last executing test programs: 1m27.021872715s ago: executing program 0 (id=5798): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000080)=[0x5, 0x9, 0x2, 0xffff32e7, 0x8, 0xffffdff6, 0x2d7b, 0x401, 0x5d, 0x5, 0xfffefffa, 0xa, 0x6, 0xce, 0x2], 0x0, 0x4000007}) 1m26.950950895s ago: executing program 0 (id=5799): sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m26.950530028s ago: executing program 0 (id=5800): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) close_range(r2, r1, 0x0) 1m23.872492102s ago: executing program 0 (id=5849): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1901) r5 = open_tree(r4, &(0x7f0000000100)='./file0/file0\x00', 0x9101) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000300)={0x3, 0x3, {}, {0x0}, 0x2, 0x1000}) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000140)='./file1\x00', r6, r7, 0x1000) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x62, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xd96}]}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 1m23.822183482s ago: executing program 0 (id=5850): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f00006b3000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/129, 0x81, 0x0, &(0x7f0000000180)=""/231, 0xe7}, &(0x7f00000002c0)=0x40) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'ip_vti0\x00'}}, 0x1e) close(r1) 1m23.29227944s ago: executing program 0 (id=5852): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40895}, 0xc000) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14000000130001000000004047dc60d61e6b060000000004000080a176a51bbbd58c8dde555a95326f2e31fae22d144e"], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r7, 0xc0186445, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r10}) 1m23.240862892s ago: executing program 32 (id=5852): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x29, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40895}, 0xc000) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14000000130001000000004047dc60d61e6b060000000004000080a176a51bbbd58c8dde555a95326f2e31fae22d144e"], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r7, 0xc0186445, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r10}) 5.57073204s ago: executing program 4 (id=6707): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}], 0x1}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x448041, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x100000, 0x1}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe000000000a0000", 0x1c) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x14, r2, 0xb00, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x1) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f0000000040), 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.467759381s ago: executing program 4 (id=6709): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r2, 0x701, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x6, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.361155855s ago: executing program 4 (id=6710): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x15c, 0x0, 0x0, 0x5, 0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, {0x12, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7fc2a0c2d8943e3d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 5.291042977s ago: executing program 4 (id=6712): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f000000c3c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3ff, 0x5, 0x101, 0x4, 0xe, 0xd, 0x0, 0x0, 0x20, 0xb}}, 0x50) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r4, 0x670000000000fff4) close_range(r0, 0xffffffffffffffff, 0x0) 2.261005833s ago: executing program 1 (id=6727): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}}, 0x0) 2.139139956s ago: executing program 1 (id=6728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0x53f, 0x3, 0x35, 0xffffffb9, 0x1a}, 0x9c) 2.138709362s ago: executing program 4 (id=6729): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0xa1}}], 0x30}}], 0x1, 0x20000044) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.060941155s ago: executing program 4 (id=6730): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@alu={0x4, 0x0, 0x9, 0xa}]}, &(0x7f00000003c0)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x8100}]}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "e7a6f6264f"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x452369c81ff10127}}}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f000036e000/0x4000)=nil, 0x4000, 0x6) 1.380760231s ago: executing program 3 (id=6736): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r2, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000020200000000008000000000", @ANYRES64=0x77359400, @ANYRESHEX, @ANYRES16, @ANYRES64=r0, @ANYBLOB="0e00"], 0x38}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}}, 0x4000040) 1.28435636s ago: executing program 1 (id=6737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4c810}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000000)=@caif, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="b742452880cf67358a2cfa404519119be069e930f60ba1f3054b2ad359b925423ef3c1991fbf5ed8b3dcfba56bf458", 0x2f}, {&(0x7f00000002c0)="e1b56004d495420d1440f057e963da9fae2899c06f87640bed073eb30d9e9aa5719fc60d088134f8f5a4", 0x2a}], 0x2}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="552e250f9053a57b85e5d8e0338fb54900664fa2e93886d7b102f2250cb76196c2d52712", 0x24}, {&(0x7f0000000400)="2bb660f2948019575af5c4a029cc039a9f973a091801044389cb63238703c44fb41f95f28bfa03d970813b07337f43f520608f5dee9234c549762d155b803d9546b5af1a67efb992db25b69a4125b99f13a42014b2d7135e33e506793fb460f9aebc7bdf4b3799ca3ef75bf910cb5498ae42308a178efb9aeb9a6d2bc684c9c86ba51d32cdb6d63ac0b1f69665d1", 0x8e}, {&(0x7f00000004c0)="02c7bd577e1b2014042259f40e74f8c10ba99113a4e7ea75b6b875337690f5e4a8edca022c4b725734119ecd410d4f87acd583b89805a57247ab4cc8161ce2a8a535c2099d0bd1a7c3c6983185ee42d0a8947c3345176075c15f6b0e5de68e7e5e4c9c0213c8ab6eff014906e27e34171e69faf6d335f9b0a7414f04612440f7bb0c709e4c88beeb3a83fe363d060078765d2a3d2b61ef4d91ee38f30683e52aa5133a2f04c1d87f5dacf7da1d6c0c9c4e10df1e8879e3c5aee7b1b05e67", 0xbe}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="a98654c49b7ccf1d32a628187d2d8a71317c2f18a7a81225fef1572df1a39c2bc6f07f273d997d2108d9b2", 0x2b}], 0x5, &(0x7f0000001640)=[{0x108, 0x1e7, 0x0, "f4988847aaeff7fb23791232d194ba3c9ee7fc74a712dc4f6e719bd069a25e2d01e0475421f41c415778a3e342b4105c78baf27d78c7c8fb36836c6d4828819698f15eabf7309f4e128920c92403bd342893d99e3f408d9b731b44892e757811aba345a199ef8d86ef4e5769a0fd7e9e353d036d948580870cecfe63ba31bae285385e66a422134c3d71aeb379b8b01f6cdd0a0462972396dd994e5ad14cc2aec2132e7141b5a4a4862e43d8259f496d68979c2c00cdf80507f07662249d5bf988f7310f7d2ad5191b999d35414c3227c138f213fb90dff651277988103bcf589b815f08b6f6492f0c9ccffb93a08b755adef0"}, {0x1010, 0x118, 0xa, "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"}, {0xd8, 0x104, 0x7ff, "ef862142b8af593121c9012f7eeee9600d470935bf4dcf9209600bc64bd1c8ba2ed0d7476b174def48633d9411a36c548fead4aab94abcc81fa127c95f789be90105e6fbf3365316feff8edc153829a6bf172532ddd440c09b0f9ce1cd6ed2960abb7bf7f0d6cbd097dddccd0574c2c99cf63695de3c177ee8bbe8d4319c9e309b366b3bf85a69120110a5bcb275abd5ba0e59c41ecfbbfd6646b9d5218ac35d63cd50a6fb40fd640ecf4fa911395d12d1a1d38cee2cec7be64abba2cd49880308e6456a8f42a888"}, {0x60, 0x29, 0x9, "26d074c2faf8c73ff7c6a5cbbeef6737ab70511f225de7835577a06001204de3cc6089d2d6b47827d44da55ea0cdf723359e003600b8184afb36a7cad2f25fdef45ca469a208413bb6"}, {0x90, 0x10f, 0x6, "4a1e5ef6f0131848e4e094a304c3b2b679b310feff8239210fcedef0536facabf537465c7bf5c6244302764fbf3226dc23a9c8b67eb1cb1c224d85c66ca7eff36ae83b2a236eabaaf82d6ee125fea82a70d3824e560fd7e4322ebf43f40e19bd5bcc06f8cf36de849b4321c02c48e41eee51730b37dac3898f90e7c46a6814"}], 0x12e0}}], 0x2, 0x20008810) 1.281129103s ago: executing program 3 (id=6738): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)) getdents(r2, &(0x7f0000002000)=""/4096, 0x1000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) 1.160803724s ago: executing program 3 (id=6739): sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x881) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x60}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.155967675s ago: executing program 1 (id=6740): close(0xffffffffffffffff) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000027c0)=[{{&(0x7f0000000380)=@tipc=@id, 0x80, &(0x7f0000000900)=[{&(0x7f0000000c40)=""/172, 0xac}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/53, 0x35}], 0x5, &(0x7f0000000980)=""/70, 0x46}, 0x2}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000a00)=""/102, 0x66}, {&(0x7f0000000a80)=""/167, 0xa7}, {&(0x7f0000000b40)=""/220, 0xdc}, {&(0x7f0000001040)=""/236, 0xec}, {&(0x7f0000001140)=""/30, 0x1e}], 0x5, &(0x7f0000001200)=""/4096, 0x1000}, 0xf}, {{&(0x7f0000002200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002280), 0x0, &(0x7f00000022c0)=""/51, 0x33}, 0xc}, {{&(0x7f0000002300)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002380)=""/44, 0x2c}], 0x1, &(0x7f0000002400)=""/167, 0xa7}, 0xffff8757}, {{&(0x7f00000024c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002540)=""/152, 0x98}, {&(0x7f0000002600)=""/201, 0xc9}, {&(0x7f0000002700)=""/20, 0x14}], 0x3, &(0x7f0000002780)=""/44, 0x2c}, 0x3}], 0x5, 0x11041, &(0x7f0000002940)={r3, r4+60000000}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = syz_open_dev$sg(&(0x7f0000000200), 0x7fffffffffffffff, 0x400000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8}) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x6, 0x0, 0x7, 0xc5, 0x0, r8}) 1.091056548s ago: executing program 3 (id=6741): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x2, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0xe758, 0xfffffffe, 0x4, 0x0, 0x81, 0x0, 0x3, 0x200, 0xfffffffe, 0x0, 0x0, 0x1, 0xfffffffd], [0x3, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x400, 0x0, 0x80000000, 0x10000, 0x40000, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0xfffffffa, 0x81, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x6], [0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff, 0x4003, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd, 0x7fffffff, 0x80, 0xf, 0x0, 0x0, 0x1000, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x5, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x10, 0x5, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x8004, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r2, &(0x7f0000000f40)=[{&(0x7f0000000800)=""/147, 0x93}], 0x1, 0x3, 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000500)={{0x8, 0x4, 0x7, 0x5, 0x5}, [{0x5, 0x9, 0x1, 0x80}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.090623541s ago: executing program 1 (id=6742): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r2, 0x701, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x6, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 907.869649ms ago: executing program 1 (id=6743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x10000000) timer_create(0x8, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000) 906.806972ms ago: executing program 3 (id=6744): r0 = syz_io_uring_setup(0x6761, &(0x7f0000000000)={0x0, 0x4fad, 0x4, 0x0, 0x1d2}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='M\x00', 0x303000, &(0x7f0000000180)={@_ha_fsid={[0x7fff, 0x9]}, {0x4, 0x2, 0x0, 0x7}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x400}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r1, 0x1) r2 = io_uring_setup(0x7834, &(0x7f00000002c0)={0x0, 0xa77f, 0x4, 0x3, 0x73, 0x0, r0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsetxattr$system_posix_acl(r2, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000106c0)={{}, {0x1, 0x6}, [{0x2, 0x4, r3}, {0x2, 0x5, r5}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x3, r6}], {0x4, 0x3}, [{0x8, 0x7, r8}, {0x8, 0x6, r10}], {}, {0x20, 0x4}}, 0x54, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000010800)={&(0x7f0000010740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000107c0)={&(0x7f0000010780)={0x10, 0x3f2, 0x4, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20048481}, 0x20000000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000010840)) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000109c0), 0xc8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010a80)={0x13, 0x1, &(0x7f0000010880)=@raw=[@call={0x85, 0x0, 0x0, 0x76}], &(0x7f00000108c0)='syzkaller\x00', 0xaa, 0x27, &(0x7f0000010900)=""/39, 0x41000, 0x8, '\x00', r4, @fallback=0x2, r7, 0x8, &(0x7f0000010940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000010980)={0x5, 0xf, 0x5, 0x7fff}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000010a00)=[r9, r11, r9], &(0x7f0000010a40)=[{0x0, 0x4, 0xb, 0xc}], 0x10, 0x1}, 0x94) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000010b40), 0x0, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000010bc0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000010d00)={&(0x7f0000010b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000010cc0)={&(0x7f0000010c00)={0x88, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x20004084) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000010d40)={0x1, 0x1}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010dc0), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000010e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000010ec0)={&(0x7f0000010d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000010e80)={&(0x7f0000010e40)={0x28, r14, 0x11, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x8000, 0x1f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000070) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000010f40), r7) sendmsg$IPVS_CMD_GET_DEST(r16, &(0x7f00000110c0)={&(0x7f0000010f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000011080)={&(0x7f0000010f80)={0xe8, r17, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xba5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x207}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x840}, 0xc8) sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000011340)={&(0x7f0000011100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000011300)={&(0x7f0000011140)={0x198, r14, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xb9, 0xac, "8d8f09cf9e28208dd249c041b20bccbe4bfbe1e6bda6f669e5d2f916e5cd13a4e1ea9f0bbcb8ccbd844f4c92d2714d6cdd09b11e837d4df8dde9a90dde9df41358e64a3cdce5a6199f0066091e1612c1ce162c0696e806935622ea096946599837de86844aec8c8ce526d9b66d5659be5c440ce32dae7e541c55e8c16c604295b8fe65e467637c8b33f99fba391ac5c733f756c4e17eec981f362402b072f0ff56f5d77505eb6ce168c07b25021d49106cf003b896"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xe7f7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7b5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x96, 0xbe, "49ff40fe80b5c26c38abafb04302ed5680ae94b424df7c31c3dd874b8457a5104a5981af649903757e32be3c5fda41d44bc130aabdc2a7806ad9fd6e5b5eed8737b83f55d3ae4be0fcb6a5121f24f30fc8b7678c51ed0177acf9ce3e7c2f484a60c453e12fa7d8ad41dbbb87f4ecb72c87e0a7ad06c3ee23beafcf159dfa9b300cdd1d7483829a5a964f26c0684cb1b4870e"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000800}, 0x810) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000114c0)={&(0x7f0000011380)={0x10, 0x0, 0x0, 0xc01a000}, 0xc, &(0x7f0000011480)={&(0x7f00000113c0)={0x98, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10d1}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x8805}, 0x0) r18 = ioctl$NS_GET_PARENT(r12, 0xb702, 0x0) flistxattr(r18, &(0x7f0000011500)=""/102, 0x66) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000011640)={&(0x7f0000011580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000011600)={&(0x7f00000115c0)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000011800)={&(0x7f0000011680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000117c0)={&(0x7f00000116c0)={0xd0, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 811.018432ms ago: executing program 3 (id=6745): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x124080, &(0x7f0000000000)="ee4a664fab5df06ad2afbb3af0f748fb4b2823d1b5c6dd95256b375e1c52d8613454eeb5bd5869b5734cd27ad265129686c7b9cff18847a4923bf9681c88ce", 0x3f, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180)="2f2cb253e2517b7af79ca92f73c609508c93b31d696c0362a7dbb9d7b9b95783ec9bc77add61acff5c0e77b95c0460b8a0895eae7e85278bd37eaf") prlimit64(r0, 0x1, &(0x7f00000001c0)={0x4, 0xefa}, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket(0x2a, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) 810.773615ms ago: executing program 2 (id=6746): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x109000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0x2020) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r0, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r0}]) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000000c0)) 539.797215ms ago: executing program 2 (id=6747): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0xa1}}], 0x30}}], 0x1, 