last executing test programs: 2m12.262633755s ago: executing program 0 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) exit(0x3) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m11.373566918s ago: executing program 0 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "b156"}, 0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 2m10.688436038s ago: executing program 0 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) shutdown(r0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) 2m10.667918717s ago: executing program 0 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 2m10.57594177s ago: executing program 0 (id=369): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m10.192198639s ago: executing program 0 (id=373): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8) 2m10.144523041s ago: executing program 32 (id=373): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) close(0x3) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8) 1m38.994247195s ago: executing program 4 (id=636): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.846712287s ago: executing program 4 (id=638): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1m38.796102508s ago: executing program 4 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0xc13, 0x62e98893, 0x2, 0x9, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m38.67998279s ago: executing program 4 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m38.593294443s ago: executing program 4 (id=645): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x200) 1m38.32546425s ago: executing program 4 (id=654): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2, 0x805, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) 1m38.239958214s ago: executing program 33 (id=654): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2, 0x805, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) 53.631972226s ago: executing program 1 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x3, 0x3, 0xfffffff9, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb3, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 53.445162743s ago: executing program 1 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r1, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 53.235449468s ago: executing program 1 (id=1141): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 53.076368371s ago: executing program 1 (id=1144): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 52.886017444s ago: executing program 1 (id=1145): setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1a000}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback=0xa00020f}], 0x18}, 0x8050) close(0x3) 52.502041581s ago: executing program 1 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='kvm-clock\n', 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000240)) 52.386149185s ago: executing program 34 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='kvm-clock\n', 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000240)) 47.681612022s ago: executing program 2 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.425851888s ago: executing program 2 (id=1202): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000080)={0x1, 0xffbff806, 0x9, 0x6, 0x2, 0xb20, 0x7, 0xe, 0x9, 0x40, 0xefffffff, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300)) 47.302109799s ago: executing program 2 (id=1206): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 47.192900497s ago: executing program 2 (id=1209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) preadv(r2, &(0x7f00000002c0)=[{0x0}], 0x1, 0x4, 0x0) 46.97698336s ago: executing program 2 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 46.708432765s ago: executing program 2 (id=1218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000b40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd74, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @multicast1}, "dd9dec79219eb549caaa1e2796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2081ff56c5eb2ad500117a765ee6e05d05c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd971513980a4ddc54bbe462cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c9fc12290ec809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198da1ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1"}}}}, 0x0) 31.582320956s ago: executing program 35 (id=1218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000b40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd74, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @multicast1}, "dd9dec79219eb549caaa1e2796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2081ff56c5eb2ad500117a765ee6e05d05c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd971513980a4ddc54bbe462cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c9fc12290ec809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198da1ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1"}}}}, 0x0) 24.00248563s ago: executing program 7 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0x19, 0xb}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) 23.891072634s ago: executing program 7 (id=1419): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x9bd}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 23.822797713s ago: executing program 7 (id=1420): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031614d3fc140000004788", 0xc, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15.236267361s ago: executing program 6 (id=1502): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) 11.729922507s ago: executing program 6 (id=1543): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x10000, 0xff, 0x1000150}, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x807ffffe, 0x200, 0x1006, 0x200015b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x200002, 0xba, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x16, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 11.145740581s ago: executing program 6 (id=1547): close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xf8cde000) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 10.894447832s ago: executing program 6 (id=1549): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 10.842657209s ago: executing program 6 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff1, 0xffff}, {0x300, 0x9702fd4b6861288c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.170990429s ago: executing program 8 (id=1585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.08723627s ago: executing program 8 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.136077474s ago: executing program 8 (id=1587): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20040600) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x19e0, 0x400, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 4.946406606s ago: executing program 8 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 4.93928561s ago: executing program 8 (id=1589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="c26d6d6d9d01954b3924fac24cf871cbb74fc116f1f834683ec78716deabfd4f2b181e32a37bc2d7534539e98cdc10af30740c67ee649f2bf879a82ca8b98914988009c7e78158bcfde8117201349b049039fc68069ffc7346731046ee351d99c01f9a3f9f1907869130ef5d7347c1d35ef2f42b7c9390df29ad4da7cd6f904f7964a58ae6d760acfbd2008e8c5a72e7d1e42549c2284faa832e768e4d9a472009674831fbabdda5ef01b74ff8e64f6b65b50a179d7f0e1e0537881c6f78f24f6b7b8bc27af8ac9dcdcfa1168fea31bab287e3608a85cd3dbf2a97ff60fcf31ddba5", 0xe2}, {0x0}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x4048845) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003f00)=""/4096, 0xfed2}], 0x1}}], 0x1, 0x12102, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x4004) 4.605913854s ago: executing program 8 (id=1590): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) 4.556117609s ago: executing program 37 (id=1590): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) 788.583727ms ago: executing program 5 (id=1615): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x88801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00') 783.620483ms ago: executing program 5 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x400}}}}}}}, 0x0) 703.329448ms ago: executing program 5 (id=1617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x400, 0xfff, 0x3fffc, 0x180, 0x6, 0x8, 0x2da, 0x9, 0x7, 0x5, 0x7aa3, 0x8, 0x0, 0x6, 0x8000, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) 569.402924ms ago: executing program 5 (id=1618): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000080)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 399.572119ms ago: executing program 5 (id=1621): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 317.927693ms ago: executing program 3 (id=1622): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 312.20681ms ago: executing program 3 (id=1623): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 269.740672ms ago: executing program 3 (id=1624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x43, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000300)=0xa5f, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="005dbd7db88b9d57fb739a73b503eacaa300cca2942e6c3ab3", 0x19}], 0x1}}], 0x1, 0x4000801) 244.8516ms ago: executing program 3 (id=1625): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x800002b, r1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 116.114307ms ago: executing program 3 (id=1626): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x3, 0x80, 0xe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 44.065243ms ago: executing program 3 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @val=@netkit={@void, @value=r1}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c40)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10) 0s ago: executing program 5 (id=1628): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) kernel console output (not intermixed with test programs): 1! [ 170.570282][ T5899] cxacru 10-1:1.0: probe with driver cxacru failed with error -71 [ 170.580850][ T5899] usb 10-1: USB disconnect, device number 11 [ 170.665984][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.746205][ T3379] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 170.746236][ T3379] ATM dev 1: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 170.746247][ T3379] ATM dev 1: usbatm_atm_init: atm_start failed: -71! [ 170.765250][ T3379] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 170.773688][ T3379] usb 8-1: USB disconnect, device number 13 [ 170.905795][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.954836][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 171.110306][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 171.111124][ T25] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.112228][ T25] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.112250][ T25] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.112271][ T25] usb 11-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 171.112292][ T25] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 171.112314][ T25] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 171.112333][ T25] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.112367][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.335472][ T25] usb 11-1: GET_CAPABILITIES returned 0 [ 171.335498][ T25] usbtmc 11-1:16.0: can't read capabilities [ 171.567453][ T5607] usb 11-1: USB disconnect, device number 2 [ 171.591380][ T9581] input: syz0 as /devices/virtual/input/input16 [ 171.710595][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.049882][ T9605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.050201][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.285144][ C3] Unknown status report in ack skb [ 172.346660][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.427335][ T9626] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.553873][ T9632] FAULT_INJECTION: forcing a failure. [ 172.553873][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.553899][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.3.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.553916][ T9632] Tainted: [L]=SOFTLOCKUP [ 172.553920][ T9632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.553927][ T9632] Call Trace: [ 172.553932][ T9632] [ 172.553938][ T9632] dump_stack_lvl+0x100/0x190 [ 172.553958][ T9632] should_fail_ex.cold+0x5/0xa [ 172.553976][ T9632] _copy_from_user+0x2e/0xd0 [ 172.553994][ T9632] __ia32_compat_sys_socketcall+0x187/0x770 [ 172.554009][ T9632] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 172.554021][ T9632] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 172.554038][ T9632] ? xfd_validate_state+0x129/0x190 [ 172.554062][ T9632] __do_fast_syscall_32+0x13a/0x8b0 [ 172.554083][ T9632] do_fast_syscall_32+0x32/0x70 [ 172.554100][ T9632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.554116][ T9632] RIP: 0023:0xf703efec [ 172.554130][ T9632] Code: Unable to access opcode bytes at 0xf703efc2. [ 172.554136][ T9632] RSP: 002b:00000000f542c4a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 172.554149][ T9632] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f542c4b0 [ 172.554157][ T9632] RDX: 00000000f7408ff4 RSI: 0000000000000000 RDI: 00000000f7408ff4 [ 172.554165][ T9632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.554172][ T9632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.554179][ T9632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.554193][ T9632] [ 173.016264][ T9643] netlink: 'syz.5.1279': attribute type 1 has an invalid length. [ 173.076723][ T9643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.112930][ T9649] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 173.735038][ T9669] FAULT_INJECTION: forcing a failure. [ 173.735038][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 173.735072][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.5.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.735098][ T9669] Tainted: [L]=SOFTLOCKUP [ 173.735104][ T9669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.735115][ T9669] Call Trace: [ 173.735121][ T9669] [ 173.735129][ T9669] dump_stack_lvl+0x100/0x190 [ 173.735157][ T9669] should_fail_ex.cold+0x5/0xa [ 173.735180][ T9669] should_failslab+0xc2/0x120 [ 173.735203][ T9669] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.735230][ T9669] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 173.735248][ T9669] ? blk_alloc_queue_stats+0x3f/0x110 [ 173.735270][ T9669] blk_alloc_queue_stats+0x3f/0x110 [ 173.735290][ T9669] blk_alloc_queue+0xda/0x790 [ 173.735310][ T9669] ? alloc_pages_node_noprof+0x11d/0x200 [ 173.735329][ T9669] blk_mq_alloc_queue+0x174/0x290 [ 173.735345][ T9669] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 173.735368][ T9669] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 173.735387][ T9669] __blk_mq_alloc_disk+0x29/0x120 [ 173.735403][ T9669] loop_add+0x498/0xb60 [ 173.735416][ T9669] ? __pfx_loop_add+0x10/0x10 [ 173.735435][ T9669] ? __fget_files+0x34/0x3d0 [ 173.735448][ T9669] ? find_held_lock+0x2b/0x80 [ 173.735461][ T9669] ? __fget_files+0x215/0x3d0 [ 173.735474][ T9669] loop_control_ioctl+0xae/0x620 [ 173.735487][ T9669] ? __pfx_loop_control_ioctl+0x10/0x10 [ 173.735502][ T9669] ? __pfx_loop_control_ioctl+0x10/0x10 [ 173.735515][ T9669] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 173.735536][ T9669] __do_fast_syscall_32+0x13a/0x8b0 [ 173.735556][ T9669] do_fast_syscall_32+0x32/0x70 [ 173.735573][ T9669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.735586][ T9669] RIP: 0023:0xf6fdefec [ 173.735601][ T9669] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 173.735611][ T9669] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 173.735622][ T9669] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c80 [ 173.735629][ T9669] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.735636][ T9669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.735642][ T9669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.735648][ T9669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.735662][ T9669] [ 173.786719][ T3379] net_ratelimit: 2 callbacks suppressed [ 173.786905][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.328577][ T9693] FAULT_INJECTION: forcing a failure. [ 174.328577][ T9693] name failslab, interval 1, probability 0, space 0, times 0 [ 174.328737][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.5.