid=12487 comm="syz.3.2440" dev="nsfs" ino=4026533154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 220.189044][ T42] audit: type=1400 audit(2000000043.909:5200): avc: denied { open } for pid=12487 comm="syz.3.2440" path="net:[4026533154]" dev="nsfs" ino=4026533154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 220.197179][ T42] audit: type=1400 audit(2000000043.909:5201): avc: denied { create } for pid=12487 comm="syz.3.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.203712][ T5826] usb 8-1: USB disconnect, device number 25 [ 220.206835][ T42] audit: type=1400 audit(2000000043.909:5202): avc: denied { write } for pid=12487 comm="syz.3.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.217732][ T42] audit: type=1400 audit(2000000043.909:5203): avc: denied { read } for pid=12487 comm="syz.3.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.385735][ T42] audit: type=1400 audit(2000000044.119:5204): avc: denied { recv } for pid=5681 comm="syz-executor" saddr=127.0.0.1 src=47954 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 220.419522][ T42] audit: type=1400 audit(2000000044.149:5205): avc: denied { read write } for pid=12510 comm="syz.5.2450" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 220.429447][ T42] audit: type=1400 audit(2000000044.149:5206): avc: denied { open } for pid=12510 comm="syz.5.2450" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 220.434291][T12511] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 220.438373][ T42] audit: type=1400 audit(2000000044.159:5207): avc: denied { mounton } for pid=12510 comm="syz.5.2450" path="/324/file0" dev="tmpfs" ino=1692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 220.439616][T12511] syzkaller1: ignored: set checksum enabled [ 220.457198][ T5141] Dev loop2: unable to read RDB block 7 [ 220.459076][ T5141] loop2: AHDI p1 p2 p3 [ 220.460517][ T5141] loop2: partition table partially beyond EOD, truncated [ 220.468149][ T5141] loop2: p1 start 1601398130 is beyond EOD, truncated [ 220.471500][ T5141] loop2: p2 start 1702059890 is beyond EOD, truncated [ 220.481455][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 220.483313][ T943] dw2102: command 0x0e transfer failed. [ 220.485510][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 220.488214][ T943] dw2102: command 0x0e transfer failed. [ 220.490146][ T943] dvb-usb: bulk message failed: -22 (1/0) [ 220.492501][ T943] dw2102: command 0x51 transfer failed. [ 220.518154][ T943] DVB: Unable to find symbol ds3000_attach() [ 220.521651][ T943] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 220.581562][ T943] rc_core: IR keymap rc-su3000 not found [ 220.583592][ T943] Registered IR keymap rc-empty [ 220.594361][ T943] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 220.600720][ T943] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input33 [ 220.612862][ T943] dvb-usb: schedule remote query interval to 150 msecs. [ 220.616401][ T943] dw2102: su3000_power_ctrl: 0, initialized 1 [ 220.619858][ T943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 220.624605][ T943] usb 7-1: USB disconnect, device number 24 [ 220.659295][ T943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 220.959548][T12544] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 221.127877][T12553] /dev/nullb0: Can't open blockdev [ 221.604947][T12582] FAULT_INJECTION: forcing a failure. [ 221.604947][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 221.613919][T12582] CPU: 1 UID: 0 PID: 12582 Comm: syz.2.2479 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.613941][T12582] Tainted: [L]=SOFTLOCKUP [ 221.613946][T12582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.613976][T12582] Call Trace: [ 221.613982][T12582] [ 221.613987][T12582] dump_stack_lvl+0x100/0x190 [ 221.614324][T12582] should_fail_ex.cold+0x5/0xa [ 221.614396][T12582] should_failslab+0xc2/0x120 [ 221.614481][T12582] __kmalloc_cache_noprof+0x91/0x6c0 [ 221.614520][T12582] ? __hw_addr_create+0x57/0x220 [ 221.614594][T12582] __hw_addr_create+0x57/0x220 [ 221.614609][T12582] __hw_addr_add_ex+0x32b/0x650 [ 221.614623][T12582] ? stack_depot_init+0x38/0x80 [ 221.614721][T12582] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 221.614737][T12582] ? __mutex_unlock_slowpath+0x35d/0x930 [ 221.614823][T12582] dev_addr_init+0x161/0x250 [ 221.614839][T12582] ? __pfx_dev_addr_init+0x10/0x10 [ 221.614856][T12582] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 221.614908][T12582] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 221.614923][T12582] alloc_netdev_mqs+0x363/0x15c0 [ 221.614956][T12582] rtnl_create_link+0xc13/0xf80 [ 221.614974][T12582] rtnl_newlink+0x13bd/0x2380 [ 221.614991][T12582] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.615002][T12582] ? find_held_lock+0x2b/0x80 [ 221.615068][T12582] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 221.615121][T12582] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 221.615135][T12582] ? avc_has_perm_noaudit+0x145/0x3b0 [ 221.615158][T12582] ? find_held_lock+0x2b/0x80 [ 221.615174][T12582] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 221.615186][T12582] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 221.615199][T12582] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.615211][T12582] rtnetlink_rcv_msg+0x95e/0xe90 [ 221.615225][T12582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.615241][T12582] ? ref_tracker_free+0x37e/0x6c0 [ 221.615257][T12582] netlink_rcv_skb+0x159/0x420 [ 221.615320][T12582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.615333][T12582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.615353][T12582] ? netlink_deliver_tap+0x1ae/0xcc0 [ 221.615371][T12582] netlink_unicast+0x585/0x850 [ 221.615389][T12582] ? __pfx_netlink_unicast+0x10/0x10 [ 221.615409][T12582] netlink_sendmsg+0x8b0/0xda0 [ 221.615427][T12582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.615442][T12582] ? __might_fault+0x20/0x140 [ 221.615484][T12582] ____sys_sendmsg+0xa4d/0xbe0 [ 221.615516][T12582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.615532][T12582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.615554][T12582] ___sys_sendmsg+0x190/0x1e0 [ 221.615570][T12582] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.615584][T12582] ? __lock_acquire+0x49f/0x1a40 [ 221.615614][T12582] ? get_pid_task+0x106/0x250 [ 221.615668][T12582] __sys_sendmsg+0x160/0x210 [ 221.615680][T12582] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.615700][T12582] do_syscall_64+0x115/0x870 [ 221.615716][T12582] ? clear_bhb_loop+0x40/0x90 [ 221.615733][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.615746][T12582] RIP: 0033:0x7f8baf99de59 [ 221.615759][T12582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.615771][T12582] RSP: 002b:00007f8bb0793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.615784][T12582] RAX: ffffffffffffffda RBX: 00007f8bafc25fa0 RCX: 00007f8baf99de59 [ 221.615791][T12582] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 221.615798][T12582] RBP: 00007f8bb0793090 R08: 0000000000000000 R09: 0000000000000000 [ 221.615805][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.615811][T12582] R13: 00007f8bafc26038 R14: 00007f8bafc25fa0 R15: 00007ffdd1fa7128 [ 221.615827][T12582] [ 221.983869][T12614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.425256][T12634] __nla_validate_parse: 8 callbacks suppressed [ 222.425279][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2495'. [ 222.697766][T12649] netlink: 'syz.4.2503': attribute type 32 has an invalid length. [ 222.697761][T12648] netlink: 'syz.4.2503': attribute type 32 has an invalid length. [ 222.712257][T12649] bond11: option coupled_control: invalid value (47) [ 222.715953][T12649] bond11 (unregistering): Released all slaves [ 222.770506][T12648] bond11: option coupled_control: invalid value (47) [ 222.803314][T12648] bond11 (unregistering): Released all slaves [ 222.811776][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 222.846004][ T5907] hid_parser_main: 5 callbacks suppressed [ 222.846044][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.850533][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.853872][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.858017][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.861495][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.864777][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.867854][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.871259][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.874969][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.877282][ T5907] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 222.886724][ T5907] hid-generic 0000:0000:0004.0009: hidraw1: HID v0.03 Device [syz1] on syz0 [ 222.938246][T12662] fido_id[12662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.046145][T12669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12669 comm=syz.3.2509 [ 223.053920][T12669] FAULT_INJECTION: forcing a failure. [ 223.053920][T12669] name failslab, interval 1, probability 0, space 0, times 0 [ 223.059543][T12669] CPU: 1 UID: 0 PID: 12669 Comm: syz.3.2509 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.059574][T12669] Tainted: [L]=SOFTLOCKUP [ 223.059581][T12669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.059591][T12669] Call Trace: [ 223.059599][T12669] [ 223.059608][T12669] dump_stack_lvl+0x100/0x190 [ 223.059638][T12669] should_fail_ex.cold+0x5/0xa [ 223.059658][T12669] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 223.059683][T12669] should_failslab+0xc2/0x120 [ 223.059704][T12669] kmem_cache_alloc_noprof+0x91/0x6a0 [ 223.059724][T12669] ? skb_clone+0x190/0x400 [ 223.059744][T12669] skb_clone+0x190/0x400 [ 223.059764][T12669] netlink_deliver_tap+0xaed/0xcc0 [ 223.059794][T12669] netlink_unicast+0x62b/0x850 [ 223.059820][T12669] ? __pfx_netlink_unicast+0x10/0x10 [ 223.059849][T12669] netlink_sendmsg+0x8b0/0xda0 [ 223.059876][T12669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.059897][T12669] ? __might_fault+0x20/0x140 [ 223.059933][T12669] ____sys_sendmsg+0xa4d/0xbe0 [ 223.059953][T12669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.059978][T12669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.060002][T12669] ? __pfx__kstrtoull+0x10/0x10 [ 223.060066][T12669] ___sys_sendmsg+0x190/0x1e0 [ 223.060091][T12669] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.060131][T12669] ? find_held_lock+0x2b/0x80 [ 223.060172][T12669] __sys_sendmmsg+0x20c/0x440 [ 223.060192][T12669] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.060208][T12669] ? ksys_write+0x190/0x250 [ 223.060302][T12669] ? fput+0x79/0x100 [ 223.060319][T12669] ? ksys_write+0x1ac/0x250 [ 223.060342][T12669] ? __pfx_ksys_write+0x10/0x10 [ 223.060369][T12669] __x64_sys_sendmmsg+0x9c/0x100 [ 223.060385][T12669] ? lockdep_hardirqs_on+0x78/0x100 [ 223.060411][T12669] do_syscall_64+0x115/0x870 [ 223.060434][T12669] ? clear_bhb_loop+0x40/0x90 [ 223.060455][T12669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.060473][T12669] RIP: 0033:0x7fab57d9de59 [ 223.060489][T12669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.060505][T12669] RSP: 002b:00007fab58d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.060522][T12669] RAX: ffffffffffffffda RBX: 00007fab58025fa0 RCX: 00007fab57d9de59 [ 223.060533][T12669] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 223.060543][T12669] RBP: 00007fab58d11090 R08: 0000000000000000 R09: 0000000000000000 [ 223.060553][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.060563][T12669] R13: 00007fab58026038 R14: 00007fab58025fa0 R15: 00007ffec25d31e8 [ 223.060587][T12669] [ 223.060729][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.069079][T12671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12671 comm=syz.5.2510 [ 223.213121][ T6504] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 223.299156][ T5746] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 223.371663][ T6504] usb 7-1: Using ep0 maxpacket: 32 [ 223.376386][ T6504] usb 7-1: unable to get BOS descriptor or descriptor too short [ 223.384941][ T6504] usb 7-1: string descriptor 0 read error: -22 [ 223.388581][ T6504] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 223.393055][ T6504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.407514][ T6504] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 223.418840][ T6504] dw2102: su3000_power_ctrl: 1, initialized 0 [ 223.421912][ T6504] dvb-usb: bulk message failed: -22 (2/0) [ 223.427404][ T6504] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.433793][ T6504] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 223.437648][ T6504] usb 7-1: media controller created [ 223.440023][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 223.442734][ T6504] dw2102: i2c transfer failed. [ 223.444892][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 223.447785][ T6504] dw2102: i2c transfer failed. [ 223.450279][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 223.453125][ T6504] dw2102: i2c transfer failed. [ 223.455220][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 223.457645][ T6504] dw2102: i2c transfer failed. [ 223.459517][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 223.462363][ T6504] dw2102: i2c transfer failed. [ 223.464457][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 223.467413][ T6504] dw2102: i2c transfer failed. [ 223.470034][ T6504] dvb-usb: MAC address: 02:02:02:02:02:02 [ 223.479959][ T6504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.491177][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 223.493218][ T6504] dw2102: command 0x0e transfer failed. [ 223.495074][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 223.496902][ T6504] dw2102: command 0x0e transfer failed. [ 223.508254][T12691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2517'. [ 223.801018][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 223.803340][ T6504] dw2102: command 0x0e transfer failed. [ 223.805478][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 223.807754][ T6504] dw2102: command 0x0e transfer failed. [ 223.809940][ T6504] dvb-usb: bulk message failed: -22 (1/0) [ 223.812929][ T6504] dw2102: command 0x51 transfer failed. [ 223.848429][ T6504] DVB: Unable to find symbol ds3000_attach() [ 223.850784][ T6504] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 223.881799][ T5826] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 223.901106][ T6504] rc_core: IR keymap rc-su3000 not found [ 223.903691][ T6504] Registered IR keymap rc-empty [ 223.907115][ T6504] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 223.912687][ T6504] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input35 [ 223.919223][ T6504] dvb-usb: schedule remote query interval to 150 msecs. [ 223.922743][ T6504] dw2102: su3000_power_ctrl: 0, initialized 1 [ 223.925782][ T6504] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 223.931302][ T6504] usb 7-1: USB disconnect, device number 25 [ 223.934265][T12700] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 223.957205][ T6504] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 224.061014][ T5826] usb 8-1: Using ep0 maxpacket: 32 [ 224.065805][ T5826] usb 8-1: unable to get BOS descriptor or descriptor too short [ 224.072147][ T5826] usb 8-1: config 8 has an invalid interface number: 97 but max is 0 [ 224.076034][ T5826] usb 8-1: config 8 has no interface number 0 [ 224.078789][ T5826] usb 8-1: too many endpoints for config 8 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 224.083557][ T5826] usb 8-1: config 8 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 224.088769][ T5826] usb 8-1: config 8 interface 97 has no altsetting 0 [ 224.095733][ T5826] usb 8-1: string descriptor 0 read error: -22 [ 224.099633][ T5826] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 224.102958][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.125866][ T5826] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 224.130326][ T5826] dw2102: su3000_power_ctrl: 1, initialized 0 [ 224.133193][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 224.139728][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.150953][ T5826] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 224.152844][T12704] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2522'. [ 224.154999][ T5826] usb 8-1: media controller created [ 224.155026][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 224.155037][ T5826] dw2102: i2c transfer failed. [ 224.164782][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 224.166664][ T5826] dw2102: i2c transfer failed. [ 224.168248][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 224.170390][ T5826] dw2102: i2c transfer failed. [ 224.172699][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 224.176017][ T5826] dw2102: i2c transfer failed. [ 224.178885][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 224.181528][ T5826] dw2102: i2c transfer failed. [ 224.183168][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 224.185006][ T5826] dw2102: i2c transfer failed. [ 224.188840][ T5826] dvb-usb: MAC address: 02:02:02:02:02:02 [ 224.204448][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.218555][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 224.223518][ T5826] dw2102: command 0x0e transfer failed. [ 224.226265][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 224.228934][ T5826] dw2102: command 0x0e transfer failed. [ 224.335560][T12706] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2523'. [ 224.460326][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'. [ 224.521492][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2530'. [ 224.525564][T12724] openvswitch: netlink: Missing key (keys=40, expected=100) [ 224.541026][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 224.545712][ T5826] dw2102: command 0x0e transfer failed. [ 224.547784][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 224.555329][ T5826] dw2102: command 0x0e transfer failed. [ 224.557897][ T5826] dvb-usb: bulk message failed: -22 (1/0) [ 224.560529][ T5826] dw2102: command 0x51 transfer failed. [ 224.574637][T12727] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2531'. [ 224.614047][ T5826] DVB: Unable to find symbol ds3000_attach() [ 224.616696][ T5826] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 224.651034][T12732] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2533'. [ 224.665779][T12729] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 224.668567][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.673033][T12729] vhci_hcd vhci_hcd.0: Device attached [ 224.692977][ T5826] rc_core: IR keymap rc-su3000 not found [ 224.700066][ T5826] Registered IR keymap rc-empty [ 224.707653][ T5826] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 224.714495][ T5826] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input36 [ 224.726606][ T5826] dvb-usb: schedule remote query interval to 150 msecs. [ 224.729165][ T5826] dw2102: su3000_power_ctrl: 0, initialized 1 [ 224.731311][ T5826] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 224.735901][ T5826] usb 8-1: USB disconnect, device number 26 [ 224.799134][ T5826] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 224.921574][ T5907] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 224.947027][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 225.025188][ T42] kauditd_printk_skb: 366 callbacks suppressed [ 225.025286][ T42] audit: type=1400 audit(2000000004.509:5574): avc: denied { write } for pid=12744 comm="syz.2.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.039966][ T42] audit: type=1400 audit(2000000004.509:5575): avc: denied { read } for pid=12744 comm="syz.2.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.090229][ T42] audit: type=1400 audit(2000000004.569:5576): avc: denied { create } for pid=12746 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.097899][ T42] audit: type=1400 audit(2000000004.579:5577): avc: denied { bind } for pid=12746 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.106501][ T42] audit: type=1400 audit(2000000004.579:5578): avc: denied { setopt } for pid=12746 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.111039][ T5826] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 225.127134][ T42] audit: type=1400 audit(2000000004.579:5579): avc: denied { accept } for pid=12746 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.138734][ T42] audit: type=1400 audit(2000000004.589:5580): avc: denied { write } for pid=12746 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.146980][ T42] audit: type=1400 audit(2000000004.589:5581): avc: denied { read } for pid=12746 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.166183][ T42] audit: type=1400 audit(2000000004.649:5582): avc: denied { create } for pid=12750 comm="syz.2.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.177803][ T42] audit: type=1400 audit(2000000004.649:5583): avc: denied { ioctl } for pid=12750 comm="syz.2.2541" path="socket:[103434]" dev="sockfs" ino=103434 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.281292][ T5826] usb 8-1: Using ep0 maxpacket: 16 [ 225.285225][ T5826] usb 8-1: config 0 has no interfaces? [ 225.289577][ T5826] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 225.292632][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.295272][ T5826] usb 8-1: Product: syz [ 225.296710][ T5826] usb 8-1: Manufacturer: syz [ 225.298419][ T5826] usb 8-1: SerialNumber: syz [ 225.304008][ T5826] usb 8-1: config 0 descriptor?? [ 225.476724][T12768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12768 comm=syz.4.2547 [ 225.508221][T12733] vhci_hcd: cannot find a urb of seqnum 3799595792 max seqnum 1 [ 225.514041][ T62] usb 8-1: USB disconnect, device number 27 [ 225.516112][ T5812] vhci_hcd vhci_hcd.3: stop threads [ 225.529550][ T5812] vhci_hcd vhci_hcd.3: release socket [ 225.538039][T12772] netlink: 'syz.4.2549': attribute type 1 has an invalid length. [ 225.557794][ T5812] vhci_hcd vhci_hcd.3: disconnect device [ 225.588465][T12772] 8021q: adding VLAN 0 to HW filter on device bond11 [ 225.600342][T12776] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12776 comm=syz.2.2550 [ 225.867195][T12789] FAULT_INJECTION: forcing a failure. [ 225.867195][T12789] name failslab, interval 1, probability 0, space 0, times 0 [ 225.879538][T12789] CPU: 1 UID: 0 PID: 12789 Comm: syz.4.2556 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.879572][T12789] Tainted: [L]=SOFTLOCKUP [ 225.879579][T12789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.879591][T12789] Call Trace: [ 225.879598][T12789] [ 225.879608][T12789] dump_stack_lvl+0x100/0x190 [ 225.879642][T12789] should_fail_ex.cold+0x5/0xa [ 225.879668][T12789] should_failslab+0xc2/0x120 [ 225.879693][T12789] __kmalloc_cache_noprof+0x91/0x6c0 [ 225.879724][T12789] ? l2tp_tunnel_create+0x96/0x460 [ 225.879808][T12789] l2tp_tunnel_create+0x96/0x460 [ 225.879834][T12789] l2tp_nl_cmd_tunnel_create+0x3ae/0x990 [ 225.879868][T12789] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 225.879900][T12789] ? __nla_parse+0x40/0x60 [ 225.879978][T12789] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 225.880010][T12789] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 225.880046][T12789] genl_family_rcv_msg_doit+0x214/0x300 [ 225.880079][T12789] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 225.880117][T12789] ? bpf_lsm_capable+0x9/0x10 [ 225.880165][T12789] ? security_capable+0x80/0x260 [ 225.880271][T12789] ? ns_capable+0xd2/0xf0 [ 225.880327][T12789] genl_rcv_msg+0x560/0x800 [ 225.880359][T12789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.880389][T12789] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 225.880429][T12789] netlink_rcv_skb+0x159/0x420 [ 225.880454][T12789] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.880485][T12789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.880516][T12789] ? netlink_deliver_tap+0x1ae/0xcc0 [ 225.880545][T12789] genl_rcv+0x28/0x40 [ 225.880572][T12789] netlink_unicast+0x585/0x850 [ 225.880602][T12789] ? __pfx_netlink_unicast+0x10/0x10 [ 225.880636][T12789] netlink_sendmsg+0x8b0/0xda0 [ 225.880667][T12789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.880691][T12789] ? __might_fault+0x20/0x140 [ 225.880736][T12789] ____sys_sendmsg+0xa4d/0xbe0 [ 225.880759][T12789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.880784][T12789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.880841][T12789] ___sys_sendmsg+0x190/0x1e0 [ 225.880870][T12789] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.880914][T12789] ? __lock_acquire+0x49f/0x1a40 [ 225.880944][T12789] ? get_pid_task+0x106/0x250 [ 225.881023][T12789] __sys_sendmsg+0x160/0x210 [ 225.881049][T12789] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.881093][T12789] do_syscall_64+0x115/0x870 [ 225.881133][T12789] ? clear_bhb_loop+0x40/0x90 [ 225.881171][T12789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.881196][T12789] RIP: 0033:0x7fa05f99de59 [ 225.881219][T12789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.881244][T12789] RSP: 002b:00007fa05dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.881300][T12789] RAX: ffffffffffffffda RBX: 00007fa05fc25fa0 RCX: 00007fa05f99de59 [ 225.881316][T12789] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 225.881333][T12789] RBP: 00007fa05dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.881346][T12789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.881362][T12789] R13: 00007fa05fc26038 R14: 00007fa05fc25fa0 R15: 00007ffcde44c2d8 [ 225.881397][T12789] [ 226.457001][T12823] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.498678][T12822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.506565][T12822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.978928][T12845] bond19 (unregistering): Released all slaves [ 227.081352][ T5827] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 227.100030][T12850] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 227.166486][T12850] program syz.5.