last executing test programs: 4m25.755412799s ago: executing program 1 (id=323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x3, 0x4) 4m25.705287965s ago: executing program 1 (id=325): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 4m22.595139343s ago: executing program 1 (id=359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4m22.523410682s ago: executing program 1 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 4m22.52194259s ago: executing program 1 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) 4m22.44305061s ago: executing program 1 (id=371): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mlockall(0x7) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mlock2(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m7.316645588s ago: executing program 32 (id=371): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mlockall(0x7) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mlock2(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.519436068s ago: executing program 2 (id=1439): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000004, 0x5d031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r3) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2m13.703088083s ago: executing program 2 (id=1468): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x94}}, 0x0) openat$sr(0xffffff9c, &(0x7f00000000c0), 0x646c02, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 2m13.433746988s ago: executing program 2 (id=1469): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)) (fail_nth: 4) 2m13.363819502s ago: executing program 2 (id=1470): r0 = syz_pidfd_open(0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 32) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x80047455, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xfd8e49f1ee86724e) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) (rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) (async) r6 = pidfd_getfd(r0, r0, 0x0) setns(r6, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0x314080, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89000) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x262) (async) pwritev2(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="7dcec8bf60450d0c74cfb7e5b176b3b5a6d6272655c2d6df459ed57a548c9869c88a54e7b8c87121126602e313e4437d088b4115b86c7dc75fdd27fca3dcf13d2b55d6b7b417047b597f9aac1b52706dc7a7239513384bff49dfb8391579ec66296cb1e090021a0e4df3a8f5e9021a6ec1ad9aecf8ed9ad1b4f5dbcc45a2f0ab24862a7fa421a92ed18fcc7107062391a45293ed7d74398464d6ff210045601afd2132e8ef5be795692fb353f9322ab674dfac", 0xb3}, {&(0x7f00000009c0)="7f4ccc6203619183598feda8cc54c56a8dd5eb0e4dc1f7cb5fa857a45e34c2224cdc1a0c83b7ca3db030ee6e28ab27783989b06a0fdce723b2d292d7d27b6ca66cb049c75c1a49c2d935d176dfb998526618f71191d591e61699526a12567c5b37860c6d94b5591644d74ddd810720b9c24baae7df67298f296998d4f5e1be309ed7317823e4ad345ec32b31676fbebdd7ae0bbb038fa6b75f76c345ee462ec843d73aca4bd973c573e9af74693141964a8760468d92af8c80432afe55e2b3cbce94ba5e57ce6cb3c72cb65e16368793935b89c3a07d87e7a4651e3b692ab37c1a355ea0704a3e3abea1ffe15f2c73270ccb4b36159a498a868b5869fe78dd67cc8b4fa249e970d9d957dabdb7ed99b1a373037e1db761699fb7dd7e530fe0b5ab3a326901fc1ab469eaeb3b26225e149683cbf81a6181bcd25cd2fb53a74fc89379448271e1b63e93601da419fc6fb717602df2d1d23e3eec5e0daf9465681769f1f785abf56c67dbb71b31d66b509776d76bf706cfae203c269c055c785dd9e39c70b87c4e5266c3268d86a232bdc281102e6ab7ceaac0b2e8e08e9d296dd73b55fb7dbfd3e6ec6add448b044e8c3bd4b7a6f2b0fc4f277b1ac0d79bbff31776902635c0e11e48f648ce7ee50eaa24ece0fbbd416ab2af31d0b8f774cea2055bf338b0bf44597925cfbaf4f21d41b7f873b4f84c8c9dafa8854922777365bf2756aa04702a1335f0b0f809498f7af876197ff79733ec8b479a0474aaafdb34825768df4b62595115c43d08fdf73189e37ccaffdb08033e450e3c7e28a3969898fb59ca191aa6e1d7cf7d04e34302365efca8f8d56a14e1f40740c9c68d05ef03e4c33154635698ceda06da035acff5ed55ff4447a3c1cb10325c7a65988d9d7391e3efaed10d5e502b94c5b084f0976293067f946472043855fe5f010ed92a72cad88a85019184f5835ebf48357cd4ef32668c5251b9fc86bc4757e280aac4c1e1243ba70a1293fec8f741debc78b6632177069cea7048b18e1cc460a43f49fb1d581fa1ef9f11735c022067338b7ab367af3c4065fbb9f0e815a83b21e5848e323effd1c051109957fab253b80ab046879d379620b693791aaf4eecfc5a488c3177d7c603e7b3b8fdf91bab32436f900b1a095cd34afdb63300a632b1744bbf421c3b4a1a43c1df45ef9cab9ccba363e4316e6463a42d6d30387c7dc0aacec2ad9ef2e24543ed38cfc5f7b75f3fa8620763e0e8b6ccf550ac5859eae40f7a3020be014161572ab6fc6d829cc4ac24203f89fd50308edfbb2226e86cff4d8311a71678614ba2056555fa185b70c5f08aa0bda95dc4407ee20233f324b14de5c6e6b81282bfb894b4a1ed1ec23317209b2cd92a0b552a4eb99bce54b93c955c52d3daf454ee50346f3f14bef61d67c05a2a8810ee4caf52fa53eb9f4ad50ac7cfafe46e1026526697347419f7c75cba3b3524eefb21e7cc2a592e957247cf81406dbd5d19b568addb4799945d9621462988eeb94279b3188470f56de94e379f62c9bcd94db64c70cd7127f3c474686dbe733b69c7e7caeb4728676710105bf3fa0ee9a299779995dd653a810bf8b821e841a53625ced18b873c4370a79394c1ffcbe7ae424208e2ba8db455511b6df3f7fb1f9a0a449f9d38f27b9626335c451f7a09a318f71165af3827092c6f36ab7fba9febe3762c970da61fc0a6615fc9d54dd1110db35d0f58e8dc374ef3a63b3bc62bffb6438ac9c7111b52b650d08bb27f1c88fc18b47a7a4e617ed9aad3f8f059536e59c6f389896d9e15cdd047d98a32b40e1280d0a4d5591334d5c6a9f9fa363c37bfc923d823df8b5699a18c1e9b6070ccf80eb5e695219a0c51ebfd32a3b873594789fe193bf80bf9399ce01d6382a790a8e18b267586915da175c8ea061106fc3f49703c59e21a6314a9f9f79ffd720d2a18f7634341dbbb1f1ac0a27b97457fc2500b12af8db3277e654145525f186c390c8289888058efa2eb0224cd1ad544818d40be15ba34e707c6662c3614366ab44d057fe2288f2633f2d6c02951e96e07bd247e96e8b4a5cad73ef8591eac823126636466d39ed720e509c2d1382eb9c8d9a8adbbb142c61b5e6ed75bf9c76c610e6e40c53593b8166275f1ca3c7c6cb88af86f9da037cd7e262de59f06d1b4bafccc59df8386fa8593c1d27a48dc11d253feb2a7094c37e522ab70e0b349bef6785ed87910fd4e8ab1c2274b758a7b22225c6f8163765349e7474f057dadc84898bd6d584fb70217a05c3a47ec9295dd5833857a6125db32ab3c979aeb80162391b00771cdfc122b7064342dc4eb6e2f11e521bc72d74e02ee9b000f38f55e352bfde75a482111be9fac6acd41195ae5ec2506f97dee413dd98b64ed8af423facefe0d303dadf95b6f3325a0727dfd517e394ca8498f9f378ee5d1ce12f482e5a05202e4d16ac09d83f8273aff54d15002b2eba1aa43466ab4a6098db8e671fbd0bb633b700794e1885265d27b94d1b001aba73341ccbaeb73a7956bd3df9564caf0a8a8c4aa633db5d2ad9f3ff2b42be693dafffe442c5be55d96204b5aeac43062579b84409b2b8c5ee7360bb3ff02814226e99563b39e5a3c74a667fd8694d79cd6bee2e24ffe1ddf37a858ec068f3c2247dbf76585d35f79e76dfbfaa515adfc09de8d95fba1dca536ced62240e04669d3e7fd2495b3b78fff959e91e47ce4f87a43567f293900213fb983923de8334538df66425bad9ebc10ec75d2c13c71139b8d8bdb8fb606c49276f387336c6b0b57f04ba0c1a25467d322137fa71648e27d8e8404aebaf73160681492b7d2f0b3028f98f8e826dec94a86526b8eded38b3a6cf99ae5326cd8732362fc67fe3b8fd11e70570e5a48b5887908e5481fb6808dcfc367ffacc234d1e65441e652894886905d69753a7cad2bcc4bc123db8f4bfaae9dd6641165a72ece4e0522c36ddd1d08de4a5bf99963bae1fe77140d70c2085c7d4d7a16144c07b023d4b5118d473977f5b061762b027e3e7a0da6025b9501cb61f2eb199432f42f4a0dccf81460a3132bc47b1e4d4c85ea179519b93e1ee3e3e44cae4776deda741f1ab406d9537addb9aac810805027bc664bdbd5a6a19e8897685afb0ad903fc7f0baf1970f68dfcb3660d3bf39d5e7df609aac51c737c25ec5dcb32068995980d81aeb9fb6a9eef66d2079d56f841995d73c8e2cfd70d4ab1a9b688d248978ba0ad517a04d985b85a3bd7bebdd1c6fe1885f735fd49bf0fcb69b37e8d6d55faf70637c7590329d75f639e8e929303e4dbd62786a48b2d58fa1d07f932a3e82b201d12258d7aeca5f1e34018b86e34e7b5bf01f27fd1188d0f722ce44cff363575d02815b917f649283738edbea9b7db90b838800135effe2259ee1648d9a1be302f398d963694000f8e4ed0762a533f8a34d2fc5b6cfb2753c6f0077c3482909d16979afb6508794798eb0983eb854172a6ae8ba3b0115dbf09a8e5efb8f980a86cda17f8ee7d95ed1c3bb975f147fff625215c167ad41a92ae08eae02a6c35a037e9f12ff05a7a4a821183c2061e3329f2fe93b175adf56e8f0c08be95b1c42b9b5cfc2708b7738d0c565444e2350d5d61e9c28ea0671093eaf2dd824f47b9854bf26340543a0aaf8d0c08e56190697a9e1c80a9d691aedc0e1d96bff2fb177792a91839a61bc550e344e5c27d2a3a96affce5b0c8e6e63fd715adf12c9297e41cbe3d8151ef89e51dcc7599d4783e1bbeefdf9647e7b9b027e4fa2290900c1c770ac1c888c64c6897946ac474a5ec7f530ac8d891e431d674a0b378a4f9a145acf840da7874d972aec0896b36158108b124085d03c185c6c1afff568a9ba81528b83cd2dd27070d217fd4e76ef7738d4f6f36acf9b9de88d836d0ec6921920dc31d35bcba8d00df0dcc5536661483cab9f0281013d33fc6f8c987629c7b3e4dddf9d7e62b5367a037a08d58e65218100670039ec5904fdce707602e48deb5180c7b5ab91b9c1a77a126e57be1cc3ec32f110fd6bd7926687bc013917bf99dea285817ea48c5