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.328767][ T9693] Tainted: [L]=SOFTLOCKUP [ 174.328775][ T9693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.328786][ T9693] Call Trace: [ 174.328793][ T9693] [ 174.328800][ T9693] dump_stack_lvl+0x100/0x190 [ 174.328832][ T9693] should_fail_ex.cold+0x5/0xa [ 174.328859][ T9693] should_failslab+0xc2/0x120 [ 174.328884][ T9693] __kvmalloc_node_noprof+0x113/0x9b0 [ 174.328908][ T9693] ? trace_kmem_cache_alloc+0xdd/0x100 [ 174.328933][ T9693] ? p9_fcall_init+0x227/0x420 [ 174.328957][ T9693] p9_fcall_init+0x227/0x420 [ 174.329000][ T9693] p9_tag_alloc+0x20d/0x860 [ 174.329025][ T9693] ? __pfx_p9_tag_alloc+0x10/0x10 [ 174.329049][ T9693] ? path_mount+0x7d0/0x24c0 [ 174.329073][ T9693] ? __ia32_sys_mount+0x292/0x310 [ 174.329097][ T9693] ? __do_fast_syscall_32+0x13a/0x8b0 [ 174.329120][ T9693] ? do_fast_syscall_32+0x32/0x70 [ 174.329146][ T9693] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.329171][ T9693] p9_client_prepare_req+0x19b/0x4d0 [ 174.329198][ T9693] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 174.329221][ T9693] ? find_held_lock+0x2b/0x80 [ 174.329241][ T9693] ? __debug_object_init+0x2de/0x3d0 [ 174.329268][ T9693] ? rcu_is_watching+0x13/0xc0 [ 174.329293][ T9693] p9_client_rpc+0x1c4/0xd60 [ 174.329317][ T9693] ? __pfx_p9_client_rpc+0x10/0x10 [ 174.329334][ T9693] ? __fget_files+0x34/0x3d0 [ 174.329359][ T9693] ? __fget_files+0x215/0x3d0 [ 174.329385][ T9693] ? p9_fd_poll+0x1db/0x2c0 [ 174.329408][ T9693] ? p9_conn_create+0x42f/0x550 [ 174.329430][ T9693] p9_client_create+0x7a6/0xd40 [ 174.329449][ T9693] ? __pfx_p9_client_create+0x10/0x10 [ 174.329472][ T9693] ? lockdep_init_map_type+0x5c/0x250 [ 174.329497][ T9693] ? __raw_spin_lock_init+0x3a/0x110 [ 174.329528][ T9693] v9fs_session_init+0x3c/0xdd0 [ 174.329547][ T9693] ? v9fs_get_tree+0x9c/0xb50 [ 174.329575][ T9693] v9fs_get_tree+0xb8/0xb50 [ 174.329596][ T9693] ? rcu_is_watching+0x13/0xc0 [ 174.329615][ T9693] ? __pfx_v9fs_get_tree+0x10/0x10 [ 174.329637][ T9693] ? bpf_lsm_capable+0x9/0x10 [ 174.329659][ T9693] ? security_capable+0x80/0x260 [ 174.329679][ T9693] vfs_get_tree+0x92/0x320 [ 174.329702][ T9693] path_mount+0x7d0/0x24c0 [ 174.329726][ T9693] ? __pfx_path_mount+0x10/0x10 [ 174.329745][ T9693] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.329769][ T9693] ? putname+0xb1/0x110 [ 174.329787][ T9693] ? kmem_cache_free+0x127/0x6c0 [ 174.329817][ T9693] ? __ia32_sys_mount+0x292/0x310 [ 174.329860][ T9693] __ia32_sys_mount+0x292/0x310 [ 174.329887][ T9693] ? __pfx___ia32_sys_mount+0x10/0x10 [ 174.329920][ T9693] __do_fast_syscall_32+0x13a/0x8b0 [ 174.329951][ T9693] do_fast_syscall_32+0x32/0x70 [ 174.329977][ T9693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.330000][ T9693] RIP: 0023:0xf6fdefec [ 174.330021][ T9693] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 174.330028][ T9693] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 174.330048][ T9693] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 174.330061][ T9693] RDX: 00000000800000c0 RSI: 0000000000800006 RDI: 0000000080000480 [ 174.330074][ T9693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.330086][ T9693] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.330097][ T9693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.330119][ T9693] [ 174.827382][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.394650][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.865364][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.904957][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.949450][ T9764] hub 1-0:1.0: USB hub found [ 176.949706][ T9764] hub 1-0:1.0: 2 ports detected [ 177.860914][ T9777] FAULT_INJECTION: forcing a failure. [ 177.860914][ T9777] name failslab, interval 1, probability 0, space 0, times 0 [ 177.860937][ T9777] CPU: 2 UID: 0 PID: 9777 Comm: syz.5.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.860953][ T9777] Tainted: [L]=SOFTLOCKUP [ 177.860957][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.860995][ T9777] Call Trace: [ 177.861000][ T9777] [ 177.861005][ T9777] dump_stack_lvl+0x100/0x190 [ 177.861026][ T9777] should_fail_ex.cold+0x5/0xa [ 177.861042][ T9777] should_failslab+0xc2/0x120 [ 177.861059][ T9777] __kmalloc_cache_noprof+0x91/0x6d0 [ 177.861080][ T9777] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 177.861100][ T9777] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 177.861120][ T9777] ? trace_contention_end+0x126/0x160 [ 177.861136][ T9777] ? __mutex_lock+0x26c/0x1bd0 [ 177.861152][ T9777] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 177.861170][ T9777] ? futex_wake+0x4ea/0x5e0 [ 177.861183][ T9777] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 177.861200][ T9777] ? __pfx___mutex_lock+0x10/0x10 [ 177.861222][ T9777] ? __fsnotify_parent+0x2b4/0xd00 [ 177.861242][ T9777] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 177.861262][ T9777] snd_pcm_oss_sync+0x1de/0x840 [ 177.861281][ T9777] snd_pcm_oss_release+0x238/0x300 [ 177.861298][ T9777] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 177.861315][ T9777] __fput+0x3ff/0xb50 [ 177.861334][ T9777] fput_close_sync+0x118/0x250 [ 177.861349][ T9777] ? __pfx_fput_close_sync+0x10/0x10 [ 177.861367][ T9777] __ia32_sys_close+0x8b/0x120 [ 177.861383][ T9777] __do_fast_syscall_32+0x13a/0x8b0 [ 177.861402][ T9777] do_fast_syscall_32+0x32/0x70 [ 177.861418][ T9777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.861438][ T9777] RIP: 0023:0xf6fdefec [ 177.861454][ T9777] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 177.861463][ T9777] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000006 [ 177.861475][ T9777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 177.861482][ T9777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.861490][ T9777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.861497][ T9777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.861504][ T9777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.861519][ T9777] [ 177.966250][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.427127][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.984928][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.029578][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.068448][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.477315][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.105066][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.374419][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.393846][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.400511][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.400679][ T9794] loop6: detected capacity change from 0 to 2640 [ 182.401292][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.402812][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.416832][ T9788] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.417420][ T9788] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.417691][ T9788] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.417924][ T9788] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.418191][ T9788] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.707990][ T9815] FAULT_INJECTION: forcing a failure. [ 182.707990][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 182.708014][ T9815] CPU: 3 UID: 0 PID: 9815 Comm: syz.6.1333 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.708029][ T9815] Tainted: [L]=SOFTLOCKUP [ 182.708033][ T9815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.708040][ T9815] Call Trace: [ 182.708044][ T9815] [ 182.708049][ T9815] dump_stack_lvl+0x100/0x190 [ 182.708069][ T9815] should_fail_ex.cold+0x5/0xa [ 182.708086][ T9815] should_failslab+0xc2/0x120 [ 182.708103][ T9815] __kmalloc_cache_noprof+0x91/0x6d0 [ 182.708125][ T9815] ? __do_sys_memfd_create+0x170/0x3d0 [ 182.708143][ T9815] __do_sys_memfd_create+0x170/0x3d0 [ 182.708160][ T9815] __do_fast_syscall_32+0x13a/0x8b0 [ 182.708179][ T9815] do_fast_syscall_32+0x32/0x70 [ 182.708196][ T9815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.708211][ T9815] RIP: 0023:0xf702efec [ 182.708225][ T9815] Code: Unable to access opcode bytes at 0xf702efc2. [ 182.708231][ T9815] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000164 [ 182.708242][ T9815] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000003 [ 182.708250][ T9815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.708258][ T9815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.708266][ T9815] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 182.708274][ T9815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.708288][ T9815] [ 182.773292][ T9818] FAULT_INJECTION: forcing a failure. [ 182.773292][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 182.773314][ T9818] CPU: 2 UID: 0 PID: 9818 Comm: syz.3.1335 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.773331][ T9818] Tainted: [L]=SOFTLOCKUP [ 182.773335][ T9818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.773359][ T9818] Call Trace: [ 182.773364][ T9818] [ 182.773369][ T9818] dump_stack_lvl+0x100/0x190 [ 182.773389][ T9818] should_fail_ex.cold+0x5/0xa [ 182.773406][ T9818] should_failslab+0xc2/0x120 [ 182.773422][ T9818] __kvmalloc_node_noprof+0x113/0x9b0 [ 182.773438][ T9818] ? tun_attach.isra.0+0x97b/0x1870 [ 182.773456][ T9818] tun_attach.isra.0+0x97b/0x1870 [ 182.773473][ T9818] ? round_jiffies_up+0xea/0x130 [ 182.773489][ T9818] ? __pfx_round_jiffies_up+0x10/0x10 [ 182.773505][ T9818] ? timer_init_key+0x150/0x310 [ 182.773522][ T9818] tun_net_init+0x416/0x560 [ 182.773540][ T9818] ? __pfx_tun_net_init+0x10/0x10 [ 182.773554][ T9818] register_netdevice+0x685/0x25a0 [ 182.773572][ T9818] ? __pfx_register_netdevice+0x10/0x10 [ 182.773590][ T9818] ? alloc_netdev_mqs+0x120a/0x15c0 [ 182.773610][ T9818] __tun_chr_ioctl+0x1ef4/0x4880 [ 182.773625][ T9818] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.773648][ T9818] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 182.773662][ T9818] ? __fget_files+0x34/0x3d0 [ 182.773677][ T9818] ? hook_file_ioctl_common+0x140/0x440 [ 182.773698][ T9818] ? __fget_files+0x21f/0x3d0 [ 182.773720][ T9818] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 182.773744][ T9818] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 182.773773][ T9818] __do_fast_syscall_32+0x13a/0x8b0 [ 182.773806][ T9818] do_fast_syscall_32+0x32/0x70 [ 182.773836][ T9818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.773858][ T9818] RIP: 0023:0xf703efec [ 182.773878][ T9818] Code: Unable to access opcode bytes at 0xf703efc2. [ 182.773885][ T9818] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 182.773902][ T9818] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 182.773916][ T9818] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.773928][ T9818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.773938][ T9818] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 182.773947][ T9818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.773968][ T9818] [ 182.994007][ T9796] lo speed is unknown, defaulting to 1000 [ 183.054213][ T9835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.054374][ T9835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.056855][ T9835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.067508][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.071575][ T9835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.315896][ T9845] FAULT_INJECTION: forcing a failure. [ 183.315896][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 183.315938][ T9845] CPU: 2 UID: 60928 PID: 9845 Comm: syz.5.1344 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.315971][ T9845] Tainted: [L]=SOFTLOCKUP [ 183.315980][ T9845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.315993][ T9845] Call Trace: [ 183.316000][ T9845] [ 183.316009][ T9845] dump_stack_lvl+0x100/0x190 [ 183.316043][ T9845] should_fail_ex.cold+0x5/0xa [ 183.316071][ T9845] should_failslab+0xc2/0x120 [ 183.316101][ T9845] __kmalloc_noprof+0xfc/0x840 [ 183.316125][ T9845] ? __register_sysctl_table+0xac/0x1650 [ 183.316161][ T9845] __register_sysctl_table+0xac/0x1650 [ 183.316189][ T9845] ? trace_kmalloc+0xeb/0x110 [ 183.316215][ T9845] ? __kasan_kmalloc+0xaa/0xb0 [ 183.316245][ T9845] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 183.316269][ T9845] ? __pfx___register_sysctl_table+0x10/0x10 [ 183.316294][ T9845] ? register_pidns_sysctls+0x48/0x1c0 [ 183.316327][ T9845] ? __asan_memcpy+0x3c/0x60 [ 183.316349][ T9845] register_pidns_sysctls+0x11d/0x1c0 [ 183.316372][ T9845] ? __ns_common_init+0x299/0x4b0 [ 183.316394][ T9845] copy_pid_ns+0x680/0x10a0 [ 183.316430][ T9845] ? __pfx_copy_pid_ns+0x10/0x10 [ 183.316464][ T9845] ? __pfx_copy_mnt_ns+0x10/0x10 [ 183.316494][ T9845] ? create_new_namespaces+0x30/0xac0 [ 183.316524][ T9845] create_new_namespaces+0x2aa/0xac0 [ 183.316554][ T9845] unshare_nsproxy_namespaces+0xf2/0x220 [ 183.316584][ T9845] ksys_unshare+0x4a2/0xa70 [ 183.316604][ T9845] ? __pfx_ksys_unshare+0x10/0x10 [ 183.316652][ T9845] __ia32_sys_unshare+0x30/0x40 [ 183.316673][ T9845] __do_fast_syscall_32+0x13a/0x8b0 [ 183.316708][ T9845] do_fast_syscall_32+0x32/0x70 [ 183.316736][ T9845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.316759][ T9845] RIP: 0023:0xf6fdefec [ 183.316783][ T9845] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 183.316792][ T9845] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 183.316814][ T9845] RAX: ffffffffffffffda RBX: 0000000062040000 RCX: 0000000000000000 [ 183.316830][ T9845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.316844][ T9845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.316856][ T9845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.316871][ T9845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.316894][ T9845] [ 183.491453][ T9856] FAULT_INJECTION: forcing a failure. [ 183.491453][ T9856] name failslab, interval 1, probability 0, space 0, times 0 [ 183.491477][ T9856] CPU: 0 UID: 0 PID: 9856 Comm: syz.3.