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.241226][ T5827] usb 8-1: Using ep0 maxpacket: 32 [ 227.265483][ T5827] usb 8-1: unable to get BOS descriptor or descriptor too short [ 227.276358][ T5827] usb 8-1: string descriptor 0 read error: -22 [ 227.280716][ T5827] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 227.288073][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.308560][ T5827] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 227.314586][T12862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12862 comm=syz.4.2588 [ 227.316398][ T5827] dw2102: su3000_power_ctrl: 1, initialized 0 [ 227.332122][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 227.359891][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.369330][ T5827] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 227.379650][ T5827] usb 8-1: media controller created [ 227.384334][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 227.387058][ T5827] dw2102: i2c transfer failed. [ 227.389309][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 227.392663][ T5827] dw2102: i2c transfer failed. [ 227.395204][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 227.397665][ T5827] dw2102: i2c transfer failed. [ 227.399687][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 227.402955][ T5827] dw2102: i2c transfer failed. [ 227.405749][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 227.408609][ T5827] dw2102: i2c transfer failed. [ 227.411009][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 227.413386][ T5827] dw2102: i2c transfer failed. [ 227.415258][ T5827] dvb-usb: MAC address: 02:02:02:02:02:02 [ 227.436027][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.436341][T12869] SELinux: policydb string does not match my string SE Linux [ 227.443654][T12869] SELinux: failed to load policy [ 227.456076][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 227.457986][ T5827] dw2102: command 0x0e transfer failed. [ 227.462040][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 227.466817][ T5827] dw2102: command 0x0e transfer failed. [ 227.676731][T12881] FAULT_INJECTION: forcing a failure. [ 227.676731][T12881] name failslab, interval 1, probability 0, space 0, times 0 [ 227.683879][T12881] CPU: 2 UID: 0 PID: 12881 Comm: syz.5.2594 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.683909][T12881] Tainted: [L]=SOFTLOCKUP [ 227.683917][T12881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.683945][T12881] Call Trace: [ 227.683953][T12881] [ 227.683963][T12881] dump_stack_lvl+0x100/0x190 [ 227.683996][T12881] should_fail_ex.cold+0x5/0xa [ 227.684023][T12881] should_failslab+0xc2/0x120 [ 227.684046][T12881] kmem_cache_alloc_noprof+0x91/0x6a0 [ 227.684068][T12881] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 227.684189][T12881] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 227.684220][T12881] mmu_topup_memory_caches+0x25/0x170 [ 227.684362][T12881] kvm_mmu_load+0xd6/0x23e0 [ 227.684389][T12881] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 227.684411][T12881] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 227.684447][T12881] ? __pfx_kvm_mmu_load+0x10/0x10 [ 227.684472][T12881] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 227.684495][T12881] ? kvm_check_and_inject_events+0x961/0x1070 [ 227.684529][T12881] ? record_steal_time+0x440/0xbb0 [ 227.684554][T12881] vcpu_run+0x3a57/0x5d50 [ 227.684593][T12881] ? __pfx_vcpu_run+0x10/0x10 [ 227.684629][T12881] ? rcu_is_watching+0x12/0xc0 [ 227.684663][T12881] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 227.684691][T12881] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 227.684726][T12881] kvm_vcpu_ioctl+0x730/0x1700 [ 227.684751][T12881] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 227.684775][T12881] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.684863][T12881] ? do_vfs_ioctl+0x226/0x13e0 [ 227.684891][T12881] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.684917][T12881] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.684957][T12881] ? __fget_files+0x215/0x3d0 [ 227.684987][T12881] ? hook_file_ioctl_common+0x140/0x440 [ 227.685024][T12881] ? selinux_file_ioctl+0x13b/0x290 [ 227.685051][T12881] ? selinux_file_ioctl+0xb6/0x290 [ 227.685078][T12881] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 227.685100][T12881] __x64_sys_ioctl+0x18e/0x210 [ 227.685126][T12881] do_syscall_64+0x115/0x870 [ 227.685153][T12881] ? clear_bhb_loop+0x40/0x90 [ 227.685177][T12881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.685198][T12881] RIP: 0033:0x7fbbbdd9de59 [ 227.685217][T12881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.685266][T12881] RSP: 002b:00007fbbbebc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.685286][T12881] RAX: ffffffffffffffda RBX: 00007fbbbe025fa0 RCX: 00007fbbbdd9de59 [ 227.685298][T12881] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 227.685310][T12881] RBP: 00007fbbbebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 227.685336][T12881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.685349][T12881] R13: 00007fbbbe026038 R14: 00007fbbbe025fa0 R15: 00007ffc9f17a028 [ 227.685377][T12881] [ 227.822200][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 227.824637][ T5827] dw2102: command 0x0e transfer failed. [ 227.826829][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 227.828721][ T5827] dw2102: command 0x0e transfer failed. [ 227.831241][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 227.833361][ T5827] dw2102: command 0x51 transfer failed. [ 227.867244][ T5827] DVB: Unable to find symbol ds3000_attach() [ 227.869288][ T5827] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 227.950966][ T5827] rc_core: IR keymap rc-su3000 not found [ 227.953000][ T5827] Registered IR keymap rc-empty [ 227.956121][ T5827] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 227.961507][ T5827] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input37 [ 227.970807][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 227.973997][ T5827] dw2102: su3000_power_ctrl: 0, initialized 1 [ 227.975961][ T5827] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 227.979804][ T5827] usb 8-1: USB disconnect, device number 28 [ 228.031285][ T5827] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 228.134241][T12898] __nla_validate_parse: 7 callbacks suppressed [ 228.134255][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 228.179793][T12900] netlink: 'syz.3.2600': attribute type 16 has an invalid length. [ 228.184075][T12900] netlink: 'syz.3.2600': attribute type 17 has an invalid length. [ 228.198342][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 228.242754][T12902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2602'. [ 228.368583][T12911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12911 comm=syz.3.2606 [ 228.427452][T12911] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.918726][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2615'. [ 229.199298][T12949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65299 sclass=netlink_route_socket pid=12949 comm=syz.5.2621 [ 229.237751][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 229.385658][T12951] usb usb8: usbfs: process 12951 (syz.3.2622) did not claim interface 0 before use [ 229.510631][T12951] tmpfs: Unknown parameter 'ququota_ü^ºpAPinode_hardlMmit' [ 229.521386][T12971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65299 sclass=netlink_route_socket pid=12971 comm=syz.4.2631 [ 229.793502][T12989] FAULT_INJECTION: forcing a failure. [ 229.793502][T12989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.802132][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.3.2638 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.802153][T12989] Tainted: [L]=SOFTLOCKUP [ 229.802157][T12989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.802165][T12989] Call Trace: [ 229.802170][T12989] [ 229.802175][T12989] dump_stack_lvl+0x100/0x190 [ 229.802198][T12989] should_fail_ex.cold+0x5/0xa [ 229.802214][T12989] _copy_from_user+0x2e/0xd0 [ 229.802232][T12989] copy_msghdr_from_user+0x9f/0x4c0 [ 229.802251][T12989] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 229.802269][T12989] ? __pfx__kstrtoull+0x10/0x10 [ 229.802288][T12989] ___sys_sendmsg+0x106/0x1e0 [ 229.802304][T12989] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.802326][T12989] ? find_held_lock+0x2b/0x80 [ 229.802352][T12989] __sys_sendmmsg+0x20c/0x440 [ 229.802365][T12989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 229.802376][T12989] ? ksys_write+0x190/0x250 [ 229.802404][T12989] ? fput+0x79/0x100 [ 229.802415][T12989] ? ksys_write+0x1ac/0x250 [ 229.802430][T12989] ? __pfx_ksys_write+0x10/0x10 [ 229.802449][T12989] __x64_sys_sendmmsg+0x9c/0x100 [ 229.802460][T12989] ? lockdep_hardirqs_on+0x78/0x100 [ 229.802477][T12989] do_syscall_64+0x115/0x870 [ 229.802492][T12989] ? clear_bhb_loop+0x40/0x90 [ 229.802507][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.802519][T12989] RIP: 0033:0x7fab57d9de59 [ 229.802537][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.802548][T12989] RSP: 002b:00007fab58d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 229.802561][T12989] RAX: ffffffffffffffda RBX: 00007fab58025fa0 RCX: 00007fab57d9de59 [ 229.802568][T12989] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 229.802575][T12989] RBP: 00007fab58d11090 R08: 0000000000000000 R09: 0000000000000000 [ 229.802582][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.802588][T12989] R13: 00007fab58026038 R14: 00007fab58025fa0 R15: 00007ffec25d31e8 [ 229.802603][T12989] [ 230.040846][ T5907] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 230.054409][ T42] kauditd_printk_skb: 229 callbacks suppressed [ 230.054423][ T42] audit: type=1400 audit(2000000265.542:5813): avc: denied { read write } for pid=13005 comm="syz.3.2645" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.072457][ T42] audit: type=1400 audit(2000000265.552:5814): avc: denied { open } for pid=13005 comm="syz.3.2645" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.096725][ T42] audit: type=1400 audit(2000000265.552:5815): avc: denied { ioctl } for pid=13005 comm="syz.3.2645" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.111754][ T42] audit: type=1400 audit(2000000265.582:5816): avc: denied { node_bind } for pid=13008 comm="syz.4.2644" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 230.180708][ T42] audit: type=1400 audit(2000000265.662:5817): avc: denied { read write } for pid=13011 comm="syz.4.2646" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 230.194946][ T42] audit: type=1400 audit(2000000265.662:5818): avc: denied { open } for pid=13011 comm="syz.4.2646" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 230.206166][ T42] audit: type=1400 audit(2000000265.672:5819): avc: denied { create } for pid=13011 comm="syz.4.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.215435][ T42] audit: type=1400 audit(2000000265.672:5820): avc: denied { read } for pid=13011 comm="syz.4.