f880e4ab748e018b598b3f7479f047f1cd6f066b162e5908cae8e82900bf368041211795d27eb72aaa1ddb52bb864160bbf2989b5ae2efcf7045528548e2c01f461c4fb6768e25746be344feaf4df6e0c16a7090c70dac9fc60a91799842c537d515178d5822ad8cae61469f7811f306844c9f920c89a16c8b5131c7de20534de9bcffaf6da80d652c604ea8b972c2dc4a60fc37c7ad882c27a2c6dc056d41f9c86dd6a9acfb3fa9abc6dfbf78a2b8e2e1c7d015498ab9f7b19a6154ec8d188c1bd8b1024d72e7deede5fc699c87f8881371491c8f455166fa84eb1d69f11b5b7e6c18a17c527547d4da396991d48e362fc87f8b070fe7166d75ac2140ff3137c3a979fe821ab0ae2290e8bb0a8d983e34878dec6a0940c5b7f4e83c9c81a7bb7fdac65bb0f96466662cd2abb8a02646142c14f51822c671aff60f3e9310c14b1048ffa081bb7258490e61d32f1e746efb553ae575688a3debfd8c5c385669bc30a4ae55524438e735750677296029ac76ad2ac47e84b54470cb208320c9017ceba118142ce102e0874940105e25070cfe11a0fad1fd391a82a46b0f7141380f45e1f466fb3b5375ac7bad8eb5965173d03d0d8a2151f4e1ee58bf209af11692548f885a807fa03aff63bf6ab1f04e9d52dd87b058d80e8ff4169d393c7aaf009634f01e04fe3cc5f34af322ca62aafae357a2e88de674075597f86f264c628e163d95d5c16d246be02666d43154d370febc7200601f95eefc0089c0a236e000de6b271a45505b58d6bd65ebda6212f69767e2278af8d8197f72a72c64d33d41beb552f971faef0434df081f15508ae7b48b091232fcb41043726779bd77e46cefe000ae7476f4e4c82b72064c7f48362b370fc584ac4c02cf1e9f073660e16ace8e42fd4336af60624b1edc0a612abc6f833d72f71cb17225dace89f31e444e294dc81788f672a4fdc7a21b5d6721f979b571bb74a8db197f3ef445d17bce2788e7ca65adcfdda34234f737328df79adef42295e321ec2b8b302b9d8a043d3859518cf459663e3af042be57abfe57f961936cb8cc8d2b6467ba27f98f0b5b7367ba004ee3cc8f1fce35577011de2e4356e652de5f7a64d505427b526249e0ee48afbfc07248fd83d4f96925489bbff4712888b75f96b656ddc1dbcedcf5bd9062b0085f79ff40adf3b9dc3901f2096d093d41590959105c7ae000481e46884d902d8a8b2ce2abd7a02c2e710656b618f47ccc6bb8b43cacd8b0670f87f43ac711f193bfbee813b32ea1c957a85da7f597e2845b200aa75f57728ab1eccbad3a056e24bf2e6a75fa8086aefea8688c40a363333d8012335ea28a24da71c623529d280bc400ad8f108f85b51ea6fa2745d4b3ac48ea63144d6e63b71801330ae23cf7094f76e5017474cb4189c292113b4afa4b5ef29281c0de5c523098e30d9cdb56fa67f41f02d7df1549dc90e07e2cb07445229fd8ad7d788e55f262287183d3de40d35effb56439c4ad2d42b1e632cbd060189880d8f1997132a5a0f79b552862468cb69c5baaa0d1e3a63187efa1e704999645ed079545eb290285638120aa9f1202c72dc4f182e0b5319df2b7860a032debaac2d1a7d72aecd1a7e75695841b9611bc140d136a3e9c41719aebd22ef3181db896019225d6cd2d2be59e65abe9dcf5550f0fdb3e5f91a00276b261c50e8056bce27bb86de8ff6b768dd47b20a412a7b474f6fc", 0x1000}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f0000000240)="5fa2266ca107629da259cfad7f918cadc8641f3c4df5c26edd9bcee7c51a93a89fc9869961399de21429db1fd17033a74daefec882029cbdd3733b1c4c7a02b4851480e7a32319c713890ba1e8dc5e5b675214b75e90bd8b21566698c098dc0390e854a89a3101f4a68e8f49d4b71d072a6b4994f8f7c87cdb86012e05ef9f6d76beef293cedfd965eefe5d74d75b06dc6fa0d7d092256d4563d5206a1a2f6777f3627ae9dde4efb74f55cbd336ef7bbc71c513ac66fdf83fcc5755bc02096de2a1bae65cc7a33ce67537d77467f", 0xce}], 0x4, 0xd, 0x7, 0x6) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r9) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r10, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x6000081}, 0x4048000) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 32) 2m13.363594843s ago: executing program 2 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c054) 2m13.0036838s ago: executing program 2 (id=1472): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.959953826s ago: executing program 33 (id=1472): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 43.161662885s ago: executing program 3 (id=2013): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000340)={'dac02\x00', [0x4f29, 0x5, 0x3ff, 0x601, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x809, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x1a44b, 0x20003, 0x201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x408, 0x4, 0x8000000, 0x1]}) ioctl$COMEDI_SETRSUBD(r1, 0x6410) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) 43.161375885s ago: executing program 3 (id=2014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 43.081416188s ago: executing program 3 (id=2015): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x9, 0x4}, {0x9, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x0, 0x8, 0x4, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000004, 0x5d031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r3) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x803, 0x3) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 41.629399982s ago: executing program 3 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0xffff) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) pselect6(0x7fff, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) 41.412836672s ago: executing program 3 (id=2019): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[r2], &(0x7f0000000040), 0x0, 0x300}) 40.968566078s ago: executing program 3 (id=2022): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x60402, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000000040)={0x3}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="d6552576601388b1333de15f2d1f10674b2658bc12d9d4a27de5b05b3441119345126fd504e1161217d21be40e5da3ca667015b626abbeb30c5a19"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61fbddf00008000001fc0200000000000000000000000000018000907800000009"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000020095000000000000c5a10d8f02990dedab8f425a1713a3a76e94d3361b70b721085b5a4f8018f541597fa40af67c01be17f0a700008663bb0d0936ffd65fc0cfd961d6d9889bffb0f2284de88168942190288b7c70280bb77f91df4042eb6c3c164462e4214969e3be9bfcd16154ea0e6c01000100a03334b5457fd998f53b16984c04173fe5f2041ad8a353185088c778cea415b4ddd3c45f5cd9f3061c147260ec86dd0bfc9ebdb5765cac99616b6ade2c098220a8a8936d50577f436b506c0a672d6cb5be7513b24b9b80b87adb3b9620675a60b44c5f101c827d1ff0f34b1629491bea48f7c4d2b04172895de3195abfd70092c40ac483558c7376172e99fdf4429d594b10cb9936ac9846edb6bc680ccdce989d79827a2a03df50e8c6754cd93b20c081da4b78c73f426a6d7ccdae59"], &(0x7f0000000100)='GPL\x00'}, 0x94) mknod(&(0x7f0000000280)='./file0\x00', 0x8000, 0x77b) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x2, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) 40.881100662s ago: executing program 34 (id=2022): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x60402, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000000040)={0x3}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="d6552576601388b1333de15f2d1f10674b2658bc12d9d4a27de5b05b3441119345126fd504e1161217d21be40e5da3ca667015b626abbeb30c5a19"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61fbddf00008000001fc0200000000000000000000000000018000907800000009"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) mknod(&(0x7f0000000280)='./file0\x00', 0x8000, 0x77b) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x2, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) 4.341076285s ago: executing program 5 (id=2264): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x198, 0x0, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0xff}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@private0, @in=@private=0xa0100ff, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000500)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000023000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e"], &(0x7f0000000100)='GPL\x00'}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r12, @ANYBLOB="003000000000000014001a8018"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) close(r0) 4.181850933s ago: executing program 5 (id=2268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x1200, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x1300, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a10000000000800410073697700140033006c6f000000000000004ce06e530f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 3.64257159s ago: executing program 6 (id=2275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd03270a000000140000006c07010033d42cfffe800000000000000000000000000a10ff02000000000000000000000000000189"], 0x340a) 3.551826248s ago: executing program 6 (id=2276): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x9, 0x4}, {0x9, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x0, 0x8, 0x4, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000004, 