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.491493][ T9856] Tainted: [L]=SOFTLOCKUP [ 183.491497][ T9856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.491504][ T9856] Call Trace: [ 183.491508][ T9856] [ 183.491512][ T9856] dump_stack_lvl+0x100/0x190 [ 183.491534][ T9856] should_fail_ex.cold+0x5/0xa [ 183.491550][ T9856] should_failslab+0xc2/0x120 [ 183.491567][ T9856] __kmalloc_cache_noprof+0x91/0x6d0 [ 183.491587][ T9856] ? copy_ipcs+0x10d/0x7e0 [ 183.491606][ T9856] copy_ipcs+0x10d/0x7e0 [ 183.491621][ T9856] create_new_namespaces+0x20a/0xac0 [ 183.491637][ T9856] ? security_capable+0x80/0x260 [ 183.491652][ T9856] unshare_nsproxy_namespaces+0xf2/0x220 [ 183.491670][ T9856] ksys_unshare+0x4a2/0xa70 [ 183.491689][ T9856] ? __pfx_ksys_unshare+0x10/0x10 [ 183.491707][ T9856] __ia32_sys_unshare+0x30/0x40 [ 183.491720][ T9856] __do_fast_syscall_32+0x13a/0x8b0 [ 183.491742][ T9856] do_fast_syscall_32+0x32/0x70 [ 183.491761][ T9856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.491778][ T9856] RIP: 0023:0xf703efec [ 183.491791][ T9856] Code: Unable to access opcode bytes at 0xf703efc2. [ 183.491796][ T9856] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 183.491809][ T9856] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 183.491817][ T9856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.491823][ T9856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.491829][ T9856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.491835][ T9856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.491848][ T9856] [ 183.670668][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.670755][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.670838][ T9796] bridge_slave_0: entered allmulticast mode [ 183.674171][ T9796] bridge_slave_0: entered promiscuous mode [ 183.681924][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.683582][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.683718][ T9796] bridge_slave_1: entered allmulticast mode [ 183.688237][ T9796] bridge_slave_1: entered promiscuous mode [ 183.759492][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.761875][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.779622][ T9796] team0: Port device team_slave_0 added [ 183.781093][ T9796] team0: Port device team_slave_1 added [ 183.797457][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.797472][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.797489][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.800393][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.800407][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.800423][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.848433][ T9796] hsr_slave_0: entered promiscuous mode [ 183.849656][ T9796] hsr_slave_1: entered promiscuous mode [ 183.850264][ T9796] debugfs: 'hsr0' already exists in 'hsr' [ 183.850283][ T9796] Cannot create hsr debugfs directory [ 184.033942][ T9796] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.045334][ T9796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.046340][ T9796] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.052793][ T9796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.053795][ T9796] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.057375][ T9796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.058321][ T9796] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.062189][ T9796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.082945][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.083026][ T9796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.083207][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.083293][ T9796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.148603][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.159723][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.160357][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.169478][ T9796] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.173690][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.173784][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.179370][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.179457][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.187328][ T5747] net_ratelimit: 5 callbacks suppressed [ 184.187345][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.521282][ T5758] Bluetooth: hci4: command tx timeout [ 184.531170][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.554458][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.785959][ T9908] FAULT_INJECTION: forcing a failure. [ 184.785959][ T9908] name failslab, interval 1, probability 0, space 0, times 0 [ 184.785988][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.3.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.786010][ T9908] Tainted: [L]=SOFTLOCKUP [ 184.786016][ T9908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.786026][ T9908] Call Trace: [ 184.786032][ T9908] [ 184.786038][ T9908] dump_stack_lvl+0x100/0x190 [ 184.786068][ T9908] should_fail_ex.cold+0x5/0xa [ 184.786089][ T9908] should_failslab+0xc2/0x120 [ 184.786112][ T9908] __kmalloc_noprof+0xfc/0x840 [ 184.786132][ T9908] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 184.786158][ T9908] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 184.786178][ T9908] vb2_core_reqbufs+0x382/0xf30 [ 184.786204][ T9908] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 184.786224][ T9908] ? trace_contention_end+0x126/0x160 [ 184.786247][ T9908] ? __video_do_ioctl+0x50f/0xdf0 [ 184.786276][ T9908] vb2_reqbufs+0x1a3/0x1f0 [ 184.786292][ T9908] ? __pfx_vb2_reqbufs+0x10/0x10 [ 184.786311][ T9908] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.786367][ T9908] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 184.786390][ T9908] v4l_reqbufs+0x175/0x1d0 [ 184.786416][ T9908] __video_do_ioctl+0xb2a/0xdf0 [ 184.786446][ T9908] ? __might_fault+0xc5/0x140 [ 184.786472][ T9908] ? __pfx___video_do_ioctl+0x10/0x10 [ 184.786509][ T9908] video_usercopy+0x3d3/0x14c0 [ 184.786538][ T9908] ? __pfx___video_do_ioctl+0x10/0x10 [ 184.786567][ T9908] ? __pfx_video_usercopy+0x10/0x10 [ 184.786602][ T9908] ? __fget_files+0x215/0x3d0 [ 184.786620][ T9908] ? hook_file_ioctl_common+0x140/0x440 [ 184.786652][ T9908] v4l2_ioctl+0x1bd/0x250 [ 184.786673][ T9908] v4l2_compat_ioctl32+0x20f/0x2d0 [ 184.786705][ T9908] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 184.786730][ T9908] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 184.786764][ T9908] __do_fast_syscall_32+0x13a/0x8b0 [ 184.786795][ T9908] do_fast_syscall_32+0x32/0x70 [ 184.786814][ T9908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.786828][ T9908] RIP: 0023:0xf703efec [ 184.786843][ T9908] Code: Unable to access opcode bytes at 0xf703efc2. [ 184.786848][ T9908] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 184.786860][ T9908] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 184.786868][ T9908] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.786875][ T9908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.786882][ T9908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.786889][ T9908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.786905][ T9908] [ 184.851240][ T9796] veth0_vlan: entered promiscuous mode [ 184.863709][ T9796] veth1_vlan: entered promiscuous mode [ 184.897005][ T9796] veth0_macvtap: entered promiscuous mode [ 184.914874][ T9796] veth1_macvtap: entered promiscuous mode [ 184.934359][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.942262][ T9912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.942365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.945901][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.965462][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.965501][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.965519][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.965537][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.037972][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.038056][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.090106][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.090136][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.206378][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 185.210436][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 185.227861][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.495281][ T9932] FAULT_INJECTION: forcing a failure. [ 185.495281][ T9932] name failslab, interval 1, probability 0, space 0, times 0 [ 185.495318][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.7.1364 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.495344][ T9932] Tainted: [L]=SOFTLOCKUP [ 185.495350][ T9932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.495359][ T9932] Call Trace: [ 185.495365][ T9932] [ 185.495373][ T9932] dump_stack_lvl+0x100/0x190 [ 185.495403][ T9932] should_fail_ex.cold+0x5/0xa [ 185.495425][ T9932] should_failslab+0xc2/0x120 [ 185.495448][ T9932] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 185.495468][ T9932] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 185.495499][ T9932] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 185.495523][ T9932] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 185.495549][ T9932] alloc_inode+0x68/0x250 [ 185.495573][ T9932] new_inode+0x22/0x1c0 [ 185.495610][ T9932] hugetlbfs_fill_super+0x58a/0xa00 [ 185.495631][ T9932] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 185.495648][ T9932] get_tree_nodev+0xdd/0x190 [ 185.495664][ T9932] hugetlbfs_get_tree+0x1e7/0x2b0 [ 185.495691][ T9932] vfs_get_tree+0x92/0x320 [ 185.495713][ T9932] path_mount+0x7d0/0x24c0 [ 185.495738][ T9932] ? __pfx_path_mount+0x10/0x10 [ 185.495757][ T9932] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.495786][ T9932] ? putname+0xb1/0x110 [ 185.495803][ T9932] ? kmem_cache_free+0x127/0x6c0 [ 185.495833][ T9932] ? __ia32_sys_mount+0x292/0x310 [ 185.495853][ T9932] __ia32_sys_mount+0x292/0x310 [ 185.495878][ T9932] ? __pfx___ia32_sys_mount+0x10/0x10 [ 185.495911][ T9932] __do_fast_syscall_32+0x13a/0x8b0 [ 185.495944][ T9932] do_fast_syscall_32+0x32/0x70 [ 185.495971][ T9932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.495992][ T9932] RIP: 0023:0xf7f77fec [ 185.496013][ T9932] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 185.496021][ T9932] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 185.496040][ T9932] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000200 [ 185.496051][ T9932] RDX: 0000000080000080 RSI: 0000000000010017 RDI: 0000000000000000 [ 185.496063][ T9932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.496075][ T9932] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.496087][ T9932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.496112][ T9932] [ 185.664141][ T43] audit: type=1326 audit(1790011132.333:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.664210][ T43] audit: type=1326 audit(1790011132.333:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689614][ T43] audit: type=1326 audit(1790011132.363:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689668][ T43] audit: type=1326 audit(1790011132.363:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689707][ T43] audit: type=1326 audit(1790011132.363:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689747][ T43] audit: type=1326 audit(1790011132.363:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689782][ T43] audit: type=1326 audit(1790011132.363:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689819][ T43] audit: type=1326 audit(1790011132.363:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689855][ T43] audit: type=1326 audit(1790011132.363:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 185.689893][ T43] audit: type=1326 audit(1790011132.363:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 186.067945][ T9] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 186.203923][ T9955] FAULT_INJECTION: forcing a failure. [ 186.203923][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 186.203950][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.7.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.203970][ T9955] Tainted: [L]=SOFTLOCKUP [ 186.203975][ T9955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.203983][ T9955] Call Trace: [ 186.203988][ T9955] [ 186.203994][ T9955] dump_stack_lvl+0x100/0x190 [ 186.204015][ T9955] should_fail_ex.cold+0x5/0xa [ 186.204033][ T9955] should_failslab+0xc2/0x120 [ 186.204059][ T9955] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 186.204082][ T9955] ? proc_alloc_inode+0x25/0x200 [ 186.204106][ T9955] ? __pfx_proc_alloc_inode+0x10/0x10 [ 186.204131][ T9955] proc_alloc_inode+0x25/0x200 [ 186.204154][ T9955] alloc_inode+0x68/0x250 [ 186.204173][ T9955] new_inode+0x22/0x1c0 [ 186.204192][ T9955] proc_setup_self+0x58/0x1e0 [ 186.204207][ T9955] proc_fill_super+0x5b8/0x870 [ 186.204225][ T9955] ? __pfx_proc_fill_super+0x10/0x10 [ 186.204241][ T9955] get_tree_nodev+0xdd/0x190 [ 186.204255][ T9955] vfs_get_tree+0x92/0x320 [ 186.204274][ T9955] path_mount+0x7d0/0x24c0 [ 186.204293][ T9955] ? __pfx_path_mount+0x10/0x10 [ 186.204308][ T9955] ? lockdep_hardirqs_on+0x7d/0x110 [ 186.204328][ T9955] ? putname+0xb1/0x110 [ 186.204342][ T9955] ? kmem_cache_free+0x127/0x6c0 [ 186.204366][ T9955] ? __ia32_sys_mount+0x292/0x310 [ 186.204382][ T9955] __ia32_sys_mount+0x292/0x310 [ 186.204399][ T9955] ? __pfx___ia32_sys_mount+0x10/0x10 [ 186.204420][ T9955] __do_fast_syscall_32+0x13a/0x8b0 [ 186.204442][ T9955] do_fast_syscall_32+0x32/0x70 [ 186.204485][ T9955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.204503][ T9955] RIP: 0023:0xf7f77fec [ 186.204518][ T9955] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 186.204523][ T9955] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 186.204565][ T9955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 186.204575][ T9955] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.204583][ T9955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.204591][ T9955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.204599][ T9955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.204616][ T9955] [ 186.207158][ T9955] proc_fill_super: can't allocate /proc/self [ 186.236772][ T9] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 186.238195][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.238221][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.238239][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 186.241538][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.241557][ T9] usb 8-1: Product: syz [ 186.241565][ T9] usb 8-1: Manufacturer: syz [ 186.241574][ T9] usb 8-1: SerialNumber: syz [ 186.243203][ T9] usb 8-1: config 0 descriptor?? [ 186.246389][ T9942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.279434][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.350609][ T9] rc_core: IR keymap rc-streamzap not found [ 186.350628][ T9] Registered IR keymap rc-empty [ 186.378457][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 186.380314][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 186.472129][ T9942] xt_SECMARK: invalid mode: 0 [ 186.495816][ T25] usb 8-1: USB disconnect, device number 14 [ 186.596232][ T5758] Bluetooth: hci4: command tx timeout [ 187.069956][ T9984] tipc: Started in network mode [ 187.069979][ T9984] tipc: Node identity bed60a731e36, cluster identity 4711 [ 187.070077][ T9984] tipc: Enabled bearer , priority 10 [ 187.102701][ T9983] tipc: Resetting bearer [ 187.127506][ T9983] tipc: Disabling bearer [ 187.128324][ T9978] FAULT_INJECTION: forcing a failure. [ 187.128324][ T9978] name failslab, interval 1, probability 0, space 0, times 0 [ 187.128358][ T9978] CPU: 3 UID: 0 PID: 9978 Comm: syz.7.