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.238819][ T42] audit: type=1400 audit(2000000265.722:5821): avc: denied { perfmon } for pid=13011 comm="syz.4.2646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.248984][ T42] audit: type=1400 audit(2000000265.732:5822): avc: denied { read write } for pid=13011 comm="syz.4.2646" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 230.261588][T13016] Bluetooth: hci0: unsupported parameter 255 [ 230.265084][T13016] Bluetooth: hci0: unsupported parameter 255 [ 230.335042][T13020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2649'. [ 230.404817][T13025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2649'. [ 230.488486][T13029] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2652'. [ 230.545099][T13031] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 230.640980][T13033] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2654'. [ 230.762611][T13037] bridge10: entered promiscuous mode [ 230.781927][T13037] bridge10: entered allmulticast mode [ 230.782719][T13044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13044 comm=syz.3.2656 [ 230.788725][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.828417][T13048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13048 comm=syz.3.2658 [ 230.834224][T13048] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.925406][T13054] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 230.964437][T13054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.086860][T13066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2665'. [ 231.104972][T13059] netlink: 'syz.2.2663': attribute type 3 has an invalid length. [ 231.130920][T13063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.135515][T13063] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 231.675336][T13094] raw_sendmsg: syz.4.2678 forgot to set AF_INET. Fix it! [ 231.948369][T13099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 231.951402][T13099] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 231.959476][T13099] vhci_hcd vhci_hcd.0: Device attached [ 231.964043][T13103] vhci_hcd: connection closed [ 231.966317][ T5812] vhci_hcd vhci_hcd.4: stop threads [ 231.971383][ T5812] vhci_hcd vhci_hcd.4: release socket [ 231.974863][ T5812] vhci_hcd vhci_hcd.4: disconnect device [ 232.269007][T13118] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 232.486614][T13126] ublk2: read batch cmd buffer failed [ 232.491333][T13126] ublk2: read batch cmd buffer failed [ 232.816758][T13144] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 233.070762][ T5102] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 233.148647][T13156] /dev/nullb0: Can't open blockdev [ 233.174608][T13155] usb usb2: usbfs: process 13155 (syz.4.2702) did not claim interface 1 before use [ 233.231091][ T5102] usb 10-1: Using ep0 maxpacket: 32 [ 233.235715][T13158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13158 comm=syz.4.2703 [ 233.236688][ T5102] usb 10-1: unable to get BOS descriptor or descriptor too short [ 233.257216][ T5102] usb 10-1: string descriptor 0 read error: -22 [ 233.261276][ T5102] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 233.269971][ T5102] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.271352][T13160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13160 comm=syz.3.2704 [ 233.284003][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.292340][T13160] FAULT_INJECTION: forcing a failure. [ 233.292340][T13160] name failslab, interval 1, probability 0, space 0, times 0 [ 233.297073][T13160] CPU: 1 UID: 0 PID: 13160 Comm: syz.3.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.297093][T13160] Tainted: [L]=SOFTLOCKUP [ 233.297097][T13160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.297128][T13160] Call Trace: [ 233.297133][T13160] [ 233.297139][T13160] dump_stack_lvl+0x100/0x190 [ 233.297642][T13160] should_fail_ex.cold+0x5/0xa [ 233.297714][T13160] should_failslab+0xc2/0x120 [ 233.297853][T13160] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 233.297895][T13160] ? __alloc_skb+0x140/0x710 [ 233.298015][T13160] __alloc_skb+0x140/0x710 [ 233.298036][T13160] ? __alloc_skb+0x5b7/0x710 [ 233.298057][T13160] ? __pfx___alloc_skb+0x10/0x10 [ 233.298075][T13160] ? preempt_schedule_common+0x42/0xc0 [ 233.298227][T13160] br_info_notify+0x10f/0x2e0 [ 233.298328][T13160] br_setlink+0x339/0x5d0 [ 233.298346][T13160] ? __pfx_br_setlink+0x10/0x10 [ 233.298362][T13160] ? __lock_acquire+0x49f/0x1a40 [ 233.298544][T13160] ? __lock_acquire+0x49f/0x1a40 [ 233.298557][T13160] ? __pfx___mutex_lock+0x10/0x10 [ 233.298574][T13160] ? __pfx_br_setlink+0x10/0x10 [ 233.298591][T13160] rtnl_bridge_setlink+0x56d/0x740 [ 233.298631][T13160] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 233.298651][T13160] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 233.298671][T13160] rtnetlink_rcv_msg+0x3c9/0xe90 [ 233.298685][T13160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.298700][T13160] ? ref_tracker_free+0x37e/0x6c0 [ 233.298852][T13160] netlink_rcv_skb+0x159/0x420 [ 233.298908][T13160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.298922][T13160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.298942][T13160] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.298959][T13160] netlink_unicast+0x585/0x850 [ 233.298977][T13160] ? __pfx_netlink_unicast+0x10/0x10 [ 233.299017][T13160] netlink_sendmsg+0x8b0/0xda0 [ 233.299036][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.299050][T13160] ? __might_fault+0x20/0x140 [ 233.299093][T13160] ____sys_sendmsg+0xa4d/0xbe0 [ 233.299108][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.299125][T13160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.299141][T13160] ? __pfx__kstrtoull+0x10/0x10 [ 233.299181][T13160] ___sys_sendmsg+0x190/0x1e0 [ 233.299197][T13160] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.299219][T13160] ? find_held_lock+0x2b/0x80 [ 233.299268][T13160] __sys_sendmmsg+0x20c/0x440 [ 233.299282][T13160] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.299292][T13160] ? ksys_write+0x190/0x250 [ 233.299382][T13160] ? fput+0x79/0x100 [ 233.299394][T13160] ? ksys_write+0x1ac/0x250 [ 233.299413][T13160] ? __pfx_ksys_write+0x10/0x10 [ 233.299432][T13160] __x64_sys_sendmmsg+0x9c/0x100 [ 233.299443][T13160] ? lockdep_hardirqs_on+0x78/0x100 [ 233.299460][T13160] do_syscall_64+0x115/0x870 [ 233.299475][T13160] ? clear_bhb_loop+0x40/0x90 [ 233.299490][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.299503][T13160] RIP: 0033:0x7fab57d9de59 [ 233.299516][T13160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.299527][T13160] RSP: 002b:00007fab58d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.299541][T13160] RAX: ffffffffffffffda RBX: 00007fab58025fa0 RCX: 00007fab57d9de59 [ 233.299548][T13160] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.299556][T13160] RBP: 00007fab58d11090 R08: 0000000000000000 R09: 0000000000000000 [ 233.299562][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.299569][T13160] R13: 00007fab58026038 R14: 00007fab58025fa0 R15: 00007ffec25d31e8 [ 233.299600][T13160] [ 233.305113][ T5102] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 233.414119][T13170] __nla_validate_parse: 8 callbacks suppressed [ 233.414144][T13170] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2709'. [ 233.421050][ T5102] dw2102: su3000_power_ctrl: 1, initialized 0 [ 233.421080][ T5102] dvb-usb: bulk message failed: -22 (2/0) [ 233.432929][ T5102] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.433682][ T5102] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 233.465444][ T5102] usb 10-1: media controller created [ 233.467111][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 233.473726][ T5102] dw2102: i2c transfer failed. [ 233.475501][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 233.478505][ T5102] dw2102: i2c transfer failed. [ 233.480327][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 233.483954][ T5102] dw2102: i2c transfer failed. [ 233.486120][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 233.489121][ T5102] dw2102: i2c transfer failed. [ 233.493954][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 233.495936][ T5102] dw2102: i2c transfer failed. [ 233.497811][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 233.500520][ T5102] dw2102: i2c transfer failed. [ 233.503823][ T5102] dvb-usb: MAC address: 02:02:02:02:02:02 [ 233.505423][T13144] dvb-usb: bulk message failed: -22 (3/0) [ 233.508572][T13144] dw2102: i2c transfer failed. [ 233.517453][ T5102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.534149][ T5102] dvb-usb: bulk message failed: -22 (3/0) [ 233.537067][ T5102] dw2102: command 0x0e transfer failed. [ 233.539705][ T5102] dvb-usb: bulk message failed: -22 (3/0) [ 233.541946][ T5102] dw2102: command 0x0e transfer failed. [ 233.686711][T13183] FAULT_INJECTION: forcing a failure. [ 233.686711][T13183] name failslab, interval 1, probability 0, space 0, times 0 [ 233.691091][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.4.2715 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.691117][T13183] Tainted: [L]=SOFTLOCKUP [ 233.691123][T13183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.691132][T13183] Call Trace: [ 233.691138][T13183] [ 233.691144][T13183] dump_stack_lvl+0x100/0x190 [ 233.691169][T13183] should_fail_ex.cold+0x5/0xa [ 233.691189][T13183] should_failslab+0xc2/0x120 [ 233.691209][T13183] __kmalloc_cache_noprof+0x91/0x6c0 [ 233.691232][T13183] ? lockdep_set_lock_cmp_fn+0xc0/0xe0 [ 233.691252][T13183] ? alloc_netdev_mqs+0xe3c/0x15c0 [ 233.691273][T13183] alloc_netdev_mqs+0xe3c/0x15c0 [ 233.691292][T13183] rtnl_create_link+0xc13/0xf80 [ 233.691311][T13183] rtnl_newlink+0x13bd/0x2380 [ 233.691333][T13183] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.691348][T13183] ? find_held_lock+0x2b/0x80 [ 233.691371][T13183] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.691488][T13183] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 233.691507][T13183] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.691538][T13183] ? find_held_lock+0x2b/0x80 [ 233.691560][T13183] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 233.691575][T13183] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 233.691592][T13183] ? __pfx_rtnl_newlink+0x10/0x10 [ 233.691608][T13183] rtnetlink_rcv_msg+0x95e/0xe90 [ 233.691626][T13183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.691648][T13183] ? ref_tracker_free+0x37e/0x6c0 [ 233.691671][T13183] netlink_rcv_skb+0x159/0x420 [ 233.691694][T13183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.691712][T13183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.691740][T13183] ? netlink_deliver_tap+0x1ae/0xcc0 [ 233.691764][T13183] netlink_unicast+0x585/0x850 [ 233.691787][T13183] ? __pfx_netlink_unicast+0x10/0x10 [ 233.691814][T13183] netlink_sendmsg+0x8b0/0xda0 [ 233.691838][T13183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.691863][T13183] ? __might_fault+0x20/0x140 [ 233.691894][T13183] ____sys_sendmsg+0xa4d/0xbe0 [ 233.691912][T13183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.691935][T13183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.691963][T13183] ___sys_sendmsg+0x190/0x1e0 [ 233.691985][T13183] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.692003][T13183] ? __lock_acquire+0x49f/0x1a40 [ 233.692020][T13183] ? get_pid_task+0x106/0x250 [ 233.692098][T13183] __sys_sendmsg+0x160/0x210 [ 233.692114][T13183] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.692139][T13183] do_syscall_64+0x115/0x870 [ 233.692162][T13183] ? clear_bhb_loop+0x40/0x90 [ 233.692181][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.692197][T13183] RIP: 0033:0x7fa05f99de59 [ 233.692212][T13183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.692227][T13183] RSP: 002b:00007fa05dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.692244][T13183] RAX: ffffffffffffffda RBX: 00007fa05fc25fa0 RCX: 00007fa05f99de59 [ 233.692254][T13183] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 233.692263][T13183] RBP: 00007fa05dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.692273][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.692282][T13183] R13: 00007fa05fc26038 R14: 00007fa05fc25fa0 R15: 00007ffcde44c2d8 [ 233.692303][T13183] [ 233.786891][T13193] overlay: Unknown parameter 'uid' [ 233.852654][ T5102] dvb-usb: bulk message failed: -22 (3/0) [ 233.854677][ T5102] dw2102: command 0x0e transfer failed. [ 233.857206][ T5102] dvb-usb: bulk message failed: -22 (3/0) [ 233.859547][ T5102] dw2102: command 0x0e transfer failed. [ 233.867637][ T5102] dvb-usb: bulk message failed: -22 (1/0) [ 233.869708][T13199] tmpfs: Bad value for 'nr_blocks' [ 233.872082][ T5102] dw2102: command 0x51 transfer failed. [ 233.898446][ T5102] DVB: Unable to find symbol ds3000_attach() [ 233.901301][ T5102] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 233.960369][ T5102] rc_core: IR keymap rc-su3000 not found [ 233.962403][ T5102] Registered IR keymap rc-empty [ 233.965933][ T5102] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 233.972632][ T5102] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input38 [ 233.992105][ T5102] dvb-usb: schedule remote query interval