last executing test programs: 6.438565278s ago: executing program 0 (id=2561): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000090060000000011000f0000000000000000000084983cbc7092310a23a0c3d739b50c0000000000000000000000000000000000cb347bce046084942e3c623f0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/137, 0x89}], 0x1, 0x5, 0x1, 0x0) r8 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r11}}) io_uring_enter(r8, 0x708, 0x41e3, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r12 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r12, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) 5.529063659s ago: executing program 0 (id=2568): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @broadcast}, 0x21) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 5.457436642s ago: executing program 0 (id=2569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x6004, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1, 0x800}, 0x0) 4.97758864s ago: executing program 2 (id=2570): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042af", 0x19}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.88998936s ago: executing program 2 (id=2571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) close(0x3) 4.770293545s ago: executing program 2 (id=2572): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.820205973s ago: executing program 2 (id=2576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 3.184764452s ago: executing program 3 (id=2581): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 2.630248469s ago: executing program 3 (id=2582): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000"], 0x0) 1.913852493s ago: executing program 2 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x400, &(0x7f0000000200)={0x13, 0xcf76, 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}}) 1.344487111s ago: executing program 3 (id=2584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4"], 0x0}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0x10000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x1, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.230101224s ago: executing program 2 (id=2585): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x837, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.229880705s ago: executing program 1 (id=2586): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xba37}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}}, 0x24040084) 1.229683449s ago: executing program 1 (id=2587): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 1.139234472s ago: executing program 1 (id=2588): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/115, 0x73}], 0x1, 0xc03, 0x4000) 1.138883583s ago: executing program 1 (id=2589): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(0x3) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 769.885119ms ago: executing program 3 (id=2590): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000094001a80400002803c00018008"], 0xb4}}, 0x0) 769.677684ms ago: executing program 3 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 709.891236ms ago: executing program 3 (id=2592): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000100)="05", 0x1) write$char_usb(r2, &(0x7f0000000340)="f4bc", 0x2) syz_usb_disconnect(r0) 540.162781ms ago: executing program 0 (id=2574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1203, 0x48a4d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 449.212028ms ago: executing program 0 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000000)={0x3d8c3144653f8606, 0x102000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r4, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 279.951121ms ago: executing program 0 (id=2594): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 179.190435ms ago: executing program 1 (id=2595): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYRES32=r3, @ANYBLOB="0800c3007413000008"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 0s ago: executing program 1 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) kernel console output (not intermixed with test programs): .853396][T11647] __nla_validate_parse: 1 callbacks suppressed [ 146.853405][T11647] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1688'. [ 146.858418][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 146.862438][T11646] lo: left allmulticast mode [ 146.996755][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 147.108987][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 147.110613][T11680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11680 comm=syz.1.1697 [ 147.250350][T11693] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 147.253223][T11693] overlayfs: missing 'lowerdir' [ 147.255461][T11693] overlayfs: failed to clone upperpath [ 147.448801][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1703'. [ 147.670589][ T40] kauditd_printk_skb: 304 callbacks suppressed [ 147.670602][ T40] audit: type=1400 audit(2000000320.623:3341): avc: denied { create } for pid=11704 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.698289][ T40] audit: type=1400 audit(2000000320.643:3342): avc: denied { sys_module } for pid=11704 comm="syz.3.1706" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.729776][ T40] audit: type=1400 audit(2000000320.673:3343): avc: denied { bind } for pid=11704 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.736170][ T40] audit: type=1400 audit(2000000320.673:3344): avc: denied { accept } for pid=11704 comm="syz.3.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.745084][ T40] audit: type=1400 audit(2000000320.683:3345): avc: denied { create } for pid=11712 comm="syz.0.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.751515][ T40] audit: type=1400 audit(2000000320.683:3346): avc: denied { setopt } for pid=11712 comm="syz.0.1707" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.760241][ T40] audit: type=1400 audit(2000000320.683:3347): avc: denied { read write } for pid=5932 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.766400][T11718] syzkaller1: entered promiscuous mode [ 147.770505][ T40] audit: type=1400 audit(2000000320.683:3348): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.774259][T11718] syzkaller1: entered allmulticast mode [ 147.780093][ T40] audit: type=1400 audit(2000000320.683:3349): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.790912][ T40] audit: type=1400 audit(2000000320.693:3350): avc: denied { read } for pid=11712 comm="syz.0.1707" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.034718][T11739] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 148.042036][T11738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1715'. [ 148.074054][T11741] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 148.076909][T11741] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1716'. [ 148.167372][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 148.170257][T11771] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 148.199878][T11775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1726'. [ 148.215813][T11770] 8021q: adding VLAN 0 to HW filter on device bond11 [ 148.220549][T11770] bond10: (slave bond11): making interface the new active one [ 148.223263][T11770] bond10: (slave bond11): Enslaving as an active interface with an up link [ 148.226481][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 148.241645][T11770] bond10: (slave gretap3): Enslaving as a backup interface with an up link [ 148.245456][T11771] 8021q: adding VLAN 0 to HW filter on device bond10 [ 148.419930][ T832] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 148.589775][ T832] usb 8-1: Using ep0 maxpacket: 8 [ 148.593319][ T832] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 148.595941][ T832] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.599521][ T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.602865][ T832] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.606231][ T832] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.611443][ T832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.619756][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.686738][T11804] bond12: Unable to set up delay as MII monitoring is disabled [ 148.689966][T11804] bond12 (unregistering): Released all slaves [ 148.835018][ T832] usb 8-1: usb_control_msg returned -32 [ 148.836870][ T832] usbtmc 8-1:16.0: can't read capabilities [ 148.859132][ T34] usb 8-1: USB disconnect, device number 14 [ 148.924337][T11821] NILFS (nbd0): device size too small [ 149.362495][T11844] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 149.417531][T11849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11849 comm=syz.0.1749 [ 149.447934][T11849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52992 sclass=netlink_route_socket pid=11849 comm=syz.0.1749 [ 149.544800][T11856] loop2: detected capacity change from 0 to 7 [ 149.547625][ T6945] Dev loop2: unable to read RDB block 7 [ 149.549413][ T6945] loop2: unable to read partition table [ 149.551494][ T6945] loop2: partition table beyond EOD, truncated [ 149.554374][T11856] Dev loop2: unable to read RDB block 7 [ 149.556235][T11856] loop2: unable to read partition table [ 149.558658][T11856] loop2: partition table beyond EOD, truncated [ 149.560735][T11856] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 149.843151][T11865] overlayfs: cannot append lower layer [ 150.166715][ T10] libceph: connect (1)[c::]:6789 error -101 [ 150.170537][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 150.173978][ T10] libceph: connect (1)[c::]:6789 error -101 [ 150.176079][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 150.179852][ T832] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 150.309758][ T832] usb 8-1: device descriptor read/64, error -71 [ 150.441657][ T10] libceph: connect (1)[c::]:6789 error -101 [ 150.443902][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 150.560402][ T832] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 150.583135][T11906] bridge_slave_1: Caught tx_queue_len zero misconfig [ 150.691856][T11920] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 150.700822][ T832] usb 8-1: device descriptor read/64, error -71 [ 150.783213][T11937] fuse: Bad value for 'fd' [ 150.785668][T11938] netlink: 'syz.0.1776': attribute type 27 has an invalid length. [ 150.794219][T11938] vxcan3: left promiscuous mode [ 150.800031][T11938] bond0: left allmulticast mode [ 150.803555][T11938] xfrm1: left allmulticast mode [ 150.819491][T11938] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.820265][ T832] usb usb8-port1: attempt power cycle [ 150.824648][T11938] net_ratelimit: 13 callbacks suppressed [ 150.824654][T11938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.908634][T11946] hsr_slave_1 (unregistering): left promiscuous mode [ 150.950322][ T10] libceph: connect (1)[c::]:6789 error -101 [ 150.952507][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 150.982076][T11887] ceph: No mds server is up or the cluster is laggy [ 151.030318][T11949] kAFS: unable to lookup cell '(,cL' [ 151.032553][T11949] kAFS: unable to lookup cell '(,cL' [ 151.057933][T11957] overlayfs: failed to clone upperpath [ 151.109143][T11966] tmpfs: Bad value for 'mpol' [ 151.152348][T11970] 8021q: adding VLAN 0 to HW filter on device bond12 [ 151.158002][T11970] bond12: entered allmulticast mode [ 151.160204][ T832] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 151.180748][ T832] usb 8-1: device descriptor read/8, error -71 [ 151.189939][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.429820][ T832] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 151.450519][ T832] usb 8-1: device descriptor read/8, error -71 [ 151.560727][ T832] usb usb8-port1: unable to enumerate USB device [ 151.621365][T12000] xt_hashlimit: size too large, truncated to 1048576 [ 151.733277][T12000] fuse: Bad value for 'fd' [ 151.844060][T12004] 9p: Bad value for 'rfdno' [ 151.882755][T12008] Device name not specified. [ 151.882755][T12008] [ 151.927876][T12010] fuse: Bad value for 'fd' [ 152.013826][T12015] __nla_validate_parse: 13 callbacks suppressed [ 152.013839][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 152.023766][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 152.027356][T12015] netlink: 'syz.2.1800': attribute type 18 has an invalid length. [ 152.030835][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 152.064883][T12016] netlink: 'syz.2.1800': attribute type 3 has an invalid length. [ 152.068197][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 152.896563][ T40] kauditd_printk_skb: 201 callbacks suppressed [ 152.896578][ T40] audit: type=1400 audit(2000000325.843:3552): avc: denied { create } for pid=12017 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.909865][ T40] audit: type=1400 audit(2000000325.853:3553): avc: denied { read write } for pid=5932 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.919771][ T40] audit: type=1400 audit(2000000325.853:3554): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.927367][ T40] audit: type=1400 audit(2000000325.853:3555): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.935682][ T40] audit: type=1400 audit(2000000325.863:3556): avc: denied { setopt } for pid=12017 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.949802][ T40] audit: type=1400 audit(2000000325.863:3557): avc: denied { create } for pid=12018 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.968606][ T40] audit: type=1400 audit(2000000325.873:3558): avc: denied { open } for pid=12024 comm="syz.3.1803" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 153.001214][ T40] audit: type=1400 audit(2000000325.953:3559): avc: denied { mounton } for pid=12026 comm="syz.0.1804" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 153.007946][T12035] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 153.015032][T12035] UDF-fs: Scanning with blocksize 2048 failed [ 153.018441][ T40] audit: type=1400 audit(2000000325.963:3560): avc: denied { create } for pid=12036 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.020751][T12035] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 153.026278][ T40] audit: type=1400 audit(2000000325.963:3561): avc: denied { connect } for pid=12036 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.030034][T12035] UDF-fs: Scanning with blocksize 4096 failed [ 153.100660][T12035] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 153.190366][T12058] bond0: entered promiscuous mode [ 153.194355][T12058] bond_slave_0: entered promiscuous mode [ 153.198724][T12058] bond_slave_1: entered promiscuous mode [ 153.201271][T12058] bridge_slave_1: entered promiscuous mode [ 153.203968][T12058] bond0: left promiscuous mode [ 153.205646][T12058] bond_slave_0: left promiscuous mode [ 153.207613][T12058] bond_slave_1: left promiscuous mode [ 153.209491][T12058] bridge_slave_1: left promiscuous mode [ 153.267171][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1813'. [ 