0x20000044) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 430.861883ms ago: executing program 2 (id=6748): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r3, 0x1}) close(0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0xa, 0xfc, 0x0, 0x1d, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x1a11e98825f24bfc, 0x3, 0x4, 0x6, 0x6}, @sadb_address={0x5, 0xe, 0xff, 0x80, 0x0, @in6={0xa, 0x4e22, 0x6, @private2, 0x7}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bb6, 0x200, {0x6, 0x32, 0xaa, 0x2d, 0x0, 0xfffff000, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@dev={0xac, 0x14, 0x14, 0x1c}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x400, @remote, 0x1}, @in6={0xa, 0x4e22, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}}, @sadb_x_sa2={0x2, 0x13, 0xde, 0x0, 0x0, 0x70bd25, 0x3507}]}, 0xe8}}, 0x44881) 260.840775ms ago: executing program 2 (id=6749): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x68040200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000500)={'nat\x00', 0x0, [0x80067, 0x8, 0x60000000, 0x1003, 0x9]}, &(0x7f0000000280)=0x54) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 80.418992ms ago: executing program 2 (id=6750): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0xa1}}], 0x30}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x548d2552, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385abef0c75eddf569a9ea707af3be", 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="65572adf25040000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000001ac0)={0x0, 0x6, 0x0, 0x2}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, 0x0, 0x20000014) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, 0x0, 0x40001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000700)={'veth1_to_team\x00', &(0x7f0000000600)=@ethtool_cmd={0x31, 0x4, 0x41, 0xffff, 0x3, 0x9, 0x9, 0x2, 0x47, 0x6, 0x1ff, 0x8001, 0xfffb, 0x6, 0x0, 0x403, [0xd, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000008000000061145c00001b0000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sock_ops}, 0x94) r6 = accept4(r0, 0x0, 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 0s ago: executing program 2 (id=6751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f00000002c0)='E', 0x1, 0x24044010, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): ][T20355] Tainted: [L]=SOFTLOCKUP [ 457.208439][T20355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.208450][T20355] Call Trace: [ 457.208457][T20355] [ 457.208464][T20355] dump_stack_lvl+0x100/0x190 [ 457.208602][T20355] should_fail_ex.cold+0x5/0xa [ 457.208650][T20355] should_failslab+0xc2/0x120 [ 457.208693][T20355] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 457.208718][T20355] ? do_getname_kernel+0x5d/0x250 [ 457.208742][T20355] ? kfree+0x223/0x6c0 [ 457.208768][T20355] do_getname_kernel+0x5d/0x250 [ 457.208795][T20355] kern_path+0x1f/0x50 [ 457.208815][T20355] tomoyo_mount_acl+0x685/0x8b0 [ 457.208862][T20355] ? is_bpf_text_address+0x8a/0x1a0 [ 457.208886][T20355] ? bpf_ksym_find+0x128/0x1c0 [ 457.208910][T20355] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.208949][T20355] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 457.208970][T20355] ? kernel_text_address+0x8d/0x100 [ 457.208993][T20355] ? unwind_get_return_address+0x59/0xa0 [ 457.209041][T20355] ? tomoyo_domain+0xb2/0x150 [ 457.209056][T20355] ? tomoyo_profile+0x47/0x60 [ 457.209075][T20355] tomoyo_mount_permission+0x214/0x460 [ 457.209097][T20355] ? tomoyo_mount_permission+0x1f6/0x460 [ 457.209120][T20355] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 457.209156][T20355] security_sb_mount+0xdd/0x270 [ 457.209179][T20355] path_mount+0x158/0x23d0 [ 457.209207][T20355] ? __pfx_path_mount+0x10/0x10 [ 457.209229][T20355] ? lockdep_hardirqs_on+0x78/0x100 [ 457.209343][T20355] ? putname+0xb1/0x110 [ 457.209363][T20355] ? kmem_cache_free+0x127/0x6c0 [ 457.209394][T20355] ? __x64_sys_mount+0x293/0x310 [ 457.209416][T20355] __x64_sys_mount+0x293/0x310 [ 457.209441][T20355] ? __pfx___x64_sys_mount+0x10/0x10 [ 457.209468][T20355] ? rcu_is_watching+0x12/0xc0 [ 457.209495][T20355] do_syscall_64+0x10b/0x860 [ 457.209518][T20355] ? clear_bhb_loop+0x40/0x90 [ 457.209538][T20355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.209555][T20355] RIP: 0033:0x7fdd43f9ce59 [ 457.209570][T20355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.209587][T20355] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 457.209626][T20355] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 457.209637][T20355] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 457.209647][T20355] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.209657][T20355] R10: 00000000008b7840 R11: 0000000000000246 R12: 0000000000000001 [ 457.209665][T20355] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 457.209688][T20355] [ 458.245693][ T40] audit: type=1400 audit(458.173:811): avc: denied { setattr } for pid=20380 comm="syz.1.6172" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 458.360358][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 458.510939][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 458.522016][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 458.526984][ T34] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 458.531374][ T34] usb 9-1: can't read configurations, error -71 [ 458.554321][ T40] audit: type=1326 audit(458.483:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20386 comm="syz.1.6174" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c27f9ce59 code=0x0 [ 458.614473][T20389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6174'. [ 458.618892][T20389] binder: BINDER_SET_CONTEXT_MGR already set [ 458.621366][T20389] binder: 20386:20389 ioctl 4018620d 200000004a80 returned -16 [ 459.120890][T20397] FAULT_INJECTION: forcing a failure. [ 459.120890][T20397] name failslab, interval 1, probability 0, space 0, times 0 [ 459.124770][T20397] CPU: 2 UID: 0 PID: 20397 Comm: syz.4.6179 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.124788][T20397] Tainted: [L]=SOFTLOCKUP [ 459.124792][T20397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 459.124798][T20397] Call Trace: [ 459.124803][T20397] [ 459.124808][T20397] dump_stack_lvl+0x100/0x190 [ 459.124824][T20397] should_fail_ex.cold+0x5/0xa [ 459.124840][T20397] ? copy_splice_read+0x1a3/0xb90 [ 459.124855][T20397] should_failslab+0xc2/0x120 [ 459.124868][T20397] __kmalloc_noprof+0xe0/0x850 [ 459.124887][T20397] copy_splice_read+0x1a3/0xb90 [ 459.124905][T20397] ? __pfx_copy_splice_read+0x10/0x10 [ 459.124924][T20397] ? lockdep_init_map_type+0x5c/0x250 [ 459.124940][T20397] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 459.124954][T20397] ? __pfx_copy_splice_read+0x10/0x10 [ 459.124968][T20397] do_splice_read+0x285/0x370 [ 459.124984][T20397] splice_direct_to_actor+0x2a1/0xa30 [ 459.125000][T20397] ? __pfx_direct_splice_actor+0x10/0x10 [ 459.125017][T20397] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 459.125032][T20397] ? __pfx___file_has_perm+0x10/0x10 [ 459.125050][T20397] do_splice_direct+0x174/0x240 [ 459.125067][T20397] ? __pfx_do_splice_direct+0x10/0x10 [ 459.125089][T20397] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 459.125109][T20397] ? bpf_lsm_file_permission+0x9/0x10 [ 459.125124][T20397] ? security_file_permission+0x76/0x210 [ 459.125151][T20397] ? rw_verify_area+0xce/0x6d0 [ 459.125170][T20397] do_sendfile+0xadc/0xe20 [ 459.125195][T20397] ? __pfx_do_sendfile+0x10/0x10 [ 459.125212][T20397] ? __fget_files+0x21f/0x3d0 [ 459.125240][T20397] __x64_sys_sendfile64+0x1d8/0x220 [ 459.125264][T20397] ? ksys_write+0x1ac/0x250 [ 459.125281][T20397] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 459.125305][T20397] ? rcu_is_watching+0x12/0xc0 [ 459.125334][T20397] do_syscall_64+0x10b/0x860 [ 459.125361][T20397] ? clear_bhb_loop+0x40/0x90 [ 459.125381][T20397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.125395][T20397] RIP: 0033:0x7fdd43f9ce59 [ 459.125411][T20397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.125432][T20397] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 459.125448][T20397] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 459.125459][T20397] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 459.125478][T20397] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.125488][T20397] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 459.125498][T20397] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 459.125521][T20397] [ 459.502166][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6182'. [ 459.662862][T20411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6185'. [ 460.520929][T20426] program syz.3.6191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.558288][T20428] netlink: 556 bytes leftover after parsing attributes in process `syz.3.6192'. [ 460.658676][ T5819] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 460.666830][T20431] nbd: couldn't find a device at index -2146435068 [ 460.670737][ T40] audit: type=1400 audit(460.613:813): avc: denied { write } for pid=20429 comm="syz.3.6193" path="socket:[82685]" dev="sockfs" ino=82685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 460.684749][T20431] befs: (nbd3): unable to read superblock [ 460.820492][ T5819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.823982][ T5819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.829288][ T5819] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.838480][ T5819] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.843539][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.852544][ T5819] usb 9-1: config 0 descriptor?? [ 461.259480][ T5819] hid_parser_main: 4086 callbacks suppressed [ 461.259516][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.267948][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.270634][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.272998][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.275327][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.277662][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.280677][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.283030][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.285263][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.287589][ T5819] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 461.299554][ T5819] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 461.605599][ T24] usb 9-1: USB disconnect, device number 9 [ 461.727093][T20444] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 461.765602][ T40] audit: type=1400 audit(461.693:814): avc: denied { getopt } for pid=20451 comm="syz.2.6199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 461.819317][T20444] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 461.821306][T20444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.824344][T20444] vhci_hcd vhci_hcd.0: Device attached [ 461.835492][T20453] vhci_hcd: unknown pdu 1 [ 461.840510][T17604] vhci_hcd vhci_hcd.1: stop threads [ 461.842195][T17604] vhci_hcd vhci_hcd.1: release socket [ 461.844235][T17604] vhci_hcd vhci_hcd.1: disconnect device [ 461.860697][T20459] netlink: 556 bytes leftover after parsing attributes in process `syz.3.6201'. [ 461.938348][T20462] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6202'. [ 462.223775][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6209'. [ 462.241689][T20478] vlan2: entered promiscuous mode [ 462.243957][T20478] hsr0: entered promiscuous mode [ 462.245759][T20478] vlan2: entered allmulticast mode [ 462.247451][T20478] hsr0: entered allmulticast mode [ 462.250148][T20478] hsr_slave_0: entered allmulticast mode [ 462.252902][T20478] hsr_slave_1: entered allmulticast mode [ 462.282368][T20482] netlink: 556 bytes leftover after parsing attributes in process `syz.3.6210'. [ 462.309719][T20484] FAULT_INJECTION: forcing a failure. [ 462.309719][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 462.313939][T20484] CPU: 3 UID: 0 PID: 20484 Comm: syz.3.6211 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.313957][T20484] Tainted: [L]=SOFTLOCKUP [ 462.313962][T20484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.313968][T20484] Call Trace: [ 462.313974][T20484] [ 462.313978][T20484] dump_stack_lvl+0x100/0x190 [ 462.314004][T20484] should_fail_ex.cold+0x5/0xa [ 462.314020][T20484] should_failslab+0xc2/0x120 [ 462.314032][T20484] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 462.314049][T20484] ? skb_clone+0x190/0x400 [ 462.314094][T20484] skb_clone+0x190/0x400 [ 462.314106][T20484] raw_local_deliver+0x84c/0xd40 [ 462.314123][T20484] ? __pfx_raw_local_deliver+0x10/0x10 [ 462.314135][T20484] ? lock_acquire+0x1b1/0x370 [ 462.314152][T20484] ip_protocol_deliver_rcu+0xeb/0x4d0 [ 462.314169][T20484] ip_local_deliver_finish+0x3f2/0x6e0 [ 462.314185][T20484] ip_local_deliver+0x19a/0x1f0 [ 462.314198][T20484] ? __pfx_ip_local_deliver+0x10/0x10 [ 462.314212][T20484] ip_rcv+0x33a/0x3c0 [ 462.314225][T20484] ? __pfx_ip_rcv+0x10/0x10 [ 462.314238][T20484] __netif_receive_skb_one_core+0x197/0x1e0 [ 462.314256][T20484] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 462.314274][T20484] ? lock_acquire+0x1b1/0x370 [ 462.314290][T20484] __netif_receive_skb+0x1f/0x120 [ 462.314312][T20484] netif_receive_skb+0x13b/0x7f0 [ 462.314327][T20484] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 462.314387][T20484] ? __pfx_netif_receive_skb+0x10/0x10 [ 462.314409][T20484] tun_rx_batched.isra.0+0x3f6/0x750 [ 462.314425][T20484] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 462.314444][T20484] ? rcu_is_watching+0x12/0xc0 [ 462.314460][T20484] ? tun_get_user+0x1cc8/0x3c20 [ 462.314477][T20484] tun_get_user+0x1e31/0x3c20 [ 462.314498][T20484] ? __pfx_tun_get_user+0x10/0x10 [ 462.314515][T20484] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 462.314574][T20484] ? find_held_lock+0x2b/0x80 [ 462.314585][T20484] ? tun_get+0x191/0x370 [ 462.314598][T20484] ? tun_get+0x191/0x370 [ 462.314615][T20484] tun_chr_write_iter+0xdc/0x200 [ 462.314633][T20484] vfs_write+0x6ac/0x1070 [ 462.314646][T20484] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 462.314663][T20484] ? __pfx_vfs_write+0x10/0x10 [ 462.314674][T20484] ? find_held_lock+0x2b/0x80 [ 462.314692][T20484] ksys_write+0x12a/0x250 [ 462.314704][T20484] ? __pfx_ksys_write+0x10/0x10 [ 462.314717][T20484] ? rcu_is_watching+0x12/0xc0 [ 462.314735][T20484] do_syscall_64+0x10b/0x860 [ 462.314784][T20484] ? clear_bhb_loop+0x40/0x90 [ 462.314798][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.314810][T20484] RIP: 0033:0x7f7f9bb5d68e [ 462.314820][T20484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 462.314831][T20484] RSP: 002b:00007f7f9cad0fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.314867][T20484] RAX: ffffffffffffffda RBX: 00007f7f9cad16c0 RCX: 00007f7f9bb5d68e [ 462.314874][T20484] RDX: 0000000000000086 RSI: 0000200000000000 RDI: 00000000000000c8 [ 462.314881][T20484] RBP: 00007f7f9cad1090 R08: 0000000000000000 R09: 0000000000000000 [ 462.314887][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.314893][T20484] R13: 00007f7f9be16038 R14: 00007f7f9be15fa0 R15: 00007fffe6b77bd8 [ 462.314907][T20484] [ 462.430541][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 462.456097][T20486] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6212'. [ 462.521623][T20493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6213'. [ 462.591122][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 462.609089][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 462.613581][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 462.616802][ T24] usb 9-1: can't read configurations, error -71 [ 463.501865][T20520] FAULT_INJECTION: forcing a failure. [ 463.501865][T20520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.507364][T20520] CPU: 1 UID: 0 PID: 20520 Comm: syz.1.6226 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.507396][T20520] Tainted: [L]=SOFTLOCKUP [ 463.507402][T20520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 463.507413][T20520] Call Trace: [ 463.507421][T20520] [ 463.507429][T20520] dump_stack_lvl+0x100/0x190 [ 463.507461][T20520] should_fail_ex.cold+0x5/0xa [ 463.507487][T20520] _copy_to_user+0x32/0xd0 [ 463.507551][T20520] simple_read_from_buffer+0xcb/0x170 [ 463.507576][T20520] proc_fail_nth_read+0x1af/0x230 [ 463.507625][T20520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.507649][T20520] ? rw_verify_area+0xce/0x6d0 [ 463.507668][T20520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.507688][T20520] vfs_read+0x1e4/0xb30 [ 463.507712][T20520] ? __pfx_vfs_read+0x10/0x10 [ 463.507732][T20520] ? __fget_files+0x215/0x3d0 [ 463.507761][T20520] ? __fget_files+0x21f/0x3d0 [ 463.507792][T20520] ksys_read+0x12a/0x250 [ 463.507819][T20520] ? __pfx_ksys_read+0x10/0x10 [ 463.507842][T20520] ? rcu_is_watching+0x12/0xc0 [ 463.507874][T20520] do_syscall_64+0x10b/0x860 [ 463.507901][T20520] ? clear_bhb_loop+0x40/0x90 [ 463.507925][T20520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.507943][T20520] RIP: 0033:0x7f9c27f5d68e [ 463.507960][T20520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.507978][T20520] RSP: 002b:00007f9c261f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.507997][T20520] RAX: ffffffffffffffda RBX: 00007f9c261f66c0 RCX: 00007f9c27f5d68e [ 463.508009][T20520] RDX: 000000000000000f RSI: 00007f9c261f60a0 RDI: 0000000000000005 [ 463.508021][T20520] RBP: 00007f9c261f6090 R08: 0000000000000000 R09: 0000000000000000 [ 463.508033][T20520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.508043][T20520] R13: 00007f9c28216038 R14: 00007f9c28215fa0 R15: 00007ffd740399a8 [ 463.508070][T20520] [ 463.788693][ T5747] Bluetooth: hci0: command 0x0c20 tx timeout [ 463.898751][ T5885] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 464.050678][ T5885] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 464.057850][ T5885] usb 6-1: config 1 has no interface number 0 [ 464.062877][ T5885] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 464.071416][ T5885] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 464.091100][ T5885] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 464.094920][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.098135][ T5885] usb 6-1: Product: syz [ 464.101120][ T5885] usb 6-1: Manufacturer: syz [ 464.104633][T20536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6232'. [ 464.105268][ T5885] usb 6-1: SerialNumber: syz [ 464.123620][T20523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.134606][T20523] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.148677][ T40] audit: type=1400 audit(464.083:815): avc: denied { setopt } for pid=20538 comm="syz.4.