to 150 msecs. [ 233.995004][ T5102] dw2102: su3000_power_ctrl: 0, initialized 1 [ 233.997272][ T5102] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 234.016843][ T5102] usb 10-1: USB disconnect, device number 11 [ 234.057188][ T5102] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 234.215605][T13225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13225 comm=syz.3.2733 [ 234.222491][T13225] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.305932][T13228] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 234.401309][T13235] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.467683][T13235] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 234.473556][T13235] overlayfs: failed to look up (tracing) for ino (-66) [ 235.112898][ T42] kauditd_printk_skb: 250 callbacks suppressed [ 235.112964][ T42] audit: type=1400 audit(2000000270.602:6073): avc: denied { read write } for pid=13254 comm="syz.5.2745" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.128813][ T42] audit: type=1400 audit(2000000270.602:6074): avc: denied { open } for pid=13254 comm="syz.5.2745" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.195981][ T42] audit: type=1400 audit(2000000270.683:6075): avc: denied { prog_load } for pid=13258 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 235.214652][ T42] audit: type=1400 audit(2000000270.683:6076): avc: denied { create } for pid=13258 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.217415][T13264] FAULT_INJECTION: forcing a failure. [ 235.217415][T13264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.224753][ T42] audit: type=1400 audit(2000000270.683:6077): avc: denied { write } for pid=13258 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.228624][T13264] CPU: 2 UID: 0 PID: 13264 Comm: syz.4.2747 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.228657][T13264] Tainted: [L]=SOFTLOCKUP [ 235.228663][T13264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.228673][T13264] Call Trace: [ 235.228679][T13264] [ 235.228686][T13264] dump_stack_lvl+0x100/0x190 [ 235.228712][T13264] should_fail_ex.cold+0x5/0xa [ 235.228731][T13264] _copy_from_user+0x2e/0xd0 [ 235.228751][T13264] copy_msghdr_from_user+0x9f/0x4c0 [ 235.228772][T13264] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 235.228793][T13264] ? __pfx__kstrtoull+0x10/0x10 [ 235.228816][T13264] ___sys_sendmsg+0x106/0x1e0 [ 235.228835][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.228862][T13264] ? find_held_lock+0x2b/0x80 [ 235.228895][T13264] __sys_sendmmsg+0x20c/0x440 [ 235.228912][T13264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 235.228925][T13264] ? ksys_write+0x190/0x250 [ 235.228965][T13264] ? fput+0x79/0x100 [ 235.228979][T13264] ? ksys_write+0x1ac/0x250 [ 235.228997][T13264] ? __pfx_ksys_write+0x10/0x10 [ 235.229019][T13264] __x64_sys_sendmmsg+0x9c/0x100 [ 235.229033][T13264] ? lockdep_hardirqs_on+0x78/0x100 [ 235.229054][T13264] do_syscall_64+0x115/0x870 [ 235.229073][T13264] ? clear_bhb_loop+0x40/0x90 [ 235.229091][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.229106][T13264] RIP: 0033:0x7fa05f99de59 [ 235.229153][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.229167][T13264] RSP: 002b:00007fa05dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.229185][T13264] RAX: ffffffffffffffda RBX: 00007fa05fc25fa0 RCX: 00007fa05f99de59 [ 235.229194][T13264] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 235.229203][T13264] RBP: 00007fa05dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.229211][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.229220][T13264] R13: 00007fa05fc26038 R14: 00007fa05fc25fa0 R15: 00007ffcde44c2d8 [ 235.229238][T13264] [ 235.310975][T13268] program syz.4.2749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.311923][ T42] audit: type=1400 audit(2000000270.683:6078): avc: denied { nlmsg_write } for pid=13258 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.344372][ T42] audit: type=1400 audit(2000000270.683:6079): avc: denied { module_request } for pid=13258 comm="syz.5.2748" kmod=6E65746465762D0198C6541D15DFC3DE13B19F6338A9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 235.355192][ T42] audit: type=1400 audit(2000000270.693:6080): avc: denied { mounton } for pid=13258 comm="syz.5.2748" path="/374/file0" dev="tmpfs" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.364077][ T42] audit: type=1400 audit(2000000270.693:6081): avc: denied { mount } for pid=13258 comm="syz.5.2748" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 235.373353][ T42] audit: type=1400 audit(2000000270.713:6082): avc: denied { accept } for pid=13246 comm="syz.3.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.464630][T13274] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2752'. [ 235.598535][T13279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13279 comm=syz.5.2754 [ 235.618753][T13279] FAULT_INJECTION: forcing a failure. [ 235.618753][T13279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.628105][T13279] CPU: 1 UID: 0 PID: 13279 Comm: syz.5.2754 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.628152][T13279] Tainted: [L]=SOFTLOCKUP [ 235.628162][T13279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.628178][T13279] Call Trace: [ 235.628190][T13279] [ 235.628206][T13279] dump_stack_lvl+0x100/0x190 [ 235.628248][T13279] should_fail_ex.cold+0x5/0xa [ 235.628283][T13279] _copy_from_user+0x2e/0xd0 [ 235.628315][T13279] copy_msghdr_from_user+0x9f/0x4c0 [ 235.628352][T13279] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 235.628399][T13279] ? rcu_is_watching+0x12/0xc0 [ 235.628438][T13279] ? ___sys_sendmsg+0x19d/0x1e0 [ 235.628469][T13279] ? kfree+0x1e5/0x6c0 [ 235.628511][T13279] ___sys_sendmsg+0x106/0x1e0 [ 235.628547][T13279] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.628613][T13279] ? __pfx___might_resched+0x10/0x10 [ 235.628652][T13279] __sys_sendmmsg+0x20c/0x440 [ 235.628683][T13279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 235.628708][T13279] ? ksys_write+0x190/0x250 [ 235.628771][T13279] ? fput+0x79/0x100 [ 235.628798][T13279] ? ksys_write+0x1ac/0x250 [ 235.628832][T13279] ? __pfx_ksys_write+0x10/0x10 [ 235.628873][T13279] __x64_sys_sendmmsg+0x9c/0x100 [ 235.628897][T13279] ? lockdep_hardirqs_on+0x78/0x100 [ 235.628935][T13279] do_syscall_64+0x115/0x870 [ 235.628970][T13279] ? clear_bhb_loop+0x40/0x90 [ 235.629002][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.629025][T13279] RIP: 0033:0x7fbbbdd9de59 [ 235.629049][T13279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.629070][T13279] RSP: 002b:00007fbbbebc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.629144][T13279] RAX: ffffffffffffffda RBX: 00007fbbbe025fa0 RCX: 00007fbbbdd9de59 [ 235.629164][T13279] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 235.629183][T13279] RBP: 00007fbbbebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 235.629196][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.629210][T13279] R13: 00007fbbbe026038 R14: 00007fbbbe025fa0 R15: 00007ffc9f17a028 [ 235.629245][T13279] [ 236.044827][T13290] usb usb8: usbfs: process 13290 (syz.2.2758) did not claim interface 0 before use [ 236.266172][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2766'. [ 236.288198][ T9] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 236.373932][T13317] FAULT_INJECTION: forcing a failure. [ 236.373932][T13317] name failslab, interval 1, probability 0, space 0, times 0 [ 236.385946][T13317] CPU: 1 UID: 0 PID: 13317 Comm: syz.4.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.385968][T13317] Tainted: [L]=SOFTLOCKUP [ 236.385973][T13317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.386005][T13317] Call Trace: [ 236.386012][T13317] [ 236.386018][T13317] dump_stack_lvl+0x100/0x190 [ 236.386236][T13317] should_fail_ex.cold+0x5/0xa [ 236.386310][T13317] should_failslab+0xc2/0x120 [ 236.386417][T13317] __kmalloc_noprof+0xfc/0x820 [ 236.386459][T13317] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 236.386556][T13317] kernfs_fop_write_iter+0x26a/0x5f0 [ 236.386583][T13317] vfs_write+0x6ac/0x1050 [ 236.386639][T13317] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 236.386665][T13317] ? __pfx_vfs_write+0x10/0x10 [ 236.386708][T13317] ksys_write+0x12a/0x250 [ 236.386735][T13317] ? __pfx_ksys_write+0x10/0x10 [ 236.386765][T13317] do_syscall_64+0x115/0x870 [ 236.386867][T13317] ? clear_bhb_loop+0x40/0x90 [ 236.386883][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.386895][T13317] RIP: 0033:0x7fa05f99de59 [ 236.386945][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.386957][T13317] RSP: 002b:00007fa05dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.386970][T13317] RAX: ffffffffffffffda RBX: 00007fa05fc25fa0 RCX: 00007fa05f99de59 [ 236.386977][T13317] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 236.386984][T13317] RBP: 00007fa05dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.386991][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.386998][T13317] R13: 00007fa05fc26038 R14: 00007fa05fc25fa0 R15: 00007ffcde44c2d8 [ 236.387034][T13317] [ 236.654850][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 236.811336][T13333] usb usb8: usbfs: process 13333 (syz.2.2774) did not claim interface 0 before use [ 237.126525][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 237.181858][T13356] netlink: 556 bytes leftover after parsing attributes in process `syz.5.2781'. [ 237.216121][T13358] FAULT_INJECTION: forcing a failure. [ 237.216121][T13358] name failslab, interval 1, probability 0, space 0, times 0 [ 237.223384][T13358] CPU: 3 UID: 0 PID: 13358 Comm: syz.2.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.223416][T13358] Tainted: [L]=SOFTLOCKUP [ 237.223425][T13358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.223439][T13358] Call Trace: [ 237.223446][T13358] [ 237.223485][T13358] dump_stack_lvl+0x100/0x190 [ 237.223518][T13358] should_fail_ex.cold+0x5/0xa [ 237.223545][T13358] should_failslab+0xc2/0x120 [ 237.223568][T13358] __kmalloc_noprof+0xfc/0x820 [ 237.223588][T13358] ? __pfx_dynamic_dname+0x10/0x10 [ 237.223667][T13358] ? tomoyo_encode2+0xfb/0x3c0 [ 237.223816][T13358] tomoyo_encode2+0xfb/0x3c0 [ 237.223844][T13358] tomoyo_encode+0x29/0x50 [ 237.223866][T13358] tomoyo_realpath_from_path+0x18c/0x690 [ 237.223897][T13358] tomoyo_path_number_perm+0x23c/0x580 [ 237.223920][T13358] ? tomoyo_path_number_perm+0x22e/0x580 [ 237.223942][T13358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.223986][T13358] ? find_held_lock+0x2b/0x80 [ 237.224074][T13358] ? __fget_files+0x215/0x3d0 [ 237.224101][T13358] ? hook_file_ioctl_common+0x140/0x440 [ 237.224129][T13358] ? __fget_files+0x215/0x3d0 [ 237.224160][T13358] ? __fget_files+0x21f/0x3d0 [ 237.224191][T13358] security_file_ioctl+0xd3/0x230 [ 237.224263][T13358] __x64_sys_ioctl+0xb7/0x210 [ 237.224311][T13358] do_syscall_64+0x115/0x870 [ 237.224336][T13358] ? clear_bhb_loop+0x40/0x90 [ 237.224365][T13358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.224383][T13358] RIP: 0033:0x7f8baf99de59 [ 237.224401][T13358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.224418][T13358] RSP: 002b:00007f8bb0793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.224437][T13358] RAX: ffffffffffffffda RBX: 00007f8bafc25fa0 RCX: 00007f8baf99de59 [ 237.224450][T13358] RDX: 0000200000005480 RSI: 000000000000890c RDI: 0000000000000003 [ 237.224461][T13358] RBP: 00007f8bb0793090 R08: 0000000000000000 R09: 0000000000000000 [ 237.224472][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.224482][T13358] R13: 00007f8bafc26038 R14: 00007f8bafc25fa0 R15: 00007ffdd1fa7128 [ 237.224508][T13358] [ 237.224577][T13358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.422052][T13364] FAULT_INJECTION: forcing a failure. [ 237.422052][T13364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.424767][T13366] netlink: 'syz.4.2786': attribute type 11 has an invalid length. [ 237.428127][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.3.2785 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.428158][T13364] Tainted: [L]=SOFTLOCKUP [ 237.428166][T13364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.428177][T13364] Call Trace: [ 237.428185][T13364] [ 237.428191][T13364] dump_stack_lvl+0x100/0x190 [ 237.428222][T13364] should_fail_ex.cold+0x5/0xa [ 237.428247][T13364] _copy_from_user+0x2e/0xd0 [ 237.428319][T13364] copy_msghdr_from_user+0x9f/0x4c0 [ 237.428396][T13364] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 237.428433][T13364] ___sys_sendmsg+0x106/0x1e0 [ 