153.270067][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1813'. [ 153.461216][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 153.527960][T12083] 9p: Bad value for 'rfdno' [ 153.573378][T12085] 9p: Bad value for 'rfdno' [ 153.933188][T12090] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1823'. [ 153.959343][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1823'. [ 153.962668][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1823'. [ 154.799504][T12166] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 154.818389][T12166] bond8: (slave geneve2): making interface the new active one [ 154.821352][T12166] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 154.824164][ T7153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.827292][ T7153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.830747][ T7153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.834018][ T7153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.899795][ T832] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 154.972854][T12176] vlan0: entered promiscuous mode [ 155.040742][ T832] usb 8-1: device descriptor read/64, error -71 [ 155.148445][T12187] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 155.251629][T12199] new mount options do not match the existing superblock, will be ignored [ 155.279852][ T832] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 155.409815][ T832] usb 8-1: device descriptor read/64, error -71 [ 155.523519][ T832] usb usb8-port1: attempt power cycle [ 155.592505][T12219] netlink: 'syz.2.1862': attribute type 30 has an invalid length. [ 155.599960][T12218] netlink: 'syz.2.1862': attribute type 30 has an invalid length. [ 155.888314][ T832] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 155.910556][ T832] usb 8-1: device descriptor read/8, error -71 [ 156.169797][ T832] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 156.190486][ T832] usb 8-1: device descriptor read/8, error -71 [ 156.300321][ T832] usb usb8-port1: unable to enumerate USB device [ 157.037337][T12270] openvswitch: netlink: Flow key attribute not present in set flow. [ 157.040889][T12270] netlink: 'syz.2.1878': attribute type 11 has an invalid length. [ 157.110383][T12277] ufs: You didn't specify the type of your ufs filesystem [ 157.110383][T12277] [ 157.110383][T12277] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 157.110383][T12277] [ 157.110383][T12277] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 157.123862][T12277] ufs: failed to set blocksize [ 157.184877][T12277] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 157.369271][T12292] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 157.383215][T12293] __nla_validate_parse: 17 callbacks suppressed [ 157.383226][T12293] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1887'. [ 157.554883][T12304] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1890'. [ 157.586212][T12306] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1891'. [ 157.632219][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 157.681766][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1895'. [ 157.687900][T12316] gtp0: entered promiscuous mode [ 157.796906][T12328] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1898'. [ 157.803990][T12328] fuse: Bad value for 'fd' [ 157.829059][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 157.834717][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 157.843437][T12335] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1897'. [ 157.847521][T12322] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 157.871525][T12339] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1900'. [ 157.967634][ T40] kauditd_printk_skb: 163 callbacks suppressed [ 157.967645][ T40] audit: type=1400 audit(2000000330.913:3725): avc: denied { getopt } for pid=12365 comm="syz.0.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.978348][ T40] audit: type=1400 audit(2000000330.923:3726): avc: denied { execmem } for pid=12365 comm="syz.0.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 158.010442][ T40] audit: type=1400 audit(2000000330.963:3727): avc: denied { create } for pid=12371 comm="syz.1.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 158.018428][ T40] audit: type=1400 audit(2000000330.963:3728): avc: denied { write } for pid=12371 comm="syz.1.1911" path="socket:[40661]" dev="sockfs" ino=40661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 158.031999][ T40] audit: type=1400 audit(2000000330.983:3729): avc: denied { create } for pid=12374 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.039295][ T40] audit: type=1400 audit(2000000330.983:3730): avc: denied { bind } for pid=12374 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.048768][ T40] audit: type=1400 audit(2000000330.983:3731): avc: denied { listen } for pid=12374 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.056868][ T40] audit: type=1400 audit(2000000330.983:3732): avc: denied { connect } for pid=12374 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.065293][ T40] audit: type=1400 audit(2000000330.983:3733): avc: denied { setopt } for pid=12374 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.075771][ T40] audit: type=1400 audit(2000000330.993:3734): avc: denied { write } for pid=12374 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.399879][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 158.414983][T12417] overlayfs: failed to clone upperpath [ 158.549914][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 158.553046][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.555887][ T24] usb 8-1: config 179 has no interface number 0 [ 158.558141][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 158.562103][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 158.565748][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 158.569464][ T24] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 158.573463][ T24] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.577558][ T24] usb 8-1: config 179 interface 65 has no altsetting 0 [ 158.580295][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 158.583109][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.589167][T12393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.598577][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input22 [ 158.652612][ T5327] input input22: unable to receive magic message: -110 [ 158.659237][ T5327] input input22: unable to receive magic message: -32 [ 158.663641][ T5327] input input22: unable to receive magic message: -32 [ 158.674560][ T5327] input input22: unable to receive magic message: -32 [ 158.679616][ T5327] input input22: unable to receive magic message: -32 [ 158.794453][T12393] input input22: unable to receive magic message: -32 [ 158.914601][ T832] usb 8-1: USB disconnect, device number 23 [ 158.916556][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.939866][T12457] fuse: Bad value for 'fd' [ 159.142231][T12472] netlink: 'syz.2.1945': attribute type 10 has an invalid length. [ 159.147137][T12472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.151935][T12472] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.155754][T12472] netlink: 'syz.2.1945': attribute type 10 has an invalid length. [ 159.158998][T12472] batadv0: entered promiscuous mode [ 159.161321][T12472] batadv0: entered allmulticast mode [ 159.164985][T12472] bond0: (slave batadv0): Releasing backup interface [ 159.171335][T12472] bridge0: port 3(batadv0) entered blocking state [ 159.173922][T12472] bridge0: port 3(batadv0) entered disabled state [ 159.180292][ T7153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.184579][ T7153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.634492][T12526] kvm: kvm [12525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfff10000eb62 [ 159.665644][T12526] kvm: kvm [12525]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff0000ff00 [ 159.832167][T12541] netlink: 'syz.3.1965': attribute type 23 has an invalid length. [ 159.856424][T12541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12541 comm=syz.3.1965 [ 160.430078][T12580] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 160.669952][ T59] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.799105][T12595] overlayfs: failed to clone lowerpath [ 160.806235][T12596] overlayfs: failed to resolve '/': -2 [ 160.830880][ T59] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 160.834101][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.836974][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.840551][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.843453][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.846306][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.849788][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.852622][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.855452][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.858889][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.861960][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.864935][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.868342][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.871330][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.874355][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.877863][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.881168][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.884650][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.888102][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.891184][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.894137][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.897684][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.900710][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.903640][ T59] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.907172][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.912245][ T59] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 160.916051][ T59] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 160.919372][ T59] usb 5-1: Product: syz [ 160.920962][ T59] usb 5-1: Manufacturer: syz [ 160.922583][ T59] usb 5-1: SerialNumber: syz [ 160.926529][ T59] usb 5-1: config 0 descriptor?? [ 160.941090][ T59] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 161.009421][T12619] can0: slcan on ttyS3. [ 161.135343][ T24] usb 5-1: USB disconnect, device number 17 [ 161.140374][ T24] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 161.143760][T12616] can0 (unregistered): slcan off ttyS3. [ 161.172211][T12643] tipc: Enabling of bearer rejected, failed to enable media [ 161.676599][T12662] ref_ctr increment failed for inode: 0x9c5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033373100 [ 161.680635][T12661] uprobe: syz.3.1999:12661 failed to unregister, leaking uprobe [ 162.049668][T12686] vivid-001: disconnect [ 162.053488][T12686] vivid-001: reconnect [ 162.129815][ T34] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.153935][T12694] trusted_key: encrypted_key: master key parameter is missing [ 162.279661][T12703] bond9: option xmit_hash_policy: invalid value (6) [ 162.285915][T12703] bond9 (unregistering): Released all slaves [ 162.289987][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 162.293957][ T34] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 162.297016][ T34] usb 5-1: config 0 has no interface number 0 [ 162.298978][ T34] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.303027][ T34] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 162.306648][ T34] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 162.308670][T12706] netlink: 'syz.3.2013': attribute type 39 has an invalid length. [ 162.311470][ T34] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 162.317920][ T34] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.324070][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 162.327158][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.329776][ T34] usb 5-1: Product: syz [ 162.331221][ T34] usb 5-1: Manufacturer: syz [ 162.333060][ T34] usb 5-1: SerialNumber: syz [ 162.336974][ T34] usb 5-1: config 0 descriptor?? [ 162.530061][T12725] binder: BINDER_SET_CONTEXT_MGR already set [ 162.532741][T12725] binder: 12722:12725 ioctl 4018620d 200000000480 returned -16 [ 162.536510][T12724] netlink: 'syz.3.2018': attribute type 4 has an invalid length. [ 162.541172][T12724] binder: 12722:12724 ioctl c0306201 200000000640 returned -22 [ 162.541588][ T34] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 162.597814][T12727] bridge_slave_0 (unregistering): left allmulticast mode [ 162.600795][T12727] bridge_slave_0 (unregistering): left promiscuous mode [ 162.603176][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.618398][T12731] __nla_validate_parse: 16 callbacks suppressed [ 162.618409][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 162.746171][T12744] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2003'. [ 162.760330][ T59] usb 5-1: USB disconnect, device number 18 [ 162.833364][T12751] netlink: 'syz.2.2026': attribute type 30 has an invalid length. [ 162.853332][T12751] bond9: option arp_missed_max: invalid value (0) [ 162.855985][T12751] bond9: option arp_missed_max: allowed values 1 - 255 [ 162.873012][T12751] bond9 (unregistering): Released all slaves [ 162.909640][T12756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.916407][T12760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.961752][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2029'. [ 162.966176][T12765] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 162.970563][ T40] kauditd_printk_skb: 306 callbacks suppressed [ 162.970576][ T40] audit: type=1400 audit(2000000335.923:4041): avc: denied { create } for pid=12764 comm="syz.1.2029" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.995169][ T40] audit: type=1400 audit(2000000335.933:4042): avc: denied { ioctl } for pid=12764 comm="syz.1.2029" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44133 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.025141][ T40] audit: type=1400 audit(2000000335.973:4043): avc: denied { read write } for pid=12775 comm="syz.3.2031" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.037731][ T40] audit: type=1400 audit(2000000335.973:4044): avc: denied { open } for pid=12775 comm="syz.3.2031" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.047806][ T40] audit: type=1400 audit(2000000335.973:4045): avc: denied { ioctl } for pid=12775 comm="syz.3.2031" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.080441][ T40] audit: type=1400 audit(2000000336.033:4046): avc: denied { create } for pid=12786 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.089178][ T40] audit: type=1400 audit(2000000336.033:4047): avc: denied { create } for pid=12786 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.096999][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 163.104511][T12788] netlink: 