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.128380][ T9978] Tainted: [L]=SOFTLOCKUP [ 187.128387][ T9978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.128397][ T9978] Call Trace: [ 187.128407][ T9978] [ 187.128414][ T9978] dump_stack_lvl+0x100/0x190 [ 187.128442][ T9978] should_fail_ex.cold+0x5/0xa [ 187.128459][ T9978] should_failslab+0xc2/0x120 [ 187.128476][ T9978] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 187.128510][ T9978] ? __kthread_create_on_node+0x186/0x3f0 [ 187.128535][ T9978] kvasprintf+0xbc/0x150 [ 187.128552][ T9978] ? __pfx_kvasprintf+0x10/0x10 [ 187.128568][ T9978] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 187.128587][ T9978] ? __kthread_create_on_node+0xce/0x3f0 [ 187.128607][ T9978] ? __pfx_cryptomgr_probe+0x10/0x10 [ 187.128618][ T9978] __kthread_create_on_node+0x186/0x3f0 [ 187.128636][ T9978] ? __pfx___kthread_create_on_node+0x10/0x10 [ 187.128661][ T9978] ? __pfx_cryptomgr_probe+0x10/0x10 [ 187.128673][ T9978] kthread_create_on_node+0xc7/0x100 [ 187.128690][ T9978] ? __pfx_kthread_create_on_node+0x10/0x10 [ 187.128722][ T9978] ? __kasan_kmalloc+0xaa/0xb0 [ 187.128737][ T9978] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 187.128762][ T9978] ? cryptomgr_notify+0xa4/0xb40 [ 187.128783][ T9978] cryptomgr_notify+0x953/0xb40 [ 187.128803][ T9978] ? __kasan_kmalloc+0xaa/0xb0 [ 187.128826][ T9978] notifier_call_chain+0x99/0x3f0 [ 187.128853][ T9978] blocking_notifier_call_chain+0x69/0xa0 [ 187.128875][ T9978] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 187.128905][ T9978] crypto_alloc_tfm_node+0xd3/0x260 [ 187.128965][ T9978] esp_init_authenc.constprop.0+0x1df/0xb50 [ 187.128996][ T9978] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 187.129034][ T9978] ? find_held_lock+0x2b/0x80 [ 187.129060][ T9978] esp6_init_state+0x3a6/0x500 [ 187.129096][ T9978] __xfrm_init_state+0x842/0x1dc0 [ 187.129130][ T9978] xfrm_init_state+0x1c/0xa0 [ 187.129155][ T9978] pfkey_add+0x1c88/0x2f10 [ 187.129187][ T9978] ? __pfx_pfkey_add+0x10/0x10 [ 187.129205][ T9978] ? kfree_skbmem+0x19f/0x210 [ 187.129216][ T9978] ? sk_skb_reason_drop+0x114/0x1b0 [ 187.129232][ T9978] ? pfkey_broadcast+0x28c/0x420 [ 187.129249][ T9978] ? __pfx_pfkey_add+0x10/0x10 [ 187.129265][ T9978] pfkey_process+0x5c3/0x810 [ 187.129283][ T9978] ? __pfx_pfkey_process+0x10/0x10 [ 187.129299][ T9978] ? pfkey_sendmsg+0x41a/0x840 [ 187.129323][ T9978] ? __pfx___alloc_skb+0x10/0x10 [ 187.129341][ T9978] pfkey_sendmsg+0x428/0x840 [ 187.129360][ T9978] ____sys_sendmsg+0xa4d/0xbe0 [ 187.129370][ T9978] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 187.129388][ T9978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.129406][ T9978] ___sys_sendmsg+0x190/0x1e0 [ 187.129418][ T9978] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.129430][ T9978] ? futex_wait+0x11e/0x370 [ 187.129449][ T9978] ? find_held_lock+0x2b/0x80 [ 187.129471][ T9978] __sys_sendmsg+0x160/0x210 [ 187.129486][ T9978] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.129508][ T9978] __do_fast_syscall_32+0x13a/0x8b0 [ 187.129528][ T9978] do_fast_syscall_32+0x32/0x70 [ 187.129544][ T9978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.129560][ T9978] RIP: 0023:0xf7f77fec [ 187.129577][ T9978] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 187.129582][ T9978] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 187.129595][ T9978] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 187.129602][ T9978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.129608][ T9978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.129614][ T9978] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.129620][ T9978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.129635][ T9978] [ 187.153723][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'. [ 187.307537][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.413414][ T9995] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 187.546251][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.657641][T10006] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1392'. [ 187.710632][T10008] FAULT_INJECTION: forcing a failure. [ 187.710632][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 187.710673][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz.7.1393 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.710703][T10008] Tainted: [L]=SOFTLOCKUP [ 187.710711][T10008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.710724][T10008] Call Trace: [ 187.710732][T10008] [ 187.710740][T10008] dump_stack_lvl+0x100/0x190 [ 187.710769][T10008] should_fail_ex.cold+0x5/0xa [ 187.710795][T10008] should_failslab+0xc2/0x120 [ 187.710821][T10008] __kmalloc_cache_node_noprof+0x94/0x720 [ 187.710845][T10008] ? __get_vm_area_node+0x124/0x350 [ 187.710871][T10008] __get_vm_area_node+0x124/0x350 [ 187.710897][T10008] ? xdp_umem_create+0xd1b/0x1200 [ 187.710922][T10008] get_vm_area_caller+0x71/0xa0 [ 187.710947][T10008] ? xdp_umem_create+0xd1b/0x1200 [ 187.710974][T10008] vmap+0x132/0x2e0 [ 187.710993][T10008] ? __pfx_vmap+0x10/0x10 [ 187.711032][T10008] ? xdp_umem_create+0x77e/0x1200 [ 187.711056][T10008] ? xdp_umem_create+0x77e/0x1200 [ 187.711083][T10008] xdp_umem_create+0xd1b/0x1200 [ 187.711112][T10008] xsk_setsockopt+0x7d8/0xab0 [ 187.711155][T10008] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.711184][T10008] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.711206][T10008] ? find_held_lock+0x2b/0x80 [ 187.711229][T10008] ? aa_sock_opt_perm+0x114/0x1e0 [ 187.711251][T10008] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.711273][T10008] do_sock_setsockopt+0xf3/0x1d0 [ 187.711306][T10008] __sys_setsockopt+0x119/0x190 [ 187.711339][T10008] __ia32_sys_setsockopt+0xbc/0x160 [ 187.711365][T10008] ? __do_fast_syscall_32+0xb3/0x8b0 [ 187.711395][T10008] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.711422][T10008] __do_fast_syscall_32+0x13a/0x8b0 [ 187.711455][T10008] do_fast_syscall_32+0x32/0x70 [ 187.711485][T10008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.711509][T10008] RIP: 0023:0xf7f77fec [ 187.711534][T10008] Code: Unable to access opcode bytes at 0xf7f77fc2. [ 187.711543][T10008] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 187.711564][T10008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 187.711577][T10008] RDX: 0000000000000004 RSI: 0000000080000000 RDI: 0000000000000020 [ 187.711589][T10008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.711600][T10008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.711612][T10008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.711637][T10008] [ 188.348670][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.373743][T10047] FAULT_INJECTION: forcing a failure. [ 188.373743][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 188.373781][T10047] CPU: 2 UID: 0 PID: 10047 Comm: syz.3.1406 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.373810][T10047] Tainted: [L]=SOFTLOCKUP [ 188.373818][T10047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.373830][T10047] Call Trace: [ 188.373837][T10047] [ 188.373845][T10047] dump_stack_lvl+0x100/0x190 [ 188.373897][T10047] should_fail_ex.cold+0x5/0xa [ 188.373922][T10047] should_failslab+0xc2/0x120 [ 188.373947][T10047] kmem_cache_alloc_noprof+0x92/0x6a0 [ 188.373969][T10047] ? kernfs_add_one+0x611/0xaa0 [ 188.373992][T10047] ? __kernfs_new_node+0xd2/0xa10 [ 188.374018][T10047] __kernfs_new_node+0xd2/0xa10 [ 188.374041][T10047] ? kernfs_add_one+0x214/0xaa0 [ 188.374070][T10047] ? __pfx___kernfs_new_node+0x10/0x10 [ 188.374098][T10047] ? lock_acquire+0x1d1/0x380 [ 188.374120][T10047] ? kernfs_root+0x23/0x2a0 [ 188.374140][T10047] ? find_held_lock+0x2b/0x80 [ 188.374157][T10047] ? kernfs_root+0xee/0x2a0 [ 188.374175][T10047] ? kernfs_root+0xee/0x2a0 [ 188.374200][T10047] kernfs_new_node+0x117/0x150 [ 188.374226][T10047] kernfs_create_link+0xcc/0x240 [ 188.374245][T10047] sysfs_do_create_link_sd+0x90/0x140 [ 188.374265][T10047] sysfs_create_link+0x61/0xc0 [ 188.374285][T10047] device_add+0x553/0x1970 [ 188.374312][T10047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.374336][T10047] ? __pfx_device_add+0x10/0x10 [ 188.374359][T10047] ? lockdep_init_map_type+0x5c/0x250 [ 188.374382][T10047] ? __init_waitqueue_head+0xca/0x150 [ 188.374412][T10047] netdev_register_kobject+0x1df/0x410 [ 188.374435][T10047] register_netdevice+0x15b6/0x25a0 [ 188.374464][T10047] ? __pfx_register_netdevice+0x10/0x10 [ 188.374488][T10047] ? slip_open+0xb49/0x1120 [ 188.374510][T10047] ? kfree+0x1e5/0x6d0 [ 188.374535][T10047] ? __local_bh_enable_ip+0xa5/0x120 [ 188.374565][T10047] slip_open+0xb8a/0x1120 [ 188.374592][T10047] ? __pfx_slip_open+0x10/0x10 [ 188.374614][T10047] ? down_write+0x146/0x1f0 [ 188.374634][T10047] ? __pfx_slip_open+0x10/0x10 [ 188.374679][T10047] tty_ldisc_open+0xa2/0x120 [ 188.374703][T10047] tty_set_ldisc+0x325/0x740 [ 188.374727][T10047] tty_ioctl+0x5b2/0x1640 [ 188.374750][T10047] ? __pfx_tty_ioctl+0x10/0x10 [ 188.374770][T10047] ? do_vfs_ioctl+0x226/0x13e0 [ 188.374797][T10047] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 188.374827][T10047] ? __fget_files+0x34/0x3d0 [ 188.374845][T10047] ? find_held_lock+0x2b/0x80 [ 188.374862][T10047] ? __fget_files+0x215/0x3d0 [ 188.374879][T10047] ? hook_file_ioctl_common+0x140/0x440 [ 188.374910][T10047] ? __fget_files+0x21f/0x3d0 [ 188.374931][T10047] tty_compat_ioctl+0x2b3/0x420 [ 188.374953][T10047] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 188.374976][T10047] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 188.375006][T10047] __do_fast_syscall_32+0x13a/0x8b0 [ 188.375035][T10047] do_fast_syscall_32+0x32/0x70 [ 188.375069][T10047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.375093][T10047] RIP: 0023:0xf703efec [ 188.375115][T10047] Code: Unable to access opcode bytes at 0xf703efc2. [ 188.375123][T10047] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 188.375143][T10047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005423 [ 188.375156][T10047] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.375167][T10047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.375177][T10047] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.375187][T10047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.375210][T10047] [ 188.545358][ T5897] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 188.675239][ T5758] Bluetooth: hci4: command tx timeout [ 188.704252][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.708135][ T5897] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 188.708190][ T5897] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 188.709449][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.709490][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.709512][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.710453][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.710488][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.710509][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.711513][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.711551][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.711573][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.712593][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.712626][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.712646][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.713756][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.713789][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.713809][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.715913][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.715955][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.715978][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.719217][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.719262][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.719285][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.720837][ T5897] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.720879][ T5897] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.720903][ T5897] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.725919][ T5897] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 188.725944][ T5897] usb 10-1: Product: syz [ 188.725956][ T5897] usb 10-1: Manufacturer: syz [ 188.725968][ T5897] usb 10-1: SerialNumber: syz [ 188.735733][ T5897] usb 10-1: config 0 descriptor?? [ 188.776209][ T5897] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 188.976003][ T3379] usb 10-1: USB disconnect, device number 12 [ 188.982965][ T3379] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 189.027263][ T5747] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 189.174729][ T5747] usb 8-1: Using ep0 maxpacket: 16 [ 189.176991][ T5747] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 189.177034][ T5747] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 189.178075][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.179083][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.180010][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.181183][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.182114][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.183041][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.184017][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.185937][ T5747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.187003][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 189.187028][ T5747] usb 8-1: SerialNumber: syz [ 189.189577][ T5747] usb 8-1: config 0 descriptor?? [ 189.199157][ T5747] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 189.385127][ T25] net_ratelimit: 1 callbacks suppressed [ 189.385154][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.411453][T10062] input: syz0 as /devices/virtual/input/input20 [ 189.528466][ T5137] bcm5974 8-1:0.0: could not read from device [ 189.546533][ T5137] bcm5974 8-1:0.0: could not read from device [ 189.546968][ T5747] usb 8-1: USB disconnect, device number 15 [ 189.933958][T10079] loop8: detected capacity change from 0 to 16384 [ 190.427729][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.574904][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 190.595238][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.738943][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.740091][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.740118][ T25] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.740135][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.740170][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 190.740193][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 190.742266][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.742291][ T25] usb 8-1: Product: syz [ 190.742305][ T25] usb 8-1: Manufacturer: syz [ 190.752268][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 190.752290][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 190.753894][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 190.753915][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 190.827434][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.930390][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.957625][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 190.957873][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 190.958164][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 190.958182][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 190.958450][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 190.958460][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 190.958518][ T62] usb 8-1: USB disconnect, device number 16 [ 190.958651][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 190.958661][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 190.958669][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 191.034510][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.039499][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.050345][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.052340][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.053606][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.058095][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.146405][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.290757][ T13] bridge_slave_1: left allmulticast mode [ 191.290777][ T13] bridge_slave_1: left promiscuous mode [ 191.290914][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.295850][ T13] bridge_slave_0: left allmulticast mode [ 191.295868][ T13] bridge_slave_0: left promiscuous mode [ 191.296007][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.475335][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.535207][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.569755][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.569810][T10113] FAULT_INJECTION: forcing a failure. [ 191.569810][T10113] name failslab, interval 1, probability 0, space 0, times 0 [ 191.569832][T10113] CPU: 2 UID: 0 PID: 10113 Comm: syz.6.