237.428459][T13364] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.428481][T13364] ? __lock_acquire+0x49f/0x1a40 [ 237.428526][T13364] ? get_pid_task+0x106/0x250 [ 237.428607][T13364] __sys_sendmsg+0x160/0x210 [ 237.428626][T13364] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.428659][T13364] do_syscall_64+0x115/0x870 [ 237.428685][T13364] ? clear_bhb_loop+0x40/0x90 [ 237.428714][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.428733][T13364] RIP: 0033:0x7fab57d9de59 [ 237.428751][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.428769][T13364] RSP: 002b:00007fab58d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.428789][T13364] RAX: ffffffffffffffda RBX: 00007fab58025fa0 RCX: 00007fab57d9de59 [ 237.428802][T13364] RDX: 0000000020040041 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 237.428814][T13364] RBP: 00007fab58d11090 R08: 0000000000000000 R09: 0000000000000000 [ 237.428825][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.428836][T13364] R13: 00007fab58026038 R14: 00007fab58025fa0 R15: 00007ffec25d31e8 [ 237.428862][T13364] [ 237.707540][T13386] usb usb8: usbfs: process 13386 (syz.3.2796) did not claim interface 0 before use [ 237.844010][T13401] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2801'. [ 237.888344][T13398] netlink: 'syz.4.2797': attribute type 2 has an invalid length. [ 237.960361][ T7746] nci: nci_rx_work: unknown MT 0x1 [ 238.177047][T13417] usb usb8: usbfs: process 13417 (syz.5.2807) did not claim interface 0 before use [ 238.560373][T13432] Bluetooth: MGMT ver 1.23 [ 238.577765][T13389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.582019][T13405] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2797'. [ 238.728088][T13440] vivid-001: disconnect [ 238.752670][T13440] vivid-001: reconnect [ 238.801096][T13449] usb usb8: usbfs: process 13449 (syz.2.2818) did not claim interface 0 before use [ 238.806460][T13450] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2820'. [ 238.851490][T13456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13456 comm=syz.2.2822 [ 238.856640][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.859450][T13456] FAULT_INJECTION: forcing a failure. [ 238.859450][T13456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.863887][T13456] CPU: 1 UID: 0 PID: 13456 Comm: syz.2.2822 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.863907][T13456] Tainted: [L]=SOFTLOCKUP [ 238.863911][T13456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.863919][T13456] Call Trace: [ 238.863925][T13456] [ 238.863930][T13456] dump_stack_lvl+0x100/0x190 [ 238.863952][T13456] should_fail_ex.cold+0x5/0xa [ 238.863968][T13456] _copy_to_user+0x32/0xd0 [ 238.863986][T13456] simple_read_from_buffer+0xcb/0x170 [ 238.864007][T13456] proc_fail_nth_read+0x1af/0x230 [ 238.864061][T13456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.864078][T13456] ? rw_verify_area+0xce/0x6d0 [ 238.864093][T13456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.864109][T13456] vfs_read+0x1e4/0xb40 [ 238.864128][T13456] ? __pfx_vfs_read+0x10/0x10 [ 238.864143][T13456] ? __fget_files+0x215/0x3d0 [ 238.864166][T13456] ? __fget_files+0x21f/0x3d0 [ 238.864188][T13456] ksys_read+0x12a/0x250 [ 238.864204][T13456] ? __pfx_ksys_read+0x10/0x10 [ 238.864224][T13456] do_syscall_64+0x115/0x870 [ 238.864242][T13456] ? clear_bhb_loop+0x40/0x90 [ 238.864258][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.864270][T13456] RIP: 0033:0x7f8baf95e68e [ 238.864281][T13456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.864292][T13456] RSP: 002b:00007f8bb0792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.864305][T13456] RAX: ffffffffffffffda RBX: 00007f8bb07936c0 RCX: 00007f8baf95e68e [ 238.864312][T13456] RDX: 000000000000000f RSI: 00007f8bb07930a0 RDI: 0000000000000005 [ 238.864319][T13456] RBP: 00007f8bb0793090 R08: 0000000000000000 R09: 0000000000000000 [ 238.864326][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.864332][T13456] R13: 00007f8bafc26038 R14: 00007f8bafc25fa0 R15: 00007ffdd1fa7128 [ 238.864348][T13456] [ 239.234692][T13492] binder: BINDER_SET_CONTEXT_MGR already set [ 239.242191][T13492] binder: 13491:13492 ioctl 4018620d 200000000200 returned -16 [ 239.271074][T13499] FAULT_INJECTION: forcing a failure. [ 239.271074][T13499] name failslab, interval 1, probability 0, space 0, times 0 [ 239.278808][T13499] CPU: 3 UID: 0 PID: 13499 Comm: syz.5.2840 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.278838][T13499] Tainted: [L]=SOFTLOCKUP [ 239.278844][T13499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.278854][T13499] Call Trace: [ 239.278861][T13499] [ 239.278868][T13499] dump_stack_lvl+0x100/0x190 [ 239.278899][T13499] should_fail_ex.cold+0x5/0xa [ 239.278924][T13499] should_failslab+0xc2/0x120 [ 239.278946][T13499] __kmalloc_noprof+0xfc/0x820 [ 239.278966][T13499] ? tomoyo_encode2+0xfb/0x3c0 [ 239.278996][T13499] tomoyo_encode2+0xfb/0x3c0 [ 239.279023][T13499] tomoyo_encode+0x29/0x50 [ 239.279047][T13499] tomoyo_realpath_from_path+0x18c/0x690 [ 239.279076][T13499] tomoyo_path_number_perm+0x23c/0x580 [ 239.279096][T13499] ? tomoyo_path_number_perm+0x22e/0x580 [ 239.279120][T13499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.279163][T13499] ? find_held_lock+0x2b/0x80 [ 239.279189][T13499] ? __fget_files+0x215/0x3d0 [ 239.279214][T13499] ? hook_file_ioctl_common+0x140/0x440 [ 239.279240][T13499] ? __fget_files+0x215/0x3d0 [ 239.279267][T13499] ? __fget_files+0x21f/0x3d0 [ 239.279295][T13499] security_file_ioctl+0xd3/0x230 [ 239.279321][T13499] __x64_sys_ioctl+0xb7/0x210 [ 239.279346][T13499] do_syscall_64+0x115/0x870 [ 239.279370][T13499] ? clear_bhb_loop+0x40/0x90 [ 239.279391][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.279409][T13499] RIP: 0033:0x7fbbbdd9de59 [ 239.279425][T13499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.279441][T13499] RSP: 002b:00007fbbbebc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.279460][T13499] RAX: ffffffffffffffda RBX: 00007fbbbe025fa0 RCX: 00007fbbbdd9de59 [ 239.279471][T13499] RDX: 00002000000000c0 RSI: 000000008020640d RDI: 0000000000000003 [ 239.279480][T13499] RBP: 00007fbbbebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 239.279491][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.279524][T13499] R13: 00007fbbbe026038 R14: 00007fbbbe025fa0 R15: 00007ffc9f17a028 [ 239.279548][T13499] [ 239.375954][T13499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.382489][T13506] FAULT_INJECTION: forcing a failure. [ 239.382489][T13506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.402202][T13506] CPU: 2 UID: 0 PID: 13506 Comm: syz.3.2843 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.402236][T13506] Tainted: [L]=SOFTLOCKUP [ 239.402243][T13506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.402254][T13506] Call Trace: [ 239.402261][T13506] [ 239.402271][T13506] dump_stack_lvl+0x100/0x190 [ 239.402301][T13506] should_fail_ex.cold+0x5/0xa [ 239.402326][T13506] _copy_from_iter+0x1f4/0x1690 [ 239.402368][T13506] ? __pfx__copy_from_iter+0x10/0x10 [ 239.402388][T13506] ? trace_kmalloc+0xeb/0x110 [ 239.402410][T13506] ? __kasan_kmalloc+0xaa/0xb0 [ 239.402434][T13506] ? __kmalloc_noprof+0x343/0x820 [ 239.402453][T13506] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 239.402477][T13506] kernfs_fop_write_iter+0x186/0x5f0 [ 239.402502][T13506] vfs_write+0x6ac/0x1050 [ 239.402529][T13506] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 239.402552][T13506] ? __pfx_vfs_write+0x10/0x10 [ 239.402596][T13506] ksys_write+0x12a/0x250 [ 239.402617][T13506] ? __pfx_ksys_write+0x10/0x10 [ 239.402648][T13506] do_syscall_64+0x115/0x870 [ 239.402674][T13506] ? clear_bhb_loop+0x40/0x90 [ 239.402697][T13506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.402716][T13506] RIP: 0033:0x7fab57d9de59 [ 239.402732][T13506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.402748][T13506] RSP: 002b:00007fab58d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.402767][T13506] RAX: ffffffffffffffda RBX: 00007fab58025fa0 RCX: 00007fab57d9de59 [ 239.402800][T13506] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 239.402812][T13506] RBP: 00007fab58d11090 R08: 0000000000000000 R09: 0000000000000000 [ 239.402824][T13506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.402835][T13506] R13: 00007fab58026038 R14: 00007fab58025fa0 R15: 00007ffec25d31e8 [ 239.402861][T13506] [ 239.467479][T13508] FAULT_INJECTION: forcing a failure. [ 239.467479][T13508] name failslab, interval 1, probability 0, space 0, times 0 [ 239.495990][T13508] CPU: 1 UID: 0 PID: 13508 Comm: syz.5.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.496011][T13508] Tainted: [L]=SOFTLOCKUP [ 239.496016][T13508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.496024][T13508] Call Trace: [ 239.496028][T13508] [ 239.496033][T13508] dump_stack_lvl+0x100/0x190 [ 239.496055][T13508] should_fail_ex.cold+0x5/0xa [ 239.496071][T13508] should_failslab+0xc2/0x120 [ 239.496086][T13508] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 239.496099][T13508] ? __alloc_skb+0x5b7/0x710 [ 239.496119][T13508] ? __alloc_skb+0x140/0x710 [ 239.496138][T13508] __alloc_skb+0x140/0x710 [ 239.496154][T13508] ? __alloc_skb+0x5b7/0x710 [ 239.496171][T13508] ? __pfx___alloc_skb+0x10/0x10 [ 239.496192][T13508] netlink_ack+0x117/0xb80 [ 239.496238][T13508] netlink_rcv_skb+0x333/0x420 [ 239.496254][T13508] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.496295][T13508] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.496316][T13508] ? netlink_deliver_tap+0x1ae/0xcc0 [ 239.496334][T13508] netlink_unicast+0x585/0x850 [ 239.496352][T13508] ? __pfx_netlink_unicast+0x10/0x10 [ 239.496371][T13508] netlink_sendmsg+0x8b0/0xda0 [ 239.496389][T13508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.496404][T13508] ? __might_fault+0x20/0x140 [ 239.496450][T13508] ____sys_sendmsg+0xa4d/0xbe0 [ 239.496464][T13508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.496480][T13508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.496501][T13508] ___sys_sendmsg+0x190/0x1e0 [ 239.496517][T13508] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.496531][T13508] ? __lock_acquire+0x49f/0x1a40 [ 239.496545][T13508] ? get_pid_task+0x106/0x250 [ 239.496578][T13508] __sys_sendmsg+0x160/0x210 [ 239.496590][T13508] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.496608][T13508] do_syscall_64+0x115/0x870 [ 239.496625][T13508] ? clear_bhb_loop+0x40/0x90 [ 239.496639][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.496651][T13508] RIP: 0033:0x7fbbbdd9de59 [ 239.496663][T13508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.496674][T13508] RSP: 002b:00007fbbbebc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.496687][T13508] RAX: ffffffffffffffda RBX: 00007fbbbe025fa0 RCX: 00007fbbbdd9de59 [ 239.496694][T13508] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 239.496701][T13508] RBP: 00007fbbbebc4090 R08: 0000000000000000 R09: 0000000000000000 [ 239.496708][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.496715][T13508] R13: 00007fbbbe026038 R14: 00007fbbbe025fa0 R15: 00007ffc9f17a028 [ 239.496730][T13508] [ 239.765171][T13528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2851'. [ 240.052901][T13545] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 240.168623][ T42] kauditd_printk_skb: 226 callbacks suppressed [ 240.168673][ T42] audit: type=1400 audit(2000000275.653:6309): avc: denied { read } for pid=13549 comm="syz.3.2852" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=112350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.221315][ T42] audit: type=1400 audit(2000000275.653:6310): avc: denied { ioctl } for pid=13552 comm="syz.5.2863" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 240.257440][ T42] audit: type=1400 audit(2000000275.663:6311): avc: denied { create } for pid=13549 comm="syz.3.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.302262][ T42] audit: type=1400 audit(2000000275.793:6312): avc: denied { ioctl } for pid=13547 comm="syz.2.2862" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 240.313182][ T42] audit: type=1400 audit(2000000275.793:6313): avc: denied { read write } for pid=13559 comm="syz.5.2864" name="video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.321658][ T42] audit: type=1400 audit(2000000275.793:6314): avc: denied { open } for pid=13559 comm="syz.5.2864" path="/dev/video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.334511][ T42] audit: type=1400 audit(2000000275.793:6315): avc: denied { ioctl } for pid=13559 comm="syz.5.2864" path="/dev/video8" dev="devtmpfs" ino=977 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.346078][ T42] audit: type=1400 audit(2000000275.803:6316): avc: denied { bind } for pid=13559 comm="syz.5.