'syz.2.2033': attribute type 21 has an invalid length. [ 163.109570][ T40] audit: type=1400 audit(2000000336.033:4048): avc: denied { shutdown } for pid=12786 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.118155][ T40] audit: type=1400 audit(2000000336.033:4049): avc: denied { getopt } for pid=12786 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.127088][ T40] audit: type=1400 audit(2000000336.033:4050): avc: denied { connect } for pid=12786 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.150508][T12801] /dev/nullb0: Can't lookup blockdev [ 163.175738][T12803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.176172][T12808] overlayfs: failed to clone upperpath [ 163.276051][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.281670][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.285008][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.288167][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.292536][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.427374][T10853] syz_tun (unregistering): left promiscuous mode [ 163.494300][T12815] chnl_net:caif_netlink_parms(): no params data found [ 163.595257][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.598149][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.601303][T12815] bridge_slave_0: entered allmulticast mode [ 163.604916][T12815] bridge_slave_0: entered promiscuous mode [ 163.608428][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.610907][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.613235][T12815] bridge_slave_1: entered allmulticast mode [ 163.616069][T12815] bridge_slave_1: entered promiscuous mode [ 163.640158][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.645692][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.682804][T12815] team0: Port device team_slave_0 added [ 163.692878][T12815] team0: Port device team_slave_1 added [ 163.728484][T12815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.731031][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.739157][T12815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.771999][T12815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.774301][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.782904][T12815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.787047][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 163.810735][T12815] hsr_slave_0: entered promiscuous mode [ 163.813011][T12815] hsr_slave_1: entered promiscuous mode [ 163.815193][T12815] debugfs: 'hsr0' already exists in 'hsr' [ 163.816998][T12815] Cannot create hsr debugfs directory [ 163.933499][ T7166] team0: left allmulticast mode [ 163.935568][ T7166] team_slave_0: left allmulticast mode [ 163.937358][ T7166] team_slave_1: left allmulticast mode [ 163.939157][ T7166] team0: left promiscuous mode [ 163.943924][ T7166] team_slave_0: left promiscuous mode [ 163.945793][ T7166] team_slave_1: left promiscuous mode [ 163.949130][ T7166] bridge0: port 2(team0) entered disabled state [ 163.956977][ T7166] x9: left allmulticast mode [ 163.958946][ T7166] x9: left promiscuous mode [ 163.968183][ T7166] bridge0: port 1(1x9) entered disabled state [ 164.027726][T12854] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 164.095710][ T7166] ip6gretap0 (unregistering): left promiscuous mode [ 164.112008][ T7166] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 164.258147][ T7166] gretap0 (unregistering): left promiscuous mode [ 164.292655][ T7166] bond10 (unregistering): (slave gretap3): Releasing backup interface [ 164.549486][ T7166] bond9 (unregistering): (slave bridge3): Releasing active interface [ 164.858050][ T7166] team0: Port device bridge8 removed [ 164.986485][ T7166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.991705][ T7166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.995362][ T7166] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 164.998508][ T7166] bond0 (unregistering): Released all slaves [ 165.005215][ T7166] bond1 (unregistering): Released all slaves [ 165.084384][ T7166] bond2 (unregistering): Released all slaves [ 165.162969][ T7166] bond3 (unregistering): (slave bond4): Releasing active interface [ 165.165870][ T7166] bond3 (unregistering): Released all slaves [ 165.240895][ T7166] bond4 (unregistering): Released all slaves [ 165.248088][ T7166] bond5 (unregistering): (slave veth3): Releasing backup interface [ 165.251245][ T7166] bond5 (unregistering): Released all slaves [ 165.339902][ T5935] Bluetooth: hci4: command tx timeout [ 165.344261][ T7166] bond6 (unregistering): Released all slaves [ 165.424190][ T7166] bond7 (unregistering): (slave bond8): Releasing active interface [ 165.427985][ T7166] bond7 (unregistering): Released all slaves [ 165.510716][ T7166] bond8 (unregistering): Released all slaves [ 165.518088][ T7166] bond9 (unregistering): Released all slaves [ 165.605847][ T7166] bond10 (unregistering): (slave bond11): Releasing backup interface [ 165.610237][ T7166] bond10 (unregistering): Released all slaves [ 165.698522][ T7166] bond11 (unregistering): Released all slaves [ 165.786454][ T7166] bond12 (unregistering): Released all slaves [ 165.895656][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 165.898656][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 165.902957][T12880] netlink: 'syz.3.2059': attribute type 7 has an invalid length. [ 165.905768][T12880] netlink: 'syz.3.2059': attribute type 8 has an invalid length. [ 165.908208][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 165.911635][T12881] netlink: 'syz.3.2059': attribute type 7 has an invalid length. [ 165.914611][T12881] netlink: 'syz.3.2059': attribute type 8 has an invalid length. [ 165.917042][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 166.117627][T12893] syzkaller0: entered promiscuous mode [ 166.120683][T12893] syzkaller0: entered allmulticast mode [ 166.165315][T12898] netlink: 'syz.3.2063': attribute type 7 has an invalid length. [ 166.355511][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2066'. [ 166.431721][ T7166] hsr_slave_0: left promiscuous mode [ 166.434813][ T7166] hsr_slave_1: left promiscuous mode [ 166.436876][ T7166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.440017][ T7166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.442741][ T7166] batman_adv: batadv0: Interface deactivated: dummy0 [ 166.444880][ T7166] batman_adv: batadv0: Removing interface: dummy0 [ 166.465379][ T7166] pimreg3 (unregistering): left allmulticast mode [ 166.579797][ T1029] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 166.739817][ T1029] usb 5-1: Using ep0 maxpacket: 8 [ 166.743085][ T1029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.746612][ T1029] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.749954][ T1029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.758296][ T1029] usb 5-1: config 0 descriptor?? [ 166.765673][ T7166] team0 (unregistering): Port device team_slave_1 removed [ 166.793040][ T7166] team0 (unregistering): Port device team_slave_0 removed [ 166.971330][ T1029] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.096369][T12815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.102860][T12815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.108544][T12815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.113794][T12815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.183813][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.206044][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.211535][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.214052][ T7096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.228842][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.231387][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.385984][ T1029] usb 5-1: USB disconnect, device number 19 [ 167.414426][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.422828][ T5935] Bluetooth: hci4: command tx timeout [ 167.454433][T12815] veth0_vlan: entered promiscuous mode [ 167.466386][T12815] veth1_vlan: entered promiscuous mode [ 167.487867][T12815] veth0_macvtap: entered promiscuous mode [ 167.492302][T12815] veth1_macvtap: entered promiscuous mode [ 167.517174][ T7166] IPVS: stop unused estimator thread 0... [ 167.519209][T12815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.529318][T12815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.538819][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.543036][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.545782][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.548497][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.584334][T12988] vcan0: entered allmulticast mode [ 167.600476][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.603372][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.606452][T12990] bridge_slave_1: left allmulticast mode [ 167.608308][T12990] bridge_slave_1: left promiscuous mode [ 167.610411][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.615112][T12990] bridge_slave_0: left allmulticast mode [ 167.617031][T12990] bridge_slave_0: left promiscuous mode [ 167.618999][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.714702][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.717316][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.803198][T13006] syz_tun: entered allmulticast mode [ 167.819918][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.821181][T12990] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 167.826356][T13008] __nla_validate_parse: 1 callbacks suppressed [ 167.826371][T13008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2089'. [ 167.850785][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 167.917113][T13017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=13017 comm=syz.2.2093 [ 167.923432][T13017] validate_nla: 1 callbacks suppressed [ 167.923447][T13017] netlink: 'syz.2.2093': attribute type 1 has an invalid length. [ 167.945584][T13017] bond9 (unregistering): Released all slaves [ 167.985582][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2093'. [ 167.995574][ T40] kauditd_printk_skb: 30235 callbacks suppressed [ 167.995591][ T40] audit: type=1400 audit(2000000340.943:34280): avc: denied { read write } for pid=13029 comm="syz.0.2097" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.006748][ T40] audit: type=1400 audit(2000000340.943:34281): avc: denied { open } for pid=13029 comm="syz.0.2097" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.013993][ T40] audit: type=1400 audit(2000000340.943:34282): avc: denied { allowed } for pid=13029 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 168.019476][ T40] audit: type=1400 audit(2000000340.953:34283): avc: denied { map } for pid=13029 comm="syz.0.2097" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.028882][ T40] audit: type=1400 audit(2000000340.953:34284): avc: denied { read write } for pid=13029 comm="syz.0.2097" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44537 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.084934][ T40] audit: type=1400 audit(2000000341.033:34285): avc: denied { mount } for pid=13039 comm="syz.0.2100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.098891][ T40] audit: type=1400 audit(2000000341.033:34286): avc: denied { remount } for pid=13039 comm="syz.0.2100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.099532][T13038] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 168.107071][ T40] audit: type=1400 audit(2000000341.053:34287): avc: denied { ioctl } for pid=13039 comm="syz.0.2100" path="socket:[44611]" dev="sockfs" ino=44611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.117321][ T40] audit: type=1400 audit(2000000341.053:34288): avc: denied { read } for pid=13039 comm="syz.0.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.124912][ T40] audit: type=1400 audit(2000000341.063:34289): avc: denied { firmware_load } for pid=13042 comm="syz.3.2101" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 168.188891][T13057] tc_dump_action: action bad kind [ 168.237483][T13065] 9p: Bad value for 'rfdno' [ 168.332424][T13076] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2110'. [ 168.641023][ T1458] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 168.752838][T13005] syz_tun: left allmulticast mode [ 168.790085][ T1458] usb 8-1: device descriptor read/64, error -71 [ 168.925831][T13112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2121'. [ 169.049912][ T1458] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 169.176600][T13119] program syz.1.2123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.180811][T13119] xt_hashlimit: size too large, truncated to 1048576 [ 169.189976][ T1458] usb 8-1: device descriptor read/64, error -71 [ 169.231839][T13121] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 169.272038][T13123] fuse: Bad value for 'fd' [ 169.300805][ T1458] usb usb8-port1: attempt power cycle [ 169.499977][ T5935] Bluetooth: hci4: command tx timeout [ 169.529872][ T1029] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 169.659935][ T1458] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 169.681634][ T1458] usb 8-1: device descriptor read/8, error -71 [ 169.699804][ T1029] usb 5-1: Using ep0 maxpacket: 8 [ 169.710791][ T1029] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 169.713388][ T1029] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.716430][ T1029] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.719474][ T1029] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.723473][ T1029] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.727533][ T1029] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.730609][ T1029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.940048][ T1458] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 169.963814][ T1458] usb 8-1: device descriptor read/8, error -71 [ 169.964471][T13177] syz.2.2141: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 169.972220][T13177] CPU: 3 UID: 0 PID: 13177 Comm: syz.2.