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.569861][T10113] Tainted: [L]=SOFTLOCKUP [ 191.569868][T10113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.569876][T10113] Call Trace: [ 191.569882][T10113] [ 191.569887][T10113] dump_stack_lvl+0x100/0x190 [ 191.569907][T10113] should_fail_ex.cold+0x5/0xa [ 191.569923][T10113] should_failslab+0xc2/0x120 [ 191.569940][T10113] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 191.569955][T10113] ? __d_alloc+0x35/0xa50 [ 191.569980][T10113] __d_alloc+0x35/0xa50 [ 191.569997][T10113] ? get_random_u64+0xe8/0x7c0 [ 191.570011][T10113] d_alloc_pseudo+0x1c/0xc0 [ 191.570030][T10113] alloc_file_pseudo+0x118/0x290 [ 191.570049][T10113] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 191.570069][T10113] __anon_inode_getfile+0xe8/0x280 [ 191.570087][T10113] do_seccomp+0xcff/0x2730 [ 191.570104][T10113] ? __pfx_do_seccomp+0x10/0x10 [ 191.570117][T10113] ? xfd_validate_state+0x129/0x190 [ 191.570140][T10113] __do_fast_syscall_32+0x13a/0x8b0 [ 191.570160][T10113] do_fast_syscall_32+0x32/0x70 [ 191.570178][T10113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.570195][T10113] RIP: 0023:0xf702efec [ 191.570209][T10113] Code: Unable to access opcode bytes at 0xf702efc2. [ 191.570215][T10113] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 191.570227][T10113] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000000000c [ 191.570235][T10113] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.570243][T10113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.570251][T10113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.570259][T10113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.570273][T10113] [ 191.575932][ T13] bond0 (unregistering): Released all slaves [ 191.687702][T10096] lo speed is unknown, defaulting to 1000 [ 191.805043][ T5838] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 191.814138][T10121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.917139][ T35] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 191.922354][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 191.977020][ T5838] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 191.978039][ T5838] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.978055][ T5838] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.978074][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.998749][ T5838] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 192.013073][ T5838] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 192.078749][ T35] usb 11-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 192.090422][ T35] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.090465][ T35] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 192.090486][ T35] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 192.090523][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.214161][ T13] hsr_slave_0: left promiscuous mode [ 192.225130][ T13] hsr_slave_1: left promiscuous mode [ 192.226829][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.226850][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.229365][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.229458][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.263621][ T13] veth1_macvtap: left promiscuous mode [ 192.263733][ T13] veth0_macvtap: left promiscuous mode [ 192.266285][ T13] veth1_vlan: left promiscuous mode [ 192.266354][ T13] veth0_vlan: left promiscuous mode [ 192.385699][T10111] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 192.385943][T10111] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 192.386173][T10111] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 192.469255][T10111] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 192.505069][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.511728][ T35] cxacru_cm: 11 callbacks suppressed [ 192.511752][ T35] cxacru 11-1:1.0: send of cm 0x91 failed (-71) [ 192.511769][ T35] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 192.511776][ T35] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 192.523672][ T35] cxacru 11-1:1.0: probe with driver cxacru failed with error -71 [ 192.528014][ T35] usb 11-1: USB disconnect, device number 3 [ 192.552676][ T13] team0 (unregistering): Port device team_slave_1 removed [ 192.566245][ T13] team0 (unregistering): Port device team_slave_0 removed [ 192.575778][T10110] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 192.578010][ T5747] usb 10-1: USB disconnect, device number 13 [ 192.640707][ T5747] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 192.662278][ T5747] spcp8x5 10-1:1.0: device disconnected [ 192.680139][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.720533][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 192.996184][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.996264][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.996323][T10096] bridge_slave_0: entered allmulticast mode [ 192.997252][T10096] bridge_slave_0: entered promiscuous mode [ 192.999479][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.999556][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.999622][T10096] bridge_slave_1: entered allmulticast mode [ 193.000368][T10096] bridge_slave_1: entered promiscuous mode [ 193.015730][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.017230][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.050584][T10096] team0: Port device team_slave_0 added [ 193.052072][T10096] team0: Port device team_slave_1 added [ 193.065342][ T5758] Bluetooth: hci3: command tx timeout [ 193.078593][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 193.093421][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.093434][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.093448][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.094412][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.094420][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.094434][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.128673][T10096] hsr_slave_0: entered promiscuous mode [ 193.129238][T10096] hsr_slave_1: entered promiscuous mode [ 193.129583][T10096] debugfs: 'hsr0' already exists in 'hsr' [ 193.129596][T10096] Cannot create hsr debugfs directory [ 193.151334][T10153] nbd6: detected capacity change from 0 to 18 [ 193.152351][ T67] block nbd6: Receive control failed (result -107) [ 193.166941][ T8291] block nbd6: Dead connection, failed to find a fallback [ 193.166961][ T8291] block nbd6: shutting down sockets [ 193.166972][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.166992][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.213097][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.213128][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.221877][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.221900][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.221964][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.221978][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222105][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.222125][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222224][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.222239][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222303][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.222316][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222368][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.222381][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222399][ T9788] ldm_validate_partition_table(): Disk read failed. [ 193.222440][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.222453][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222503][ T8291] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 193.222516][ T8291] Buffer I/O error on dev nbd6, logical block 0, async page read [ 193.222628][ T9788] Dev nbd6: unable to read RDB block 0 [ 193.222772][ T9788] nbd6: unable to read partition table [ 193.222874][ T9788] nbd6: partition table beyond EOD, truncated [ 193.235411][ T9788] ldm_validate_partition_table(): Disk read failed. [ 193.235625][ T9788] Dev nbd6: unable to read RDB block 0 [ 193.235776][ T9788] nbd6: unable to read partition table [ 193.235882][ T9788] nbd6: partition table beyond EOD, truncated [ 193.241257][T10153] nbd6: detected capacity change from 18 to 4194304 [ 193.422557][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 193.469833][T10171] FAULT_INJECTION: forcing a failure. [ 193.469833][T10171] name failslab, interval 1, probability 0, space 0, times 0 [ 193.469860][T10171] CPU: 2 UID: 0 PID: 10171 Comm: syz.3.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.469880][T10171] Tainted: [L]=SOFTLOCKUP [ 193.469885][T10171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.469892][T10171] Call Trace: [ 193.469897][T10171] [ 193.469902][T10171] dump_stack_lvl+0x100/0x190 [ 193.469924][T10171] should_fail_ex.cold+0x5/0xa [ 193.469941][T10171] should_failslab+0xc2/0x120 [ 193.469959][T10171] __kvmalloc_node_noprof+0x113/0x9b0 [ 193.469977][T10171] ? seq_read_iter+0x819/0x1270 [ 193.469992][T10171] seq_read_iter+0x819/0x1270 [ 193.470005][T10171] ? rcu_is_watching+0x13/0xc0 [ 193.470023][T10171] proc_reg_read_iter+0x220/0x310 [ 193.470043][T10171] copy_splice_read+0x4ba/0xbb0 [ 193.470061][T10171] ? __pfx_copy_splice_read+0x10/0x10 [ 193.470077][T10171] ? look_up_lock_class+0x55/0x120 [ 193.470094][T10171] ? rcu_is_watching+0x13/0xc0 [ 193.470108][T10171] ? lockdep_init_map_type+0x5c/0x250 [ 193.470128][T10171] ? __pfx_copy_splice_read+0x10/0x10 [ 193.470143][T10171] do_splice_read+0x285/0x370 [ 193.470159][T10171] splice_direct_to_actor+0x2a1/0xa30 [ 193.470195][T10171] ? __pfx_direct_splice_actor+0x10/0x10 [ 193.470214][T10171] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 193.470234][T10171] ? lock_acquire+0x1d1/0x380 [ 193.470253][T10171] do_splice_direct+0x174/0x240 [ 193.470268][T10171] ? __pfx_do_splice_direct+0x10/0x10 [ 193.470285][T10171] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 193.470304][T10171] ? rw_verify_area+0xce/0x6d0 [ 193.470328][T10171] do_sendfile+0xadc/0xe20 [ 193.470345][T10171] ? __pfx_do_sendfile+0x10/0x10 [ 193.470373][T10171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.470399][T10171] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 193.470418][T10171] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 193.470435][T10171] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 193.470458][T10171] __do_fast_syscall_32+0x13a/0x8b0 [ 193.470484][T10171] do_fast_syscall_32+0x32/0x70 [ 193.470505][T10171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.470522][T10171] RIP: 0023:0xf703efec [ 193.470538][T10171] Code: Unable to access opcode bytes at 0xf703efc2. [ 193.470544][T10171] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 193.470557][T10171] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 193.470565][T10171] RDX: 0000000000000000 RSI: 0000000000000500 RDI: 0000000000000000 [ 193.470572][T10171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.470579][T10171] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.470586][T10171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.470602][T10171] [ 193.554781][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.613655][T10096] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 193.622424][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.623035][T10096] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 193.632607][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.633469][T10096] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 193.635111][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.644306][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.652369][T10096] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 193.659919][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.694926][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.694999][T10096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.695156][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.695219][T10096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.798763][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.808861][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.815566][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.821003][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.852233][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.852283][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.861857][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.861909][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.946112][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.966204][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.161536][T10219] loop2: detected capacity change from 0 to 2640 [ 194.591777][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.654923][ T5747] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 194.706744][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.826029][ T5747] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.827047][ T5747] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.827075][ T5747] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.827091][ T5747] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.827126][ T5747] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.827149][ T5747] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.833643][ T5747] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.833672][ T5747] usb 10-1: Product: syz [ 194.833687][ T5747] usb 10-1: Manufacturer: syz [ 194.854358][T10240] netlink: 'syz.6.1461': attribute type 13 has an invalid length. [ 194.878576][ T5747] cdc_wdm 10-1:1.0: skipping garbage [ 194.878596][ T5747] cdc_wdm 10-1:1.0: skipping garbage [ 194.890977][ T5747] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 194.890996][ T5747] cdc_wdm 10-1:1.0: Unknown control protocol [ 195.092175][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 195.092192][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 195.092391][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 195.092401][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 195.092584][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 195.092594][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 195.092774][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 195.092783][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 195.092971][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 195.092981][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 195.093164][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 195.093174][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 195.132667][ T5897] usb 10-1: USB disconnect, device number 14 [ 195.132838][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.144954][ T5758] Bluetooth: hci3: command tx timeout [ 195.201628][T10096] veth0_vlan: entered promiscuous mode [ 195.212330][T10096] veth1_vlan: entered promiscuous mode [ 195.272337][T10096] veth0_macvtap: entered promiscuous mode [ 195.280716][T10096] veth1_macvtap: entered promiscuous mode [ 195.358822][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.366855][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.384825][ T5821] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.385333][ T5821] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.385914][ T5821] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.386057][ T5821] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.563941][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.563967][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.588073][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.588096][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.645133][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.852278][T10279] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 195.852669][T10279] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 195.979437][T10287] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1474'. [ 195.994381][T10275] FAULT_INJECTION: forcing a failure. [ 195.994381][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 195.994693][T10275] CPU: 2 UID: 0 PID: 10275 Comm: syz.3.