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.353783][ T42] audit: type=1400 audit(2000000275.803:6317): avc: denied { name_bind } for pid=13559 comm="syz.5.2864" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 240.364197][ T42] audit: type=1400 audit(2000000275.803:6318): avc: denied { node_bind } for pid=13559 comm="syz.5.2864" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 240.431875][T13567] netlink: 556 bytes leftover after parsing attributes in process `syz.5.2867'. [ 240.523250][T13569] SELinux: policydb magic number 0x30000014 does not match expected magic number 0xf97cff8c [ 240.526752][T13569] SELinux: failed to load policy [ 240.706382][T13591] Cannot find del_set index 4 as target [ 240.710478][T13591] random: crng reseeded on system resumption [ 240.916031][T13609] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2883'. [ 241.001262][T13611] Bluetooth: MGMT ver 1.23 [ 241.003096][T13611] Bluetooth: hci1: too big key_count value 26998 [ 241.276824][T13635] FAULT_INJECTION: forcing a failure. [ 241.276824][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 241.286920][T13635] CPU: 2 UID: 0 PID: 13635 Comm: syz.4.2894 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.286953][T13635] Tainted: [L]=SOFTLOCKUP [ 241.286960][T13635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.287001][T13635] Call Trace: [ 241.287009][T13635] [ 241.287018][T13635] dump_stack_lvl+0x100/0x190 [ 241.287399][T13635] should_fail_ex.cold+0x5/0xa [ 241.287507][T13635] should_failslab+0xc2/0x120 [ 241.287660][T13635] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 241.287704][T13635] ? find_held_lock+0x2b/0x80 [ 241.287789][T13635] ? is_bpf_text_address+0x8a/0x1a0 [ 241.287833][T13635] ? dev_exception_add+0x77/0x510 [ 241.288048][T13635] kmemdup_noprof+0x29/0x60 [ 241.288086][T13635] dev_exception_add+0x77/0x510 [ 241.288108][T13635] ? bpf_lsm_capable+0x9/0x10 [ 241.288147][T13635] ? security_capable+0x80/0x260 [ 241.288233][T13635] devcgroup_update_access+0x750/0x15a0 [ 241.288259][T13635] ? __lock_acquire+0x49f/0x1a40 [ 241.288337][T13635] ? __pfx_devcgroup_update_access+0x10/0x10 [ 241.288397][T13635] ? kernfs_root+0xee/0x2a0 [ 241.288492][T13635] ? kernfs_root+0xf8/0x2a0 [ 241.288513][T13635] ? kernfs_root_flags+0x19/0x60 [ 241.288556][T13635] devcgroup_access_write+0xad/0x120 [ 241.288580][T13635] cgroup_file_write+0x1e6/0x8a0 [ 241.288626][T13635] ? __pfx_devcgroup_access_write+0x10/0x10 [ 241.288650][T13635] ? __pfx_cgroup_file_write+0x10/0x10 [ 241.288674][T13635] kernfs_fop_write_iter+0x3e0/0x5f0 [ 241.288694][T13635] ? __pfx_cgroup_file_write+0x10/0x10 [ 241.288718][T13635] vfs_write+0x6ac/0x1050 [ 241.288767][T13635] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 241.288790][T13635] ? __pfx_vfs_write+0x10/0x10 [ 241.288830][T13635] ksys_write+0x12a/0x250 [ 241.288850][T13635] ? __pfx_ksys_write+0x10/0x10 [ 241.288881][T13635] do_syscall_64+0x115/0x870 [ 241.289008][T13635] ? clear_bhb_loop+0x40/0x90 [ 241.289055][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.289076][T13635] RIP: 0033:0x7fa05f99de59 [ 241.289093][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.289107][T13635] RSP: 002b:00007fa05dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.289126][T13635] RAX: ffffffffffffffda RBX: 00007fa05fc25fa0 RCX: 00007fa05f99de59 [ 241.289138][T13635] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 241.289148][T13635] RBP: 00007fa05dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.289159][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.289169][T13635] R13: 00007fa05fc26038 R14: 00007fa05fc25fa0 R15: 00007ffcde44c2d8 [ 241.289191][T13635] [ 241.522720][T13648] usb usb2: usbfs: process 13648 (syz.4.2898) did not claim interface 1 before use [ 241.576535][T13654] netlink: 556 bytes leftover after parsing attributes in process `syz.5.2900'. [ 242.419633][T13688] 9pnet_virtio: no channels available for device syz [ 242.535317][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.558142][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.563291][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.568523][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.574933][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.588971][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.604306][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.615092][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.623034][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.626995][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.728913][T13700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.864683][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 243.247481][T13742] xt_l2tp: missing protocol rule (udp|l2tpip) [ 243.327448][T13750] binder: 13749:13750 ioctl 89f0 2000000007c0 returned -22 [ 243.370645][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.373955][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.377143][T13694] bridge_slave_0: entered allmulticast mode [ 243.388266][T13694] bridge_slave_0: entered promiscuous mode [ 243.394838][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.397501][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.402756][T13694] bridge_slave_1: entered allmulticast mode [ 243.406351][T13694] bridge_slave_1: entered promiscuous mode [ 243.442294][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.452935][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.518123][T13694] team0: Port device team_slave_0 added [ 243.522236][T13694] team0: Port device team_slave_1 added [ 243.534575][T13762] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2937'. [ 243.564810][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.567724][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.579893][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.591405][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.594441][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.606797][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.668394][T13694] hsr_slave_0: entered promiscuous mode [ 243.672401][T13694] hsr_slave_1: entered promiscuous mode [ 243.676063][T13694] debugfs: 'hsr0' already exists in 'hsr' [ 243.678828][T13694] Cannot create hsr debugfs directory [ 243.884189][T13764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.927485][T13694] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.932862][T13694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.936124][T13694] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.943226][T13694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.947229][T13694] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.955199][T13694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.962291][T13694] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.969669][T13694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.999599][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.002671][T13694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.005742][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.008837][T13694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.062725][T13694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.077083][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.086164][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.102102][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.110406][T13778] usb usb2: usbfs: process 13778 (syz.2.2940) did not claim interface 1 before use [ 244.139196][ T943] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 244.140807][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.146585][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.158009][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.160384][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.289231][ T943] usb 8-1: Using ep0 maxpacket: 32 [ 244.295321][ T943] usb 8-1: unable to get BOS descriptor or descriptor too short [ 244.301307][ T943] usb 8-1: string descriptor 0 read error: -22 [ 244.304051][ T943] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 244.307389][ T943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.327918][ T943] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 244.334647][ T943] dw2102: su3000_power_ctrl: 1, initialized 0 [ 244.335672][T13790] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 244.336668][ T943] dvb-usb: bulk message failed: -22 (2/0) [ 244.349367][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.353283][ T943] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 244.355948][ T943] usb 8-1: media controller created [ 244.357592][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 244.359828][ T943] dw2102: i2c transfer failed. [ 244.361766][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 244.363975][ T943] dw2102: i2c transfer failed. [ 244.365808][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 244.370462][ T943] dw2102: i2c transfer failed. [ 244.372044][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 244.373890][ T943] dw2102: i2c transfer failed. [ 244.375454][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 244.377244][ T943] dw2102: i2c transfer failed. [ 244.379442][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 244.381778][ T943] dw2102: i2c transfer failed. [ 244.383571][ T943] dvb-usb: MAC address: 02:02:02:02:02:02 [ 244.390896][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.421540][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 244.423664][T13795] input: syz0 as /devices/virtual/input/input39 [ 244.425744][ T943] dw2102: command 0x0e transfer failed. [ 244.439175][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 244.441547][ T943] dw2102: command 0x0e transfer failed. [ 244.483375][T13694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.664078][T13694] veth0_vlan: entered promiscuous mode [ 244.677509][T13694] veth1_vlan: entered promiscuous mode [ 244.689196][ T5089] Bluetooth: hci3: command tx timeout [ 244.724658][T13694] veth0_macvtap: entered promiscuous mode [ 244.731040][T13694] veth1_macvtap: entered promiscuous mode [ 244.747265][T13694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.749995][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 244.752037][ T943] dw2102: command 0x0e transfer failed. [ 244.754149][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 244.756787][ T943] dw2102: command 0x0e transfer failed. [ 244.759834][ T943] dvb-usb: bulk message failed: -22 (1/0) [ 244.761509][T13694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.762346][ T943] dw2102: command 0x51 transfer failed. [ 244.767557][T13764] dvb-usb: bulk message failed: -22 (3/0) [ 244.770151][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.770414][T13764] dw2102: i2c transfer failed. [ 244.773545][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.787847][ T943] DVB: Unable to find symbol ds3000_attach() [ 244.790725][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.790927][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.796097][ T943] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 244.851221][ T943] rc_core: IR keymap rc-su3000 not found [ 244.863401][ T943] Registered IR keymap rc-empty [ 244.894801][ T943] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 244.926136][ T943] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input40 [ 244.932957][ T943] dvb-usb: schedule remote query interval to 150 msecs. [ 244.945290][ T943] dw2102: su3000_power_ctrl: 0, initialized 1 [ 244.948950][ T943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 244.960693][ T943] usb 8-1: USB disconnect, device number 29 [ 244.990382][T13817] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2950'. [ 245.005789][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.008738][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.034673][ T943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 245.070990][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.074711][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.179342][ T42] kauditd_printk_skb: 416 callbacks suppressed [ 245.179395][ T42] audit: type=1400 audit(2000000280.674:6733): avc: denied { ioctl } for pid=13814 comm="syz.4.2949" path="/dev/virtual_nci" dev="devtmpfs" ino=710 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.207260][ T42] audit: type=1400 audit(2000000280.694:6734): avc: denied { create } for pid=13828 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.216332][ T42] audit: type=1400 audit(2000000280.694:6735): avc: denied { write } for pid=13828 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.231913][ T42] audit: type=1400 audit(2000000280.724:6736): avc: denied { create } for pid=13828 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.238418][ T42] audit: type=1400 audit(2000000280.724:6737): avc: denied { create } for pid=13828 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.245808][ T42] audit: type=1400 audit(2000000280.724:6738): avc: denied { connect } for pid=13828 comm="syz.6.