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.972238][T13177] Tainted: [L]=SOFTLOCKUP [ 169.972242][T13177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.972248][T13177] Call Trace: [ 169.972253][T13177] [ 169.972257][T13177] dump_stack_lvl+0x100/0x190 [ 169.972299][T13177] warn_alloc.cold+0x95/0x1c1 [ 169.972318][T13177] ? __pfx_warn_alloc+0x10/0x10 [ 169.972341][T13177] ? kasan_save_stack+0x3f/0x50 [ 169.972350][T13177] ? kasan_save_stack+0x30/0x50 [ 169.972359][T13177] ? kasan_save_track+0x14/0x30 [ 169.972370][T13177] ? xskq_create+0xfb/0x1d0 [ 169.972391][T13177] __vmalloc_node_range_noprof+0x1252/0x1530 [ 169.972410][T13177] ? xskq_create+0xfb/0x1d0 [ 169.972427][T13177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 169.972448][T13177] ? xskq_create+0xfb/0x1d0 [ 169.972461][T13177] vmalloc_user_noprof+0x9e/0xe0 [ 169.972475][T13177] ? xskq_create+0xfb/0x1d0 [ 169.972488][T13177] xskq_create+0xfb/0x1d0 [ 169.972502][T13177] xsk_setsockopt+0x725/0xa90 [ 169.972516][T13177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.972528][T13177] ? find_held_lock+0x2b/0x80 [ 169.972539][T13177] ? __fget_files+0x215/0x3d0 [ 169.972553][T13177] ? selinux_socket_setsockopt+0x6a/0x80 [ 169.972575][T13177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.972589][T13177] do_sock_setsockopt+0xf3/0x1d0 [ 169.972604][T13177] __sys_setsockopt+0x195/0x220 [ 169.972617][T13177] __x64_sys_setsockopt+0xbd/0x160 [ 169.972626][T13177] ? do_syscall_64+0x95/0xf80 [ 169.972642][T13177] ? lockdep_hardirqs_on+0x78/0x100 [ 169.972657][T13177] do_syscall_64+0x106/0xf80 [ 169.972672][T13177] ? clear_bhb_loop+0x40/0x90 [ 169.972685][T13177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.972696][T13177] RIP: 0033:0x7f80e279bf79 [ 169.972706][T13177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.972716][T13177] RSP: 002b:00007f80e36ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.972727][T13177] RAX: ffffffffffffffda RBX: 00007f80e2a15fa0 RCX: 00007f80e279bf79 [ 169.972739][T13177] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 169.972746][T13177] RBP: 00007f80e28327e0 R08: 0000000000000004 R09: 0000000000000000 [ 169.972753][T13177] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.972759][T13177] R13: 00007f80e2a16038 R14: 00007f80e2a15fa0 R15: 00007fffd24017f8 [ 169.972774][T13177] [ 169.972778][T13177] Mem-Info: [ 170.062040][T13177] active_anon:55022 inactive_anon:27453 isolated_anon:0 [ 170.062040][T13177] active_file:8134 inactive_file:20901 isolated_file:0 [ 170.062040][T13177] unevictable:1768 dirty:74 writeback:0 [ 170.062040][T13177] slab_reclaimable:9479 slab_unreclaimable:70991 [ 170.062040][T13177] mapped:30668 shmem:71724 pagetables:1716 [ 170.062040][T13177] sec_pagetables:309 bounce:0 [ 170.062040][T13177] kernel_misc_reclaimable:0 [ 170.062040][T13177] free:398288 free_pcp:17432 free_cma:0 [ 170.079869][T13177] Node 0 active_anon:196756kB inactive_anon:109812kB active_file:28924kB inactive_file:83400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105016kB dirty:264kB writeback:0kB shmem:260428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15104kB pagetables:6548kB sec_pagetables:1236kB all_unreclaimable? no Balloon:0kB [ 170.080367][ T1458] usb usb8-port1: unable to enumerate USB device [ 170.093756][T13177] Node 1 active_anon:25812kB inactive_anon:0kB active_file:3612kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20508kB dirty:32kB writeback:0kB shmem:29196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 170.095804][T13183] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 170.107450][T13177] Node 0 DMA free:9484kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1380kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:100kB free_cma:0kB [ 170.119764][T13177] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 170.121639][T13177] Node 0 DMA32 free:65088kB boost:0kB min:27488kB low:34360kB high:41232kB reserved_highatomic:0KB free_highatomic:0KB active_anon:202196kB inactive_anon:109812kB active_file:28924kB inactive_file:83400kB unevictable:3536kB writepending:264kB zspages:0kB present:2080628kB managed:1260904kB mlocked:0kB bounce:0kB free_pcp:42396kB local_pcp:10248kB free_cma:0kB [ 170.132330][T13177] lowmem_reserve[]: 0 0 0 0 0 [ 170.133996][T13177] Node 1 Normal free:1508536kB boost:0kB min:39752kB low:49688kB high:59624kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26308kB inactive_anon:0kB active_file:3612kB inactive_file:204kB unevictable:3536kB writepending:32kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:27568kB local_pcp:9884kB free_cma:0kB [ 170.144306][T13177] lowmem_reserve[]: 0 0 0 0 0 [ 170.145873][T13177] Node 0 DMA: 31*4kB (UM) 12*8kB (UM) 17*16kB (UM) 11*32kB (UM) 5*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 3*2048kB (UME) 0*4096kB = 9484kB [ 170.151278][T13177] Node 0 DMA32: 1*4kB (U) 0*8kB 214*16kB (U) 858*32kB (UE) 236*64kB (UE) 62*128kB (UE) 10*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 56996kB [ 170.157117][T13177] Node 1 Normal: 3*4kB (UE) 54*8kB (UME) 76*16kB (UE) 105*32kB (UME) 72*64kB (UME) 48*128kB (UME) 29*256kB (UME) 25*512kB (UME) 20*1024kB (UME) 17*2048kB (UM) 346*4096kB (UM) = 1508508kB [ 170.165075][T13177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.167281][T13191] tmpfs: Bad value for 'mpol' [ 170.168069][T13177] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 170.173591][T13177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.176613][T13177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 170.179573][T13177] 104661 total pagecache pages [ 170.181171][T13177] 0 pages in swap cache [ 170.182539][T13177] Free swap = 124996kB [ 170.183895][T13177] Total swap = 124996kB [ 170.185695][T13177] 1048443 pages RAM [ 170.186949][T13177] 0 pages HighMem/MovableOnly [ 170.188457][T13177] 283906 pages reserved [ 170.189848][T13177] 0 pages cma reserved [ 170.204320][T13193] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 170.211121][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 170.214122][T13193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2145'. [ 170.438363][T13212] xt_nfacct: accounting object `syz0' does not exist [ 170.502576][T13218] usbtmc 5-1:16.0: simple control status returned 2d [ 170.515611][T13221] tmpfs: Unknown parameter '00000000000000000000000' [ 170.757546][T13243] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 170.762600][T13241] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 170.842685][ T832] usb 5-1: USB disconnect, device number 20 [ 171.176486][T13260] autofs: Bad value for 'fd' [ 171.180652][T13260] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 171.189417][T13260] Cannot find del_set index 4 as target [ 171.582873][ T5935] Bluetooth: hci4: command tx timeout [ 171.609317][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2159'. [ 171.789885][T13277] vxcan1: entered allmulticast mode [ 172.326409][T13295] erspan1: entered promiscuous mode [ 172.472357][T13301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 172.486877][T13303] syzkaller0: entered promiscuous mode [ 172.489214][T13303] syzkaller0: entered allmulticast mode [ 172.719316][T13308] could not allocate digest TFM handle sha224-generic [ 172.755451][T13315] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 172.764043][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'. [ 172.776852][T13315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.783650][T13315] openvswitch: netlink: IPv4 tun info is not correct [ 172.836280][T13327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2173'. [ 172.843119][T13327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2173'. [ 172.935235][T13337] netlink: 'syz.3.2175': attribute type 4 has an invalid length. [ 172.937973][T13337] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2175'. [ 172.944339][T13337] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 173.009340][ T40] kauditd_printk_skb: 256 callbacks suppressed [ 173.009356][ T40] audit: type=1400 audit(2000000345.953:34546): avc: denied { wake_alarm } for pid=13338 comm="syz.2.2177" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 173.132407][ T40] audit: type=1400 audit(2000000346.083:34547): avc: denied { name_bind } for pid=13343 comm="syz.2.2179" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 173.147227][ T40] audit: type=1400 audit(2000000346.093:34548): avc: denied { module_request } for pid=13343 comm="syz.2.2179" kmod="net-pf-10-proto-62-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.199300][ T40] audit: type=1400 audit(2000000346.143:34549): avc: denied { name_connect } for pid=13347 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 173.205743][ T40] audit: type=1400 audit(2000000346.153:34550): avc: denied { connect } for pid=13347 comm="syz.2.2180" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.214564][ T40] audit: type=1400 audit(2000000346.153:34551): avc: denied { setopt } for pid=13347 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.221657][ T40] audit: type=1400 audit(2000000346.153:34552): avc: denied { create } for pid=13347 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.227716][ T40] audit: type=1400 audit(2000000346.153:34553): avc: denied { setopt } for pid=13347 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.234553][ T40] audit: type=1400 audit(2000000346.153:34554): avc: denied { ioctl } for pid=13347 comm="syz.2.2180" path="socket:[46176]" dev="sockfs" ino=46176 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.308682][T13351] overlayfs: failed to clone upperpath [ 173.349990][ T40] audit: type=1400 audit(2000000346.293:34555): avc: denied { getopt } for pid=13358 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.472926][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'. [ 173.708148][T13387] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 173.781014][T13387] veth5: entered promiscuous mode [ 173.784178][T13387] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 173.799776][ T1029] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 173.810478][T13394] bridge_slave_0: entered promiscuous mode [ 173.944428][T13402] futex_wake_op: syz.0.2198 tries to shift op by 32; fix this program [ 173.946838][T13404] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 173.960528][T13404] bond9: entered promiscuous mode [ 173.961092][ T1029] usb 6-1: Using ep0 maxpacket: 32 [ 173.962488][T13404] 8021q: adding VLAN 0 to HW filter on device bond9 [ 173.965094][ T1029] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.974633][ T1029] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.977595][ T1029] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.982204][ T1029] usb 6-1: Product: syz [ 173.983668][ T1029] usb 6-1: Manufacturer: syz [ 173.985502][ T1029] usb 6-1: SerialNumber: syz [ 173.990504][ T1029] usb 6-1: config 0 descriptor?? [ 173.992579][T13382] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.994425][T13404] 8021q: adding VLAN 0 to HW filter on device bond9 [ 173.997863][T13404] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 174.001250][ T1029] hub 6-1:0.0: bad descriptor, ignoring hub [ 174.001757][T13404] bond9: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 174.004029][ T1029] hub 6-1:0.0: probe with driver hub failed with error -5 [ 174.011544][T13408] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 174.015461][T13408] VFS: Can't find a romfs filesystem on dev nullb0. [ 174.015461][T13408] [ 174.024652][T13404] bond9: (slave vxcan5): making interface the new active one [ 174.027825][T13404] vxcan5: entered promiscuous mode [ 174.039460][T13404] vxcan5: left promiscuous mode [ 174.081079][T13406] fuse: Bad value for 'fd' [ 174.270908][ T34] usb 6-1: USB disconnect, device number 13 [ 174.684200][T13437] syzkaller0: entered promiscuous mode [ 174.687166][T13437] syzkaller0: entered allmulticast mode [ 174.693157][T13437] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 174.779808][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 174.820134][T13447] binder: 13446:13447 ioctl c018620c 200000000000 returned -1 [ 174.832731][T13447] binder: 13446:13447 ioctl c0106441 200000000340 returned -22 [ 174.835457][T13447] binder: 13446:13447 ioctl c028644b 2000000024c0 returned -22 [ 174.839467][T13447] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2209'. [ 174.938728][T13459] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 174.953341][T13459] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 174.956091][ T29] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.959266][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.963948][ T29] usb 6-1: Product: syz [ 174.965297][ T29] usb 6-1: Manufacturer: syz [ 174.966804][ T29] usb 6-1: SerialNumber: syz [ 174.983294][ T29] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.010987][ T1458] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.083798][T13469] ip6gretap3: entered promiscuous mode [ 175.085852][T13469] ip6gretap3: entered allmulticast mode [ 175.151750][T13464] No source specified [ 175.242799][ T29] usb 6-1: USB disconnect, device number 14 [ 175.302751][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 175.466196][T13504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2223'. [ 175.810109][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 175.901306][T13533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2232'. [ 175.904708][T13533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2232'. [ 176.060484][ T1458] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 176.064205][ T1458] ath9k_htc: Failed to initialize the device [ 176.067879][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 176.640541][T13566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.645155][T13566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.899787][ T34] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 177.039868][ T34] usb 8-1: device descriptor read/64, error -71 [ 177.293121][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 177.304132][T13582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.327112][T13582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.429869][ T34] usb 8-1: device descriptor read/64, error -71 [ 177.549937][ T34] usb usb8-port1: attempt power cycle [ 177.899851][ T34] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 177.920217][ T34] usb 8-1: device descriptor read/8, error -71 [ 177.957039][T13596] batadv_slave_1: entered promiscuous mode [ 177.959970][T13596] __nla_validate_parse: 64 callbacks suppressed [ 177.959985][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 177.965867][T13595] batadv_slave_1: left promiscuous mode [ 178.021091][T13600] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 178.109197][T13602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.118419][ T40] kauditd_printk_skb: 277 callbacks suppressed [ 178.118437][ T40] audit: type=1400 audit(2000000351.063:34833): avc: denied { ioctl } for pid=13601 comm="syz.1.2251" path="socket:[47456]" dev="sockfs" ino=47456 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.128678][ T40] audit: type=1400 audit(2000000351.063:34834): avc: denied { map_read map_write } for pid=13601 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.134785][ T40] audit: type=1400 audit(2000000351.063:34835): avc: denied { ioctl } for pid=13564 comm="syz.3.2237" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.142188][ T40] audit: type=1400 audit(2000000351.073:34836): avc: denied { getopt } for pid=13601 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.147760][ T40] audit: type=1400 audit(2000000351.073:34837): avc: denied { module_request } for pid=13601 comm="syz.1.2251" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 178.179815][ T34] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 178.200658][ T34] usb 8-1: device descriptor read/8, error -71 [ 178.204176][ T40] audit: type=1400 audit(2000000351.153:34838): avc: denied { write } for pid=13606 comm="syz.1.2253" name="ipv6_route" dev="proc" ino=4026534003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 178.211605][ T40] audit: type=1400 audit(2000000351.153:34839): avc: denied { name_bind } for pid=13606 comm="syz.1.2253" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 178.218518][ T40] audit: type=1400 audit(2000000351.153:34840): avc: denied { node_bind } for pid=13606 comm="syz.1.2253" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 178.226672][ T40] audit: type=1400 audit(2000000351.173:34841): avc: denied { mount } for pid=13606 comm="syz.1.2253" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 178.233720][ T40] audit: type=1400 audit(2000000351.173:34842): avc: denied { create } for pid=13606 comm="syz.1.