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.994714][T10275] Tainted: [L]=SOFTLOCKUP [ 195.994719][T10275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.994727][T10275] Call Trace: [ 195.994731][T10275] [ 195.994737][T10275] dump_stack_lvl+0x100/0x190 [ 195.994757][T10275] should_fail_ex.cold+0x5/0xa [ 195.994774][T10275] should_failslab+0xc2/0x120 [ 195.994792][T10275] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 195.994808][T10275] ? xas_split_alloc+0x182/0x530 [ 195.994830][T10275] xas_split_alloc+0x182/0x530 [ 195.994850][T10275] __folio_split+0x95e/0x1bf0 [ 195.994867][T10275] ? __pfx___folio_split+0x10/0x10 [ 195.994878][T10275] ? folio_alloc_swap+0xbd8/0x1e70 [ 195.994897][T10275] ? folio_alloc_swap+0x4c6/0x1e70 [ 195.994913][T10275] shmem_writeout+0x786/0x1a00 [ 195.994937][T10275] ? __pfx_shmem_writeout+0x10/0x10 [ 195.994953][T10275] ? __pfx_try_to_unmap+0x10/0x10 [ 195.994969][T10275] ? find_held_lock+0x2b/0x80 [ 195.994982][T10275] ? inode_to_bdi+0x9e/0x160 [ 195.994994][T10275] ? folio_clear_dirty_for_io+0x178/0x960 [ 195.995014][T10275] shrink_folio_list+0x399a/0x5e40 [ 195.995033][T10275] ? lock_acquire+0x1d1/0x380 [ 195.995048][T10275] ? __pfx_shrink_folio_list+0x10/0x10 [ 195.995061][T10275] ? find_held_lock+0x2b/0x80 [ 195.995073][T10275] ? __page_table_check_zero+0x27f/0x410 [ 195.995088][T10275] ? __page_table_check_zero+0x27f/0x410 [ 195.995106][T10275] ? __page_table_check_zero+0x284/0x410 [ 195.995122][T10275] ? post_alloc_hook+0xed/0x120 [ 195.995139][T10275] ? get_page_from_freelist+0x110d/0x35d0 [ 195.995160][T10275] ? __lock_acquire+0x5c0/0x1f40 [ 195.995175][T10275] ? __css_rstat_updated+0x1ce/0x590 [ 195.995190][T10275] ? lock_acquire+0x1d1/0x380 [ 195.995205][T10275] ? __pfx___css_rstat_updated+0x10/0x10 [ 195.995223][T10275] reclaim_folio_list+0xe9/0x5e0 [ 195.995239][T10275] ? __pfx_reclaim_folio_list+0x10/0x10 [ 195.995253][T10275] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 195.995273][T10275] ? lru_gen_update_size+0x431/0xe20 [ 195.995290][T10275] ? lru_gen_del_folio+0x382/0x5f0 [ 195.995305][T10275] reclaim_pages+0x428/0x5e0 [ 195.995322][T10275] ? __pfx_reclaim_pages+0x10/0x10 [ 195.995335][T10275] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 195.995353][T10275] ? folio_isolate_lru+0xd6/0xe90 [ 195.995370][T10275] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 195.995390][T10275] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 195.995405][T10275] ? is_bpf_text_address+0x94/0x1a0 [ 195.995420][T10275] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 195.995454][T10275] ? __kernel_text_address+0xd/0x30 [ 195.995469][T10275] ? unwind_get_return_address+0x59/0xa0 [ 195.995487][T10275] ? __lock_acquire+0x5c0/0x1f40 [ 195.995505][T10275] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 195.995523][T10275] walk_pgd_range+0xbef/0x1e00 [ 195.995567][T10275] ? register_lock_class+0x3f/0x7b0 [ 195.995584][T10275] ? __pfx_uid_gt+0x10/0x10 [ 195.995607][T10275] ? __pfx_walk_pgd_range+0x10/0x10 [ 195.995622][T10275] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.995639][T10275] __walk_page_range+0x171/0x850 [ 195.995653][T10275] ? __lock_acquire+0x5c0/0x1f40 [ 195.995671][T10275] walk_page_range_vma_unsafe+0x209/0x8f0 [ 195.995686][T10275] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 195.995702][T10275] ? find_held_lock+0x2b/0x80 [ 195.995714][T10275] ? mlock_drain_local+0x254/0x4e0 [ 195.995725][T10275] ? mlock_drain_local+0x254/0x4e0 [ 195.995737][T10275] walk_page_range_vma+0x63/0x90 [ 195.995750][T10275] madvise_pageout+0x29e/0x5b0 [ 195.995783][T10275] ? __pfx_madvise_pageout+0x10/0x10 [ 195.995808][T10275] madvise_vma_behavior+0x48b/0x2350 [ 195.995826][T10275] ? mas_prev+0xa4/0x100 [ 195.995839][T10275] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 195.995857][T10275] ? mas_walk+0x260/0x310 [ 195.995875][T10275] ? find_vma_prev+0xd8/0x150 [ 195.995891][T10275] ? __pfx_find_vma_prev+0x10/0x10 [ 195.995903][T10275] ? lock_acquire+0x1d1/0x380 [ 195.995928][T10275] madvise_walk_vmas+0x30e/0xc50 [ 195.995947][T10275] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 195.995963][T10275] ? __pfx_futex_wake_mark+0x10/0x10 [ 195.995980][T10275] ? lock_acquire+0x1d1/0x380 [ 195.995996][T10275] madvise_do_behavior+0x1ea/0x510 [ 195.996013][T10275] ? __pfx_madvise_do_behavior+0x10/0x10 [ 195.996030][T10275] ? down_read+0x13b/0x4c0 [ 195.996047][T10275] do_madvise+0x238/0x290 [ 195.996063][T10275] ? __pfx_do_madvise+0x10/0x10 [ 195.996078][T10275] ? do_futex+0x190/0x440 [ 195.996091][T10275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.996118][T10275] __ia32_sys_madvise+0xa7/0x110 [ 195.996134][T10275] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.996150][T10275] __do_fast_syscall_32+0x13a/0x8b0 [ 195.996169][T10275] do_fast_syscall_32+0x32/0x70 [ 195.996186][T10275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.996200][T10275] RIP: 0023:0xf703efec [ 195.996216][T10275] Code: Unable to access opcode bytes at 0xf703efc2. [ 195.996221][T10275] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 195.996233][T10275] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 195.996243][T10275] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.996253][T10275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.996265][T10275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.996274][T10275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.996294][T10275] [ 196.669490][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.669602][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.816133][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.831386][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.834314][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.844857][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.848576][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.926202][ T854] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 197.076403][ T854] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.077483][ T854] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.077509][ T854] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.077527][ T854] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.077568][ T854] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.077593][ T854] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 197.081622][ T854] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.081646][ T854] usb 11-1: Product: syz [ 197.081660][ T854] usb 11-1: Manufacturer: syz [ 197.108017][ T854] cdc_wdm 11-1:1.0: skipping garbage [ 197.108036][ T854] cdc_wdm 11-1:1.0: skipping garbage [ 197.111768][ T854] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 197.111789][ T854] cdc_wdm 11-1:1.0: Unknown control protocol [ 197.202187][T10309] lo speed is unknown, defaulting to 1000 [ 197.225222][ T5758] Bluetooth: hci3: command tx timeout [ 197.314324][ C0] wdm_int_callback: 150 callbacks suppressed [ 197.314355][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.314369][ C0] wdm_int_callback: 150 callbacks suppressed [ 197.314382][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.314706][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.314725][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.314958][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.314975][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.315209][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.315226][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.315462][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.315479][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.315701][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.315719][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.315949][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.315967][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.316192][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.316210][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.316448][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.316466][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.319609][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 197.319636][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 197.323264][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 197.323295][ T5839] usb 11-1: USB disconnect, device number 4 [ 197.531363][T10336] FAULT_INJECTION: forcing a failure. [ 197.531363][T10336] name failslab, interval 1, probability 0, space 0, times 0 [ 197.531404][T10336] CPU: 0 UID: 0 PID: 10336 Comm: syz.8.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.531437][T10336] Tainted: [L]=SOFTLOCKUP [ 197.531447][T10336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.531460][T10336] Call Trace: [ 197.531468][T10336] [ 197.531479][T10336] dump_stack_lvl+0x100/0x190 [ 197.531513][T10336] should_fail_ex.cold+0x5/0xa [ 197.531543][T10336] should_failslab+0xc2/0x120 [ 197.531572][T10336] __kmalloc_noprof+0xfc/0x840 [ 197.531603][T10336] ? trace_kmem_cache_alloc+0xdd/0x100 [ 197.531630][T10336] ? tnode_new+0x2f7/0x350 [ 197.531660][T10336] tnode_new+0x2f7/0x350 [ 197.531687][T10336] fib_insert_alias+0x6e7/0xe30 [ 197.531714][T10336] ? lockdep_rtnl_is_held+0x26/0x40 [ 197.531749][T10336] fib_trie_unmerge+0x289/0xbd0 [ 197.531781][T10336] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 197.531812][T10336] ? lock_acquire+0x1d1/0x380 [ 197.531844][T10336] fib_unmerge+0xee/0x510 [ 197.531872][T10336] ? fib_nl2rule_locked+0x3ef/0x740 [ 197.531895][T10336] fib4_rule_configure+0xaba/0x1160 [ 197.531917][T10336] ? fib_nl2rule_locked+0x3fe/0x740 [ 197.531940][T10336] fib_newrule+0x3c3/0x1e50 [ 197.531964][T10336] ? rcu_is_watching+0x13/0xc0 [ 197.531987][T10336] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.532018][T10336] ? __pfx_fib_newrule+0x10/0x10 [ 197.532039][T10336] ? kfree_skbmem+0xc0/0x210 [ 197.532058][T10336] ? kmem_cache_free+0x127/0x6c0 [ 197.532113][T10336] ? skb_release_data+0x6ca/0x8e0 [ 197.532163][T10336] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 197.532196][T10336] ? find_held_lock+0x2b/0x80 [ 197.532220][T10336] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 197.532251][T10336] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 197.532282][T10336] ? __pfx_fib_nl_newrule+0x10/0x10 [ 197.532304][T10336] rtnetlink_rcv_msg+0x95e/0xe90 [ 197.532337][T10336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.532374][T10336] ? ref_tracker_free+0x37e/0x6c0 [ 197.532409][T10336] netlink_rcv_skb+0x159/0x420 [ 197.532436][T10336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.532467][T10336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.532500][T10336] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.532527][T10336] netlink_unicast+0x585/0x850 [ 197.532554][T10336] ? __pfx_netlink_unicast+0x10/0x10 [ 197.532577][T10336] ? __build_skb_around+0x278/0x390 [ 197.532607][T10336] ? is_vmalloc_addr+0x86/0xa0 [ 197.532643][T10336] netlink_sendmsg+0x8b0/0xda0 [ 197.532673][T10336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.532703][T10336] ? apparmor_socket_sendmsg+0x165/0x280 [ 197.532738][T10336] ____sys_sendmsg+0xa4d/0xbe0 [ 197.532759][T10336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.532786][T10336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.532819][T10336] ___sys_sendmsg+0x190/0x1e0 [ 197.532843][T10336] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.532866][T10336] ? futex_wait+0x11e/0x370 [ 197.532930][T10336] ? find_held_lock+0x2b/0x80 [ 197.532973][T10336] __sys_sendmsg+0x160/0x210 [ 197.533004][T10336] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.533050][T10336] __do_fast_syscall_32+0x13a/0x8b0 [ 197.533090][T10336] do_fast_syscall_32+0x32/0x70 [ 197.533121][T10336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.533149][T10336] RIP: 0023:0xf7f72fec [ 197.533174][T10336] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 197.533185][T10336] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 197.533209][T10336] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 197.533224][T10336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.533238][T10336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.533251][T10336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.533263][T10336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.533291][T10336] [ 197.680350][T10309] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.680483][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.680582][T10309] bridge_slave_0: entered allmulticast mode [ 197.682022][T10309] bridge_slave_0: entered promiscuous mode [ 197.684442][T10309] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.685235][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.685371][T10309] bridge_slave_1: entered allmulticast mode [ 197.686959][T10309] bridge_slave_1: entered promiscuous mode [ 197.701499][T10343] loop2: detected capacity change from 0 to 4095 [ 197.705051][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.721923][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.732632][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.764928][T10309] team0: Port device team_slave_0 added [ 197.768933][T10309] team0: Port device team_slave_1 added [ 197.799294][T10309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.799313][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.799337][T10309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.801124][T10309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.801139][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.801162][T10309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.842840][T10309] hsr_slave_0: entered promiscuous mode [ 197.843715][T10309] hsr_slave_1: entered promiscuous mode [ 197.844464][T10309] debugfs: 'hsr0' already exists in 'hsr' [ 197.844484][T10309] Cannot create hsr debugfs directory [ 198.129831][T10309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.129856][T10309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.253799][T10309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.253825][T10309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.309895][T10359] input: syz1 as /devices/virtual/input/input21 [ 198.402371][T10309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.402421][T10309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.573835][T10309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.573870][T10309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 198.746544][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.766873][ T5747] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 198.839316][T10309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.843182][T10309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.844243][T10309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.858126][T10309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.859105][T10309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.893263][T10309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.893764][T10309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.898818][T10309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.912805][T10390] FAULT_INJECTION: forcing a failure. [ 198.912805][T10390] name failslab, interval 1, probability 0, space 0, times 0 [ 198.912846][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.5.1510 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.912906][T10390] Tainted: [L]=SOFTLOCKUP [ 198.912914][T10390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.912927][T10390] Call Trace: [ 198.912934][T10390] [ 