0x5d031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r3) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3.159583347s ago: executing program 5 (id=2279): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 3.159233909s ago: executing program 5 (id=2280): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4}) 3.098479395s ago: executing program 5 (id=2281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000010000000000000000000040"], 0x0) 2.202129164s ago: executing program 5 (id=2288): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = syz_open_procfs(0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x7fa) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r5, r5, 0x34, 0x0, @val=@iter={&(0x7f0000000480)=@task={0x0, 0x0, r5}, 0x10}}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x1b, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x3e, &(0x7f0000000800)=""/62, 0x41100, 0x20, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x2, 0x0, &(0x7f0000000840)=[{0x1, 0x1, 0x7, 0x6}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x60e}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="6518178999a5abb031aa34a3c200e3c26f172b5bf2269269de8e1e0248cea4de95e93c1d1778a947eebab407d4bbf4444e45805e140f5d19276c2d91b27db0959088a497f12c73ac225fba338648e0c4191bab04b67a81bcfc7bd9cee1b832ac6b815fa0708198c2056c938eee9c50ed0dd6e9358dfd1293631b550911fd4663c3466d6952223faa22e9cf263006ecc470084a133a68d8f5b7a986d63b4ef6667f187bee7d2ac64dd8cadf89500d4c219942b94d714f350177fe8f1b63a5e2a76376a82b9340ac49140efb2a01b98105591082294eaad7a11ac53788d72accf9c3946db0e6069fc40c27a2b174c79524", 0xf0}, {&(0x7f0000000340)="c6caec6fd485622e76b7ced1ce2b0c97b2a682efdfb339004bbad1ba16bc1467794713fc484993aa5951b43917649912efdaad95a5f75fe027a74d593873110d9513e89a1fbc38d556fbca83b1a30d6dd5818a0db75d9cbd03ee9add834ed9b9bdb0ab5c5f198e553ca75a83ebe7628378461c2d0373fc937a703e9b7d6c6bc0953587c1765f6d898247d104241f5871636835549f9fbdc3e8df0fc054a60c76a8682363791dce81e192abfc4dce233ae3dd61c3eaa40be67de6b99fdee7d237537cbd23bc132b4dfeb234482a72", 0xce}, {&(0x7f00000005c0)="2852d522c81f4222d83d071722e88adfbe1d1113b0f567cacd2014eb5f35372038cdede180eec045743fb63cfd5d12b677c6cf00bd1569e391d081e2ab690641603b6f0e4180db157dafdf2c62cb76f39d2a11f90391f120b9543ef762f49fdc6f8b0ee9977e0965db4aad6da2449a7d2617f730b161ed9b6872d4a4ebd030505485715511bb9f91cdea3a5b9ceab975a950370cdaf35cc7593f8b439b666353635c5b8e094d32183d8b1df20313bd769fd9850c9192fedb49141c3066a888d80edecfb03013745d3d3b165269a0b78672c54f7b0bcc4e76658fa550dd4ba467d4dbcf86d9d7010829737015697a27f05d5e1dc0667ddac8", 0xf8}, {&(0x7f0000000180)="0b604773a7d415802829a6ba3c9b032156005bfba3f53ae5383d1d29541f1ea0ca5e9052dc01fdc733fd7f1c97d1bae584f4a948728911c3a48a07c5fc946aa53555784c8fe13e14a8cb9c9eb9f0def11b2565b67891953ce60dd19c3fbb605643a30af70a33", 0x66}, {&(0x7f0000000100)="07ffbbf3d93a599708e41eed86472c28afce06e08fa74370020ff58184c6dc035853136262fd", 0x26}], 0x5, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r9, r3, r8, r10, r6, r2, r4]}}], 0x60, 0x4840}, 0x40000) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.84252146s ago: executing program 0 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000640)={0x4, 0x4, 0xff}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r5 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141200, 0x42) mknodat$loop(r8, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) linkat(r8, &(0x7f0000000100)='./file1\x00', r8, &(0x7f0000000240)='./file0\x00', 0x400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x62, 0x4041ad0c, &(0x7f0000000000)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000040002600000000000000007ae9e2422ee846c82c81937d4ad94283186b0b80e4f4fdc8afd387a3059d4bc0026582273649070b2c6a35e7e031638ffc8576bbba4c7dbe049d"], 0x64}, 0x8, 0x3000000000002, 0x0, 0x20000000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r4, 0x0, 0x4000000000000004}, 0x18) 1.782025962s ago: executing program 6 (id=2296): r0 = syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb4, 0xc6, 0x6, 0xe2}, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000002740)=0xe4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002780)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r2 = getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x8, 0xffffffff, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x800, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x1, {0x6, 0x7fff, 0x80000000000, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x87, r8, r9, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d00), &(0x7f0000002d40)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="10d725"], 0x10}], 0x1, &(0x7f0000000380)=[@cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}], 0x18, 0x40014}, 0x6044) getgid() r15 = openat$fb1(0xffffff9c, &(0x7f0000000000), 0x4e880, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x800, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r15, &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0x6, 0xda02}, {0x2, 0x1}], r16}, 0x18, 0x3) getgid() gettid() geteuid() getegid() 1.62082156s ago: executing program 0 (id=2298): r0 = openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0xd2074c0c07622513, r1, 0x6a856000) openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x9) 1.620603211s ago: executing program 0 (id=2299): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 1.550749192s ago: executing program 0 (id=2302): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e00010001000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/312], 0x184}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x11f) close(r3) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.341169047s ago: executing program 6 (id=2304): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) move_pages(0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=[0x0], 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x4, 0x1}, {0x3}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x54}}, 0x0) (rerun: 32) r6 = inotify_init() (async) syz_open_pts(0xffffffffffffffff, 0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009) r7 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r8, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) fcntl$setown(r9, 0x8, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x800, 0x2703d22, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x404c057) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r7, 0x0) 1.121319946s ago: executing program 6 (id=2307): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x4, 0x7]}, 0x8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @multicast1}}) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @bcast, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000001c0)={@bcast, @default, 0x2, 0x56}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x4, &(0x7f0000000200)) close_range(r1, r1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd3}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x15}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x110, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xbb0}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xd4, 0xc5, "610d54642aaaadfcc7fe2a4a8f4eb714935f1b8de7c5552b0b77b1ae38012165305af34f313d857b11f3b637856aa07dac6fe31204b377dbbdb150481fcfd5772be86156043f425c640ae2f1862e585a8efb9cafa1b2fa2b7cf9115778d2e299fa9c93f3da5fd61e30d73b7dbbccc60c39f01910df83602dbe20493a62f17d39e0cd073fc1c7aba7059dfd6b7bcbf83320533a11f3b5b205b95f627c49a909ff76ba9047f8b6ca84b5b703727da5a03cebe080413105b2864a55307bef4ea33179b30c0a4c8faf9a7182fe916452ecc6"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000680)) ioctl$PPPIOCDISCONN(r1, 0x7439) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/108, 0x6c}, {&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001900)={'wlan0\x00'}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000001940)={0x9, 0xe, 0x7fffffff, 0xb0a, 0x911a, 0x3}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000001980)={0x976f, 0x8, 0xf818, 0x5, 0xffffff5e, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000019c0), &(0x7f0000001a00)=0x28) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(r2) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/84, 0x54}, {&(0x7f0000001ac0)=""/43, 0x2b}, {&(0x7f0000001b00)=""/87, 0x57}, {&(0x7f0000001b80)=""/221, 0xdd}, {&(0x7f0000001c80)=""/38, 0x26}, {&(0x7f0000001cc0)=""/137, 