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.310153][ T34] usb usb8-port1: unable to enumerate USB device [ 178.569792][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 178.720241][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 178.724815][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 178.728460][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.732018][T13619] devpts: Bad value for 'max' [ 178.732604][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.738228][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 178.738908][T13619] overlayfs: failed to resolve './file1': -2 [ 178.743933][ T34] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 178.749283][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.757087][ T34] usb 6-1: config 0 descriptor?? [ 178.921401][T13633] ipt_REJECT: ECHOREPLY no longer supported. [ 178.921729][T13634] ipt_REJECT: ECHOREPLY no longer supported. [ 178.949531][T13633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2263'. [ 178.953105][T13634] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2263'. [ 179.112763][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2266'. [ 179.173302][ T34] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0005/input/input24 [ 179.185249][ T34] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0005/input/input25 [ 179.265031][ T34] kye 0003:0458:5013.0005: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 179.322372][T13649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13649 comm=syz.2.2266 [ 179.366819][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2267'. [ 179.367836][T13612] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 179.373565][T13612] Cannot find add_set index 0 as target [ 179.376289][T13612] netlink: 'syz.1.2255': attribute type 21 has an invalid length. [ 179.379020][T13612] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.385606][ T34] usb 6-1: USB disconnect, device number 15 [ 179.393841][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 179.396855][T13660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13660 comm=syz.2.2268 [ 179.397355][T13659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'. [ 179.538039][T13671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2272'. [ 179.615355][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 179.864203][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 179.968247][T13713] : renamed from ip6gretap0 (while UP) [ 180.062656][T13721] xt_hashlimit: size too large, truncated to 1048576 [ 180.120509][T13724] cgroup: release_agent respecified [ 180.143386][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880560ee000: rx timeout, send abort [ 180.211252][T13736] openvswitch: netlink: Message has 6 unknown bytes. [ 180.318310][T13751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.373079][T13750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.377997][T13751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.504155][T13769] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 180.647406][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880560ee000: abort rx timeout. Force session deactivation [ 180.728465][T13787] netlink: zone id is out of range [ 180.730748][T13787] netlink: zone id is out of range [ 180.732638][T13792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.733215][T13787] netlink: zone id is out of range [ 180.739863][T13787] netlink: zone id is out of range [ 180.742012][T13787] netlink: zone id is out of range [ 180.744160][T13787] netlink: zone id is out of range [ 180.826562][T13802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36587 sclass=netlink_route_socket pid=13802 comm=syz.1.2303 [ 181.184002][T13824] xt_l2tp: missing protocol rule (udp|l2tpip) [ 181.404638][T13842] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 181.453958][T13842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.460494][T13844] bond1: (slave batadv1): Opening slave failed [ 181.466235][T13848] binfmt_misc: register: failed to install interpreter file ./file1 [ 181.471593][T13848] binfmt_misc: register: failed to install interpreter file ./file1 [ 181.829651][T13870] tipc: Enabling of bearer rejected, failed to enable media [ 182.269810][ T7566] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 182.419846][ T7566] usb 6-1: Using ep0 maxpacket: 8 [ 182.423626][ T7566] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.427111][ T7566] usb 6-1: config 0 has no interface number 0 [ 182.429602][ T7566] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.434375][ T7566] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 182.439256][ T7566] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.444131][ T7566] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.449930][ T7566] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.453362][ T7566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.457706][ T7566] usb 6-1: config 0 descriptor?? [ 182.469069][ T7566] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.623260][T13891] fuse: Bad value for 'group_id' [ 182.625537][T13891] fuse: Bad value for 'group_id' [ 182.669647][T13876] ldusb 6-1:0.55: Write buffer overflow, 45 bytes dropped [ 182.736828][ T1458] usb 6-1: USB disconnect, device number 16 [ 182.740590][ T1458] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 182.942759][T13901] block nbd0: NBD_DISCONNECT [ 183.172987][ T40] kauditd_printk_skb: 273 callbacks suppressed [ 183.173004][ T40] audit: type=1400 audit(2000000356.123:35116): avc: denied { nlmsg_write } for pid=13905 comm="syz.0.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 183.178735][T13915] __nla_validate_parse: 5 callbacks suppressed [ 183.178749][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2331'. [ 183.184381][ T40] audit: type=1400 audit(2000000356.123:35117): avc: denied { ioctl } for pid=13914 comm="syz.1.2331" path="socket:[47837]" dev="sockfs" ino=47837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.212545][ T40] audit: type=1400 audit(2000000356.163:35118): avc: denied { block_suspend } for pid=13914 comm="syz.1.2331" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.219285][ T40] audit: type=1400 audit(2000000356.163:35119): avc: denied { write } for pid=13914 comm="syz.1.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.239473][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2332'. [ 183.243225][ T40] audit: type=1400 audit(2000000356.193:35120): avc: denied { write } for pid=13917 comm="syz.0.2332" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 183.250568][T13918] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 183.253921][T13918] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 183.261795][ T40] audit: type=1400 audit(2000000356.193:35121): avc: denied { open } for pid=13917 comm="syz.0.2332" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 183.269513][ T40] audit: type=1400 audit(2000000356.193:35122): avc: denied { ioctl } for pid=13917 comm="syz.0.2332" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 183.279580][T13918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2332'. [ 183.279847][ T40] audit: type=1400 audit(2000000356.203:35123): avc: denied { create } for pid=13917 comm="syz.0.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.290791][ T40] audit: type=1400 audit(2000000356.203:35124): avc: denied { setopt } for pid=13917 comm="syz.0.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.315801][T13924] netlink: 'syz.0.2335': attribute type 3 has an invalid length. [ 183.320313][ T40] audit: type=1400 audit(2000000356.273:35125): avc: denied { create } for pid=13923 comm="syz.0.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.324074][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 183.354454][T13924] netlink: 'syz.0.2335': attribute type 10 has an invalid length. [ 183.356928][T13924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2335'. [ 183.371590][T13928] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 183.469062][T13931] xt_hashlimit: size too large, truncated to 1048576 [ 183.668320][T13945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2342'. [ 183.703328][T13947] 8021q: VLANs not supported on xfrm0 [ 183.776545][T13954] Can't find a SQUASHFS superblock on nullb0 [ 184.489480][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.498212][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.502173][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.505169][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.508454][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.588365][T14000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 184.625902][T13991] chnl_net:caif_netlink_parms(): no params data found [ 184.707243][T13991] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.710085][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.712404][T13991] bridge_slave_0: entered allmulticast mode [ 184.715069][T13991] bridge_slave_0: entered promiscuous mode [ 184.718658][T14016] tmpfs: Bad value for 'mpol' [ 184.729106][T13991] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.731691][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.734172][T13991] bridge_slave_1: entered allmulticast mode [ 184.736809][T13991] bridge_slave_1: entered promiscuous mode [ 184.752633][T13991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.757485][T13991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.772907][T13991] team0: Port device team_slave_0 added [ 184.808315][T13991] team0: Port device team_slave_1 added [ 184.851270][T13991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.854180][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.863363][T13991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.868842][T13991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.874446][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.889857][T13991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.933102][T14030] TCP: TCP_TX_DELAY enabled [ 184.940243][T13991] hsr_slave_0: entered promiscuous mode [ 184.944244][T13991] hsr_slave_1: entered promiscuous mode [ 184.946613][T13991] debugfs: 'hsr0' already exists in 'hsr' [ 184.948508][T13991] Cannot create hsr debugfs directory [ 185.000923][T14031] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.033572][T14042] netlink: 'syz.0.2374': attribute type 10 has an invalid length. [ 185.068595][T13991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.074717][T13991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 185.080819][T14047] netlink: 'syz.0.2376': attribute type 10 has an invalid length. [ 185.085401][T14043] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2375'. [ 185.100522][T14049] bridge_slave_0: left allmulticast mode [ 185.102864][T14049] bridge_slave_0: left promiscuous mode [ 185.105462][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.112464][T14049] bridge_slave_1: left promiscuous mode [ 185.114396][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.120802][T14049] team0: Port device team_slave_0 removed [ 185.124160][T14049] team0: Port device team_slave_1 removed [ 185.126210][T14049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.131328][T14049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.136363][T14049] net_ratelimit: 10 callbacks suppressed [ 185.136373][T14049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.160981][T14055] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.164431][T14055] bond0: (slave bond5): Enslaving as an active interface with an up link [ 185.179034][T13991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.181361][T14055] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 185.182553][T13991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 185.200076][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 185.312093][T14060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2380'. [ 185.322841][T13991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.326270][T13991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 185.337605][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 185.451236][T13991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.455621][T13991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 185.636033][T13991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.648675][T13991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.655259][T13991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.661053][T13991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.732140][T13991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.755308][T14099] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 185.763682][T13991] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.775624][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.778799][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.791040][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.793794][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.831429][T13991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.836816][T14101] tmpfs: Group quota inode hardlimit too large. [ 185.911462][T14109] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 185.949004][T14110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.961924][T14110] bond0: (slave bond2): Enslaving as an active interface with an up link [ 185.980443][T13991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.981653][T14110] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 186.097623][T13991] veth0_vlan: entered promiscuous mode [ 186.105517][T13991] veth1_vlan: entered promiscuous mode [ 186.128536][T13991] veth0_macvtap: entered promiscuous mode [ 186.135760][T13991] veth1_macvtap: entered promiscuous mode [ 186.156663][T13991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.186198][T13991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.194816][ T7166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.198596][ T7166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.202578][T14135] netlink: 'syz.1.2400': attribute type 7 has an invalid length. [ 186.203496][ T7166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.209535][ T7166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.209815][T14135] netlink: 'syz.1.2400': attribute type 8 has an invalid length. [ 186.301790][ T7153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.305114][ T7153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.318259][T14139] macsec1: entered promiscuous mode [ 186.329848][T14139] macsec1: entered allmulticast mode [ 186.355677][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.358940][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.420392][T14150] Mount JFS Failure: -5 [ 186.421851][T14150] jfs_mount failed w/return code = -5 [ 186.475076][T14158] netlink: 'syz.2.2407': attribute type 5 has an invalid length. [ 186.542595][ T5935] Bluetooth: hci3: command tx timeout [ 186.842575][T14182] 9pnet_virtio: no channels available for device syz [ 187.310412][T14194] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.314333][T14194] block device autoloading is deprecated and will be removed. [ 187.460029][T14202] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 187.680248][T14218] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 188.009816][ T6007] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 188.171352][ T6007] usb 8-1: config 0 has an invalid interface number: 205 but max is 0 [ 188.175114][ T6007] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.179412][ T6007] usb 8-1: config 0 has no interface number 0 [ 188.182302][ T6007] usb 8-1: config 0 interface 205 has no altsetting 0 [ 188.187745][ T6007] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 188.191755][ T6007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.194998][ T6007] usb 8-1: Product: syz [ 188.196860][ T6007] usb 8-1: Manufacturer: syz [ 188.198810][ T6007] usb 8-1: SerialNumber: syz [ 188.203787][ T6007] usb 8-1: config 0 descriptor?? [ 188.209349][ T6007] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 188.218902][ T6007] dvb-usb: bulk message failed: -22 (3/0) [ 188.338698][ T6007] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 188.343441][ T6007] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 188.356667][ T6007] usb 8-1: media controller created [ 188.371357][ T6007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.417294][ T40] kauditd_printk_skb: 290 callbacks suppressed [ 188.417305][ T40] audit: type=1400 audit(2000000361.363:35416): avc: denied { create } for pid=14228 comm="syz.3.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.449211][ T6007] dvb-usb: bulk message failed: -22 (6/0) [ 188.452098][ T6007] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 188.458941][ T6007] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input26 [ 188.466070][ T40] audit: type=1400 audit(2000000361.413:35417): avc: denied { read } for pid=5327 comm="acpid" name="event4" dev="devtmpfs" ino=3147 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.466150][ T6007] dvb-usb: schedule remote query interval to 150 msecs. [ 188.475715][ T40] audit: type=1400 audit(2000000361.413:35418): avc: denied { open } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3147 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.478413][ T6007] dvb-usb: bulk message failed: -22 (3/0) [ 188.488499][ T40] audit: type=1400 audit(2000000361.413:35419): avc: denied { ioctl } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3147 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.509810][ T6007] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 188.539432][T14241] loop2: detected capacity change from 0 to 7 [ 188.547829][T14241] loop2: [ 188.549250][T14241] loop2: partition table partially beyond EOD, truncated [ 188.630456][ T5935] Bluetooth: hci3: command tx timeout [ 188.652433][T14245] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 188.655706][T14244] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 188.657746][ T6007] dvb-usb: bulk message failed: -22 (1/0) [ 188.665353][ T6007] dvb-usb: error while querying for an remote control event. [ 188.832648][ T6007] dvb-usb: bulk message failed: -22 (1/0) [ 188.834586][ T6007] dvb-usb: error while querying for an remote control event. [ 188.993431][ T6007] dvb-usb: bulk message failed: -22 (1/0) [ 188.995385][ T6007] dvb-usb: error while querying for an remote control event. [ 189.160462][ T6007] dvb-usb: bulk message failed: -22 (1/0) [ 189.162505][ T6007] dvb-usb: error while querying for an remote control event. [ 189.229474][T14245] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 189.230192][T14244] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 189.233769][ T1458] usb 8-1: USB disconnect, device number 32 [ 189.275365][ T1458] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 189.292471][ T40] audit: type=1400 audit(2000000362.243:35420): avc: denied { create } for pid=14249 comm="syz.1.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.300703][ T40] audit: type=1400 audit(2000000362.253:35421): avc: denied { read } for pid=14249 comm="syz.1.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.302510][T14250] __nla_validate_parse: 11 callbacks suppressed [ 189.302520][T14250] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2435'. [ 189.308238][ T40] audit: type=1400 audit(2000000362.253:35422): avc: denied { read } for pid=14251 comm="syz.2.2436" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.310169][T14250] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 189.314783][ T40] audit: type=1400 audit(2000000362.253:35423): avc: denied { open } for pid=14251 comm="syz.2.2436" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.331229][ T40] audit: type=1400 audit(2000000362.263:35424): avc: denied { read write } for pid=14251 comm="syz.2.2436" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 189.340953][ T40] audit: type=1400 audit(2000000362.263:35425): avc: denied { open } for pid=14251 comm="syz.2.2436" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 189.461324][T14259] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 189.538992][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2440'. [ 189.555738][T14266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.563475][T14266] bond3: (slave batadv1): Opening slave failed [ 189.809856][ T832] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 189.815927][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2443'. [ 189.822470][T14277] "syz.1.2443" (14277) uses obsolete ecb(arc4) skcipher [ 189.866142][T14280] tipc: Cannot configure node identity twice [ 189.907748][T14283] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 189.969860][ T832] usb 7-1: Using ep0 maxpacket: 32 [ 189.972771][ T832] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 189.975370][ T832] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 189.979036][ T832] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 48, changing to 9 [ 189.983201][ T832] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 1851, setting to 1024 [ 189.986697][ T832] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 189.991766][ T832] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.995492][ T832] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 189.998958][ T832] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 190.002544][ T832] usb 7-1: Product: syz [ 190.004245][ T832] usb 7-1: Manufacturer: syz [ 190.006137][ T832] usb 7-1: SerialNumber: syz [ 190.012212][ T832] usb 7-1: config 0 descriptor?? [ 190.014401][T14259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.018204][ T832] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 190.022421][ T832] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 190.029833][ T29] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 190.131748][T14289] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 190.190546][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 190.193430][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 190.196102][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.199174][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.204887][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.209038][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.216515][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.219345][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.258486][T14308] sp0: Synchronizing with TNC [ 190.269794][T14302] mmap: syz.0.2453 (14302): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 190.279057][ T6007] usb 7-1: USB disconnect, device number 14 [ 190.288096][ T6007] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 190.342056][T14307] [U] ` [ 190.700031][ T5935] Bluetooth: hci3: command tx timeout [ 190.719835][ T34] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 190.779804][ T6007] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 190.892688][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.895560][ T34] usb 5-1: not running at top speed; connect to a high speed hub [ 190.899375][ T34] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.904270][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 190.908491][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.912173][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.914763][ T34] usb 5-1: Product: syz [ 190.916091][ T34] usb 5-1: Manufacturer: syz [ 190.917789][ T34] usb 5-1: SerialNumber: syz [ 190.941781][ T6007] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.945889][ T6007] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.949944][ T6007] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.952898][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.006771][T14338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.047391][T14275] usbtmc 8-1:16.0: simple control status returned 2d [ 191.054796][T14275] random: crng reseeded on system resumption [ 191.109862][T14338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.154949][ T29] kernel read not supported for file /video7 (pid: 29 comm: kworker/1:0) [ 191.160966][ T6007] usb 6-1: usb_control_msg returned -32 [ 191.162884][ T6007] usbtmc 6-1:16.0: can't read capabilities [ 191.230757][ T34] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 191.237900][ T34] usb 5-1: USB disconnect, device number 21 [ 191.259948][T14338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.343094][T14338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.414829][ T46] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.428975][ T7096] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.441482][ T7096] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.449533][ T7096] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.635142][T14350] Device name not specified. [ 191.635142][T14350] [ 191.667298][T14352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53008 sclass=netlink_route_socket pid=14352 comm=syz.2.2466 [ 191.813468][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2469'. [ 191.893855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc3d800: rx timeout, send abort [ 192.399393][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc3d800: abort rx timeout. Force session deactivation [ 192.406834][ T39] usb 8-1: USB disconnect, device number 33 [ 192.632592][T14380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2476'. [ 192.779873][ T5935] Bluetooth: hci3: command tx timeout [ 192.887609][T14388] geneve2: entered promiscuous mode [ 192.895913][T14388] xt_hashlimit: size too large, truncated to 1048576 [ 192.940571][T14394] program syz.0.2482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.950159][T14395] fuse: Bad value for 'fd' [ 192.956548][T14397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2483'. [ 193.019279][T14407] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 193.019279][T14407] cct.usage_percpu_sys' [ 193.084743][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'. [ 193.188416][T14427] binder: 14426:14427 ioctl c0306201 200000000480 returned -22 [ 193.211988][T14431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2494'. [ 193.255035][T14435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.508877][ T40] kauditd_printk_skb: 261 callbacks suppressed [ 193.508890][ T40] audit: type=1400 audit(2000000366.453:35687): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 193.538200][ T29] usb 6-1: USB disconnect, device number 17 [ 193.563639][ T40] audit: type=1400 audit(2000000366.513:35688): avc: denied { write } for pid=14462 comm="syz.1.2505" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.592391][ T40] audit: type=1400 audit(2000000366.543:35689): avc: denied { setopt } for pid=14464 comm="syz.2.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.635871][ T40] audit: type=1400 audit(2000000366.583:35690): avc: denied { map_read map_write } for pid=14469 comm="syz.2.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.645357][ T40] audit: type=1400 audit(2000000366.583:35691): avc: denied { read write } for pid=14466 comm="syz.3.2504" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.654966][ T40] audit: type=1400 audit(2000000366.583:35692): avc: denied { open } for pid=14466 comm="syz.3.2504" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.689420][ T40] audit: type=1400 audit(2000000366.633:35693): avc: denied { ioctl } for pid=14466 comm="syz.3.2504" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.708151][ T40] audit: type=1400 audit(2000000366.653:35694): avc: denied { create } for pid=14472 comm="syz.2.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.715694][ T40] audit: type=1400 audit(2000000366.663:35695): avc: denied { setopt } for pid=14472 comm="syz.2.