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 464.157575][ T40] audit: type=1400 audit(464.083:816): avc: denied { getopt } for pid=20538 comm="syz.4.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 464.158790][ T5885] usb 6-1: Error in usbnet_get_endpoints (-22) [ 464.230101][ T40] audit: type=1400 audit(464.163:817): avc: denied { accept } for pid=20542 comm="syz.2.6236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.249671][T20545] binder: 20544:20545 ioctl c0306201 200000000780 returned -14 [ 464.375735][T20548] kvm: emulating exchange as write [ 464.558618][ T844] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 464.704089][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.709909][ T844] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 464.712598][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.715047][ T844] usb 9-1: config 0 has no interface number 0 [ 464.717056][ T844] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.721129][ T844] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 464.722338][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.724457][ T844] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 464.731247][ T844] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 464.731658][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.734673][ T844] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 464.742149][ T844] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.746117][ T844] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 464.749525][ T844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.753871][ T844] usb 9-1: config 0 descriptor?? [ 464.756054][T20550] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 464.758290][T20550] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 464.763019][ T844] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 465.771599][T20576] usb usb7: usbfs: process 20576 (syz.2.6245) did not claim interface 0 before use [ 466.730838][ T1344] usb 6-1: USB disconnect, device number 99 [ 466.901714][T20595] FAULT_INJECTION: forcing a failure. [ 466.901714][T20595] name failslab, interval 1, probability 0, space 0, times 0 [ 466.906828][T20595] CPU: 0 UID: 0 PID: 20595 Comm: syz.2.6253 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.906853][T20595] Tainted: [L]=SOFTLOCKUP [ 466.906858][T20595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.906868][T20595] Call Trace: [ 466.906875][T20595] [ 466.906882][T20595] dump_stack_lvl+0x100/0x190 [ 466.906907][T20595] should_fail_ex.cold+0x5/0xa [ 466.906930][T20595] should_failslab+0xc2/0x120 [ 466.906949][T20595] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 466.906973][T20595] ? security_inode_alloc+0x3b/0x2c0 [ 466.907022][T20595] ? lockdep_init_map_type+0x5c/0x250 [ 466.907048][T20595] security_inode_alloc+0x3b/0x2c0 [ 466.907069][T20595] inode_init_always_gfp+0xcc0/0x1000 [ 466.907096][T20595] alloc_inode+0x8e/0x250 [ 466.907113][T20595] sock_alloc+0x44/0x280 [ 466.907135][T20595] do_accept+0xf9/0x530 [ 466.907160][T20595] ? do_raw_spin_lock+0x128/0x260 [ 466.907183][T20595] ? __pfx_do_accept+0x10/0x10 [ 466.907221][T20595] __sys_accept4+0x108/0x200 [ 466.907245][T20595] ? __pfx___sys_accept4+0x10/0x10 [ 466.907270][T20595] ? __pfx_ksys_write+0x10/0x10 [ 466.907294][T20595] __x64_sys_accept4+0x96/0x100 [ 466.907318][T20595] ? lockdep_hardirqs_on+0x78/0x100 [ 466.907342][T20595] do_syscall_64+0x10b/0x860 [ 466.907365][T20595] ? clear_bhb_loop+0x40/0x90 [ 466.907384][T20595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.907402][T20595] RIP: 0033:0x7f9c3cb9ce59 [ 466.907417][T20595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.907433][T20595] RSP: 002b:00007f9c3d9dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 466.907450][T20595] RAX: ffffffffffffffda RBX: 00007f9c3ce15fa0 RCX: 00007f9c3cb9ce59 [ 466.907462][T20595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 466.907471][T20595] RBP: 00007f9c3d9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 466.907481][T20595] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 466.907491][T20595] R13: 00007f9c3ce16038 R14: 00007f9c3ce15fa0 R15: 00007ffc02f8ce48 [ 466.907514][T20595] [ 466.936402][ T40] audit: type=1400 audit(466.863:818): avc: denied { getopt } for pid=20596 comm="syz.1.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 466.988682][ T40] audit: type=1400 audit(466.893:819): avc: denied { create } for pid=20596 comm="syz.1.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 467.109268][T20606] Bluetooth: hci4: Frame reassembly failed (-84) [ 467.121482][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 467.139599][T20608] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6259'. [ 467.171943][T20609] futex_wake_op: syz.2.6255 tries to shift op by -1; fix this program [ 467.331816][ T5819] usb 9-1: USB disconnect, device number 12 [ 467.340919][ T5819] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 467.615970][T20645] FAULT_INJECTION: forcing a failure. [ 467.615970][T20645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.621639][T20645] CPU: 1 UID: 0 PID: 20645 Comm: syz.3.6275 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.621656][T20645] Tainted: [L]=SOFTLOCKUP [ 467.621661][T20645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 467.621667][T20645] Call Trace: [ 467.621672][T20645] [ 467.621676][T20645] dump_stack_lvl+0x100/0x190 [ 467.621695][T20645] should_fail_ex.cold+0x5/0xa [ 467.621712][T20645] _copy_from_user+0x2e/0xd0 [ 467.621730][T20645] kstrtouint_from_user+0xd6/0x1d0 [ 467.621743][T20645] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 467.621757][T20645] ? __lock_acquire+0x4a5/0x2630 [ 467.621775][T20645] ? lock_acquire+0x1b1/0x370 [ 467.621791][T20645] proc_fail_nth_write+0x83/0x220 [ 467.621804][T20645] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 467.621820][T20645] vfs_write+0x2aa/0x1070 [ 467.621833][T20645] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 467.621846][T20645] ? __pfx_vfs_write+0x10/0x10 [ 467.621858][T20645] ? __fget_files+0x215/0x3d0 [ 467.621875][T20645] ? __fget_files+0x21f/0x3d0 [ 467.621893][T20645] ksys_write+0x12a/0x250 [ 467.621905][T20645] ? __pfx_ksys_write+0x10/0x10 [ 467.621918][T20645] ? rcu_is_watching+0x12/0xc0 [ 467.621936][T20645] do_syscall_64+0x10b/0x860 [ 467.621953][T20645] ? clear_bhb_loop+0x40/0x90 [ 467.621966][T20645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.621977][T20645] RIP: 0033:0x7f7f9bb5d68e [ 467.621987][T20645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.621997][T20645] RSP: 002b:00007f7f9cad0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.622008][T20645] RAX: ffffffffffffffda RBX: 00007f7f9cad16c0 RCX: 00007f7f9bb5d68e [ 467.622015][T20645] RDX: 0000000000000001 RSI: 00007f7f9cad10a0 RDI: 0000000000000004 [ 467.622022][T20645] RBP: 00007f7f9cad1090 R08: 0000000000000000 R09: 0000000000000000 [ 467.622028][T20645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.622034][T20645] R13: 00007f7f9be16038 R14: 00007f7f9be15fa0 R15: 00007fffe6b77bd8 [ 467.622048][T20645] [ 467.750008][ T5819] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 467.898633][ T5819] usb 9-1: Using ep0 maxpacket: 16 [ 467.905195][ T5819] usb 9-1: unable to get BOS descriptor or descriptor too short [ 467.909782][ T5819] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 467.911724][ T40] audit: type=1400 audit(467.843:820): avc: denied { unmount } for pid=16993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 467.912810][ T5819] usb 9-1: can't read configurations, error -71 [ 467.944039][T20659] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 469.118563][ T5819] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 469.129961][T20685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.148560][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 469.148606][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 469.240183][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6293'. [ 469.268524][ T5819] usb 9-1: Using ep0 maxpacket: 16 [ 469.276331][ T5819] usb 9-1: unable to get BOS descriptor or descriptor too short [ 469.279980][ T5819] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 469.282456][ T5819] usb 9-1: can't read configurations, error -71 [ 469.670533][T20694] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6296'. [ 469.688639][ T24] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 469.848660][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 469.855287][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 469.864623][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 469.867865][ T24] usb 6-1: can't read configurations, error -71 [ 469.884639][T20704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.032069][T20709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.039664][T20708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.428655][T20713] comedi comedi3: board detection failed [ 470.581332][T20717] binder: 20716:20717 ioctl 1279 200000000000 returned -22 [ 470.912711][ T40] audit: type=1400 audit(470.843:821): avc: denied { watch watch_reads } for pid=20725 comm="syz.3.6311" path="/" dev="ramfs" ino=85332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 472.369149][T20745] binder: 20744:20745 ioctl c0306201 2000000006c0 returned -14 [ 472.534678][T20751] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 472.644271][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.650289][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.655850][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.661397][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.664247][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.726496][T20724] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 472.728620][T20724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.747326][T20724] vhci_hcd vhci_hcd.0: Device attached [ 472.879885][T20758] vhci_hcd: connection closed [ 472.885849][T17618] vhci_hcd vhci_hcd.4: stop threads [ 472.913063][T17618] vhci_hcd vhci_hcd.4: release socket [ 472.915139][T17618] vhci_hcd vhci_hcd.4: disconnect device [ 472.918723][ T5819] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 473.066700][T17618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.074353][T17618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.240636][T20754] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.243879][T20754] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.247841][T20754] bridge_slave_0: entered allmulticast mode [ 473.252635][T20754] bridge_slave_0: entered promiscuous mode [ 473.257203][T20754] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.260712][T20754] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.264187][T20754] bridge_slave_1: entered allmulticast mode [ 473.268237][T20754] bridge_slave_1: entered promiscuous mode [ 473.289510][T17618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.293788][T17618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.331326][T20754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.339497][T20754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.366341][T20754] team0: Port device team_slave_0 added [ 473.371660][T20754] team0: Port device team_slave_1 added [ 473.394387][T20754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.397234][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.407735][T20754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.417011][T20754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.421733][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.431911][T20754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.461442][T20754] hsr_slave_0: entered promiscuous mode [ 473.463778][T20754] hsr_slave_1: entered promiscuous mode [ 473.465878][T20754] debugfs: 'hsr0' already exists in 'hsr' [ 473.467669][T20754] Cannot create hsr debugfs directory [ 473.522336][T20786] FAULT_INJECTION: forcing a failure. [ 473.522336][T20786] name failslab, interval 1, probability 0, space 0, times 0 [ 473.526426][T20786] CPU: 0 UID: 0 PID: 20786 Comm: syz.2.6328 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.526445][T20786] Tainted: [L]=SOFTLOCKUP [ 473.526449][T20786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.526456][T20786] Call Trace: [ 473.526460][T20786] [ 473.526465][T20786] dump_stack_lvl+0x100/0x190 [ 473.526483][T20786] should_fail_ex.cold+0x5/0xa [ 473.526498][T20786] ? tomoyo_realpath_from_path+0xb6/0x690 [ 473.526516][T20786] should_failslab+0xc2/0x120 [ 473.526528][T20786] __kmalloc_noprof+0xe0/0x850 [ 473.526545][T20786] ? kfree+0x1dd/0x6c0 [ 473.526561][T20786] tomoyo_realpath_from_path+0xb6/0x690 [ 473.526603][T20786] ? putname+0xb6/0x110 [ 473.526623][T20786] tomoyo_mount_acl+0x6c7/0x8b0 [ 473.526637][T20786] ? is_bpf_text_address+0x8a/0x1a0 [ 473.526652][T20786] ? bpf_ksym_find+0x128/0x1c0 [ 473.526668][T20786] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.526682][T20786] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 473.526695][T20786] ? kernel_text_address+0x8d/0x100 [ 473.526715][T20786] ? unwind_get_return_address+0x59/0xa0 [ 473.526744][T20786] ? tomoyo_domain+0xb2/0x150 [ 473.526754][T20786] ? tomoyo_profile+0x47/0x60 [ 473.526766][T20786] tomoyo_mount_permission+0x214/0x460 [ 473.526780][T20786] ? tomoyo_mount_permission+0x1f6/0x460 [ 473.526797][T20786] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 473.526819][T20786] security_sb_mount+0xdd/0x270 [ 473.526834][T20786] path_mount+0x158/0x23d0 [ 473.526853][T20786] ? __pfx_path_mount+0x10/0x10 [ 473.526868][T20786] ? lockdep_hardirqs_on+0x78/0x100 [ 473.526886][T20786] ? putname+0xb1/0x110 [ 473.526899][T20786] ? kmem_cache_free+0x127/0x6c0 [ 473.526919][T20786] ? __x64_sys_mount+0x293/0x310 [ 473.526934][T20786] __x64_sys_mount+0x293/0x310 [ 473.526950][T20786] ? __pfx___x64_sys_mount+0x10/0x10 [ 473.526968][T20786] ? rcu_is_watching+0x12/0xc0 [ 473.526986][T20786] do_syscall_64+0x10b/0x860 [ 473.527002][T20786] ? clear_bhb_loop+0x40/0x90 [ 473.527015][T20786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.527026][T20786] RIP: 0033:0x7f9c3cb9ce59 [ 473.527036][T20786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.527046][T20786] RSP: 002b:00007f9c3d9dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 473.527058][T20786] RAX: ffffffffffffffda RBX: 00007f9c3ce15fa0 RCX: 00007f9c3cb9ce59 [ 473.527065][T20786] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 473.527071][T20786] RBP: 00007f9c3d9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 473.527077][T20786] R10: 00000000008b7840 R11: 0000000000000246 R12: 0000000000000001 [ 473.527084][T20786] R13: 00007f9c3ce16038 R14: 00007f9c3ce15fa0 R15: 00007ffc02f8ce48 [ 473.527098][T20786] [ 473.527103][T20786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.649737][T17618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.653710][T17618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.691466][T20791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6330'. [ 473.784079][T17618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.787377][T17618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.855191][T20799] FAULT_INJECTION: forcing a failure. [ 473.855191][T20799] name failslab, interval 1, probability 0, space 0, times 0 [ 473.869660][T20799] CPU: 1 UID: 0 PID: 20799 Comm: syz.4.6332 