0x89}, {&(0x7f0000001d80)=""/163, 0xa3}, {&(0x7f0000001e40)=""/47, 0x2f}, {&(0x7f0000001e80)=""/138, 0x8a}], 0x9) socket$kcm(0x29, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000001fc0)={0x0, @aes256, 0x0, @desc4}) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) nanosleep(&(0x7f0000002040)={r6, r7+10000000}, &(0x7f0000002080)) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000022c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x34, 0x0, 0x4, 0xb3d384d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004800) 1.117469882s ago: executing program 4 (id=2308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x800) r6 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="8f00000014006b05c84e21000ab16d8b230675f802000020440002000100530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298343d14e9536c3a9eb230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000140)) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x6a, 0x3, 0x0, &(0x7f0000000180)) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) rmdir(0x0) 662.354009ms ago: executing program 4 (id=2309): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4}) 662.002282ms ago: executing program 4 (id=2310): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}], 0x1, 0x40002) 597.412339ms ago: executing program 4 (id=2311): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x80000000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r3 = dup(r2) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0xf1e51, 0x0, 0x1}, {0x7}, {0x7fff}, {0x2}], @llc={@llc={0xff, 0xf0, "b1", "9c7b9e9c9fb6b84c4b7ced624075fe7be54c5d53ffc84e840f37428ba56cd4c44b7245c2add786"}}}}}}, &(0x7f0000000180)={0x1, 0x1, [0xc44, 0x3ac, 0xa00, 0xa57]}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) sendto$inet(r3, &(0x7f0000000240)="911b403f8625e4aed2460090f709b508dc3d27c650e4f0f582f148cf010000006d3fb5fbaeb7ad91ca4046072bcea15fa271c4f8e05b910053b3af1a069ea35115a1af5b9b1498", 0x47, 0x4000084, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000100c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x23, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f0000001040), 0x282d) 402.65892ms ago: executing program 4 (id=2312): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300), &(0x7f0000000040), 0x0, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 401.906237ms ago: executing program 4 (id=2313): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x18, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x84, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x54, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xf32}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x2a32}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x3}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x31dd}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x7) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x28040680) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) lseek(r7, 0x100000000, 0x4) syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) 192.036827ms ago: executing program 0 (id=2314): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x198, 0x0, 0x4e22, 0x0, 0x2, 0xa0, 0x0, 0xff}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@private0, @in=@private=0xa0100ff, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000500)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r12, @ANYBLOB="003000000000000014001a8018"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) close(r0) 191.546499ms ago: executing program 6 (id=2315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000200001030000000000000000020000e38300000000e66a"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c0c4da26d16e4351b6a788a035afbd859d781bc26d6a20f444f8d704d1ada7273bffcaa2eb8a5187e8902a1d5038038f289737fbe53ba6382c7f35f302fb4df34a32fc44b62de723c342ce9ac758da4fbc5e4c481484356c7371b9069b80b33ed6374322f046e72d42bedd4a22439bf94ecc4526a96b"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) openat$dlm_plock(0xffffff9c, &(0x7f00000004c0), 0x4001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x151, &(0x7f00000003c0)={0x0, 0x20008207, 0x40, 0x1, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r8 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) 0s ago: executing program 0 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (fail_nth: 7) 0s ago: executing program 0 (id=2317): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000030000000000000000000040"], 0x0) kernel console output (not intermixed with test programs): 001 R08: 0000000000000000 R09: 0000000000000000 [ 260.676477][T11498] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 260.676485][T11498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.676501][T11498] [ 260.893349][T11504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1694'. [ 261.268299][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.278119][T11516] siw: device registration error -23 [ 261.281781][T11519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.286193][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.339133][T11519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.432020][ T29] usb 10-1: USB disconnect, device number 2 [ 261.516849][ T24] libceph: connect (1)[c::]:6789 error -101 [ 261.519075][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 261.800954][ T24] libceph: connect (1)[c::]:6789 error -101 [ 261.803447][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 261.886399][T11530] siw: device registration error -23 [ 262.023169][T11535] 9pnet_fd: Insufficient options for proto=fd [ 262.330417][ T24] libceph: connect (1)[c::]:6789 error -101 [ 262.333840][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 262.343426][T11523] ceph: No mds server is up or the cluster is laggy [ 262.823636][T11551] siw: device registration error -23 [ 262.883448][T11552] siw: device registration error -23 [ 263.180800][T11563] overlay: ./file0 is not a directory [ 263.220648][ T1024] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 263.391692][ T1024] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 263.397161][ T1024] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.400905][ T1024] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.406395][ T1024] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.409637][ T1024] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.413637][ T1024] usb 5-1: Product: syz [ 263.415516][ T1024] usb 5-1: Manufacturer: syz [ 263.417965][ T1024] usb 5-1: SerialNumber: syz [ 263.429007][ T1024] usb 5-1: config 0 descriptor?? [ 263.450424][ T1024] hub 5-1:0.0: bad descriptor, ignoring hub [ 263.455592][ T1024] hub 5-1:0.0: probe with driver hub failed with error -5 [ 263.464134][ T1024] usb 5-1: selecting invalid altsetting 0 [ 263.572667][T11572] ptrace attach of "/syz-executor exec"[5960] was attempted by "/syz-executor exec"[11572] [ 263.821752][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 263.849836][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 263.931749][T11581] siw: device registration error -23 [ 264.210981][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 264.382457][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.386394][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.389400][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.393825][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.396821][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.401756][ T24] usb 9-1: config 0 descriptor?? [ 264.871028][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 264.873627][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 264.888563][ T24] usb 9-1: USB disconnect, device number 8 [ 266.102943][ T841] usb 5-1: USB disconnect, device number 9 [ 266.250068][T11643] veth1_to_batadv: entered allmulticast mode [ 266.253296][T11643] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 266.506741][T11647] ptrace attach of "/syz-executor exec"[10554] was attempted by "/syz-executor exec"[11647] [ 267.009736][T11664] FAULT_INJECTION: forcing a failure. [ 267.009736][T11664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.014755][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.4.1740 Not tainted syzkaller #0 PREEMPT(full) [ 267.014772][T11664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.014778][T11664] Call