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.758648][ T40] audit: type=1400 audit(2000000366.703:35696): avc: denied { ioctl } for pid=14462 comm="syz.1.2505" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.770962][T14476] overlay: Bad value for 'redirect_dir' [ 193.862126][T14480] can0: slcan on pty26. [ 193.891154][ T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 193.897599][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 193.901624][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 194.041673][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 194.045713][ T29] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 194.049077][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 194.054381][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.057443][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.062272][ T29] usb 6-1: Product: ܪ킐炋ꓖ롱ꦞԮ䄄탐怏鱗쪤췕擁鼭ნ휐鬿売⇷狷阅톦췄䴌綇ꁛ㼜꫙㷰慄縀熌駹צּ篯 [ 194.066842][ T29] usb 6-1: Manufacturer: 憝㳋㔒ꂒ郐Ḁ묔㗤ᆂ৘埄셥硇㷓橿콈ͣ淂帗ㆠ꩹뤡칏ퟎ卲껮면习䂛䝛芖薖჋퓪䏮鎞잻缁ꄀꞣ㉿⊕ [ 194.071850][ T29] usb 6-1: SerialNumber: syz [ 194.075240][T14463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.109988][ T1458] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 194.125742][T14495] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 194.276353][ T1458] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.284757][ T1458] usb 8-1: config 0 has no interfaces? [ 194.288486][ T1458] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 194.292237][ T1458] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.294788][ T1458] usb 8-1: Product: syz [ 194.296190][ T1458] usb 8-1: Manufacturer: syz [ 194.297758][ T1458] usb 8-1: SerialNumber: syz [ 194.301454][ T1458] usb 8-1: config 0 descriptor?? [ 194.318660][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 194.326671][ T29] usb 6-1: USB disconnect, device number 18 [ 194.397708][T14503] __nla_validate_parse: 1 callbacks suppressed [ 194.397718][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 194.547395][T14507] ip6tnl0: Caught tx_queue_len zero misconfig [ 194.557727][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2512'. [ 194.632946][ T34] usb 8-1: USB disconnect, device number 34 [ 194.710773][T14479] can0 (unregistered): slcan off pty26. [ 194.839886][ T6007] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 195.011491][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 195.014961][ T6007] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 195.018100][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.020523][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 195.023562][ T6007] usb 5-1: config 0 descriptor?? [ 195.024735][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 195.027075][T14513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.029479][T14535] netlink: 'syz.1.2525': attribute type 11 has an invalid length. [ 195.035351][T14535] netlink: 'syz.1.2525': attribute type 7 has an invalid length. [ 195.305848][T14545] [U] v3f"S/4:XTzWtlW= [ 195.308575][T14545] [U] J"e:" [ 195.450305][ T6007] elan 0003:04F3:0755.0006: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 195.716159][ T7566] usb 5-1: USB disconnect, device number 22 [ 195.931832][T14566] i2c i2c-1: dtv_property_process_set: SET cmd 0x3b59a514 undefined [ 196.052241][T14578] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 196.124786][T14584] SELinux: Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped). [ 196.133453][T14587] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 196.188699][T14586] vcan0: tx address claim with different name [ 196.204015][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2545'. [ 196.303275][T14599] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.411771][T14608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14608 comm=syz.2.2547 [ 196.620894][ T832] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 196.701741][T14610] ip6erspan0: entered promiscuous mode [ 196.781136][ T832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.784415][ T832] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.787532][ T832] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.793726][ T832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 196.796669][ T832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 196.799004][T14617] tipc: Started in network mode [ 196.799268][ T832] usb 5-1: Product: syz [ 196.801483][T14617] tipc: Node identity 369365efb94b, cluster identity 4711 [ 196.803058][ T832] usb 5-1: Manufacturer: syz [ 196.806113][T14617] tipc: Enabled bearer , priority 0 [ 196.807425][ T832] usb 5-1: SerialNumber: syz [ 196.812215][T14617] syzkaller0: entered promiscuous mode [ 196.819747][T14617] syzkaller0: entered allmulticast mode [ 196.831921][T14617] tipc: Resetting bearer [ 196.837814][T14616] tipc: Resetting bearer [ 196.846700][T14616] tipc: Disabling bearer [ 197.028260][ T832] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 197.211454][ T6007] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 197.292739][ T10] usb 5-1: USB disconnect, device number 23 [ 197.305281][T14605] usblp0: removed [ 197.381338][ T6007] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.385520][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.388991][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.393046][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.399235][ T6007] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.403588][ T6007] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.407060][ T6007] usb 6-1: Manufacturer: syz [ 197.411283][ T6007] usb 6-1: config 0 descriptor?? [ 197.549838][ T7566] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 197.701036][ T7566] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.704537][ T7566] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.707455][ T7566] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.711397][ T7566] usb 8-1: config 0 descriptor?? [ 197.817888][ T6007] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 197.824074][ T6007] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 197.905448][T14643] binder: 14642:14643 ioctl c0306201 0 returned -14 [ 197.959838][ T7566] usbhid 8-1:0.0: can't add hid device: -71 [ 197.961882][ T7566] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 197.975909][ T7566] usb 8-1: USB disconnect, device number 35 [ 198.129995][ T6007] usb 6-1: USB disconnect, device number 19 [ 198.429830][ T7566] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 198.532876][ T40] kauditd_printk_skb: 262 callbacks suppressed [ 198.532921][ T40] audit: type=1400 audit(2000000371.463:35959): avc: denied { map_create } for pid=14660 comm="syz.2.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 198.542878][ T40] audit: type=1400 audit(2000000371.463:35960): avc: denied { mounton } for pid=14660 comm="syz.2.2566" path="/48" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 198.553001][ T40] audit: type=1400 audit(2000000371.473:35961): avc: denied { mount } for pid=14660 comm="syz.2.2566" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 198.560881][ T40] audit: type=1400 audit(2000000371.473:35962): avc: denied { create } for pid=14660 comm="syz.2.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.678647][ T40] audit: type=1326 audit(2000000371.593:35963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32279bf79 code=0x7fc00000 [ 198.686195][ T40] audit: type=1326 audit(2000000371.593:35964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa32279bf79 code=0x7fc00000 [ 198.693943][ T40] audit: type=1326 audit(2000000371.593:35965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32279bf79 code=0x7fc00000 [ 198.701592][ T40] audit: type=1326 audit(2000000371.593:35966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32279bf79 code=0x7fc00000 [ 198.708825][ T40] audit: type=1326 audit(2000000371.593:35967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32279bf79 code=0x7fc00000 [ 198.716138][ T40] audit: type=1326 audit(2000000371.603:35968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14660 comm="syz.2.2566" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32279bf79 code=0x7fc00000 [ 198.769798][ T7566] usb 8-1: Using ep0 maxpacket: 32 [ 198.775626][ T7566] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.783292][ T7566] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 198.786447][ T7566] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.800057][ T7566] usb 8-1: config 0 descriptor?? [ 198.812114][ T7566] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.819616][ T7566] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 199.190438][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 199.333759][ T832] usb 8-1: USB disconnect, device number 36 [ 199.341618][ T832] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 199.810208][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.917779][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.945174][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.952725][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.080919][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.353597][T14698] chnl_net:caif_netlink_parms(): no params data found [ 200.474679][T14698] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.497796][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.506294][T14698] bridge_slave_0: entered allmulticast mode [ 200.509475][T14698] bridge_slave_0: entered promiscuous mode [ 200.521545][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.523974][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.526435][T14698] bridge_slave_1: entered allmulticast mode [ 200.529158][T14698] bridge_slave_1: entered promiscuous mode [ 200.567180][T14698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.581432][T14698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.718655][T14698] team0: Port device team_slave_0 added [ 200.721911][T14698] team0: Port device team_slave_1 added [ 200.769881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 200.986343][T14698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.988580][T14698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.999050][T14698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.007521][T14698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.012196][T14698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.019886][T14723] input: syz1 as /devices/virtual/input/input30 [ 201.024511][T14698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.060264][T14698] hsr_slave_0: entered promiscuous mode [ 201.062682][T14698] hsr_slave_1: entered promiscuous mode [ 201.064739][T14698] debugfs: 'hsr0' already exists in 'hsr' [ 201.066577][T14698] Cannot create hsr debugfs directory [ 201.127930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.903288][T14733] 9p: Bad value for 'wfdno' [ 201.928662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 202.133461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 202.299918][ T5935] Bluetooth: hci2: command tx timeout [ 202.310126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.310269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.312801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.315643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.318036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.320711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 202.323260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.240109][T14698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.244455][T14698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.248536][T14698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.262493][T14698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.305010][T14698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.309831][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 203.313537][T14698] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.320788][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.323556][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.331204][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.334054][ T7096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.355219][T14698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.358604][T14698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.459938][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 203.471371][ T29] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.476334][ T29] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.492138][ T29] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 203.495983][ T29] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 203.499586][ T29] usb 7-1: Product: syz [ 203.507859][T14698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.510937][ T29] usb 7-1: Manufacturer: syz [ 203.520479][ T29] hub 7-1:4.0: USB hub found [ 203.544313][ T40] kauditd_printk_skb: 3559 callbacks suppressed [ 203.544325][ T40] audit: type=1400 audit(2000000376.493:39528): avc: denied { mount } for pid=14762 comm="syz.3.2591" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.546004][T14698] veth0_vlan: entered promiscuous mode [ 203.555684][ T40] audit: type=1400 audit(2000000376.503:39529): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.571250][T14698] veth1_vlan: entered promiscuous mode [ 203.595644][T14698] veth0_macvtap: entered promiscuous mode [ 203.599784][T14698] veth1_macvtap: entered promiscuous mode [ 203.608728][T14698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.618086][T14698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.630388][ T7169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.634151][ T7169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.638899][ T7169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.642777][ T7169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.697350][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.700290][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.719555][ T29] hub 7-1:4.0: 2 ports detected [ 203.731507][ T7098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.734251][ T7098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.741330][ T40] audit: type=1400 audit(2000000376.693:39530): avc: denied { mounton } for pid=14698 comm="syz-executor" path="/syzkaller.KfIDvy/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 203.751097][ T40] audit: type=1400 audit(2000000376.693:39531): avc: denied { mount } for pid=14698 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.760050][ T40] audit: type=1400 audit(2000000376.693:39532): avc: denied { mounton } for pid=14698 comm="syz-executor" path="/syzkaller.KfIDvy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 203.770182][ T40] audit: type=1400 audit(2000000376.693:39533): avc: denied { mounton } for pid=14698 comm="syz-executor" path="/syzkaller.KfIDvy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 203.781285][ T40] audit: type=1400 audit(2000000376.693:39534): avc: denied { unmount } for pid=14698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 203.789321][ T40] audit: type=1400 audit(2000000376.703:39535): avc: denied { mounton } for pid=14698 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 203.799323][ T40] audit: type=1400 audit(2000000376.703:39536): avc: denied { mount } for pid=14698 comm="syz-executor" name="/" dev="gadgetfs" ino=8389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 203.808777][ T40] audit: type=1400 audit(2000000376.703:39537): avc: denied { mount } for pid=14698 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 203.829795][ T6007] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 203.979929][ T6007] usb 8-1: Using ep0 maxpacket: 32 [ 203.983747][ T6007] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 203.987189][ T6007] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 203.992474][ T6007] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 203.997117][ T6007] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 204.002473][ T6007] usb 8-1: config 0 interface 0 has no altsetting 0 [ 204.006060][ T6007] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 204.008877][ T6007] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 204.012832][ T6007] usb 8-1: Product: syz [ 204.014670][ T6007] usb 8-1: Manufacturer: syz [ 204.016559][ T6007] usb 8-1: SerialNumber: syz [ 204.021658][ T6007] usb 8-1: config 0 descriptor?? [ 204.027343][ T6007] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 204.033404][ T6007] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 204.067392][T14774] input: syz1 as /devices/virtual/input/input31 [ 204.303146][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.305261][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.392933][ T5935] Bluetooth: hci2: command tx timeout [ 204.809021][ T39] usb 8-1: USB disconnect, device number 37 [ 204.811747][ C2] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 204.814533][T14765] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 204.844349][ T39] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 204.850810][T14779] ldusb: No device or device unplugged -19 [ 205.030961][ T1422] ================================================================== [ 205.033528][ T1422] BUG: KASAN: slab-use-after-free in handle_tx+0x5c2/0x620 [ 205.035813][ T1422] Read of size 1 at addr ffff88802bffe490 by task aoe_tx0/1422 [ 205.039203][ T1422] [ 205.040728][ T1422] CPU: 0 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.040753][ T1422] Tainted: [L]=SOFTLOCKUP [ 205.040759][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.040769][ T1422] Call Trace: [ 205.040776][ T1422] [ 205.040783][ T1422] dump_stack_lvl+0x100/0x190 [ 205.040811][ T1422] print_report+0x156/0x4c9 [ 205.040834][ T1422] ? __virt_addr_valid+0x81/0x620 [ 205.040856][ T1422] ? __phys_addr+0xe8/0x180 [ 205.040877][ T1422] ? handle_tx+0x5c2/0x620 [ 205.040893][ T1422] kasan_report+0xdf/0x1a0 [ 205.040912][ T1422] ? handle_tx+0x5c2/0x620 [ 205.040930][ T1422] handle_tx+0x5c2/0x620 [ 205.040950][ T1422] dev_hard_start_xmit+0x127/0x6c0 [ 205.040987][ T1422] __dev_queue_xmit+0x6dd/0x46f0 [ 205.041011][ T1422] ? rcu_is_watching+0x12/0xc0 [ 205.041039][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.041064][ T1422] ? __lock_acquire+0x4a5/0x2630 [ 205.041108][ T1422] ? ref_tracker_free+0x37e/0x6c0 [ 205.041127][ T1422] ? do_raw_spin_lock+0x128/0x260 [ 205.041159][ T1422] ? tx+0xa4/0x130 [ 205.041180][ T1422] ? rcu_is_watching+0x12/0xc0 [ 205.041206][ T1422] ? __pfx_tx+0x10/0x10 [ 205.041224][ T1422] tx+0xc4/0x130 [ 205.041245][ T1422] kthread+0x1d8/0x3c0 [ 205.041263][ T1422] ? __kthread_parkme+0xbb/0x230 [ 205.041282][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.041300][ T1422] ? rcu_is_watching+0x12/0xc0 [ 205.041324][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 205.041345][ T1422] ? __kthread_parkme+0x18c/0x230 [ 205.041364][ T1422] ? kthread+0x13a/0x450 [ 205.041384][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.041401][ T1422] kthread+0x370/0x450 [ 205.041422][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.041443][ T1422] ret_from_fork+0x754/0xd80 [ 205.041467][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 205.041492][ T1422] ? __switch_to+0x7b9/0x10c0 [ 205.041508][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.041530][ T1422] ret_from_fork_asm+0x1a/0x30 [ 205.041554][ T1422] [ 205.041560][ T1422] [ 205.104015][ T1422] Allocated by task 13525: [ 205.105449][ T1422] kasan_save_stack+0x30/0x50 [ 205.106954][ T1422] kasan_save_track+0x14/0x30 [ 205.108450][ T1422] __kasan_kmalloc+0xaa/0xb0 [ 205.109926][ T1422] alloc_tty_struct+0x96/0x8c0 [ 205.111813][ T1422] tty_init_dev.part.0+0x20/0x470 [ 205.113662][ T1422] tty_open+0xa63/0xfa0 [ 205.115217][ T1422] chrdev_open+0x234/0x6a0 [ 205.117061][ T1422] do_dentry_open+0x6d8/0x1660 [ 205.118886][ T1422] vfs_open+0x82/0x3f0 [ 205.120297][ T1422] path_openat+0x208c/0x31a0 [ 205.121963][ T1422] do_file_open+0x20e/0x430 [ 205.123407][ T1422] do_sys_openat2+0x10d/0x1e0 [ 205.124895][ T1422] __x64_sys_openat+0x12d/0x210 [ 205.126445][ T1422] do_syscall_64+0x106/0xf80 [ 205.127912][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.129783][ T1422] [ 205.130650][ T1422] Freed by task 6007: [ 205.132059][ T1422] kasan_save_stack+0x30/0x50 [ 205.133651][ T1422] kasan_save_track+0x14/0x30 [ 205.135195][ T1422] kasan_save_free_info+0x3b/0x70 [ 205.136863][ T1422] __kasan_slab_free+0x5f/0x80 [ 205.138556][ T1422] kfree+0x1c7/0x690 [ 205.140239][ T1422] process_one_work+0x9c2/0x1840 [ 205.142144][ T1422] worker_thread+0x5da/0xe40 [ 205.143701][ T1422] kthread+0x370/0x450 [ 205.145148][ T1422] ret_from_fork+0x754/0xd80 [ 205.146626][ T1422] ret_from_fork_asm+0x1a/0x30 [ 205.148153][ T1422] [ 205.148933][ T1422] Last potentially related work creation: [ 205.150809][ T1422] kasan_save_stack+0x30/0x50 [ 205.152340][ T1422] kasan_record_aux_stack+0xa7/0xc0 [ 205.153983][ T1422] insert_work+0x36/0x230 [ 205.155360][ T1422] __queue_work+0x96f/0x10f0 [ 205.156828][ T1422] queue_work_on+0x180/0x1e0 [ 205.158330][ T1422] release_tty+0x4f3/0x5f0 [ 205.159751][ T1422] tty_release_struct+0xb7/0xe0 [ 205.161327][ T1422] tty_release+0xd7a/0x1300 [ 205.162802][ T1422] __fput+0x3ff/0xb40 [ 205.164079][ T1422] task_work_run+0x150/0x240 [ 205.165572][ T1422] do_exit+0x829/0x2a30 [ 205.166914][ T1422] do_group_exit+0xd5/0x2a0 [ 205.168366][ T1422] get_signal+0x1ec7/0x21e0 [ 205.169820][ T1422] arch_do_signal_or_restart+0x91/0x7a0 [ 205.171603][ T1422] exit_to_user_mode_loop+0x86/0x4a0 [ 205.173307][ T1422] do_syscall_64+0x67c/0xf80 [ 205.174778][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.176641][ T1422] [ 205.177445][ T1422] The buggy address belongs to the object at ffff88802bffe000 [ 205.177445][ T1422] which belongs to the cache kmalloc-cg-2k of size 2048 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.182021][ T1422] The buggy address is located 1168 bytes inside of [ 205.182021][ T1422] freed 2048-byte region [ffff88802bffe000, ffff88802bffe800) [ 205.187309][ T1422] [ 205.188150][ T1422] The buggy address belongs to the physical page: [ 205.190426][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bff8 [ 205.193878][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 205.196546][ T1422] memcg:ffff888025e1b101 [ 205.198075][ T1422] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 205.200567][ T1422] page_type: f5(slab) [ 205.202100][ T1422] raw: 00fff00000000040 ffff88801b84c140 ffffea0000c77e00 dead000000000002 [ 205.204773][ T1422] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888025e1b101 [ 205.207480][ T1422] head: 00fff00000000040 ffff88801b84c140 ffffea0000c77e00 dead000000000002 [ 205.210201][ T1422] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888025e1b101 [ 205.213226][ T1422] head: 00fff00000000003 ffffea0000affe01 00000000ffffffff 00000000ffffffff [ 205.215922][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 205.218638][ T1422] page dumped because: kasan: bad access detected [ 205.220705][ T1422] page_owner tracks the page as allocated [ 205.222521][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5936, tgid 5936 (syz-executor), ts 61748487268, free_ts 60005615083 [ 205.229107][ T1422] post_alloc_hook+0x1e1/0x250 [ 205.230677][ T1422] get_page_from_freelist+0x111d/0x3140 [ 205.232460][ T1422] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 205.234349][ T1422] alloc_pages_mpol+0x1fb/0x550 [ 205.235891][ T1422] new_slab+0x2c4/0x440 [ 205.237254][ T1422] ___slab_alloc+0xdb3/0x1cb0 [ 205.238751][ T1422] __slab_alloc.isra.0+0x63/0x110 [ 205.240369][ T1422] __kmalloc_noprof+0x618/0x9c0 [ 205.242050][ T1422] __register_sysctl_table+0xac/0x1650 [ 205.243762][ T1422] __devinet_sysctl_register+0x1b9/0x360 [ 205.245550][ T1422] devinet_sysctl_register+0x17b/0x210 [ 205.247276][ T1422] inetdev_init+0x2b8/0x570 [ 205.248718][ T1422] inetdev_event+0x7fa/0x17f0 [ 205.250228][ T1422] notifier_call_chain+0x99/0x3b0 [ 205.251867][ T1422] call_netdevice_notifiers_info+0xbe/0x110 [ 205.253776][ T1422] register_netdevice+0x16b9/0x21d0 [ 205.255422][ T1422] page last free pid 5918 tgid 5918 stack trace: [ 205.257405][ T1422] __free_frozen_pages+0x822/0x1130 [ 205.259050][ T1422] __folio_put+0x3b4/0x540 [ 205.260497][ T1422] put_netmem+0x294/0x320 [ 205.261939][ T1422] skb_release_data+0x4b2/0x700 [ 205.263519][ T1422] skb_attempt_defer_free+0x1f5/0x700 [ 205.265229][ T1422] tcp_recvmsg_locked+0x1189/0x28e0 [ 205.266871][ T1422] tcp_recvmsg+0x138/0x630 [ 205.268296][ T1422] inet_recvmsg+0x129/0x6a0 [ 205.269751][ T1422] sock_recvmsg+0x1b2/0x250 [ 205.271197][ T1422] sock_read_iter+0x2c6/0x3c0 [ 205.272709][ T1422] vfs_read+0x957/0xb30 [ 205.274039][ T1422] ksys_read+0x1f8/0x250 [ 205.275390][ T1422] do_syscall_64+0x106/0xf80 [ 205.276880][ T1422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.278773][ T1422] [ 205.279572][ T1422] Memory state around the buggy address: [ 205.281533][ T1422] ffff88802bffe380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.284284][ T1422] ffff88802bffe400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.287454][ T1422] >ffff88802bffe480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.290043][ T1422] ^ [ 205.291784][ T1422] ffff88802bffe500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.295219][ T1422] ffff88802bffe580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.297747][ T1422] ================================================================== [ 205.300319][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 205.302629][ T1422] CPU: 0 UID: 0 PID: 1422 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.305917][ T1422] Tainted: [L]=SOFTLOCKUP [ 205.307281][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.310497][ T1422] Call Trace: [ 205.311563][ T1422] [ 205.312552][ T1422] dump_stack_lvl+0x100/0x190 [ 205.314064][ T1422] vpanic+0x20d/0x630 [ 205.315345][ T1422] panic+0xd1/0xd1 [ 205.316543][ T1422] ? __pfx_panic+0x10/0x10 [ 205.318004][ T1422] ? check_panic_on_warn+0x1f/0x90 [ 205.319633][ T1422] check_panic_on_warn.cold+0x19/0x34 [ 205.321336][ T1422] end_report.part.0+0x3a/0x90 [ 205.322898][ T1422] kasan_report.cold+0xe/0x18 [ 205.324402][ T1422] ? handle_tx+0x5c2/0x620 [ 205.325833][ T1422] handle_tx+0x5c2/0x620 [ 205.327188][ T1422] dev_hard_start_xmit+0x127/0x6c0 [ 205.328810][ T1422] __dev_queue_xmit+0x6dd/0x46f0 [ 205.330416][ T1422] ? rcu_is_watching+0x12/0xc0 [ 205.331942][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.333656][ T1422] ? __lock_acquire+0x4a5/0x2630 [ 205.335239][ T1422] ? ref_tracker_free+0x37e/0x6c0 [ 205.336839][ T1422] ? do_raw_spin_lock+0x128/0x260 [ 205.338462][ T1422] ? tx+0xa4/0x130 [ 205.339663][ T1422] ? rcu_is_watching+0x12/0xc0 [ 205.341229][ T1422] ? __pfx_tx+0x10/0x10 [ 205.342589][ T1422] tx+0xc4/0x130 [ 205.343755][ T1422] kthread+0x1d8/0x3c0 [ 205.345065][ T1422] ? __kthread_parkme+0xbb/0x230 [ 205.346658][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.348128][ T1422] ? rcu_is_watching+0x12/0xc0 [ 205.349663][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 205.351548][ T1422] ? __kthread_parkme+0x18c/0x230 [ 205.353220][ T1422] ? kthread+0x13a/0x450 [ 205.354570][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.356037][ T1422] kthread+0x370/0x450 [ 205.357363][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.358828][ T1422] ret_from_fork+0x754/0xd80 [ 205.360293][ T1422] ? __pfx_ret_from_fork+0x10/0x10 [ 205.362418][ T1422] ? __switch_to+0x7b9/0x10c0 [ 205.364529][ T1422] ? __pfx_kthread+0x10/0x10 [ 205.366546][ T1422] ret_from_fork_asm+0x1a/0x30 [ 205.368629][ T1422] [ 205.370655][ T1422] Kernel Offset: disabled [ 205.372644][ T1422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:00:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856dd855 RDI=ffffffff9b22ece0 RBP=ffffffff9b22eca0 RSP=ffffc9000710f410 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000074 R14=0000000000000010 R15=ffffffff856dd7f0 RIP=ffffffff856dd87f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb3cf24e661 CR3=00000000456d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f75706372 65705f6567617375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed4eee206 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed4eee206 00007ffed4eee20c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa322832e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa322832e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa322832fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa322832e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000238b07 RBX=ffff88801e2d2480 RCX=ffffffff8b7afc75 RDX=0000000000000000 RSI=ffffffff8dc524c1 RDI=ffffffff8bfa9420 RBP=0000000000000001 RSP=ffffc90000177df0 R8 =0000000000000001 R9 =ffffed100d4a6755 R10=ffff88806a533aab R11=0000000000000000 R12=ffffed1003c5a490 R13=0000000000000001 R14=ffffffff90b7d7d0 R15=0000000000000000 RIP=ffffffff8b7ae5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb3cf1e96c0 CR3=00000000456d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee174d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcab571796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcab571796 00007ffcab57179c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee0a32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee0a32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee0a32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feee0a32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000062254 RBX=0000000000000003 RCX=0000000000000004 RDX=0000000000000000 RSI=ffffffff8dc524c1 RDI=ffffffff8bfa9420 RBP=ffff888033b22d40 RSP=ffffc900046af690 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000075e9 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a63bc80 R15=0000000000000000 RIP=ffffffff8b7ae5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3cc57e6ad8 CR3=000000002d279000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe50a7cf96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe50a7cf96 00007ffe50a7cf9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cf232e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cf232e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cf232fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cf232e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cf3ea4a0 00007fb3cf3ea480 00007fb3cf3ea488 00007fb3cf3ea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3cf3ea498 00007fb3cf3ea468 00007fb3cf3ea4a0 00007fb3cf3ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88807ffd7b80 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8dc2c3f8 RDI=ffffffff82637011 RBP=ffffea0000badf40 RSP=ffffc9000f7e7540 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffff88807ffd7c58 R14=ffffed100fffaf8a R15=000000000002eb7d RIP=ffffffff8b7aea3b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556c64b500 ffffffff 00c00000 GS =0000 ffff8880d68b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb0c1016038 CR3=0000000051bd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c1b4d020 00007fb0c0fea460 00007fb0c0fea470 00007fb0c0fea4b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0c0fea498 00007fb0c0fea468 00007fb0c0fea4a0 00007fb0c0fea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000