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.869682][T20799] Tainted: [L]=SOFTLOCKUP [ 473.869693][T20799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 473.869700][T20799] Call Trace: [ 473.869704][T20799] [ 473.869709][T20799] dump_stack_lvl+0x100/0x190 [ 473.869728][T20799] should_fail_ex.cold+0x5/0xa [ 473.869746][T20799] should_failslab+0xc2/0x120 [ 473.869759][T20799] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 473.869777][T20799] ? skb_clone+0x190/0x400 [ 473.869807][T20799] skb_clone+0x190/0x400 [ 473.869821][T20799] netlink_deliver_tap+0xaed/0xcc0 [ 473.869841][T20799] netlink_unicast+0x6a5/0x850 [ 473.869861][T20799] ? __pfx_netlink_unicast+0x10/0x10 [ 473.869876][T20799] ? genl_rcv_msg+0x4be/0x800 [ 473.869890][T20799] netlink_ack+0x655/0xb80 [ 473.869911][T20799] netlink_rcv_skb+0x333/0x420 [ 473.869927][T20799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.869939][T20799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.869962][T20799] ? netlink_deliver_tap+0x1ae/0xcc0 [ 473.869980][T20799] genl_rcv+0x28/0x40 [ 473.869995][T20799] netlink_unicast+0x585/0x850 [ 473.870013][T20799] ? __pfx_netlink_unicast+0x10/0x10 [ 473.870032][T20799] netlink_sendmsg+0x8b0/0xda0 [ 473.870050][T20799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.870065][T20799] ? __might_fault+0xc0/0x140 [ 473.870086][T20799] ____sys_sendmsg+0x9e1/0xb70 [ 473.870100][T20799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.870117][T20799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.870138][T20799] ___sys_sendmsg+0x190/0x1e0 [ 473.870155][T20799] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.870189][T20799] __sys_sendmsg+0x170/0x220 [ 473.870203][T20799] ? __pfx___sys_sendmsg+0x10/0x10 [ 473.870221][T20799] ? rcu_is_watching+0x12/0xc0 [ 473.870240][T20799] do_syscall_64+0x10b/0x860 [ 473.870256][T20799] ? clear_bhb_loop+0x40/0x90 [ 473.870271][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.870282][T20799] RIP: 0033:0x7fdd43f9ce59 [ 473.870292][T20799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.870304][T20799] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.870315][T20799] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 473.870322][T20799] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 473.870331][T20799] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 473.870340][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.870349][T20799] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 473.870373][T20799] [ 474.438676][T17618] bridge_slave_1: left allmulticast mode [ 474.440582][T17618] bridge_slave_1: left promiscuous mode [ 474.442696][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.446618][T17618] bridge_slave_0: left allmulticast mode [ 474.448976][T17618] bridge_slave_0: left promiscuous mode [ 474.451165][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.568532][ T34] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 474.729371][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 474.738533][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 474.748170][T17618] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 474.749123][ T34] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 474.751012][ T5733] Bluetooth: hci4: command tx timeout [ 474.753994][ T34] usb 9-1: can't read configurations, error -71 [ 474.796986][T17618] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 474.799805][T17618] ip6gre1 (unregistering): left promiscuous mode [ 474.895341][T17618] bond2 (unregistering): (slave geneve2): Releasing active interface [ 474.897942][T17618] geneve2 (unregistering): left allmulticast mode [ 475.083412][T17618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.110431][T17618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.129575][T17618] bond0 (unregistering): Released all slaves [ 475.135331][T17618] bond1 (unregistering): Released all slaves [ 475.145228][T17618] bond2 (unregistering): Released all slaves [ 475.152712][T17618] bond3 (unregistering): Released all slaves [ 475.160007][T17618] bond4 (unregistering): Released all slaves [ 475.217467][ T40] audit: type=1400 audit(475.143:822): avc: denied { write } for pid=20812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.268023][ T40] audit: type=1400 audit(475.193:823): avc: denied { write } for pid=20819 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.275220][T20818] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 475.312029][T17618] tipc: Left network mode [ 475.315812][ T40] audit: type=1400 audit(475.243:824): avc: denied { relabelto } for pid=20817 comm="syz.2.6339" name="284" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 475.328592][ T40] audit: type=1400 audit(475.243:825): avc: denied { associate } for pid=20817 comm="syz.2.6339" name="284" dev="tmpfs" ino=1472 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 475.338390][ T40] audit: type=1400 audit(475.243:826): avc: denied { mounton } for pid=20817 comm="syz.2.6339" path="/284" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 475.380179][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 475.434539][T20830] binder: BINDER_SET_CONTEXT_MGR already set [ 475.436527][T20830] binder: 20829:20830 ioctl 4018620d 200000004a80 returned -16 [ 475.476342][ T40] audit: type=1400 audit(475.403:827): avc: denied { write } for pid=20831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.526945][ T40] audit: type=1400 audit(475.453:828): avc: denied { write } for pid=20837 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.557988][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 475.821404][ T40] audit: type=1400 audit(475.753:829): avc: denied { write } for pid=16993 comm="syz-executor" name="284" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 475.829374][ T40] audit: type=1400 audit(475.753:830): avc: denied { remove_name } for pid=16993 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 475.841545][T20848] FAULT_INJECTION: forcing a failure. [ 475.841545][T20848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.846444][T20848] CPU: 1 UID: 0 PID: 20848 Comm: syz.2.6342 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.846467][T20848] Tainted: [L]=SOFTLOCKUP [ 475.846472][T20848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.846478][T20848] Call Trace: [ 475.846484][T20848] [ 475.846489][T20848] dump_stack_lvl+0x100/0x190 [ 475.846506][T20848] should_fail_ex.cold+0x5/0xa [ 475.846519][T20848] ? prepare_alloc_pages+0x16d/0x5f0 [ 475.846534][T20848] should_fail_alloc_page+0xeb/0x140 [ 475.846573][T20848] prepare_alloc_pages+0x1f0/0x5f0 [ 475.846594][T20848] ? kernel_text_address+0x8d/0x100 [ 475.846621][T20848] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 475.846643][T20848] ? copy_splice_read+0x1a3/0xb90 [ 475.846658][T20848] ? stack_trace_save+0x8e/0xc0 [ 475.846669][T20848] ? __pfx_stack_trace_save+0x10/0x10 [ 475.846681][T20848] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 475.846698][T20848] ? inet_sendmsg+0xc0/0x140 [ 475.846710][T20848] ? copy_splice_read+0x1a3/0xb90 [ 475.846724][T20848] ? kasan_save_stack+0x3f/0x50 [ 475.846733][T20848] ? kasan_save_stack+0x30/0x50 [ 475.846742][T20848] ? kasan_save_track+0x14/0x30 [ 475.846752][T20848] ? __kasan_kmalloc+0xaa/0xb0 [ 475.846760][T20848] ? __kmalloc_noprof+0x301/0x850 [ 475.846776][T20848] ? copy_splice_read+0x1a3/0xb90 [ 475.846791][T20848] ? do_syscall_64+0x10b/0x860 [ 475.846807][T20848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.846825][T20848] alloc_pages_bulk_noprof+0x649/0x1360 [ 475.846847][T20848] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 475.846868][T20848] ? __kmalloc_noprof+0x320/0x850 [ 475.846886][T20848] copy_splice_read+0x1e1/0xb90 [ 475.846904][T20848] ? __pfx_copy_splice_read+0x10/0x10 [ 475.846923][T20848] ? lockdep_init_map_type+0x5c/0x250 [ 475.846939][T20848] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 475.846953][T20848] ? __pfx_copy_splice_read+0x10/0x10 [ 475.846968][T20848] do_splice_read+0x285/0x370 [ 475.846984][T20848] splice_direct_to_actor+0x2a1/0xa30 [ 475.847000][T20848] ? __pfx_direct_splice_actor+0x10/0x10 [ 475.847017][T20848] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 475.847032][T20848] ? __pfx___file_has_perm+0x10/0x10 [ 475.847050][T20848] do_splice_direct+0x174/0x240 [ 475.847065][T20848] ? __pfx_do_splice_direct+0x10/0x10 [ 475.847081][T20848] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 475.847096][T20848] ? bpf_lsm_file_permission+0x9/0x10 [ 475.847106][T20848] ? security_file_permission+0x76/0x210 [ 475.847125][T20848] ? rw_verify_area+0xce/0x6d0 [ 475.847137][T20848] do_sendfile+0xadc/0xe20 [ 475.847151][T20848] ? __pfx_do_sendfile+0x10/0x10 [ 475.847163][T20848] ? __fget_files+0x21f/0x3d0 [ 475.847180][T20848] __x64_sys_sendfile64+0x1d8/0x220 [ 475.847195][T20848] ? ksys_write+0x1ac/0x250 [ 475.847207][T20848] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 475.847223][T20848] ? rcu_is_watching+0x12/0xc0 [ 475.847241][T20848] do_syscall_64+0x10b/0x860 [ 475.847257][T20848] ? clear_bhb_loop+0x40/0x90 [ 475.847269][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.847280][T20848] RIP: 0033:0x7f9c3cb9ce59 [ 475.847292][T20848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.847302][T20848] RSP: 002b:00007f9c3d9dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 475.847314][T20848] RAX: ffffffffffffffda RBX: 00007f9c3ce15fa0 RCX: 00007f9c3cb9ce59 [ 475.847321][T20848] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 475.847327][T20848] RBP: 00007f9c3d9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 475.847333][T20848] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 475.847339][T20848] R13: 00007f9c3ce16038 R14: 00007f9c3ce15fa0 R15: 00007ffc02f8ce48 [ 475.847353][T20848] [ 476.022512][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 476.022531][ T40] audit: type=1400 audit(475.953:835): avc: denied { write } for pid=20849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.038757][ T34] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 476.070049][ T40] audit: type=1400 audit(476.003:836): avc: denied { write } for pid=20854 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.155814][ T40] audit: type=1400 audit(476.083:837): avc: denied { write } for pid=20858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.200655][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 476.206108][T17618] hsr_slave_0: left promiscuous mode [ 476.206216][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 476.212898][T17618] hsr_slave_1: left promiscuous mode [ 476.215126][ T34] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 476.218623][ T34] usb 9-1: can't read configurations, error -71 [ 476.218821][T17618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.228248][T17618] batadv0: mtu less than device minimum [ 476.229645][ T40] audit: type=1400 audit(476.153:838): avc: denied { write } for pid=20863 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.230937][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.240189][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.243887][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.247617][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.251875][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.255513][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.259297][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.263002][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.266648][T17618] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.277601][T17618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.284623][T17618] batman_adv: batadv0: Interface deactivated: dummy0 [ 476.288515][T17618] batman_adv: batadv0: Removing interface: dummy0 [ 476.294063][T17618] veth1_macvtap: left promiscuous mode [ 476.298591][T17618] veth0_macvtap: left promiscuous mode [ 476.300508][T17618] veth1_vlan: left promiscuous mode [ 476.304485][T17618] veth0_vlan: left promiscuous mode [ 476.367413][T17618] pim6reg (unregistering): left allmulticast mode [ 476.465261][T17618] team0 (unregistering): Port device team_slave_1 removed [ 476.473911][T17618] team0 (unregistering): Port device team_slave_0 removed [ 476.780772][ T40] audit: type=1400 audit(476.713:839): avc: denied { write } for pid=20877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.823666][ T40] audit: type=1400 audit(476.753:840): avc: denied { write } for pid=20884 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.828560][ T5733] Bluetooth: hci4: command tx timeout [ 476.934488][T20899] netlink: 972 bytes leftover after parsing attributes in process `syz.2.6355'. [ 477.060515][T20754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 477.065597][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.069821][T20754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 477.074369][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.077076][T20754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 477.082328][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.085222][T20754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.091409][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.157393][T20754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.172447][T20754] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.179865][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.182787][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.191769][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.194328][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.262471][T20926] FAULT_INJECTION: forcing a failure. [ 477.262471][T20926] name failslab, interval 1, probability 0, space 0, times 0 [ 477.267264][T20926] CPU: 2 UID: 0 PID: 20926 Comm: syz.4.6367 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.267292][T20926] Tainted: [L]=SOFTLOCKUP [ 477.267298][T20926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.267308][T20926] Call Trace: [ 477.267315][T20926] [ 477.267324][T20926] dump_stack_lvl+0x100/0x190 [ 477.267350][T20926] should_fail_ex.cold+0x5/0xa [ 477.267374][T20926] should_failslab+0xc2/0x120 [ 477.267395][T20926] __kmalloc_cache_noprof+0x7a/0x6f0 [ 477.267419][T20926] ? sel_netnode_sid+0x364/0xbb0 [ 477.267447][T20926] sel_netnode_sid+0x364/0xbb0 [ 477.267472][T20926] selinux_inet_sys_rcv_skb+0x142/0x180 [ 477.267496][T20926] ? __pfx_selinux_inet_sys_rcv_skb+0x10/0x10 [ 477.267517][T20926] ? __pfx_selinux_skb_peerlbl_sid+0x10/0x10 [ 477.267548][T20926] selinux_socket_sock_rcv_skb+0x621/0x730 [ 477.267572][T20926] ? __pfx_selinux_socket_sock_rcv_skb+0x10/0x10 [ 477.267594][T20926] ? ip_local_deliver+0x19a/0x1f0 [ 477.267616][T20926] ? ip_rcv+0x33a/0x3c0 [ 477.267634][T20926] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 477.267660][T20926] ? netif_receive_skb+0x13b/0x7f0 [ 477.267685][T20926] ? tun_get_user+0x1e31/0x3c20 [ 477.267709][T20926] ? tun_chr_write_iter+0xdc/0x200 [ 477.267731][T20926] ? vfs_write+0x6ac/0x1070 [ 477.267768][T20926] security_sock_rcv_skb+0x91/0x210 [ 477.267824][T20926] sk_filter_trim_cap+0xd0/0xcd0 [ 477.267850][T20926] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 477.267876][T20926] ? dst_release+0x9a/0x330 [ 477.267897][T20926] sock_queue_rcv_skb_reason+0x23/0xa0 [ 477.267918][T20926] raw_rcv+0x42f/0x8d0 [ 477.267940][T20926] raw_local_deliver+0x868/0xd40 [ 477.267966][T20926] ? __pfx_raw_local_deliver+0x10/0x10 [ 477.267992][T20926] ? lock_acquire+0x1b1/0x370 [ 477.268020][T20926] ip_protocol_deliver_rcu+0xeb/0x4d0 [ 477.268045][T20926] ip_local_deliver_finish+0x3f2/0x6e0 [ 477.268068][T20926] ip_local_deliver+0x19a/0x1f0 [ 477.268089][T20926] ? __pfx_ip_local_deliver+0x10/0x10 [ 477.268110][T20926] ip_rcv+0x33a/0x3c0 [ 477.268130][T20926] ? __pfx_ip_rcv+0x10/0x10 [ 477.268151][T20926] __netif_receive_skb_one_core+0x197/0x1e0 [ 477.268176][T20926] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 477.268201][T20926] ? lock_acquire+0x1b1/0x370 [ 477.268227][T20926] __netif_receive_skb+0x1f/0x120 [ 477.268254][T20926] netif_receive_skb+0x13b/0x7f0 [ 477.268277][T20926] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 477.268301][T20926] ? __pfx_netif_receive_skb+0x10/0x10 [ 477.268336][T20926] tun_rx_batched.isra.0+0x3f6/0x750 [ 477.268365][T20926] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 477.268396][T20926] ? rcu_is_watching+0x12/0xc0 [ 477.268438][T20926] ? tun_get_user+0x1cc8/0x3c20 [ 477.268466][T20926] tun_get_user+0x1e31/0x3c20 [ 477.268497][T20926] ? __pfx_tun_get_user+0x10/0x10 [ 477.268521][T20926] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 477.268548][T20926] ? find_held_lock+0x2b/0x80 [ 477.268562][T20926] ? tun_get+0x191/0x370 [ 477.268584][T20926] ? tun_get+0x191/0x370 [ 477.268616][T20926] tun_chr_write_iter+0xdc/0x200 [ 477.268644][T20926] vfs_write+0x6ac/0x1070 [ 477.268665][T20926] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 477.268691][T20926] ? __pfx_vfs_write+0x10/0x10 [ 477.268704][T20926] ? find_held_lock+0x2b/0x80 [ 477.268723][T20926] ksys_write+0x12a/0x250 [ 477.268738][T20926] ? __pfx_ksys_write+0x10/0x10 [ 477.268757][T20926] ? rcu_is_watching+0x12/0xc0 [ 477.268787][T20926] do_syscall_64+0x10b/0x860 [ 477.268812][T20926] ? clear_bhb_loop+0x40/0x90 [ 477.268835][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.268853][T20926] RIP: 0033:0x7fdd43f5d68e [ 477.268869][T20926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 477.268885][T20926] RSP: 002b:00007fdd44e7efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 477.268902][T20926] RAX: ffffffffffffffda RBX: 00007fdd44e7f6c0 RCX: 00007fdd43f5d68e [ 477.268912][T20926] RDX: 0000000000000086 RSI: 0000200000000000 RDI: 00000000000000c8 [ 477.268922][T20926] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 477.268932][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.268942][T20926] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 477.268973][T20926] [ 477.527743][T20754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.555464][T20754] veth0_vlan: entered promiscuous mode [ 477.566126][T20754] veth1_vlan: entered promiscuous mode [ 477.582602][T20754] veth0_macvtap: entered promiscuous mode [ 477.586711][T20754] veth1_macvtap: entered promiscuous mode [ 477.596992][T20754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.603521][T20754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.609405][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.612339][ T85] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.615659][ T85] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.618402][ T85] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.647595][T20948] netlink: 'syz.4.6374': attribute type 11 has an invalid length. [ 477.651192][T20948] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.6374'. [ 477.691213][T20949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3592 sclass=netlink_route_socket pid=20949 comm=syz.4.6374 [ 477.695396][T20948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3592 sclass=netlink_route_socket pid=20948 comm=syz.4.6374 [ 477.698881][T17618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.704726][T17618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.710602][T20565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.716611][T20565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.721483][ T40] audit: type=1400 audit(477.653:841): avc: denied { create } for pid=20952 comm="syz.2.