Trace: [ 267.014782][T11664] [ 267.014787][T11664] dump_stack_lvl+0x16c/0x1f0 [ 267.014803][T11664] should_fail_ex+0x512/0x640 [ 267.014823][T11664] should_fail_alloc_page+0xe7/0x130 [ 267.014838][T11664] prepare_alloc_pages+0x3c2/0x610 [ 267.014852][T11664] ? __pfx___page_table_check_zero+0x10/0x10 [ 267.014865][T11664] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 267.014878][T11664] ? post_alloc_hook+0x1af/0x230 [ 267.014897][T11664] ? get_page_from_freelist+0x132b/0x38e0 [ 267.014909][T11664] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.014925][T11664] ? trace_mm_page_alloc+0x11f/0x1a0 [ 267.014940][T11664] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 267.014952][T11664] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.014965][T11664] ? policy_nodemask+0xea/0x4e0 [ 267.014983][T11664] alloc_pages_mpol+0x1fb/0x550 [ 267.014996][T11664] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 267.015012][T11664] alloc_pages_noprof+0x131/0x390 [ 267.015024][T11664] pte_alloc_one+0x1c/0x3a0 [ 267.015039][T11664] do_pte_missing+0x1afc/0x3ba0 [ 267.015056][T11664] ? mtree_range_walk+0x718/0xc00 [ 267.015076][T11664] __handle_mm_fault+0x152a/0x2a50 [ 267.015094][T11664] ? mt_find+0x3ef/0xa30 [ 267.015107][T11664] ? __pfx___handle_mm_fault+0x10/0x10 [ 267.015122][T11664] ? __pfx_mt_find+0x10/0x10 [ 267.015141][T11664] ? find_vma+0xbf/0x140 [ 267.015153][T11664] ? __pfx_find_vma+0x10/0x10 [ 267.015166][T11664] handle_mm_fault+0x589/0xd10 [ 267.015182][T11664] ? __pkru_allows_pkey+0x31/0xb0 [ 267.015195][T11664] do_user_addr_fault+0x7a6/0x1370 [ 267.015207][T11664] ? rcu_is_watching+0x12/0xc0 [ 267.015222][T11664] exc_page_fault+0x5c/0xb0 [ 267.015240][T11664] asm_exc_page_fault+0x26/0x30 [ 267.015252][T11664] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 267.015269][T11664] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 b7 c9 ea fc 48 83 fd 07 76 22 e8 3c ce ea fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 68 c9 ea fc 45 85 ff 0f 84 [ 267.015280][T11664] RSP: 0018:ffffc9000757fe08 EFLAGS: 00050246 [ 267.015289][T11664] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84cfb9d6 [ 267.015296][T11664] RDX: ffff888026a8a480 RSI: ffffffff84cfba74 RDI: 0000000000000007 [ 267.015303][T11664] RBP: 0000000000000020 R08: 0000000000000007 R09: 0000000000000007 [ 267.015309][T11664] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000080000080 [ 267.015315][T11664] R13: ffffc9000757fe78 R14: 0000000000000020 R15: 0000000000000000 [ 267.015326][T11664] ? strncpy_from_user+0xa6/0x2e0 [ 267.015340][T11664] ? strncpy_from_user+0x144/0x2e0 [ 267.015357][T11664] ? strncpy_from_user+0x144/0x2e0 [ 267.015374][T11664] __do_sys_request_key+0xa8/0x3d0 [ 267.015391][T11664] ? __pfx___do_sys_request_key+0x10/0x10 [ 267.015406][T11664] ? ksys_write+0x1ac/0x250 [ 267.015419][T11664] ? rcu_is_watching+0x12/0xc0 [ 267.015433][T11664] __do_fast_syscall_32+0x7c/0x300 [ 267.015445][T11664] do_fast_syscall_32+0x32/0x80 [ 267.015456][T11664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.015469][T11664] RIP: 0023:0xf70fe579 [ 267.015478][T11664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 267.015488][T11664] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 000000000000011f [ 267.015497][T11664] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 267.015504][T11664] RDX: 0000000000000000 RSI: 00000000fffffff9 RDI: 0000000000000000 [ 267.015510][T11664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.015516][T11664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 267.015522][T11664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.015535][T11664] [ 267.680774][T11679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1745'. [ 267.718429][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 268.160582][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 268.313502][ T34] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 268.316110][ T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 268.320566][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 268.325771][ T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 268.328835][ T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 268.332196][ T34] usb 9-1: Product: syz [ 268.333749][ T34] usb 9-1: Manufacturer: syz [ 268.335335][ T34] usb 9-1: SerialNumber: syz [ 268.339555][ T34] usb 9-1: config 0 descriptor?? [ 268.346898][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 268.349110][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 268.355324][ T34] usb 9-1: selecting invalid altsetting 0 [ 268.739358][T11697] 9p: Unknown Cache mode or invalid value fscach [ 268.987904][T11708] siw: device registration error -23 [ 269.257097][T11715] overlay: ./file0 is not a directory [ 270.971394][ T6020] usb 9-1: USB disconnect, device number 9 [ 271.530613][ T841] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 271.660531][ T841] usb 10-1: device descriptor read/64, error -71 [ 271.900691][ T841] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 272.059987][T11793] FAULT_INJECTION: forcing a failure. [ 272.059987][T11793] name failslab, interval 1, probability 0, space 0, times 0 [ 272.065705][ T841] usb 10-1: device descriptor read/64, error -71 [ 272.067848][T11793] CPU: 1 UID: 0 PID: 11793 Comm: syz.0.1778 Not tainted syzkaller #0 PREEMPT(full) [ 272.067863][T11793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.067871][T11793] Call Trace: [ 272.067875][T11793] [ 272.067880][T11793] dump_stack_lvl+0x16c/0x1f0 [ 272.067896][T11793] should_fail_ex+0x512/0x640 [ 272.067914][T11793] ? fs_reclaim_acquire+0xae/0x150 [ 272.067930][T11793] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 272.067944][T11793] should_failslab+0xc2/0x120 [ 272.067957][T11793] __kmalloc_noprof+0xd2/0x510 [ 272.067971][T11793] tomoyo_realpath_from_path+0xc2/0x6e0 [ 272.067988][T11793] ? tomoyo_profile+0x47/0x60 [ 272.068005][T11793] tomoyo_path_number_perm+0x245/0x580 [ 272.068017][T11793] ? tomoyo_path_number_perm+0x237/0x580 [ 272.068029][T11793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.068054][T11793] ? find_held_lock+0x2b/0x80 [ 272.068067][T11793] ? hook_file_ioctl_common+0x145/0x410 [ 272.068082][T11793] ? __fget_files+0x20e/0x3c0 [ 272.068102][T11793] security_file_ioctl_compat+0x9b/0x240 [ 272.068116][T11793] __ia32_compat_sys_ioctl+0xc3/0x370 [ 272.068133][T11793] __do_fast_syscall_32+0x7c/0x300 [ 272.068146][T11793] do_fast_syscall_32+0x32/0x80 [ 272.068157][T11793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.068172][T11793] RIP: 0023:0xf706e579 [ 272.068182][T11793] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 272.068193][T11793] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 272.068204][T11793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0285628 [ 272.068211][T11793] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.068217][T11793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.068223][T11793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 272.068230][T11793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.068250][T11793] [ 272.068254][T11793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 272.177065][ T841] usb usb10-port1: attempt power cycle [ 272.529556][ T841] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 272.588761][T11808] FAULT_INJECTION: forcing a failure. [ 272.588761][T11808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.594498][T11808] CPU: 3 UID: 0 PID: 11808 Comm: syz.4.1783 Not tainted syzkaller #0 PREEMPT(full) [ 272.594525][T11808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.594536][T11808] Call Trace: [ 272.594543][T11808] [ 272.594551][T11808] dump_stack_lvl+0x16c/0x1f0 [ 272.594577][T11808] should_fail_ex+0x512/0x640 [ 272.594609][T11808] _copy_from_iter+0x29f/0x1720 [ 272.594642][T11808] ? __alloc_skb+0x200/0x380 [ 272.594672][T11808] ? __pfx__copy_from_iter+0x10/0x10 [ 272.594703][T11808] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 272.594732][T11808] netlink_sendmsg+0x829/0xdd0 [ 272.594757][T11808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.594780][T11808] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 272.594813][T11808] ____sys_sendmsg+0xa95/0xc70 [ 272.594840][T11808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.594862][T11808] ? get_compat_msghdr+0x11a/0x170 [ 