198.912950][T10390] dump_stack_lvl+0x100/0x190 [ 198.912982][T10390] should_fail_ex.cold+0x5/0xa [ 198.913008][T10390] should_failslab+0xc2/0x120 [ 198.913034][T10390] __kmalloc_noprof+0xfc/0x840 [ 198.913057][T10390] ? __vb2_queue_alloc+0x23e/0x1160 [ 198.913084][T10390] __vb2_queue_alloc+0x23e/0x1160 [ 198.913119][T10390] vb2_core_reqbufs+0x899/0xf30 [ 198.913147][T10390] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 198.913173][T10390] ? rcu_is_watching+0x13/0xc0 [ 198.913195][T10390] ? __mutex_lock+0x26c/0x1bd0 [ 198.913225][T10390] ? __video_do_ioctl+0x50f/0xdf0 [ 198.913258][T10390] vb2_ioctl_reqbufs+0x291/0x450 [ 198.913398][T10390] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 198.913430][T10390] vidioc_reqbufs+0x86/0x100 [ 198.913457][T10390] v4l_reqbufs+0x175/0x1d0 [ 198.913483][T10390] __video_do_ioctl+0xb2a/0xdf0 [ 198.913515][T10390] ? __might_fault+0xc5/0x140 [ 198.913541][T10390] ? __pfx___video_do_ioctl+0x10/0x10 [ 198.913577][T10390] video_usercopy+0x3d3/0x14c0 [ 198.913609][T10390] ? __pfx___video_do_ioctl+0x10/0x10 [ 198.913638][T10390] ? __pfx_video_usercopy+0x10/0x10 [ 198.913676][T10390] ? __fget_files+0x215/0x3d0 [ 198.913693][T10390] ? hook_file_ioctl_common+0x140/0x440 [ 198.913726][T10390] v4l2_ioctl+0x1bd/0x250 [ 198.913749][T10390] v4l2_compat_ioctl32+0x20f/0x2d0 [ 198.913777][T10390] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 198.913802][T10390] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 198.913834][T10390] __do_fast_syscall_32+0x13a/0x8b0 [ 198.913861][T10390] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.913889][T10390] do_fast_syscall_32+0x32/0x70 [ 198.913916][T10390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.913959][T10390] RIP: 0023:0xf6fdefec [ 198.913986][T10390] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 198.913995][T10390] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 198.914019][T10390] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 198.914032][T10390] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.914044][T10390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.914056][T10390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.914066][T10390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.914093][T10390] [ 198.915020][ T5758] Bluetooth: hci1: command tx timeout [ 198.926390][ T5747] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.992894][T10309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.009391][T10309] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.013254][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.013335][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.022614][ T5747] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.022634][ T5747] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.022644][ T5747] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.022666][ T5747] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.026012][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.026057][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.036162][ T5747] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.036179][ T5747] usb 11-1: Product: syz [ 199.036188][ T5747] usb 11-1: Manufacturer: syz [ 199.071817][ T5747] cdc_wdm 11-1:1.0: skipping garbage [ 199.071832][ T5747] cdc_wdm 11-1:1.0: skipping garbage [ 199.084483][ T5747] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 199.084498][ T5747] cdc_wdm 11-1:1.0: Unknown control protocol [ 199.283994][ T35] usb 11-1: USB disconnect, device number 5 [ 199.330423][ T5758] Bluetooth: hci3: command tx timeout [ 199.410212][T10309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.458541][T10309] veth0_vlan: entered promiscuous mode [ 199.464117][T10309] veth1_vlan: entered promiscuous mode [ 199.499039][T10309] veth0_macvtap: entered promiscuous mode [ 199.502742][T10309] veth1_macvtap: entered promiscuous mode [ 199.514222][T10309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.521424][T10309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.555291][ T9352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.555335][ T9352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.555364][ T9352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.555410][ T9352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.684458][ T7474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.684486][ T7474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.706216][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.745170][ T5747] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 199.750555][ T7474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.750578][ T7474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.795389][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.882101][ T5758] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 199.882121][ T5758] CPU: 2 UID: 0 PID: 5758 Comm: kworker/u34:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.882152][ T5758] Tainted: [L]=SOFTLOCKUP [ 199.882157][ T5758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.882166][ T5758] Workqueue: hci1 hci_rx_work [ 199.882185][ T5758] Call Trace: [ 199.882190][ T5758] [ 199.882195][ T5758] dump_stack_lvl+0x100/0x190 [ 199.882215][ T5758] sysfs_warn_dup.cold+0x1c/0x28 [ 199.882232][ T5758] sysfs_create_dir_ns+0x24b/0x2b0 [ 199.882247][ T5758] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 199.882260][ T5758] ? find_held_lock+0x2b/0x80 [ 199.882274][ T5758] ? kobject_add_internal+0x25f/0x930 [ 199.882286][ T5758] ? kobject_add_internal+0x25f/0x930 [ 199.882300][ T5758] ? do_raw_spin_unlock+0x145/0x1e0 [ 199.882312][ T5758] kobject_add_internal+0x2c8/0x930 [ 199.882327][ T5758] kobject_add+0x16a/0x1e0 [ 199.882340][ T5758] ? __pfx_kobject_add+0x10/0x10 [ 199.882352][ T5758] ? class_to_subsys+0x10f/0x150 [ 199.882377][ T5758] ? kobject_put+0xb9/0x640 [ 199.882387][ T5758] ? _raw_spin_unlock+0x28/0x50 [ 199.882404][ T5758] device_add+0x294/0x1970 [ 199.882421][ T5758] ? __pfx_dev_set_name+0x10/0x10 [ 199.882432][ T5758] ? __pfx_device_add+0x10/0x10 [ 199.882449][ T5758] ? mgmt_send_event_skb+0x2fb/0x460 [ 199.882471][ T5758] hci_conn_add_sysfs+0x1a3/0x260 [ 199.882490][ T5758] le_conn_complete_evt+0x122f/0x2130 [ 199.882509][ T5758] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 199.882523][ T5758] ? hci_event_packet+0x186/0xcd0 [ 199.882540][ T5758] hci_le_conn_complete_evt+0x23c/0x3a0 [ 199.882555][ T5758] ? skb_pull_data+0x15f/0x1e0 [ 199.882568][ T5758] hci_le_meta_evt+0x34a/0x5f0 [ 199.882584][ T5758] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 199.882600][ T5758] hci_event_packet+0x51c/0xcd0 [ 199.882615][ T5758] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 199.882630][ T5758] ? __pfx_hci_event_packet+0x10/0x10 [ 199.882647][ T5758] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.882665][ T5758] hci_rx_work+0x451/0xfc0 [ 199.882682][ T5758] process_one_work+0xac7/0x1b10 [ 199.882703][ T5758] ? __pfx_process_one_work+0x10/0x10 [ 199.882719][ T5758] ? lock_acquire+0x1d1/0x380 [ 199.882738][ T5758] ? __pfx_hci_rx_work+0x10/0x10 [ 199.882753][ T5758] worker_thread+0x5ef/0xe50 [ 199.882771][ T5758] ? kthread+0x13a/0x450 [ 199.882783][ T5758] ? __pfx_worker_thread+0x10/0x10 [ 199.882795][ T5758] kthread+0x373/0x450 [ 199.882806][ T5758] ? __pfx_kthread+0x10/0x10 [ 199.882819][ T5758] ret_from_fork+0x730/0xd60 [ 199.882837][ T5758] ? __pfx_ret_from_fork+0x10/0x10 [ 199.882854][ T5758] ? __switch_to+0x800/0x10f0 [ 199.882868][ T5758] ? __pfx_kthread+0x10/0x10 [ 199.882881][ T5758] ret_from_fork_asm+0x1a/0x30 [ 199.882899][ T5758] [ 199.882913][ T5758] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.882934][ T5758] Bluetooth: hci1: failed to register connection device [ 199.916594][ T5747] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.918036][ T5747] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.918060][ T5747] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.918076][ T5747] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.918112][ T5747] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.923832][ T5747] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.923853][ T5747] usb 11-1: Product: syz [ 199.923864][ T5747] usb 11-1: Manufacturer: syz [ 199.970526][ T5747] cdc_wdm 11-1:1.0: skipping garbage [ 199.970543][ T5747] cdc_wdm 11-1:1.0: skipping garbage [ 199.979431][ T5747] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 199.979447][ T5747] cdc_wdm 11-1:1.0: Unknown control protocol [ 200.807949][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -EPIPE [ 200.828139][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.997207][ T5758] Bluetooth: hci1: command tx timeout [ 201.089853][ T5758] Bluetooth: Frame is too long (len 10, expected len 4) [ 201.521864][T10467] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23 [ 201.796762][ T35] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 201.865040][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.895081][T10485] FAULT_INJECTION: forcing a failure. [ 201.895081][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 201.895121][T10485] CPU: 3 UID: 0 PID: 10485 Comm: syz.8.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.895150][T10485] Tainted: [L]=SOFTLOCKUP [ 201.895158][T10485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.895169][T10485] Call Trace: [ 201.895177][T10485] [ 201.895185][T10485] dump_stack_lvl+0x100/0x190 [ 201.895218][T10485] should_fail_ex.cold+0x5/0xa [ 201.895244][T10485] should_failslab+0xc2/0x120 [ 201.895272][T10485] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 201.895297][T10485] ? kstrdup_const+0x63/0x80 [ 201.895321][T10485] kstrdup+0x51/0xe0 [ 201.895340][T10485] kstrdup_const+0x63/0x80 [ 201.895356][T10485] kvasprintf_const+0x10f/0x1a0 [ 201.895384][T10485] kobject_set_name_vargs+0x5a/0x140 [ 201.895411][T10485] dev_set_name+0xc7/0x100 [ 201.895433][T10485] ? __pfx_dev_set_name+0x10/0x10 [ 201.895453][T10485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.895485][T10485] ? lockdep_init_map_type+0x5c/0x250 [ 201.895513][T10485] ? __init_waitqueue_head+0xca/0x150 [ 201.895548][T10485] netdev_register_kobject+0xc5/0x410 [ 201.895577][T10485] register_netdevice+0x15b6/0x25a0 [ 201.895616][T10485] ? __pfx_register_netdevice+0x10/0x10 [ 201.895644][T10485] ? net_generic+0xea/0x2a0 [ 201.895678][T10485] ppp_dev_configure+0x8e2/0xbd0 [ 201.895710][T10485] ppp_ioctl+0x9ef/0x27b0 [ 201.895742][T10485] ? __pfx_ppp_ioctl+0x10/0x10 [ 201.895773][T10485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.895817][T10485] ppp_compat_ioctl+0x10c/0x3e0 [ 201.895846][T10485] ? __pfx_ppp_compat_ioctl+0x10/0x10 [ 201.895878][T10485] ? __fget_files+0x21f/0x3d0 [ 201.895907][T10485] ? __pfx_ppp_compat_ioctl+0x10/0x10 [ 201.895936][T10485] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 201.895972][T10485] __do_fast_syscall_32+0x13a/0x8b0 [ 201.896015][T10485] do_fast_syscall_32+0x32/0x70 [ 201.896050][T10485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.896078][T10485] RIP: 0023:0xf7f72fec [ 201.896104][T10485] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 201.896113][T10485] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 201.896134][T10485] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c004743e [ 201.896149][T10485] RDX: 0000000080001c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.896163][T10485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.896176][T10485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.896188][T10485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.896216][T10485] [ 201.939012][ T10] usb 11-1: USB disconnect, device number 6 [ 201.961794][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 201.965557][ T35] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 201.967834][ T35] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 201.967853][ T35] usb 8-1: config 179 has no interface number 0 [ 201.967947][ T35] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 201.967969][ T35] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 201.967983][ T35] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.967997][ T35] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 201.968012][ T35] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 201.968034][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.973526][T10472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.303419][ T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input24 [ 202.443189][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 202.443218][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 202.443234][ T10] usb 8-1: USB disconnect, device number 17 [ 202.564494][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1544'. [ 202.565639][T10514] block nbd0: Unsupported socket: should be TCP or UNIX. [ 202.639973][T10517] Bluetooth: hci0: invalid len left 7, exp >= 119 [ 202.745035][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.916433][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.064721][ T5758] Bluetooth: hci1: command tx timeout [ 203.553838][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.946729][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.187700][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.187856][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.524720][ T5899] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 204.641625][ T43] audit: type=1326 audit(1790011151.313:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.3.1565" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2fec code=0x0 [ 204.675657][ T5899] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 204.677249][ T5899] usb 10-1: config 0 has no interfaces? [ 204.677283][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.681929][ T5899] usb 10-1: config 0 descriptor?? [ 204.933397][ T10] usb 10-1: USB disconnect, device number 15 [ 204.994968][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.146110][ T5758] Bluetooth: hci1: command tx timeout [ 206.027515][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.355839][T10620] smpboot: CPU 3 is now offline [ 206.512629][T10624] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 206.594753][T10624] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 206.934828][T10410] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 207.064988][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.065684][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1583'. [ 207.065699][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1583'. [ 207.090302][T10410] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 207.092009][T10410] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.093380][T10410] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.110083][T10410] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.110107][T10410] usb 10-1: Product: syz [ 207.110121][T10410] usb 10-1: Manufacturer: syz [ 207.110136][T10410] usb 10-1: SerialNumber: syz [ 207.127703][T10410] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 207.131934][T10410] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 207.150879][T10410] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 207.224944][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 207.225239][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.115118][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.838264][T10631] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 208.842083][ T6068] usb 10-1: USB disconnect, device number 16 [ 208.860540][ T6068] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 208.921105][ T6068] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 208.922350][ T6068] ti_usb_3410_5052 10-1:2.0: device disconnected [ 209.155150][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.315176][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.316644][ T5758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.323328][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.324466][ T5758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.345261][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.351863][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.469586][ T5611] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.631296][ T5611] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.770030][ T5611] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.794048][T10654] lo speed is unknown, defaulting to 1000 [ 209.875971][ T5611] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.099048][ T5611] bridge_slave_1: left allmulticast mode [ 210.099079][ T5611] bridge_slave_1: left promiscuous mode [ 210.099273][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.116460][ T5611] bridge_slave_0: left allmulticast mode [ 210.116481][ T5611] bridge_slave_0: left promiscuous mode [ 210.116610][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.186429][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.265076][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.393783][ T5611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.401727][ T5611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.402798][ T5611] bond0 (unregistering): Released all slaves [ 210.425328][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 210.793595][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 210.908931][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.909026][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.909107][T10654] bridge_slave_0: entered allmulticast mode [ 210.910428][T10654] bridge_slave_0: entered promiscuous mode [ 210.921191][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.921315][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.921477][T10654] bridge_slave_1: entered allmulticast mode [ 210.930528][T10654] bridge_slave_1: entered promiscuous mode [ 211.062567][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.070746][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.172627][T10722] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 211.172627][T10722] [ 211.172957][T10722] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 211.173014][T10722] CIFS: Attempting to mount //127.0.0.1/share [ 211.208183][ T5611] hsr_slave_0: left promiscuous mode [ 211.208950][ T5611] hsr_slave_1: left promiscuous mode [ 211.209591][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.209604][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.211069][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.211080][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.219967][ T5611] veth1_macvtap: left promiscuous mode [ 211.220015][ T5611] veth0_macvtap: left promiscuous mode [ 211.220103][ T5611] veth1_vlan: left promiscuous mode [ 211.220249][ T5611] veth0_vlan: left promiscuous mode [ 211.235617][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.241027][T10722] CIFS: VFS: cifs_mount failed w/return code = -112 [ 211.464882][ T5758] Bluetooth: hci3: command tx timeout [ 211.679719][ T5611] team0 (unregistering): Port device team_slave_1 removed [ 211.708277][ T5611] team0 (unregistering): Port device team_slave_0 removed [ 211.940897][T10654] team0: Port device team_slave_0 added [ 211.951446][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 211.960578][T10654] team0: Port device team_slave_1 added [ 212.006325][T10731] syzkaller1: entered promiscuous mode [ 212.006343][T10731] syzkaller1: entered allmulticast mode [ 212.127950][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.127970][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.127993][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.133122][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.133135][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.133149][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.221302][T10654] hsr_slave_0: entered promiscuous mode [ 212.222303][T10654] hsr_slave_1: entered promiscuous mode [ 212.222911][T10654] debugfs: 'hsr0' already exists in 'hsr' [ 212.222931][T10654] Cannot create hsr debugfs directory [ 212.266769][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.468170][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17 [ 212.597452][T10654] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 212.602891][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.603629][T10654] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 212.622311][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.629472][T10654] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 212.648547][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.652078][T10654] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 212.662864][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.794444][T10654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.809139][T10654] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.814458][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.814688][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.829853][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.829937][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.857399][T10654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.216485][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.305012][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.305165][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.545159][ T5758] Bluetooth: hci3: command tx timeout [ 213.556265][T10654] veth0_vlan: entered promiscuous mode [ 213.573646][T10654] veth1_vlan: entered promiscuous mode [ 213.636429][T10816] FAULT_INJECTION: forcing a failure. [ 213.636429][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 213.636469][T10816] CPU: 3 UID: 0 PID: 10816 Comm: syz.3.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.636493][T10816] Tainted: [L]=SOFTLOCKUP [ 213.636501][T10816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.636513][T10816] Call Trace: [ 213.636541][T10816] [ 213.636551][T10816] dump_stack_lvl+0x100/0x190 [ 213.636580][T10816] should_fail_ex.cold+0x5/0xa [ 213.636606][T10816] should_failslab+0xc2/0x120 [ 213.636631][T10816] __kmalloc_cache_noprof+0x91/0x6d0 [ 213.636666][T10816] ? percpu_ref_init+0xec/0x3f0 [ 213.636698][T10816] ? __pfx_css_release+0x10/0x10 [ 213.636719][T10816] percpu_ref_init+0xec/0x3f0 [ 213.636749][T10816] ? init_and_link_css+0x4ae/0xc80 [ 213.636778][T10816] cgroup_apply_control_enable+0x65d/0xdd0 [ 213.636820][T10816] ? css_populate_dir+0x233/0x590 [ 213.636844][T10816] cgroup_mkdir+0x57f/0x1330 [ 213.636869][T10816] ? __pfx_cgroup_mkdir+0x10/0x10 [ 213.636900][T10816] kernfs_iop_mkdir+0x111/0x190 [ 213.636925][T10816] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 213.636947][T10816] vfs_mkdir+0x364/0x850 [ 213.636980][T10816] filename_mkdirat+0x48b/0x5e0 [ 213.637008][T10816] ? __pfx_filename_mkdirat+0x10/0x10 [ 213.637031][T10816] ? strncpy_from_user+0x19d/0x2d0 [ 213.637072][T10816] ? do_getname+0x191/0x390 [ 213.637105][T10816] __ia32_sys_mkdirat+0x88/0xc0 [ 213.637131][T10816] __do_fast_syscall_32+0x13a/0x8b0 [ 213.637163][T10816] do_fast_syscall_32+0x32/0x70 [ 213.637191][T10816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.637215][T10816] RIP: 0023:0xf7fc2fec [ 213.637237][T10816] Code: Unable to access opcode bytes at 0xf7fc2fc2. [ 213.637243][T10816] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 213.637263][T10816] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 213.637365][T10816] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 213.637389][T10816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.637402][T10816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.637415][T10816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.637448][T10816] [ 213.640020][T10654] veth0_macvtap: entered promiscuous mode [ 213.653340][T10654] veth1_macvtap: entered promiscuous mode [ 213.709162][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.721978][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.768375][ T9359] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.768431][ T9359] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.768462][ T9359] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.768491][ T9359] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.790377][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.894813][T10820] BUG: unable to handle page fault for address: ffffffffffffffea [ 213.894884][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 213.900775][T10820] #PF: supervisor read access in kernel mode [ 213.904216][T10820] #PF: error_code(0x0000) - not-present page [ 213.908335][T10820] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 [ 213.910727][T10820] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 213.912954][T10820] CPU: 3 UID: 0 PID: 10820 Comm: syz.5.1628 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.917180][T10820] Tainted: [L]=SOFTLOCKUP [ 213.918900][T10820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.923156][T10820] RIP: 0010:dvb_device_open+0x11b/0x3b0 [ 213.926458][T10820] Code: 18 4d 85 ed 0f 84 0e 02 00 00 e8 a0 d0 e1 f9 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 75 02 00 00 <49> 8b 7d 00 e8 9c 04 ca f9 31 ff 89 c3 89 c6 e8 81 ca e1 f9 84 db [ 213.934865][T10820] RSP: 0000:ffffc9000420f938 EFLAGS: 00010246 [ 213.937274][T10820] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000325d000 [ 213.940402][T10820] RDX: 1ffffffffffffffd RSI: ffffffff88299130 RDI: ffff8880221d3818 [ 213.943813][T10820] RBP: ffff8880221d3800 R08: 0000000000000001 R09: fffffbfff20b424d [ 213.947365][T10820] R10: ffffffff905a126f R11: 0000000000000001 R12: ffff88802a2dc380 [ 213.950691][T10820] R13: ffffffffffffffea R14: ffff88802625c9a8 R15: ffff88802a2dc3c8 [ 213.954105][T10820] FS: 0000000000000000(0000) GS:ffff888096c60000(0063) knlGS:00000000f53cdb40 [ 213.958049][T10820] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 213.960923][T10820] CR2: ffffffffffffffea CR3: 00000000569b2000 CR4: 0000000000352ef0 [ 213.964148][T10820] Call Trace: [ 213.965536][T10820] [ 213.966733][T10820] ? __pfx_dvb_device_open+0x10/0x10 [ 213.968841][T10820] chrdev_open+0x234/0x6a0 [ 213.970626][T10820] ? __pfx_apparmor_file_open+0x10/0x10 [ 213.972954][T10820] ? __pfx_chrdev_open+0x10/0x10 [ 213.975060][T10820] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 213.977627][T10820] do_dentry_open+0x6ab/0x14d0 [ 213.979551][T10820] ? __pfx_chrdev_open+0x10/0x10 [ 213.981709][T10820] vfs_open+0x82/0x3f0 [ 213.983392][T10820] path_openat+0x19fa/0x2440 [ 213.985559][T10820] ? __pfx_path_openat+0x10/0x10 [ 213.987566][T10820] do_file_open+0x20e/0x430 [ 213.989511][T10820] ? __pfx_do_file_open+0x10/0x10 [ 213.991723][T10820] ? _raw_spin_unlock+0x28/0x50 [ 213.994027][T10820] ? alloc_fd+0x471/0x7a0 [ 213.996090][T10820] do_sys_openat2+0x10f/0x1e0 [ 213.998221][T10820] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.000828][T10820] ? do_raw_spin_unlock+0x145/0x1e0 [ 214.003136][T10820] ? irqentry_exit+0x24d/0xa10 [ 214.005141][T10820] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.007328][T10820] __ia32_compat_sys_openat+0x12d/0x210 [ 214.009739][T10820] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 214.012383][T10820] do_int80_emulation+0x166/0x650 [ 214.014796][T10820] asm_int80_emulation+0x1a/0x20 [ 214.016899][T10820] RIP: 0023:0xf71175ab [ 214.018645][T10820] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 214.026631][T10820] RSP: 002b:00000000f53cd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 214.030929][T10820] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53cd100 [ 214.034703][T10820] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.037920][T10820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.041227][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.044766][T10820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.048315][T10820] [ 214.049683][T10820] Modules linked in: [ 214.051385][T10820] CR2: ffffffffffffffea [ 214.053315][T10820] ---[ end trace 0000000000000000 ]--- [ 214.055696][T10820] RIP: 0010:dvb_device_open+0x11b/0x3b0 [ 214.055731][T10820] Code: 18 4d 85 ed 0f 84 0e 02 00 00 e8 a0 d0 e1 f9 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 75 02 00 00 <49> 8b 7d 00 e8 9c 04 ca f9 31 ff 89 c3 89 c6 e8 81 ca e1 f9 84 db [ 214.055754][T10820] RSP: 0000:ffffc9000420f938 EFLAGS: 00010246 [ 214.055776][T10820] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000325d000 [ 214.055792][T10820] RDX: 1ffffffffffffffd RSI: ffffffff88299130 RDI: ffff8880221d3818 [ 214.055809][T10820] RBP: ffff8880221d3800 R08: 0000000000000001 R09: fffffbfff20b424d [ 214.055825][T10820] R10: ffffffff905a126f R11: 0000000000000001 R12: ffff88802a2dc380 [ 214.055841][T10820] R13: ffffffffffffffea R14: ffff88802625c9a8 R15: ffff88802a2dc3c8 [ 214.055858][T10820] FS: 0000000000000000(0000) GS:ffff888096c60000(0063) knlGS:00000000f53cdb40 [ 214.055898][T10820] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 214.055916][T10820] CR2: ffffffffffffffea CR3: 00000000569b2000 CR4: 0000000000352ef0 [ 214.055934][T10820] Kernel panic - not syncing: Fatal exception [ 214.100027][T10820] Kernel Offset: disabled [ 214.101868][T10820] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:19:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000204724 RBX=ffffffff8ea91540 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8c622c00 RDI=ffffffff81dfd44e RBP=fffffbfff1d522a8 RSP=ffffffff8ea07cf0 R8 =0000000000000000 R9 =ffffed10056467bd R10=ffff88802b233deb R11=ffffffff81d6ac59 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f055c0 CR3=000000006cf47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000058ca4 RBX=ffff88801cbfcb00 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8c622c00 RDI=ffffffff81dfd44e RBP=ffffed100397f960 RSP=ffffc9000047fe00 R8 =0000000000000000 R9 =ffffed10056667bd R10=ffff88802b333deb R11=00000031cd5b9c00 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f0a190 CR3=000000006cf47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02a32fcc5baa989b 0cc24c8428ae566c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6be5c612f5758cf2 8885f6cad5f97b30 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3723442e41328fc5 249d9a98095c0505 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3aee8837cd0029c9 5aab66896531dbd7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 000000000000007c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000003c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5cd8473911d7a8a6 55b15c604651b6e1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1685592d1550ddbd 0000000074ad316d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2c44cf5d1f0bd0c ab44ca2c7b863fe3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e4be7f8362a2c66 363cf72700000002 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 084c85c2e2ff4922 88a207d375fb6ee0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 780f2f1f29bbe6e6 aff08618710f928f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8edec220 RCX=0000000000000000 RDX=ffff8880294c0000 RSI=ffffffff82c2baae RDI=ffffffff8edec220 RBP=ffffffff82c2baae RSP=ffffc90004967900 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88801d3c85a0 R14=ffff8880007a78f8 R15=ffff888051cc5f00 RIP=ffffffff81e6b6c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fba190 CR3=00000000721b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc9000420f048 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000005d R14=0000000000000005 R15=ffffc9000420f360 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffffffffffffea CR3=00000000569b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000