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 477.729655][ T40] audit: type=1400 audit(477.663:842): avc: denied { mounton } for pid=20754 comm="syz-executor" path="/syzkaller.txgLu6/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 477.736219][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'. [ 477.761624][T20957] No source specified [ 478.908637][ T5733] Bluetooth: hci4: command tx timeout [ 478.976973][ T40] audit: type=1400 audit(478.903:843): avc: denied { write } for pid=20996 comm="syz.4.6392" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 478.983949][ T40] audit: type=1400 audit(478.913:844): avc: denied { ioctl } for pid=20996 comm="syz.4.6392" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 479.638630][ T39] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 479.798684][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 479.806201][ T39] usb 6-1: unable to get BOS descriptor or descriptor too short [ 479.811274][ T39] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 479.813840][ T39] usb 6-1: can't read configurations, error -71 [ 479.949280][T21018] netlink: 'syz.4.6401': attribute type 10 has an invalid length. [ 479.956480][T21018] veth0_vlan: left promiscuous mode [ 479.961492][T21018] veth0_vlan: entered promiscuous mode [ 479.965295][T21018] team0: Device veth0_vlan failed to register rx_handler [ 480.624472][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6412'. [ 480.784497][T21078] netlink: 'syz.2.6416': attribute type 1 has an invalid length. [ 480.814918][T21078] veth5: entered promiscuous mode [ 480.822310][T21078] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 480.828794][T21078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6416'. [ 480.832812][T21078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.896574][T21090] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6419'. [ 480.989220][ T5733] Bluetooth: hci4: command tx timeout [ 481.181236][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 481.181249][ T40] audit: type=1400 audit(481.113:850): avc: denied { create } for pid=21119 comm="syz.1.6426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 481.235207][T21127] usb usb7: usbfs: process 21127 (syz.1.6426) did not claim interface 0 before use [ 481.251776][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'. [ 481.255384][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'. [ 481.352690][T21135] FAULT_INJECTION: forcing a failure. [ 481.352690][T21135] name failslab, interval 1, probability 0, space 0, times 0 [ 481.357154][T21135] CPU: 1 UID: 0 PID: 21135 Comm: syz.4.6432 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.357180][T21135] Tainted: [L]=SOFTLOCKUP [ 481.357186][T21135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.357196][T21135] Call Trace: [ 481.357202][T21135] [ 481.357209][T21135] dump_stack_lvl+0x100/0x190 [ 481.357234][T21135] should_fail_ex.cold+0x5/0xa [ 481.357256][T21135] should_failslab+0xc2/0x120 [ 481.357276][T21135] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 481.357300][T21135] ? __d_alloc+0x34/0xa40 [ 481.357343][T21135] __d_alloc+0x34/0xa40 [ 481.357371][T21135] d_alloc_pseudo+0x1c/0xc0 [ 481.357389][T21135] alloc_file_pseudo+0xcf/0x230 [ 481.357415][T21135] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 481.357437][T21135] ? inode_init_always_gfp+0xce1/0x1000 [ 481.357464][T21135] sock_alloc_file+0x50/0x210 [ 481.357484][T21135] do_accept+0x242/0x530 [ 481.357508][T21135] ? do_raw_spin_lock+0x128/0x260 [ 481.357538][T21135] ? __pfx_do_accept+0x10/0x10 [ 481.357575][T21135] __sys_accept4+0x108/0x200 [ 481.357600][T21135] ? __pfx___sys_accept4+0x10/0x10 [ 481.357624][T21135] ? __pfx_ksys_write+0x10/0x10 [ 481.357646][T21135] __x64_sys_accept4+0x96/0x100 [ 481.357670][T21135] ? lockdep_hardirqs_on+0x78/0x100 [ 481.357694][T21135] do_syscall_64+0x10b/0x860 [ 481.357716][T21135] ? clear_bhb_loop+0x40/0x90 [ 481.357735][T21135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.357751][T21135] RIP: 0033:0x7fdd43f9ce59 [ 481.357766][T21135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.357781][T21135] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 481.357797][T21135] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 481.357808][T21135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 481.357816][T21135] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 481.357826][T21135] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 481.357835][T21135] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 481.357856][T21135] [ 481.483127][T21137] IPv6: Can't replace route, no match found [ 481.487979][T21137] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.079831][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6438'. [ 482.087865][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6438'. [ 482.090887][ T6192] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 482.104818][T21157] FAULT_INJECTION: forcing a failure. [ 482.104818][T21157] name failslab, interval 1, probability 0, space 0, times 0 [ 482.110131][T21157] CPU: 0 UID: 0 PID: 21157 Comm: syz.1.6438 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.110156][T21157] Tainted: [L]=SOFTLOCKUP [ 482.110161][T21157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 482.110170][T21157] Call Trace: [ 482.110176][T21157] [ 482.110182][T21157] dump_stack_lvl+0x100/0x190 [ 482.110206][T21157] should_fail_ex.cold+0x5/0xa [ 482.110226][T21157] should_failslab+0xc2/0x120 [ 482.110243][T21157] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 482.110263][T21157] ? skb_clone+0x190/0x400 [ 482.110283][T21157] skb_clone+0x190/0x400 [ 482.110298][T21157] netlink_deliver_tap+0xaed/0xcc0 [ 482.110322][T21157] netlink_unicast+0x6a5/0x850 [ 482.110345][T21157] ? __pfx_netlink_unicast+0x10/0x10 [ 482.110363][T21157] ? genl_rcv_msg+0x4be/0x800 [ 482.110381][T21157] netlink_ack+0x655/0xb80 [ 482.110406][T21157] netlink_rcv_skb+0x333/0x420 [ 482.110425][T21157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.110440][T21157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.110491][T21157] ? netlink_deliver_tap+0x1ae/0xcc0 [ 482.110513][T21157] genl_rcv+0x28/0x40 [ 482.110533][T21157] netlink_unicast+0x585/0x850 [ 482.110556][T21157] ? __pfx_netlink_unicast+0x10/0x10 [ 482.110581][T21157] netlink_sendmsg+0x8b0/0xda0 [ 482.110604][T21157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.110622][T21157] ? __might_fault+0xc0/0x140 [ 482.110650][T21157] ____sys_sendmsg+0x9e1/0xb70 [ 482.110668][T21157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.110690][T21157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.110717][T21157] ___sys_sendmsg+0x190/0x1e0 [ 482.110738][T21157] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.110782][T21157] __sys_sendmsg+0x170/0x220 [ 482.110797][T21157] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.110822][T21157] ? rcu_is_watching+0x12/0xc0 [ 482.110846][T21157] do_syscall_64+0x10b/0x860 [ 482.110868][T21157] ? clear_bhb_loop+0x40/0x90 [ 482.110885][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.110899][T21157] RIP: 0033:0x7f746ad9ce59 [ 482.110913][T21157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.110926][T21157] RSP: 002b:00007f746bce9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.110941][T21157] RAX: ffffffffffffffda RBX: 00007f746b015fa0 RCX: 00007f746ad9ce59 [ 482.110950][T21157] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 482.110959][T21157] RBP: 00007f746bce9090 R08: 0000000000000000 R09: 0000000000000000 [ 482.110967][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.110975][T21157] R13: 00007f746b016038 R14: 00007f746b015fa0 R15: 00007ffedcc20a58 [ 482.110999][T21157] [ 482.295131][ T5733] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 482.295178][ T5733] Bluetooth: hci4: Malformed LE Event: 0x0d [ 482.361293][ T6192] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 482.782139][ T5733] Bluetooth: hci0: unexpected event for opcode 0x200c [ 483.153634][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6449'. [ 483.198127][T21198] netlink: 'syz.1.6450': attribute type 1 has an invalid length. [ 483.201136][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6450'. [ 483.624411][T21206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.007061][ T40] audit: type=1400 audit(483.933:851): avc: denied { connect } for pid=21208 comm="syz.1.6456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 484.120487][T21211] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 484.193958][ T40] audit: type=1400 audit(484.123:852): avc: denied { create } for pid=21219 comm="syz.3.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 484.199457][T21223] netlink: 'syz.4.6461': attribute type 21 has an invalid length. [ 484.202959][ T40] audit: type=1400 audit(484.123:853): avc: denied { append } for pid=21219 comm="syz.3.6460" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 484.206638][T21223] xfs: Unknown parameter 'grpquotaN÷ƒÛL¹ [ 484.206638][T21223] ¤' [ 484.211816][ T40] audit: type=1400 audit(484.123:854): avc: denied { setopt } for pid=21219 comm="syz.3.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 484.370571][T21237] FAULT_INJECTION: forcing a failure. [ 484.370571][T21237] name failslab, interval 1, probability 0, space 0, times 0 [ 484.377565][T21237] CPU: 2 UID: 0 PID: 21237 Comm: syz.4.6468 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.377595][T21237] Tainted: [L]=SOFTLOCKUP [ 484.377602][T21237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 484.377612][T21237] Call Trace: [ 484.377620][T21237] [ 484.377628][T21237] dump_stack_lvl+0x100/0x190 [ 484.377658][T21237] should_fail_ex.cold+0x5/0xa [ 484.377685][T21237] should_failslab+0xc2/0x120 [ 484.377708][T21237] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 484.377737][T21237] ? __alloc_skb+0x140/0x710 [ 484.377761][T21237] __alloc_skb+0x140/0x710 [ 484.377779][T21237] ? __alloc_skb+0x5b7/0x710 [ 484.377797][T21237] ? __pfx___alloc_skb+0x10/0x10 [ 484.377822][T21237] __netdev_alloc_skb+0x7a/0x960 [ 484.377845][T21237] ieee80211_mgmt_tx+0x7f9/0x2590 [ 484.377907][T21237] ? __pfx_kmalloc_reserve+0x10/0x10 [ 484.377939][T21237] cfg80211_mlme_mgmt_tx+0x803/0x1600 [ 484.377976][T21237] nl80211_tx_mgmt+0x9f9/0xf30 [ 484.378001][T21237] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 484.378025][T21237] ? __pfx_netdev_run_todo+0x10/0x10 [ 484.378064][T21237] ? nl80211_pre_doit+0x19a/0xae0 [ 484.378085][T21237] genl_family_rcv_msg_doit+0x214/0x300 [ 484.378115][T21237] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 484.378152][T21237] ? bpf_lsm_capable+0x9/0x10 [ 484.378172][T21237] ? security_capable+0x80/0x260 [ 484.378194][T21237] ? ns_capable+0xd2/0xf0 [ 484.378223][T21237] genl_rcv_msg+0x560/0x800 [ 484.378245][T21237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.378260][T21237] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 484.378278][T21237] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 484.378299][T21237] ? __pfx_nl80211_post_doit+0x10/0x10 [ 484.378324][T21237] netlink_rcv_skb+0x159/0x420 [ 484.378349][T21237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.378368][T21237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.378434][T21237] ? netlink_deliver_tap+0x1ae/0xcc0 [ 484.378460][T21237] genl_rcv+0x28/0x40 [ 484.378485][T21237] netlink_unicast+0x585/0x850 [ 484.378514][T21237] ? __pfx_netlink_unicast+0x10/0x10 [ 484.378548][T21237] netlink_sendmsg+0x8b0/0xda0 [ 484.378575][T21237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.378599][T21237] ? __might_fault+0xc0/0x140 [ 484.378635][T21237] ____sys_sendmsg+0x9e1/0xb70 [ 484.378657][T21237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.378686][T21237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.378722][T21237] ___sys_sendmsg+0x190/0x1e0 [ 484.378750][T21237] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.378805][T21237] __sys_sendmsg+0x170/0x220 [ 484.378825][T21237] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.378852][T21237] ? rcu_is_watching+0x12/0xc0 [ 484.378882][T21237] do_syscall_64+0x10b/0x860 [ 484.378909][T21237] ? clear_bhb_loop+0x40/0x90 [ 484.378931][T21237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.378950][T21237] RIP: 0033:0x7fdd43f9ce59 [ 484.378969][T21237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.378984][T21237] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.379003][T21237] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 484.379017][T21237] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 484.379027][T21237] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 484.379039][T21237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.379049][T21237] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 484.379072][T21237] [ 484.521733][T21236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.528578][T18836] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 484.678581][T18836] usb 6-1: Using ep0 maxpacket: 16 [ 484.685410][T18836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 484.689227][T18836] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 484.691955][T18836] usb 6-1: can't read configurations, error -71 [ 485.063030][T21239] comedi comedi3: board detection failed [ 485.106729][T21241] syzkaller1: entered promiscuous mode [ 485.108597][T21241] syzkaller1: entered allmulticast mode [ 485.209431][T21240] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 485.211540][T21242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.470183][ T29] IPVS: starting estimator thread 0... [ 485.558575][T21250] IPVS: using max 45 ests per chain, 108000 per kthread [ 485.597727][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6475'. [ 485.604023][T21255] erspan0: entered promiscuous mode [ 485.745667][ T40] audit: type=1400 audit(485.673:855): avc: denied { write } for pid=21256 comm="syz.1.6476" path="socket:[89106]" dev="sockfs" ino=89106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 485.752040][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.757710][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.761473][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.764225][T21257] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 485.769967][T21257] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 485.775261][T21257] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 485.780806][T21257] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 485.787605][T21257] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 