272.594910][T11808] ___sys_sendmsg+0x134/0x1d0 [ 272.594931][T11808] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.594965][T11808] ? find_held_lock+0x2b/0x80 [ 272.595007][T11808] __sys_sendmsg+0x16d/0x220 [ 272.595027][T11808] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.595059][T11808] ? rcu_is_watching+0x12/0xc0 [ 272.595084][T11808] __do_fast_syscall_32+0x7c/0x300 [ 272.595108][T11808] do_fast_syscall_32+0x32/0x80 [ 272.595127][T11808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.595151][T11808] RIP: 0023:0xf70fe579 [ 272.595166][T11808] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 272.595184][T11808] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 272.595202][T11808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800012c0 [ 272.595215][T11808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.595226][T11808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.595236][T11808] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 272.595247][T11808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.595271][T11808] [ 272.695797][T11806] siw: device registration error -23 [ 272.701006][ T841] usb 10-1: device descriptor read/8, error -71 [ 272.970643][ T841] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 272.991207][ T841] usb 10-1: device descriptor read/8, error -71 [ 273.102447][ T841] usb usb10-port1: unable to enumerate USB device [ 274.045337][T11839] tipc: Enabled bearer , priority 0 [ 274.526878][T11852] siw: device registration error -23 [ 274.699952][ T41] audit: type=1326 audit(1759431262.312:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11855 comm="syz.3.1796" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x0 [ 274.794411][T11837] tipc: Disabling bearer [ 275.439033][T11871] overlay: Unknown parameter '/dev/audio' [ 275.799148][T11891] tipc: Enabling of bearer rejected, failed to enable media [ 275.921093][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1804'. [ 275.924274][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1804'. [ 275.998187][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 276.936720][T11915] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1811'. [ 276.942871][T11915] bond_slave_0: entered promiscuous mode [ 276.946282][T11915] bond_slave_1: entered promiscuous mode [ 277.206318][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 278.142197][T11945] tipc: Enabled bearer , priority 0 [ 278.173368][ T5976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.178310][ T5976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.182394][ T5976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.185480][ T5976] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.188134][ T5976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.230765][T11946] lo speed is unknown, defaulting to 1000 [ 278.333316][T11946] chnl_net:caif_netlink_parms(): no params data found [ 278.422527][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.425532][T11946] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.428606][T11946] bridge_slave_0: entered allmulticast mode [ 278.432574][T11946] bridge_slave_0: entered promiscuous mode [ 278.437305][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.439656][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.442163][T11946] bridge_slave_1: entered allmulticast mode [ 278.444801][T11946] bridge_slave_1: entered promiscuous mode [ 278.481077][T11946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.485649][T11946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.526610][T11946] team0: Port device team_slave_0 added [ 278.530388][T11946] team0: Port device team_slave_1 added [ 278.568290][T11946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.571697][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.581220][T11946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.586473][T11946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.590004][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.600417][T11946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.645351][T11946] hsr_slave_0: entered promiscuous mode [ 278.648883][T11946] hsr_slave_1: entered promiscuous mode [ 278.651331][T11946] debugfs: 'hsr0' already exists in 'hsr' [ 278.653211][T11946] Cannot create hsr debugfs directory [ 278.758274][T11946] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.837652][T11946] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.894647][T11941] tipc: Disabling bearer [ 278.901626][T11946] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.015524][T11946] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.186193][T11946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.217051][T11946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.229108][T11946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.239516][T11946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.600753][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.659083][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.683614][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.686388][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.701784][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.704131][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.839468][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.864341][T11946] veth0_vlan: entered promiscuous mode [ 279.870125][T11946] veth1_vlan: entered promiscuous mode [ 279.890786][T11946] veth0_macvtap: entered promiscuous mode [ 279.894435][T11946] veth1_macvtap: entered promiscuous mode [ 279.904734][T11946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.913711][T11946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.920034][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.929462][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.933258][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.937000][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.972815][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.975368][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.999799][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.004476][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.146776][ T41] audit: type=1400 audit(1759431267.762:919): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12009 comm="syz.3.1818" [ 280.240625][ T5968] Bluetooth: hci3: command tx timeout [ 280.694415][T12011] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 280.697665][T12011] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 280.879682][T12020] tipc: Enabled bearer , priority 0 [ 281.096464][T12028] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1836'. [ 281.099382][T12028] bond_slave_0: entered promiscuous mode [ 281.101364][T12028] bond_slave_1: entered promiscuous mode [ 281.773493][T12052] FAULT_INJECTION: forcing a failure. [ 281.773493][T12052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.778484][T12052] CPU: 3 UID: 0 PID: 12052 Comm: syz.3.1843 Not tainted syzkaller #0 PREEMPT(full) [ 281.778506][T12052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.778513][T12052] Call Trace: [ 281.778518][T12052] [ 281.778523][T12052] dump_stack_lvl+0x16c/0x1f0 [ 281.778539][T12052] should_fail_ex+0x512/0x640 [ 281.778560][T12052] should_fail_alloc_page+0xe7/0x130 [ 281.778574][T12052] prepare_alloc_pages+0x3c2/0x610 [ 281.778591][T12052] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 281.778604][T12052] ? stack_trace_save+0x8e/0xc0 [ 281.778618][T12052] ? __pfx_stack_trace_save+0x10/0x10 [ 281.778632][T12052] ? stack_depot_save_flags+0x29/0x9c0 [ 281.778649][T12052] ? __lock_acquire+0xb97/0x1ce0 [ 281.778667][T12052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.778678][T12052] ? kasan_save_free_info+0x3b/0x60 [ 281.778693][T12052] ? kmem_cache_free+0x2d1/0x4d0 [ 281.778709][T12052] ? __get_vm_area_node+0x1ca/0x330 [ 281.778723][T12052] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 281.778738][T12052] ? __vmalloc_node_noprof+0xad/0xf0 [ 281.778752][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.778767][T12052] ? bpf_prog_alloc+0x3b/0x230 [ 281.778780][T12052] ? bpf_prog_load+0x1c23/0x2850 [ 281.778795][T12052] ? __sys_bpf+0x3e6d/0x4980 [ 281.778811][T12052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.778824][T12052] ? policy_nodemask+0xea/0x4e0 [ 