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.256565][ T42] audit: type=1400 audit(2000000280.724:6739): avc: denied { read write } for pid=13828 comm="syz.6.2951" name="vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 245.266552][ T42] audit: type=1400 audit(2000000280.724:6740): avc: denied { open } for pid=13828 comm="syz.6.2951" path="/dev/vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 245.274434][ T42] audit: type=1400 audit(2000000280.724:6741): avc: denied { ioctl } for pid=13828 comm="syz.6.2951" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 245.283925][ T42] audit: type=1400 audit(2000000280.724:6742): avc: denied { module_request } for pid=13828 comm="syz.6.2951" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 245.988950][ T6158] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 246.150441][ T6158] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.155995][ T6158] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.160002][ T6158] usb 11-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 246.163493][ T6158] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.169323][ T6158] usb 11-1: config 0 descriptor?? [ 246.542985][T13873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.576547][ T6158] kye 0003:0458:5016.000A: control desc unexpectedly large [ 246.586778][ T6158] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5016.000A/input/input42 [ 246.672342][ T6158] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5016.000A/input/input43 [ 246.752636][ T6158] kye 0003:0458:5016.000A: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 246.779021][ T5089] Bluetooth: hci3: command tx timeout [ 246.788777][ T29] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 246.938777][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 246.942924][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 246.950326][ T29] usb 8-1: string descriptor 0 read error: -22 [ 246.953390][ T29] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 246.957263][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.968166][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 246.972264][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 246.975050][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 246.979391][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.983450][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 246.986725][ T29] usb 8-1: media controller created [ 246.989645][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 246.992168][ T29] dw2102: i2c transfer failed. [ 246.994196][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 246.996385][ T29] dw2102: i2c transfer failed. [ 246.998075][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 247.000270][ T29] dw2102: i2c transfer failed. [ 247.001893][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 247.004001][ T29] dw2102: i2c transfer failed. [ 247.005528][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 247.007368][ T29] dw2102: i2c transfer failed. [ 247.010076][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 247.012052][ T29] dw2102: i2c transfer failed. [ 247.013856][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 247.021304][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.035515][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 247.037903][ T29] dw2102: command 0x0e transfer failed. [ 247.040260][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 247.042805][ T29] dw2102: command 0x0e transfer failed. [ 247.348635][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 247.350779][ T29] dw2102: command 0x0e transfer failed. [ 247.352967][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 247.355475][ T29] dw2102: command 0x0e transfer failed. [ 247.357798][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 247.360261][ T29] dw2102: command 0x51 transfer failed. [ 247.363044][T13873] dvb-usb: bulk message failed: -22 (3/0) [ 247.365366][T13873] dw2102: i2c transfer failed. [ 247.386050][ T29] DVB: Unable to find symbol ds3000_attach() [ 247.388404][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 247.438690][ T29] rc_core: IR keymap rc-su3000 not found [ 247.441592][ T29] Registered IR keymap rc-empty [ 247.449687][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 247.453939][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input44 [ 247.462567][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 247.465512][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 247.468279][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 247.474384][ T29] usb 8-1: USB disconnect, device number 30 [ 247.500504][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 247.628219][ C3] kye 0003:0458:5016.000A: usb_submit_urb(ctrl) failed: -1 [ 247.893811][T13815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.985720][T13897] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2972'. [ 248.152365][T13912] 9p: Bad value for 'wfdno' [ 248.199962][ T6504] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 248.239052][T13920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13920 comm=syz.4.2983 [ 248.344305][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2987'. [ 248.356893][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2987'. [ 248.368655][ T6504] usb 8-1: Using ep0 maxpacket: 32 [ 248.373372][ T6504] usb 8-1: unable to get BOS descriptor or descriptor too short [ 248.390097][ T6504] usb 8-1: string descriptor 0 read error: -22 [ 248.395545][ T6504] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 248.403542][ T6504] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.422719][ T6504] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 248.436413][ T6504] dw2102: su3000_power_ctrl: 1, initialized 0 [ 248.442258][ T6504] dvb-usb: bulk message failed: -22 (2/0) [ 248.448175][ T6504] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.458000][ T9] usb 11-1: USB disconnect, device number 2 [ 248.470092][ T6504] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 248.479558][ T6504] usb 8-1: media controller created [ 248.482781][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 248.489852][ T6504] dw2102: i2c transfer failed. [ 248.491921][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 248.495726][T13943] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2992'. [ 248.499558][ T6504] dw2102: i2c transfer failed. [ 248.499587][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 248.499601][ T6504] dw2102: i2c transfer failed. [ 248.499613][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 248.499626][ T6504] dw2102: i2c transfer failed. [ 248.499634][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 248.499645][ T6504] dw2102: i2c transfer failed. [ 248.499655][ T6504] dvb-usb: bulk message failed: -22 (6/0) [ 248.499665][ T6504] dw2102: i2c transfer failed. [ 248.499673][ T6504] dvb-usb: MAC address: 02:02:02:02:02:02 [ 248.540892][T13945] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 248.551176][ T6504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.608014][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 248.621281][ T6504] dw2102: command 0x0e transfer failed. [ 248.632446][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 248.636866][ T6504] dw2102: command 0x0e transfer failed. [ 248.835796][T13962] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2998'. [ 248.850268][ T5089] Bluetooth: hci3: command tx timeout [ 248.949208][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 248.955545][ T6504] dw2102: command 0x0e transfer failed. [ 248.959972][ T6504] dvb-usb: bulk message failed: -22 (3/0) [ 248.966202][ T6504] dw2102: command 0x0e transfer failed. [ 248.972383][ T6504] dvb-usb: bulk message failed: -22 (1/0) [ 248.975529][ T6504] dw2102: command 0x51 transfer failed. [ 248.979585][T13893] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 248.984411][T13893] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 248.988000][T13893] CPU: 0 UID: 0 PID: 13893 Comm: syz.3.2970 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.992046][T13893] Tainted: [L]=SOFTLOCKUP [ 248.993527][T13893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.996881][T13893] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 248.999297][T13893] Code: 73 d9 f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 249.006715][T13893] RSP: 0018:ffffc90004ddfc10 EFLAGS: 00010246 [ 249.008743][T13893] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90006da1000 [ 249.011418][T13893] RDX: 0000000000000000 RSI: ffffffff88305c80 RDI: ffff88805cd1f5a8 [ 249.015378][T13893] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 249.018482][T13893] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000 [ 249.021169][T13893] R13: ffff88802e7e1d02 R14: 0000000000000000 R15: ffff88802e7e1d00 [ 249.023879][T13893] FS: 00007fab58d116c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 249.026715][T13893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.028788][T13893] CR2: 00007fa0607556b8 CR3: 00000000385bb000 CR4: 0000000000352ef0 [ 249.031438][T13893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 249.034471][T13893] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 249.037106][T13893] Call Trace: [ 249.038223][T13893] [ 249.039164][T13893] __i2c_transfer+0x5d9/0x1740 [ 249.040809][T13893] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 249.042737][T13893] ? __pfx___i2c_transfer+0x10/0x10 [ 249.044607][T13893] ? rt_mutex_slowtrylock+0x93/0x100 [ 249.046509][T13893] i2c_transfer+0x15f/0x380 [ 249.048128][T13893] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 249.049742][T13893] i2cdev_ioctl+0x19d/0x830 [ 249.051114][T13893] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 249.052610][T13893] ? selinux_file_ioctl+0x13b/0x290 [ 249.054404][T13893] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 249.056226][T13893] __x64_sys_ioctl+0x18e/0x210 [ 249.058295][T13893] do_syscall_64+0x115/0x870 [ 249.060440][T13893] ? clear_bhb_loop+0x40/0x90 [ 249.062650][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.064983][T13893] RIP: 0033:0x7fab57d9de59 [ 249.066653][T13893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.072888][T13893] RSP: 002b:00007fab58d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.075484][T13893] RAX: ffffffffffffffda RBX: 00007fab58025fa0 RCX: 00007fab57d9de59 [ 249.078244][T13893] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004 [ 249.078257][T13893] RBP: 00007fab57e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 249.078266][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.078275][T13893] R13: 00007fab58026038 R14: 00007fab58025fa0 R15: 00007ffec25d31e8 [ 249.078312][T13893] [ 249.078340][T13893] Modules linked in: [ 249.078901][T13893] ---[ end trace 0000000000000000 ]--- [ 249.090003][T13893] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 249.090033][T13893] Code: 73 d9 f9 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 249.090047][T13893] RSP: 0018:ffffc90004ddfc10 EFLAGS: 00010246 [ 249.090060][T13893] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90006da1000 [ 249.090069][T13893] RDX: 0000000000000000 RSI: ffffffff88305c80 RDI: ffff88805cd1f5a8 [ 249.090078][T13893] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 249.090087][T13893] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000 [ 249.090095][T13893] R13: ffff88802e7e1d02 R14: 0000000000000000 R15: ffff88802e7e1d00 [ 249.090104][T13893] FS: 00007fab58d116c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 249.090134][T13893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.090145][T13893] CR2: 0000000000000000 CR3: 00000000385bb000 CR4: 0000000000352ef0 [ 249.090154][T13893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 249.090162][T13893] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 249.090173][T13893] Kernel panic - not syncing: Fatal exception [ 249.091089][T13893] Kernel Offset: disabled