485.806194][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.809268][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.812892][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.816445][T21257] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.907652][T21260] ptrace attach of "/syz-executor exec"[20754] was attempted by "/syz-executor exec"[21260] [ 485.909928][T21261] net_ratelimit: 21 callbacks suppressed [ 485.909940][T21261] openvswitch: netlink: IP tunnel dst address not specified [ 486.274880][T21272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6481'. [ 486.548886][ T53] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 486.708617][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 486.712515][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 486.716665][ T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 486.720492][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 486.725778][ T53] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 486.728937][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.731772][ T53] usb 6-1: Product: syz [ 486.733169][ T53] usb 6-1: Manufacturer: syz [ 486.734968][ T53] usb 6-1: SerialNumber: syz [ 486.738610][ T53] usb 6-1: config 0 descriptor?? [ 486.743778][ T53] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input27 [ 486.942285][T21277] FAULT_INJECTION: forcing a failure. [ 486.942285][T21277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.949936][T21277] CPU: 1 UID: 0 PID: 21277 Comm: syz.1.6482 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.949972][T21277] Tainted: [L]=SOFTLOCKUP [ 486.949981][T21277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.949992][T21277] Call Trace: [ 486.950001][T21277] [ 486.950008][T21277] dump_stack_lvl+0x100/0x190 [ 486.950040][T21277] should_fail_ex.cold+0x5/0xa [ 486.950068][T21277] _copy_from_user+0x2e/0xd0 [ 486.950100][T21277] kstrtouint_from_user+0xd6/0x1d0 [ 486.950124][T21277] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 486.950147][T21277] ? __lock_acquire+0x4a5/0x2630 [ 486.950176][T21277] ? lock_acquire+0x1b1/0x370 [ 486.950205][T21277] proc_fail_nth_write+0x83/0x220 [ 486.950229][T21277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.950259][T21277] vfs_write+0x2aa/0x1070 [ 486.950282][T21277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.950306][T21277] ? __pfx_vfs_write+0x10/0x10 [ 486.950327][T21277] ? __fget_files+0x215/0x3d0 [ 486.950359][T21277] ? __fget_files+0x21f/0x3d0 [ 486.950410][T21277] ksys_write+0x12a/0x250 [ 486.950432][T21277] ? __pfx_ksys_write+0x10/0x10 [ 486.950457][T21277] ? rcu_is_watching+0x12/0xc0 [ 486.950489][T21277] do_syscall_64+0x10b/0x860 [ 486.950518][T21277] ? clear_bhb_loop+0x40/0x90 [ 486.950542][T21277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.950562][T21277] RIP: 0033:0x7f746ad5d68e [ 486.950579][T21277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 486.950596][T21277] RSP: 002b:00007f746bce8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.950616][T21277] RAX: ffffffffffffffda RBX: 00007f746bce96c0 RCX: 00007f746ad5d68e [ 486.950628][T21277] RDX: 0000000000000001 RSI: 00007f746bce90a0 RDI: 0000000000000004 [ 486.950640][T21277] RBP: 00007f746bce9090 R08: 0000000000000000 R09: 0000000000000000 [ 486.950650][T21277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.950661][T21277] R13: 00007f746b016038 R14: 00007f746b015fa0 R15: 00007ffedcc20a58 [ 486.950687][T21277] [ 487.079471][ T5819] usb 6-1: USB disconnect, device number 106 [ 487.081447][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 487.081472][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 487.157301][T21289] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6487'. [ 487.193128][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 487.196783][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6488'. [ 487.356579][ T40] audit: type=1400 audit(487.283:856): avc: denied { accept } for pid=21296 comm="syz.1.6491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 488.601427][ T40] audit: type=1400 audit(488.533:857): avc: denied { create } for pid=21322 comm="syz.4.6502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 489.057964][T21334] FAULT_INJECTION: forcing a failure. [ 489.057964][T21334] name failslab, interval 1, probability 0, space 0, times 0 [ 489.063288][T21334] CPU: 0 UID: 0 PID: 21334 Comm: syz.1.6505 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.063313][T21334] Tainted: [L]=SOFTLOCKUP [ 489.063318][T21334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.063327][T21334] Call Trace: [ 489.063332][T21334] [ 489.063338][T21334] dump_stack_lvl+0x100/0x190 [ 489.063362][T21334] should_fail_ex.cold+0x5/0xa [ 489.063381][T21334] ? copy_splice_read+0x1a3/0xb90 [ 489.063400][T21334] should_failslab+0xc2/0x120 [ 489.063417][T21334] __kmalloc_noprof+0xe0/0x850 [ 489.063442][T21334] copy_splice_read+0x1a3/0xb90 [ 489.063485][T21334] ? __pfx_copy_splice_read+0x10/0x10 [ 489.063510][T21334] ? lockdep_init_map_type+0x5c/0x250 [ 489.063530][T21334] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 489.063549][T21334] ? __pfx_copy_splice_read+0x10/0x10 [ 489.063567][T21334] do_splice_read+0x285/0x370 [ 489.063587][T21334] splice_direct_to_actor+0x2a1/0xa30 [ 489.063607][T21334] ? __pfx_direct_splice_actor+0x10/0x10 [ 489.063629][T21334] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 489.063648][T21334] ? __pfx___file_has_perm+0x10/0x10 [ 489.063671][T21334] do_splice_direct+0x174/0x240 [ 489.063690][T21334] ? __pfx_do_splice_direct+0x10/0x10 [ 489.063710][T21334] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 489.063728][T21334] ? bpf_lsm_file_permission+0x9/0x10 [ 489.063741][T21334] ? security_file_permission+0x76/0x210 [ 489.063763][T21334] ? rw_verify_area+0xce/0x6d0 [ 489.063778][T21334] do_sendfile+0xadc/0xe20 [ 489.063797][T21334] ? __pfx_do_sendfile+0x10/0x10 [ 489.063812][T21334] ? __fget_files+0x21f/0x3d0 [ 489.063835][T21334] __x64_sys_sendfile64+0x1d8/0x220 [ 489.063853][T21334] ? ksys_write+0x1ac/0x250 [ 489.063868][T21334] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 489.063888][T21334] ? rcu_is_watching+0x12/0xc0 [ 489.063916][T21334] do_syscall_64+0x10b/0x860 [ 489.063937][T21334] ? clear_bhb_loop+0x40/0x90 [ 489.063955][T21334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.063969][T21334] RIP: 0033:0x7f746ad9ce59 [ 489.063982][T21334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.063996][T21334] RSP: 002b:00007f746bce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 489.064012][T21334] RAX: ffffffffffffffda RBX: 00007f746b015fa0 RCX: 00007f746ad9ce59 [ 489.064021][T21334] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 489.064030][T21334] RBP: 00007f746bce9090 R08: 0000000000000000 R09: 0000000000000000 [ 489.064039][T21334] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000002 [ 489.064047][T21334] R13: 00007f746b016038 R14: 00007f746b015fa0 R15: 00007ffedcc20a58 [ 489.064066][T21334] [ 489.290534][T21342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6508'. [ 489.397022][T21342] binder: 21341:21342 ioctl c0306201 2000000006c0 returned -14 [ 489.409361][T21347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6510'. [ 489.652400][T21362] FAULT_INJECTION: forcing a failure. [ 489.652400][T21362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.656522][T21362] CPU: 2 UID: 0 PID: 21362 Comm: syz.2.6516 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.656541][T21362] Tainted: [L]=SOFTLOCKUP [ 489.656545][T21362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.656551][T21362] Call Trace: [ 489.656556][T21362] [ 489.656562][T21362] dump_stack_lvl+0x100/0x190 [ 489.656580][T21362] should_fail_ex.cold+0x5/0xa [ 489.656597][T21362] _copy_from_user+0x2e/0xd0 [ 489.656616][T21362] kstrtouint_from_user+0xd6/0x1d0 [ 489.656630][T21362] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 489.656642][T21362] ? __lock_acquire+0x4a5/0x2630 [ 489.656659][T21362] ? lock_acquire+0x1b1/0x370 [ 489.656675][T21362] proc_fail_nth_write+0x83/0x220 [ 489.656688][T21362] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 489.656705][T21362] vfs_write+0x2aa/0x1070 [ 489.656718][T21362] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 489.656731][T21362] ? __pfx_vfs_write+0x10/0x10 [ 489.656743][T21362] ? __fget_files+0x215/0x3d0 [ 489.656760][T21362] ? __fget_files+0x21f/0x3d0 [ 489.656777][T21362] ksys_write+0x12a/0x250 [ 489.656789][T21362] ? __pfx_ksys_write+0x10/0x10 [ 489.656802][T21362] ? rcu_is_watching+0x12/0xc0 [ 489.656820][T21362] do_syscall_64+0x10b/0x860 [ 489.656837][T21362] ? clear_bhb_loop+0x40/0x90 [ 489.656851][T21362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.656863][T21362] RIP: 0033:0x7f9c3cb5d68e [ 489.656873][T21362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.656884][T21362] RSP: 002b:00007f9c3d9dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.656896][T21362] RAX: ffffffffffffffda RBX: 00007f9c3d9dc6c0 RCX: 00007f9c3cb5d68e [ 489.656902][T21362] RDX: 0000000000000001 RSI: 00007f9c3d9dc0a0 RDI: 0000000000000005 [ 489.656909][T21362] RBP: 00007f9c3d9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 489.656915][T21362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.656922][T21362] R13: 00007f9c3ce16038 R14: 00007f9c3ce15fa0 R15: 00007ffc02f8ce48 [ 489.656936][T21362] [ 489.734826][T21367] overlayfs: missing 'lowerdir' [ 490.009385][T21374] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 490.079759][ T39] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 490.104080][T21384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 490.240553][ T39] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.244413][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.248080][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 490.253643][ T39] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 490.256857][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.259640][ T39] usb 6-1: Product: syz [ 490.260970][ T39] usb 6-1: Manufacturer: syz [ 490.262476][ T39] usb 6-1: SerialNumber: syz [ 490.265813][ T39] usb 6-1: config 0 descriptor?? [ 490.268695][T21378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 490.308781][ T39] rc_core: IR keymap rc-streamzap not found [ 490.311154][ T39] Registered IR keymap rc-empty [ 490.314033][ T39] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 490.318777][ T39] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 490.501253][ T5897] usb 6-1: USB disconnect, device number 107 [ 490.725838][T21394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6529'. [ 491.053607][ T40] audit: type=1400 audit(490.983:858): avc: denied { listen } for pid=21395 comm="syz.1.6530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 491.060443][ T40] audit: type=1400 audit(490.983:859): avc: denied { accept } for pid=21395 comm="syz.1.6530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 491.355269][T21402] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6532'. [ 492.166581][T21430] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6541'. [ 492.325901][ T40] audit: type=1400 audit(492.253:860): avc: denied { read } for pid=21431 comm="syz.4.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 492.886465][T21441] batman_adv: batadv0: Adding interface: dummy0 [ 492.889248][T21441] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.899964][T21441] batman_adv: batadv0: Interface activated: dummy0 [ 493.037904][T21448] dummy0: entered allmulticast mode [ 493.051898][T21448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6548'. [ 493.064213][T21447] dummy0: left allmulticast mode [ 493.203545][T21450] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6549'. [ 493.318558][ T5733] Bluetooth: hci1: command 0x0406 tx timeout [ 493.336296][T21453] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 493.460327][T21453] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 493.948599][ T10] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 494.108629][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 494.111872][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 494.116545][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 494.119517][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 494.122031][ T10] usb 6-1: Product: syz [ 494.123360][ T10] usb 6-1: Manufacturer: syz [ 494.124858][ T10] usb 6-1: SerialNumber: syz [ 494.128287][ T10] usb 6-1: config 0 descriptor?? [ 494.131185][T21464] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 494.134708][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 494.136879][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 494.336554][T21464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.339555][T21464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.618880][ T39] usb 6-1: USB disconnect, device number 108 [ 494.696123][T21478] FAULT_INJECTION: forcing a failure. [ 494.696123][T21478] name failslab, interval 1, probability 0, space 0, times 0 [ 494.701670][T21478] CPU: 1 UID: 0 PID: 21478 Comm: syz.4.6558 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.701696][T21478] Tainted: [L]=SOFTLOCKUP [ 494.701702][T21478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.701711][T21478] Call Trace: [ 494.701717][T21478] [ 494.701724][T21478] dump_stack_lvl+0x100/0x190 [ 494.701745][T21478] should_fail_ex.cold+0x5/0xa [ 494.701761][T21478] should_failslab+0xc2/0x120 [ 494.701775][T21478] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 494.701791][T21478] ? alloc_empty_file+0x5b/0x1c0 [ 494.701810][T21478] alloc_empty_file+0x5b/0x1c0 [ 494.701827][T21478] alloc_file_pseudo+0x13a/0x230 [ 494.701844][T21478] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 494.701860][T21478] ? inode_init_always_gfp+0xce1/0x1000 [ 494.701878][T21478] sock_alloc_file+0x50/0x210 [ 494.701892][T21478] do_accept+0x242/0x530 [ 494.701914][T21478] ? do_raw_spin_lock+0x128/0x260 [ 494.701931][T21478] ? __pfx_do_accept+0x10/0x10 [ 494.701959][T21478] __sys_accept4+0x108/0x200 [ 494.701983][T21478] ? __pfx___sys_accept4+0x10/0x10 [ 494.702013][T21478] ? __pfx_ksys_write+0x10/0x10 [ 494.702038][T21478] __x64_sys_accept4+0x96/0x100 [ 494.702063][T21478] ? lockdep_hardirqs_on+0x78/0x100 [ 494.702090][T21478] do_syscall_64+0x10b/0x860 [ 494.702118][T21478] ? clear_bhb_loop+0x40/0x90 [ 494.702142][T21478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.702161][T21478] RIP: 0033:0x7fdd43f9ce59 [ 494.702178][T21478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.702193][T21478] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 494.702211][T21478] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 494.702224][T21478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 494.702234][T21478] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 494.702246][T21478] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 494.702258][T21478] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 494.702306][T21478] [ 495.124837][T21482] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6567'. [ 495.132411][T21484] FAULT_INJECTION: forcing a failure. [ 495.132411][T21484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.138761][T21484] CPU: 2 UID: 0 PID: 21484 Comm: syz.1.6560 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.138780][T21484] Tainted: [L]=SOFTLOCKUP [ 495.138784][T21484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.138790][T21484] Call Trace: [ 495.138800][T21484] [ 495.138806][T21484] dump_stack_lvl+0x100/0x190 [ 495.138824][T21484] should_fail_ex.cold+0x5/0xa [ 495.138837][T21484] ? prepare_alloc_pages+0x16d/0x5f0 [ 495.138852][T21484] should_fail_alloc_page+0xeb/0x140 [ 495.138866][T21484] prepare_alloc_pages+0x1f0/0x5f0 [ 495.138881][T21484] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 495.138904][T21484] ? find_held_lock+0x2b/0x80 [ 495.138915][T21484] ? is_bpf_text_address+0x8a/0x1a0 [ 495.138929][T21484] ? is_bpf_text_address+0x8a/0x1a0 [ 495.138944][T21484] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 495.138961][T21484] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 495.138974][T21484] ? kernel_text_address+0x8d/0x100 [ 495.138989][T21484] ? __kernel_text_address+0xd/0x30 [ 495.139004][T21484] ? unwind_get_return_address+0x59/0xa0 [ 495.139022][T21484] ? register_lock_class+0x40/0x560 [ 495.139039][T21484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.139054][T21484] ? policy_nodemask+0xed/0x4f0 [ 495.139067][T21484] alloc_pages_mpol+0x1fb/0x540 [ 495.139080][T21484] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 495.139096][T21484] alloc_pages_noprof+0x1a/0x160 [ 495.139110][T21484] pte_alloc_one+0x1c/0x3d0 [ 495.139120][T21484] __pte_alloc+0x6d/0x3e0 [ 495.139132][T21484] ? __pfx___pte_alloc+0x10/0x10 [ 495.139145][T21484] ? walk_to_pmd+0x302/0x4c0 [ 495.139159][T21484] get_locked_pte+0xa1/0xc0 [ 495.139173][T21484] insert_page+0xcc/0x220 [ 495.139187][T21484] ? __pfx_insert_page+0x10/0x10 [ 495.139204][T21484] vm_insert_page+0x2c0/0x400 [ 495.139219][T21484] binder_alloc_new_buf+0x21dd/0x30b0 [ 495.139275][T21484] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 495.139295][T21484] binder_transaction+0x1eb0/0x9c10 [ 495.139317][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139334][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139349][T21484] ? __pfx_binder_transaction+0x10/0x10 [ 495.139367][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139384][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139404][T21484] ? find_held_lock+0x2b/0x80 [ 495.139416][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139430][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139444][T21484] ? kernel_text_address+0x8d/0x100 [ 495.139457][T21484] ? __pfx_widen_string+0x10/0x10 [ 495.139470][T21484] ? __kernel_text_address+0xd/0x30 [ 495.139488][T21484] ? find_held_lock+0x2b/0x80 [ 495.139498][T21484] ? __might_fault+0xc5/0x140 [ 495.139513][T21484] ? __might_fault+0xc5/0x140 [ 495.139533][T21484] binder_thread_write+0x1303/0x4db0 [ 495.139549][T21484] ? __kasan_slab_free+0x5f/0x80 [ 495.139559][T21484] ? kfree+0x223/0x6c0 [ 495.139575][T21484] ? __lock_acquire+0x4a5/0x2630 [ 495.139588][T21484] ? __pfx_binder_thread_write+0x10/0x10 [ 495.139603][T21484] ? binder_debug+0xe0/0x190 [ 495.139615][T21484] ? __pfx_binder_debug+0x10/0x10 [ 495.139626][T21484] ? binder_debug+0xe0/0x190 [ 495.139637][T21484] ? __pfx_binder_debug+0x10/0x10 [ 495.139657][T21484] binder_ioctl+0x28f8/0x7550 [ 495.139676][T21484] ? tomoyo_path_number_perm+0x188/0x580 [ 495.139694][T21484] ? __pfx_binder_ioctl+0x10/0x10 [ 495.139709][T21484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.139723][T21484] ? do_vfs_ioctl+0x226/0x13e0 [ 495.139735][T21484] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 495.139747][T21484] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 495.139768][T21484] ? hook_file_ioctl_common+0x149/0x410 [ 495.139805][T21484] ? selinux_file_ioctl+0x13b/0x290 [ 495.139820][T21484] ? selinux_file_ioctl+0xb6/0x290 [ 495.139835][T21484] ? __pfx_binder_ioctl+0x10/0x10 [ 495.139850][T21484] __x64_sys_ioctl+0x18e/0x210 [ 495.139862][T21484] do_syscall_64+0x10b/0x860 [ 495.139878][T21484] ? clear_bhb_loop+0x40/0x90 [ 495.139891][T21484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.139902][T21484] RIP: 0033:0x7f746ad9ce59 [ 495.139913][T21484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.139923][T21484] RSP: 002b:00007f746bce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.139934][T21484] RAX: ffffffffffffffda RBX: 00007f746b015fa0 RCX: 00007f746ad9ce59 [ 495.139941][T21484] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 495.139948][T21484] RBP: 00007f746bce9090 R08: 0000000000000000 R09: 0000000000000000 [ 495.139954][T21484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.139960][T21484] R13: 00007f746b016038 R14: 00007f746b015fa0 R15: 00007ffedcc20a58 [ 495.139974][T21484] [ 495.139995][T21484] binder_alloc: 21483: binder_install_single_page failed to insert page at offset 0 with -12 [ 495.267792][T21494] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6564'. [ 495.399609][T21505] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6570'. [ 495.514652][T21501] tmpfs: Unknown parameter 'indo64' [ 495.618637][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 495.768532][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 495.772108][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 495.779281][ T10] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.783959][ T10] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 495.786909][ T10] usb 9-1: Product: syz [ 495.788855][ T10] usb 9-1: Manufacturer: syz [ 495.790926][ T10] usb 9-1: SerialNumber: syz [ 495.793689][T21526] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 495.798163][ T10] usb 9-1: config 0 descriptor?? [ 495.798894][T21503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.801628][T21526] overlayfs: overlapping lowerdir path [ 495.805877][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 495.810877][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 495.812238][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6580'. [ 496.008695][T21503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.015173][T21503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.278985][ T39] usb 9-1: USB disconnect, device number 21 [ 496.609412][T21545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.971130][T21565] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6591'. [ 497.019592][ T10] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 497.111456][T21566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.178592][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 497.182521][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 497.185349][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 497.190814][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 497.193751][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.197177][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 497.200970][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 497.208304][T21576] netlink: 'syz.3.6595': attribute type 32 has an invalid length. [ 497.208529][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 497.214613][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.221404][ T10] usb 6-1: config 0 descriptor?? [ 497.295842][T21579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.357999][T21584] bond0: Device is already in use. [ 497.361879][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6600'. [ 497.371518][T21584] bridge0: port 3(macvlan2) entered blocking state [ 497.374574][T21584] bridge0: port 3(macvlan2) entered disabled state [ 497.377564][T21584] macvlan2: entered allmulticast mode [ 497.383782][T21584] macvlan2: left allmulticast mode [ 497.429319][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 497.436572][ T10] usb 6-1: USB disconnect, device number 109 [ 497.443340][ T10] usblp0: removed [ 497.649436][ T40] audit: type=1400 audit(497.583:861): avc: denied { map } for pid=21593 comm="syz.4.6603" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 497.824634][T21599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.868743][ T10] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 498.028703][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 498.032898][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 498.036454][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 498.040757][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 498.044651][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.048671][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 498.052488][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 498.057794][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 498.061787][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.067352][ T10] usb 6-1: config 0 descriptor?? [ 498.275207][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 498.626839][ T40] audit: type=1400 audit(498.553:862): avc: denied { read write } for pid=21555 comm="syz.1.6590" name="lp0" dev="devtmpfs" ino=3469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 498.633290][T21611] usblp0:failed reading printer status (-32) [ 498.634422][ T40] audit: type=1400 audit(498.553:863): avc: denied { open } for pid=21555 comm="syz.1.6590" path="/dev/usb/lp0" dev="devtmpfs" ino=3469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 498.644167][T18836] usb 6-1: USB disconnect, device number 110 [ 498.646717][ T40] audit: type=1400 audit(498.563:864): avc: denied { ioctl } for pid=21555 comm="syz.1.6590" path="/dev/usb/lp0" dev="devtmpfs" ino=3469 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 498.649920][T18836] usblp0: removed [ 498.756786][T21610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6610'. [ 499.169876][ T40] audit: type=1400 audit(499.103:865): avc: denied { name_bind } for pid=21619 comm="syz.3.6614" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 499.248754][ T1472] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 499.387164][T21632] loop9: detected capacity change from 0 to 524287999 [ 499.391158][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.394495][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.397816][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.402160][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.405400][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.408849][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.410628][ T1472] usb 9-1: not running at top speed; connect to a high speed hub [ 499.412047][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.417366][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.420702][T21632] ldm_validate_partition_table(): Disk read failed. [ 499.423302][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.426377][T21632] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.429969][T21632] Dev loop9: unable to read RDB block 0 [ 499.432877][T21632] loop9: unable to read partition table [ 499.435365][T21632] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x) failed (rc=-5) [ 500.429133][T21638] tun0: tun_chr_ioctl cmd 1074025675 [ 500.430967][T21638] tun0: persist enabled [ 500.447845][T21638] tun0: tun_chr_ioctl cmd 1074025675 [ 500.449658][T21638] tun0: persist enabled [ 500.712488][T21650] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 500.769501][T21644] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 500.777625][ T40] audit: type=1400 audit(500.703:866): avc: denied { create } for pid=21653 comm="syz.1.6625" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 500.784363][ T40] audit: type=1400 audit(500.703:867): avc: denied { link } for pid=21653 comm="syz.1.6625" name="#10" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 500.793691][ T40] audit: type=1400 audit(500.703:868): avc: denied { rename } for pid=21653 comm="syz.1.6625" name="#11" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 500.833786][T21656] use of bytesused == 0 is deprecated and will be removed in the future, [ 500.837819][T21656] use the actual size instead. [ 500.841225][T21656] netlink: 'syz.1.6626': attribute type 1 has an invalid length. [ 500.860619][T21656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.875619][T21656] vlan2: entered allmulticast mode [ 500.877577][T21656] bond1: entered allmulticast mode [ 500.891177][T21656] bond1: (slave geneve2): making interface the new active one [ 500.895249][T21656] geneve2: entered allmulticast mode [ 500.899765][T21656] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 502.000148][ T1472] usb 9-1: string descriptor 0 read error: -71 [ 502.002241][ T1472] usb 9-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 502.005358][ T1472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.010709][ T1472] usb 9-1: can't set config #1, error -71 [ 502.015689][ T1472] usb 9-1: USB disconnect, device number 22 [ 502.178536][ T34] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 502.358560][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 502.362953][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 502.367678][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 502.372834][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 502.380070][ T34] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 502.383907][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.387303][ T34] usb 6-1: Product: syz [ 502.389309][ T34] usb 6-1: Manufacturer: syz [ 502.391538][ T34] usb 6-1: SerialNumber: syz [ 502.397059][ T34] usb 6-1: config 0 descriptor?? [ 502.406728][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input29 [ 502.501771][T21687] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 502.651487][ T10] usb 6-1: USB disconnect, device number 111 [ 502.651612][ C2] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 502.657199][ C2] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 502.670237][ T40] audit: type=1400 audit(502.603:869): avc: denied { create } for pid=21688 comm="syz.3.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 502.983326][T21697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7496 sclass=netlink_route_socket pid=21697 comm=syz.3.6642 [ 503.095305][ T40] audit: type=1400 audit(503.023:870): avc: denied { setattr } for pid=21702 comm="syz.3.6643" name="sequencer2" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 503.388696][ T34] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 503.538641][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 503.542781][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 503.547387][ T34] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 503.552131][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 503.559699][ T34] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 503.563663][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.567120][ T34] usb 9-1: Product: syz [ 503.569114][ T844] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 503.572462][ T34] usb 9-1: Manufacturer: syz [ 503.574533][ T34] usb 9-1: SerialNumber: syz [ 503.581901][ T34] usb 9-1: config 0 descriptor?? [ 503.590862][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input30 [ 503.738537][ T844] usb 6-1: Using ep0 maxpacket: 16 [ 503.802025][ T844] usb 6-1: unable to get BOS descriptor or descriptor too short [ 503.805393][ T844] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 503.809560][ T844] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 503.812717][ T844] usb 6-1: can't read configurations, error -71 [ 503.838882][ C0] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 503.842308][ T5885] usb 9-1: USB disconnect, device number 23 [ 503.844224][ C0] xpad 9-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 503.949427][T21709] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 504.395638][ T40] audit: type=1400 audit(504.323:871): avc: denied { write } for pid=21715 comm="syz.4.6648" name="/" dev="9p" ino=72876335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.418552][ T40] audit: type=1400 audit(504.323:872): avc: denied { rmdir } for pid=21715 comm="syz.4.6648" name="file2" dev="9p" ino=72876429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.445272][T21723] overlay: Unknown parameter 'volatile:volatile' [ 504.649436][T21737] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6655'. [ 505.037185][T21751] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6659'. [ 505.048343][T21761] ip6gretap0: entered promiscuous mode [ 505.593373][T21798] FAULT_INJECTION: forcing a failure. [ 505.593373][T21798] name failslab, interval 1, probability 0, space 0, times 0 [ 505.607973][T21798] CPU: 1 UID: 0 PID: 21798 Comm: syz.1.6665 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.608004][T21798] Tainted: [L]=SOFTLOCKUP [ 505.608010][T21798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.608021][T21798] Call Trace: [ 505.608028][T21798] [ 505.608035][T21798] dump_stack_lvl+0x100/0x190 [ 505.608188][T21798] should_fail_ex.cold+0x5/0xa [ 505.608241][T21798] should_failslab+0xc2/0x120 [ 505.608285][T21798] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 505.608312][T21798] ? security_file_alloc+0x34/0x2c0 [ 505.608362][T21798] ? trace_kmem_cache_alloc+0xd5/0x100 [ 505.608387][T21798] security_file_alloc+0x34/0x2c0 [ 505.608431][T21798] init_file+0x95/0x480 [ 505.608458][T21798] alloc_empty_file+0x79/0x1c0 [ 505.608484][T21798] alloc_file_pseudo+0x13a/0x230 [ 505.608512][T21798] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 505.608536][T21798] ? inode_init_always_gfp+0xce1/0x1000 [ 505.608567][T21798] sock_alloc_file+0x50/0x210 [ 505.608636][T21798] do_accept+0x242/0x530 [ 505.608662][T21798] ? do_raw_spin_lock+0x128/0x260 [ 505.608709][T21798] ? __pfx_do_accept+0x10/0x10 [ 505.608751][T21798] __sys_accept4+0x108/0x200 [ 505.608780][T21798] ? __pfx___sys_accept4+0x10/0x10 [ 505.608807][T21798] ? __pfx_ksys_write+0x10/0x10 [ 505.608831][T21798] __x64_sys_accept4+0x96/0x100 [ 505.608859][T21798] ? lockdep_hardirqs_on+0x78/0x100 [ 505.608972][T21798] do_syscall_64+0x10b/0x860 [ 505.608998][T21798] ? clear_bhb_loop+0x40/0x90 [ 505.609020][T21798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.609038][T21798] RIP: 0033:0x7f746ad9ce59 [ 505.609055][T21798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.609072][T21798] RSP: 002b:00007f746bce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 505.609114][T21798] RAX: ffffffffffffffda RBX: 00007f746b015fa0 RCX: 00007f746ad9ce59 [ 505.609126][T21798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 505.609141][T21798] RBP: 00007f746bce9090 R08: 0000000000000000 R09: 0000000000000000 [ 505.609152][T21798] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 505.609162][T21798] R13: 00007f746b016038 R14: 00007f746b015fa0 R15: 00007ffedcc20a58 [ 505.609187][T21798] [ 505.928505][ T40] audit: type=1400 audit(505.853:873): avc: denied { accept } for pid=21818 comm="syz.1.6667" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 