281.778838][T12052] alloc_pages_mpol+0x1fb/0x550 [ 281.778850][T12052] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 281.778866][T12052] alloc_pages_noprof+0x131/0x390 [ 281.778879][T12052] get_free_pages_noprof+0x10/0xb0 [ 281.778892][T12052] kasan_populate_vmalloc+0x9f/0x2d0 [ 281.778908][T12052] ? alloc_vmap_area+0x8b5/0x29c0 [ 281.778924][T12052] alloc_vmap_area+0x960/0x29c0 [ 281.778943][T12052] ? __pfx_alloc_vmap_area+0x10/0x10 [ 281.778961][T12052] __get_vm_area_node+0x1ca/0x330 [ 281.778978][T12052] __vmalloc_node_range_noprof+0x271/0x14b0 [ 281.778994][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.779013][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.779028][T12052] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 281.779042][T12052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.779058][T12052] ? __lock_acquire+0x62e/0x1ce0 [ 281.779076][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.779091][T12052] __vmalloc_node_noprof+0xad/0xf0 [ 281.779106][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.779123][T12052] bpf_prog_alloc_no_stats+0x58/0x600 [ 281.779137][T12052] ? security_capable+0x7e/0x260 [ 281.779155][T12052] bpf_prog_alloc+0x3b/0x230 [ 281.779169][T12052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.779181][T12052] bpf_prog_load+0x1c23/0x2850 [ 281.779195][T12052] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.779204][T12052] ? __lock_acquire+0xb97/0x1ce0 [ 281.779235][T12052] __sys_bpf+0x3e6d/0x4980 [ 281.779248][T12052] ? __pfx___sys_bpf+0x10/0x10 [ 281.779259][T12052] ? find_held_lock+0x2b/0x80 [ 281.779274][T12052] ? find_held_lock+0x2b/0x80 [ 281.779289][T12052] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 281.779309][T12052] ? fput+0x9b/0xd0 [ 281.779321][T12052] ? ksys_write+0x1ac/0x250 [ 281.779332][T12052] ? __pfx_ksys_write+0x10/0x10 [ 281.779344][T12052] __ia32_sys_bpf+0x76/0xe0 [ 281.779356][T12052] __do_fast_syscall_32+0x7c/0x300 [ 281.779369][T12052] do_fast_syscall_32+0x32/0x80 [ 281.779381][T12052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.779395][T12052] RIP: 0023:0xf700e579 [ 281.779405][T12052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.779416][T12052] RSP: 002b:00000000f53fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 281.779427][T12052] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 281.779434][T12052] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.779440][T12052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.779446][T12052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.779452][T12052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.779465][T12052] [ 281.779486][T12052] syz.3.1843: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 281.780675][T12018] tipc: Disabling bearer [ 281.782710][T12052] ,cpuset= [ 281.880641][ T29] tipc: Node number set to 3392555623 [ 281.969140][T12052] syz3,mems_allowed=0-1 [ 281.974209][T12052] CPU: 3 UID: 0 PID: 12052 Comm: syz.3.1843 Not tainted syzkaller #0 PREEMPT(full) [ 281.974225][T12052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.974232][T12052] Call Trace: [ 281.974236][T12052] [ 281.974240][T12052] dump_stack_lvl+0x16c/0x1f0 [ 281.974257][T12052] warn_alloc+0x248/0x3a0 [ 281.974270][T12052] ? __pfx_warn_alloc+0x10/0x10 [ 281.974281][T12052] ? kfree+0x2b4/0x4d0 [ 281.974300][T12052] ? __get_vm_area_node+0x208/0x330 [ 281.974319][T12052] __vmalloc_node_range_noprof+0xb2c/0x14b0 [ 281.974339][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.974356][T12052] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 281.974370][T12052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.974387][T12052] ? __lock_acquire+0x62e/0x1ce0 [ 281.974407][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.974422][T12052] __vmalloc_node_noprof+0xad/0xf0 [ 281.974438][T12052] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 281.974455][T12052] bpf_prog_alloc_no_stats+0x58/0x600 [ 281.974470][T12052] ? security_capable+0x7e/0x260 [ 281.974489][T12052] bpf_prog_alloc+0x3b/0x230 [ 281.974503][T12052] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.974516][T12052] bpf_prog_load+0x1c23/0x2850 [ 281.974530][T12052] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.974540][T12052] ? __lock_acquire+0xb97/0x1ce0 [ 281.974570][T12052] __sys_bpf+0x3e6d/0x4980 [ 281.974585][T12052] ? __pfx___sys_bpf+0x10/0x10 [ 281.974597][T12052] ? find_held_lock+0x2b/0x80 [ 281.974612][T12052] ? find_held_lock+0x2b/0x80 [ 281.974627][T12052] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 281.974647][T12052] ? fput+0x9b/0xd0 [ 281.974661][T12052] ? ksys_write+0x1ac/0x250 [ 281.974671][T12052] ? __pfx_ksys_write+0x10/0x10 [ 281.974684][T12052] __ia32_sys_bpf+0x76/0xe0 [ 281.974697][T12052] __do_fast_syscall_32+0x7c/0x300 [ 281.974710][T12052] do_fast_syscall_32+0x32/0x80 [ 281.974722][T12052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.974737][T12052] RIP: 0023:0xf700e579 [ 281.974746][T12052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.974757][T12052] RSP: 002b:00000000f53fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 281.974768][T12052] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 281.974775][T12052] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.974782][T12052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.974788][T12052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.974794][T12052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.974807][T12052] [ 281.974812][T12052] Mem-Info: [ 282.071524][T12052] active_anon:30293 inactive_anon:17029 isolated_anon:0 [ 282.071524][T12052] active_file:1986 inactive_file:2120 isolated_file:0 [ 282.071524][T12052] unevictable:1768 dirty:253 writeback:0 [ 282.071524][T12052] slab_reclaimable:6723 slab_unreclaimable:58139 [ 282.071524][T12052] mapped:24149 shmem:45980 pagetables:2107 [ 282.071524][T12052] sec_pagetables:321 bounce:0 [ 282.071524][T12052] kernel_misc_reclaimable:0 [ 282.071524][T12052] free:40053 free_pcp:11783 free_cma:0 [ 282.088144][T12052] Node 0 active_anon:3176kB inactive_anon:12kB active_file:568kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:896kB dirty:0kB writeback:0kB shmem:5988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8752kB pagetables:1976kB sec_pagetables:1172kB all_unreclaimable? yes Balloon:0kB [ 282.097603][T12052] Node 1 active_anon:117996kB inactive_anon:68104kB active_file:7376kB inactive_file:8480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96900kB dirty:1012kB writeback:0kB shmem:177932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6480kB pagetables:6452kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB [ 282.108046][T12052] Node 0 DMA free:2980kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.118817][T12052] lowmem_reserve[]: 0 295 295 295 295 [ 282.121227][T12052] Node 0 DMA32 free:30996kB boost:16384kB min:29948kB low:33336kB high:36724kB reserved_highatomic:2048KB free_highatomic:4KB active_anon:3176kB inactive_anon:12kB active_file:568kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:302248kB mlocked:0kB bounce:0kB free_pcp:4732kB local_pcp:140kB free_cma:0kB [ 282.132809][T12052] lowmem_reserve[]: 0 0 0 0 0 [ 282.135394][T12052] Node 1 DMA32 free:123988kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:117996kB inactive_anon:68104kB active_file:7376kB inactive_file:8480kB unevictable:3536kB writepending:1012kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:42924kB local_pcp:6344kB free_cma:0kB [ 282.149020][T12052] lowmem_reserve[]: 0 0 0 0 0 [ 282.151565][T12052] Node 0 DMA: 59*4kB (UE) 27*8kB (UE) 8*16kB (UE) 19*32kB (UE) 4*64kB (UE) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2980kB [ 282.157229][T12052] Node 0 DMA32: 329*4kB (UMEH) 224*8kB (UME) 83*16kB (UME) 322*32kB (UM) 114*64kB (UM) 34*128kB (UM) 12*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 30996kB [ 282.163858][T12052] Node 1 DMA32: 0*4kB 8*8kB (E) 2*16kB (ME) 56*32kB (UME) 255*64kB (UME) 174*128kB (UME) 118*256kB (UME) 60*512kB (UME) 22*1024kB (UM) 0*2048kB 0*4096kB = 123936kB [ 282.169967][T12052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.173322][T12052] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 282.176154][T12052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.179085][T12052] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 282.182786][T12052] 