505.977605][T21821] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6668'. [ 506.089388][T21826] FAULT_INJECTION: forcing a failure. [ 506.089388][T21826] name failslab, interval 1, probability 0, space 0, times 0 [ 506.108618][T21826] CPU: 1 UID: 0 PID: 21826 Comm: syz.1.6670 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.108651][T21826] Tainted: [L]=SOFTLOCKUP [ 506.108658][T21826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.108668][T21826] Call Trace: [ 506.108675][T21826] [ 506.108684][T21826] dump_stack_lvl+0x100/0x190 [ 506.108712][T21826] should_fail_ex.cold+0x5/0xa [ 506.108739][T21826] should_failslab+0xc2/0x120 [ 506.108761][T21826] __kmalloc_cache_noprof+0x7a/0x6f0 [ 506.108785][T21826] ? nf_tables_commit+0x78c/0x92d0 [ 506.108818][T21826] nf_tables_commit+0x78c/0x92d0 [ 506.108856][T21826] ? nft_set_lookup_global+0x163/0x390 [ 506.108883][T21826] ? nf_tables_newsetelem+0x5e6/0xa60 [ 506.108907][T21826] ? __pfx_nf_tables_commit+0x10/0x10 [ 506.108937][T21826] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 506.108970][T21826] ? __nla_parse+0x40/0x60 [ 506.109032][T21826] nfnetlink_rcv_batch+0x1a4d/0x2880 [ 506.109074][T21826] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 506.109111][T21826] ? avc_has_perm_noaudit+0x145/0x3b0 [ 506.109171][T21826] ? __nla_parse+0x40/0x60 [ 506.109199][T21826] nfnetlink_rcv+0x3bd/0x440 [ 506.109218][T21826] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 506.109246][T21826] netlink_unicast+0x585/0x850 [ 506.109277][T21826] ? __pfx_netlink_unicast+0x10/0x10 [ 506.109300][T21826] ? __build_skb_around+0x278/0x390 [ 506.109333][T21826] netlink_sendmsg+0x8b0/0xda0 [ 506.109362][T21826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.109385][T21826] ? __might_fault+0xc0/0x140 [ 506.109422][T21826] ____sys_sendmsg+0x9e1/0xb70 [ 506.109445][T21826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.109485][T21826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.109523][T21826] ___sys_sendmsg+0x190/0x1e0 [ 506.109550][T21826] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.109607][T21826] __sys_sendmsg+0x170/0x220 [ 506.109627][T21826] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.109659][T21826] ? rcu_is_watching+0x12/0xc0 [ 506.109690][T21826] do_syscall_64+0x10b/0x860 [ 506.109717][T21826] ? clear_bhb_loop+0x40/0x90 [ 506.109739][T21826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.109758][T21826] RIP: 0033:0x7f746ad9ce59 [ 506.109775][T21826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.109792][T21826] RSP: 002b:00007f746bce9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.109811][T21826] RAX: ffffffffffffffda RBX: 00007f746b015fa0 RCX: 00007f746ad9ce59 [ 506.109823][T21826] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 506.109835][T21826] RBP: 00007f746bce9090 R08: 0000000000000000 R09: 0000000000000000 [ 506.109846][T21826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.109857][T21826] R13: 00007f746b016038 R14: 00007f746b015fa0 R15: 00007ffedcc20a58 [ 506.109882][T21826] [ 506.141439][T21824] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6669'. [ 506.453477][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6673'. [ 506.591599][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.838638][ T10] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 507.836019][T21853] can: request_module (can-proto-5) failed. [ 508.110555][ T40] audit: type=1400 audit(508.043:874): avc: denied { execute } for pid=21858 comm="syz.3.6680" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 508.488883][T21864] netlink: 'syz.3.6682': attribute type 5 has an invalid length. [ 508.551395][ T40] audit: type=1400 audit(508.483:875): avc: denied { map } for pid=21863 comm="syz.3.6682" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 508.661002][T21873] PKCS8: Unsupported PKCS#8 version [ 508.727025][ T40] audit: type=1400 audit(508.653:876): avc: denied { ioctl } for pid=21869 comm="syz.3.6686" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 508.840001][T21881] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6687'. [ 509.662750][T21892] Cannot find del_set index 0 as target [ 509.846311][T21902] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6695'. [ 509.948364][T21904] ip6t_srh: unknown srh match flags 4015 [ 510.055790][ T40] audit: type=1400 audit(509.983:877): avc: denied { unmount } for pid=18684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 510.144046][T21922] FAULT_INJECTION: forcing a failure. [ 510.144046][T21922] name failslab, interval 1, probability 0, space 0, times 0 [ 510.163616][T21922] CPU: 3 UID: 0 PID: 21922 Comm: syz.4.6704 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.163638][T21922] Tainted: [L]=SOFTLOCKUP [ 510.163643][T21922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 510.163649][T21922] Call Trace: [ 510.163654][T21922] [ 510.163659][T21922] dump_stack_lvl+0x100/0x190 [ 510.163678][T21922] should_fail_ex.cold+0x5/0xa [ 510.163696][T21922] should_failslab+0xc2/0x120 [ 510.163709][T21922] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 510.163728][T21922] ? alloc_vfsmnt+0x23/0x6a0 [ 510.163741][T21922] alloc_vfsmnt+0x23/0x6a0 [ 510.163753][T21922] clone_mnt+0x4b/0x930 [ 510.163765][T21922] ? mntput_no_expire+0xd8/0x220 [ 510.163786][T21922] copy_tree+0xfc/0xbf0 [ 510.163810][T21922] ? mntput_no_expire+0xe7/0x220 [ 510.163833][T21922] __do_loopback+0x418/0x4e0 [ 510.163860][T21922] path_mount+0x196c/0x23d0 [ 510.163889][T21922] ? __pfx_path_mount+0x10/0x10 [ 510.163909][T21922] ? lockdep_hardirqs_on+0x78/0x100 [ 510.163927][T21922] ? putname+0xb1/0x110 [ 510.163948][T21922] ? __x64_sys_mount+0x293/0x310 [ 510.163964][T21922] __x64_sys_mount+0x293/0x310 [ 510.163980][T21922] ? __pfx___x64_sys_mount+0x10/0x10 [ 510.163998][T21922] ? rcu_is_watching+0x12/0xc0 [ 510.164017][T21922] do_syscall_64+0x10b/0x860 [ 510.164033][T21922] ? clear_bhb_loop+0x40/0x90 [ 510.164048][T21922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.164059][T21922] RIP: 0033:0x7fdd43f9ce59 [ 510.164070][T21922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.164081][T21922] RSP: 002b:00007fdd44e7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 510.164093][T21922] RAX: ffffffffffffffda RBX: 00007fdd44215fa0 RCX: 00007fdd43f9ce59 [ 510.164099][T21922] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 510.164106][T21922] RBP: 00007fdd44e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 510.164112][T21922] R10: 00000000008b7840 R11: 0000000000000246 R12: 0000000000000002 [ 510.164119][T21922] R13: 00007fdd44216038 R14: 00007fdd44215fa0 R15: 00007ffc2a0f9288 [ 510.164133][T21922] [ 510.429118][T21919] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 510.733720][T21938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6711'. [ 512.392759][T21965] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 512.516388][T21971] binder: BINDER_SET_CONTEXT_MGR already set [ 512.523592][T21971] binder: 21970:21971 ioctl 4018620d 200000000040 returned -16 [ 512.532189][T21971] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6722'. [ 512.542213][T21971] binder: 21970:21971 ioctl c0306201 200000001ac0 returned -11 [ 512.605285][T21974] input: syz0 as /devices/virtual/input/input31 [ 513.543670][T21981] ip6t_srh: unknown srh match flags 4015 [ 513.544070][T21982] ip6t_srh: unknown srh match flags 4015 [ 513.553891][ T40] audit: type=1400 audit(513.483:878): avc: denied { bind } for pid=21980 comm="syz.1.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.231508][T22004] virt_wifi0 speed is unknown, defaulting to 1000 [ 514.272560][T22005] syzkaller1: entered promiscuous mode [ 514.288500][T22005] syzkaller1: entered allmulticast mode [ 514.734815][T22013] usb usb7: usbfs: process 22013 (syz.3.6738) did not claim interface 0 before use [ 514.795031][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6739'. [ 514.853073][T22019] input: syz0 as /devices/virtual/input/input32 [ 514.911336][ T40] audit: type=1400 audit(514.843:879): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 514.921844][ T40] audit: type=1400 audit(514.843:880): avc: denied { ioctl } for pid=22018 comm="syz.3.6741" path="socket:[92324]" dev="sockfs" ino=92324 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.954760][ T40] audit: type=1400 audit(514.883:881): avc: denied { write } for pid=22021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.047607][ T40] audit: type=1400 audit(514.973:882): avc: denied { write } for pid=22026 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.184787][ T40] audit: type=1400 audit(515.113:883): avc: denied { write } for pid=22032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.248209][ T40] audit: type=1400 audit(515.173:884): avc: denied { read } for pid=22040 comm="syz.2.6746" path="socket:[91100]" dev="sockfs" ino=91100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 515.310782][ T40] audit: type=1400 audit(515.243:885): avc: denied { write } for pid=22043 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.434997][ T40] audit: type=1400 audit(515.363:886): avc: denied { write } for pid=22045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.514911][ T40] audit: type=1400 audit(515.443:887): avc: denied { write } for pid=22050 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.518880][T22052] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 515.552565][T22052] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 515.594716][T22052] cramfs: wrong magic [ 515.730387][T22060] virt_wifi0 speed is unknown, defaulting to 1000 [ 515.979785][T22035] ------------[ cut here ]------------ [ 515.981844][T22035] !valid_signal(sig) [ 515.981854][T22035] WARNING: kernel/signal.c:2174 at do_notify_parent+0xea8/0x10b0, CPU#1: syz.3.6745/22035 [ 515.986329][T22035] Modules linked in: [ 515.987912][T22035] CPU: 1 UID: 0 PID: 22035 Comm: syz.3.6745 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.991309][T22035] Tainted: [L]=SOFTLOCKUP [ 515.992682][T22035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.995841][T22035] RIP: 0010:do_notify_parent+0xea8/0x10b0 [ 515.997640][T22035] Code: f4 ff ff e8 8a f4 3d 00 41 c1 ff 08 c7 84 24 90 00 00 00 01 00 00 00 44 89 bc 24 a0 00 00 00 e9 92 f8 ff ff e8 69 f4 3d 00 90 <0f> 0b 90 45 31 f6 e9 f5 f9 ff ff e8 58 f4 3d 00 90 0f 0b 90 e9 43 [ 516.003661][T22035] RSP: 0018:ffffc9000405fa98 EFLAGS: 00010093 [ 516.005609][T22035] RAX: 0000000000000000 RBX: ffff888064c6a500 RCX: ffffffff81caaf8b [ 516.008124][T22035] RDX: ffff888064c6a500 RSI: ffffffff81cabd77 RDI: ffff888064c6a500 [ 516.010622][T22035] RBP: 0000000000000080 R08: 0000000000000007 R09: 0000000000000040 [ 516.013103][T22035] R10: 0000000000000080 R11: 0000000000000000 R12: 1ffff9200080bf56 [ 516.015600][T22035] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff888024d62500 [ 516.018117][T22035] FS: 0000000000000000(0000) GS:ffff8880d646a000(0000) knlGS:0000000000000000 [ 516.020826][T22035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.022941][T22035] CR2: 00007f9c3d9bbd58 CR3: 0000000058e78000 CR4: 0000000000352ef0 [ 516.025424][T22035] Call Trace: [ 516.026528][T22035] [ 516.027456][T22035] ? __pfx_do_notify_parent+0x10/0x10 [ 516.029151][T22035] ? do_raw_spin_lock+0x128/0x260 [ 516.030767][T22035] ? lockdep_hardirqs_on+0x78/0x100 [ 516.032609][T22035] ? _raw_write_lock_irq+0x45/0x50 [ 516.034317][T22035] do_exit+0x1b84/0x2af0 [ 516.035701][T22035] ? __pfx_do_exit+0x10/0x10 [ 516.037171][T22035] ? __pfx_proc_coredump_connector+0x10/0x10 [ 516.039189][T22035] do_group_exit+0xd5/0x2a0 [ 516.040639][T22035] get_signal+0x20ff/0x2210 [ 516.042115][T22035] ? __pfx_get_signal+0x10/0x10 [ 516.043652][T22035] arch_do_signal_or_restart+0x91/0x7e0 [ 516.045367][T22035] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.047271][T22035] ? cond_local_irq_disable.part.0+0x38/0x40 [ 516.049129][T22035] ? rcu_is_watching+0x12/0xc0 [ 516.050664][T22035] irqentry_exit+0x410/0x7e0 [ 516.052155][T22035] asm_exc_general_protection+0x26/0x30 [ 516.053904][T22035] RIP: 0033:0x7f7f9bb9ce61 [ 516.055281][T22035] Code: Unable to access opcode bytes at 0x7f7f9bb9ce37. [ 516.057411][T22035] RSP: 002b:0000200000000030 EFLAGS: 00010217 [ 516.059356][T22035] RAX: 0000000000000000 RBX: 00007f7f9be15fa0 RCX: 00007f7f9bb9ce59 [ 516.061820][T22035] RDX: 0000200000000040 RSI: 0000200000000030 RDI: 0000000000124080 [ 516.064303][T22035] RBP: 00007f7f9bc32d6f R08: 0000200000000180 R09: 0000200000000180 [ 516.066789][T22035] R10: 0000200000000100 R11: 0000000000000202 R12: 0000000000000000 [ 516.069262][T22035] R13: 00007f7f9be16038 R14: 00007f7f9be15fa0 R15: 00007fffe6b77bd8 [ 516.071751][T22035] [ 516.072756][T22035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 516.075062][T22035] CPU: 1 UID: 0 PID: 22035 Comm: syz.3.6745 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.078484][T22035] Tainted: [L]=SOFTLOCKUP [ 516.079860][T22035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.083128][T22035] Call Trace: [ 516.084198][T22035] [ 516.085157][T22035] dump_stack_lvl+0x100/0x190 [ 516.086713][T22035] vpanic+0x552/0x970 [ 516.088003][T22035] ? __pfx_vpanic+0x10/0x10 [ 516.089506][T22035] panic+0xd1/0xe0 [ 516.090768][T22035] ? __pfx_panic+0x10/0x10 [ 516.092198][T22035] ? check_panic_on_warn+0x1f/0x90 [ 516.093827][T22035] check_panic_on_warn.cold+0x19/0x34 [ 516.095545][T22035] ? do_notify_parent+0xea8/0x10b0 [ 516.097184][T22035] __warn.cold+0x191/0x328 [ 516.098656][T22035] __report_bug+0x296/0x3d0 [ 516.100107][T22035] ? do_notify_parent+0xea8/0x10b0 [ 516.101733][T22035] ? __pfx___report_bug+0x10/0x10 [ 516.103342][T22035] ? kasan_record_aux_stack+0xa7/0xc0 [ 516.105101][T22035] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 516.107008][T22035] ? task_work_run+0x150/0x240 [ 516.108539][T22035] ? do_exit+0x951/0x2af0 [ 516.109898][T22035] ? do_group_exit+0xd5/0x2a0 [ 516.111388][T22035] ? get_signal+0x20ff/0x2210 [ 516.112890][T22035] ? arch_do_signal_or_restart+0x91/0x7e0 [ 516.114695][T22035] ? irqentry_exit+0x410/0x7e0 [ 516.116223][T22035] ? asm_exc_general_protection+0x26/0x30 [ 516.118058][T22035] ? do_notify_parent+0xea8/0x10b0 [ 516.119679][T22035] report_bug+0xb2/0x220 [ 516.121032][T22035] ? do_notify_parent+0xea8/0x10b0 [ 516.122664][T22035] handle_bug+0x16a/0x2a0 [ 516.124037][T22035] exc_invalid_op+0x17/0x50 [ 516.125496][T22035] asm_exc_invalid_op+0x1a/0x20 [ 516.127060][T22035] RIP: 0010:do_notify_parent+0xea8/0x10b0 [ 516.129149][T22035] Code: f4 ff ff e8 8a f4 3d 00 41 c1 ff 08 c7 84 24 90 00 00 00 01 00 00 00 44 89 bc 24 a0 00 00 00 e9 92 f8 ff ff e8 69 f4 3d 00 90 <0f> 0b 90 45 31 f6 e9 f5 f9 ff ff e8 58 f4 3d 00 90 0f 0b 90 e9 43 [ 516.136731][T22035] RSP: 0018:ffffc9000405fa98 EFLAGS: 00010093 [ 516.139165][T22035] RAX: 0000000000000000 RBX: ffff888064c6a500 RCX: ffffffff81caaf8b [ 516.142245][T22035] RDX: ffff888064c6a500 RSI: ffffffff81cabd77 RDI: ffff888064c6a500 [ 516.145360][T22035] RBP: 0000000000000080 R08: 0000000000000007 R09: 0000000000000040 [ 516.148460][T22035] R10: 0000000000000080 R11: 0000000000000000 R12: 1ffff9200080bf56 [ 516.151531][T22035] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff888024d62500 [ 516.154615][T22035] ? do_notify_parent+0xbb/0x10b0 [ 516.156618][T22035] ? do_notify_parent+0xea7/0x10b0 [ 516.158636][T22035] ? do_notify_parent+0xea7/0x10b0 [ 516.160655][T22035] ? __pfx_do_notify_parent+0x10/0x10 [ 516.162762][T22035] ? do_raw_spin_lock+0x128/0x260 [ 516.164747][T22035] ? lockdep_hardirqs_on+0x78/0x100 [ 516.166786][T22035] ? _raw_write_lock_irq+0x45/0x50 [ 516.168828][T22035] do_exit+0x1b84/0x2af0 [ 516.170494][T22035] ? __pfx_do_exit+0x10/0x10 [ 516.172296][T22035] ? __pfx_proc_coredump_connector+0x10/0x10 [ 516.174640][T22035] do_group_exit+0xd5/0x2a0 [ 516.176420][T22035] get_signal+0x20ff/0x2210 [ 516.178270][T22035] ? __pfx_get_signal+0x10/0x10 [ 516.180184][T22035] arch_do_signal_or_restart+0x91/0x7e0 [ 516.182352][T22035] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.184767][T22035] ? cond_local_irq_disable.part.0+0x38/0x40 [ 516.187231][T22035] ? rcu_is_watching+0x12/0xc0 [ 516.189149][T22035] irqentry_exit+0x410/0x7e0 [ 516.190963][T22035] asm_exc_general_protection+0x26/0x30 [ 516.193105][T22035] RIP: 0033:0x7f7f9bb9ce61 [ 516.194849][T22035] Code: Unable to access opcode bytes at 0x7f7f9bb9ce37. [ 516.197532][T22035] RSP: 002b:0000200000000030 EFLAGS: 00010217 [ 516.199925][T22035] RAX: 0000000000000000 RBX: 00007f7f9be15fa0 RCX: 00007f7f9bb9ce59 [ 516.202984][T22035] RDX: 0000200000000040 RSI: 0000200000000030 RDI: 0000000000124080 [ 516.205570][T22035] RBP: 00007f7f9bc32d6f R08: 0000200000000180 R09: 0000200000000180 [ 516.208121][T22035] R10: 0000200000000100 R11: 0000000000000202 R12: 0000000000000000 [ 516.210596][T22035] R13: 00007f7f9be16038 R14: 00007f7f9be15fa0 R15: 00007fffe6b77bd8 [ 516.213076][T22035] [ 517.286511][T22035] Shutting down cpus with NMI [ 517.289401][T22035] Kernel Offset: disabled [ 517.291237][T22035] Rebooting in 86400 seconds..