50719 total pagecache pages [ 282.184638][T12052] 623 pages in swap cache [ 282.186017][T12052] Free swap = 99072kB [ 282.187324][T12052] Total swap = 124996kB [ 282.188632][T12052] 524155 pages RAM [ 282.189834][T12052] 0 pages HighMem/MovableOnly [ 282.191786][T12052] 207698 pages reserved [ 282.193069][T12052] 0 pages cma reserved [ 282.287650][ T41] audit: type=1400 audit(1759431269.902:920): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12054 comm="syz.4.1844" [ 282.312679][ T5976] Bluetooth: hci3: command tx timeout [ 282.525722][T12057] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 282.528865][T12057] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 282.593303][T12059] siw: device registration error -23 [ 282.605096][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1846'. [ 282.639548][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'. [ 282.870585][ T5976] Bluetooth: hci1: command 0x1003 tx timeout [ 282.875718][ T5968] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 283.184519][T12078] tipc: Enabled bearer , priority 0 [ 283.540671][ T1024] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 283.705970][ T1024] usb 8-1: config 0 interface 0 has no altsetting 0 [ 283.708895][ T1024] usb 8-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 283.713041][ T1024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.718899][ T1024] usb 8-1: config 0 descriptor?? [ 283.909190][T12076] tipc: Disabling bearer [ 284.041709][T12092] FAULT_INJECTION: forcing a failure. [ 284.041709][T12092] name failslab, interval 1, probability 0, space 0, times 0 [ 284.047618][T12092] CPU: 2 UID: 0 PID: 12092 Comm: syz.0.1856 Not tainted syzkaller #0 PREEMPT(full) [ 284.047633][T12092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.047640][T12092] Call Trace: [ 284.047645][T12092] [ 284.047650][T12092] dump_stack_lvl+0x16c/0x1f0 [ 284.047666][T12092] should_fail_ex+0x512/0x640 [ 284.047684][T12092] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 284.047697][T12092] should_failslab+0xc2/0x120 [ 284.047710][T12092] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 284.047721][T12092] ? copy_process+0x4b5/0x76a0 [ 284.047739][T12092] copy_process+0x4b5/0x76a0 [ 284.047759][T12092] ? __pfx_copy_process+0x10/0x10 [ 284.047777][T12092] ? lockdep_init_map_type+0x5c/0x280 [ 284.047800][T12092] ? lockdep_init_map_type+0x5c/0x280 [ 284.047823][T12092] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 284.047852][T12092] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 284.047877][T12092] vhost_task_create+0x1d2/0x370 [ 284.047904][T12092] ? __pfx_vhost_task_create+0x10/0x10 [ 284.047933][T12092] ? __pfx_vhost_task_fn+0x10/0x10 [ 284.047956][T12092] kvm_mmu_post_init_vm+0x1b7/0x380 [ 284.047971][T12092] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 284.048005][T12092] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 284.048023][T12092] kvm_vcpu_ioctl+0x5eb/0x1690 [ 284.048040][T12092] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 284.048055][T12092] ? tomoyo_path_number_perm+0x18d/0x580 [ 284.048070][T12092] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.048090][T12092] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 284.048104][T12092] ? do_vfs_ioctl+0x128/0x14f0 [ 284.048120][T12092] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 284.048140][T12092] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 284.048157][T12092] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 284.048172][T12092] ? __fget_files+0x20e/0x3c0 [ 284.048192][T12092] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 284.048208][T12092] __ia32_compat_sys_ioctl+0x242/0x370 [ 284.048225][T12092] __do_fast_syscall_32+0x7c/0x300 [ 284.048238][T12092] do_fast_syscall_32+0x32/0x80 [ 284.048249][T12092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.048263][T12092] RIP: 0023:0xf706e579 [ 284.048274][T12092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 284.048285][T12092] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 284.048296][T12092] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 284.048302][T12092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.048309][T12092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.048315][T12092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.048321][T12092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.048334][T12092] [ 284.128956][ T1024] usbhid 8-1:0.0: can't add hid device: -71 [ 284.180676][ T1024] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 284.191589][ T1024] usb 8-1: USB disconnect, device number 2 [ 284.400616][ T5968] Bluetooth: hci3: command tx timeout [ 284.604798][T12096] siw: device registration error -23 [ 284.725624][T12098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1858'. [ 285.145239][T12103] tipc: Started in network mode [ 285.146926][T12103] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 285.150261][T12103] tipc: Enabled bearer , priority 10 [ 285.493355][T12113] siw: device registration error -23 [ 285.737450][T12116] siw: device registration error -23 [ 286.140668][ T6013] tipc: Node number set to 11578026 [ 286.477932][ T5968] Bluetooth: hci3: command tx timeout [ 287.536357][T12170] FAULT_INJECTION: forcing a failure. [ 287.536357][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 287.541320][T12170] CPU: 3 UID: 0 PID: 12170 Comm: syz.0.1875 Not tainted syzkaller #0 PREEMPT(full) [ 287.541336][T12170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.541344][T12170] Call Trace: [ 287.541348][T12170] [ 287.541353][T12170] dump_stack_lvl+0x16c/0x1f0 [ 287.541398][T12170] should_fail_ex+0x512/0x640 [ 287.541423][T12170] ? fs_reclaim_acquire+0xae/0x150 [ 287.541440][T12170] ? tomoyo_encode2+0x100/0x3e0 [ 287.541454][T12170] should_failslab+0xc2/0x120 [ 287.541466][T12170] __kmalloc_noprof+0xd2/0x510 [ 287.541480][T12170] tomoyo_encode2+0x100/0x3e0 [ 287.541495][T12170] tomoyo_encode+0x29/0x50 [ 287.541508][T12170] tomoyo_realpath_from_path+0x18f/0x6e0 [ 287.541524][T12170] ? tomoyo_profile+0x47/0x60 [ 287.541541][T12170] tomoyo_path_number_perm+0x245/0x580 [ 287.541551][T12170] ? tomoyo_path_number_perm+0x237/0x580 [ 287.541564][T12170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.541589][T12170] ? find_held_lock+0x2b/0x80 [ 287.541602][T12170] ? hook_file_ioctl_common+0x145/0x410 [ 287.541618][T12170] ? __fget_files+0x20e/0x3c0 [ 287.541637][T12170] security_file_ioctl_compat+0x9b/0x240 [ 287.541651][T12170] __ia32_compat_sys_ioctl+0xc3/0x370 [ 287.541668][T12170] __do_fast_syscall_32+0x7c/0x300 [ 287.541682][T12170] do_fast_syscall_32+0x32/0x80 [ 287.541693][T12170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.541708][T12170] RIP: 0023:0xf706e579 [ 287.541717][T12170] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 287.541727][T12170] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 287.541739][T12170] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 287.541745][T12170] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.541752][T12170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.541758][T12170] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 287.541764][T12170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.541777][T12170] [ 287.541788][T12170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.977394][T12181] siw: device registration error -23 [ 287.988557][T12182] tipc: Enabled bearer , priority 0 [ 288.170563][ T5825] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 288.320711][ T5825] usb 9-1: Using ep0 maxpacket: 32 [ 288.324941][ T5825] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 288.329172][ T5825] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 288.334513][ T5825] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 288.339033][ T5825] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 288.344371][ T5825] usb 9-1: config 0 interface 0 has no altsetting 0 [ 288.349637][ T5825] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 288.353549][ T5825] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 288.356973][ T5825] usb 9-1: Product: syz [ 288.359525][ T5825] usb 9-1: Manufacturer: syz [ 288.363973][ T5825] usb 9-1: SerialNumber: syz [ 288.368869][ T5825] usb 9-1: config 0 descriptor?? [ 288.374487][ T5825] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 288.382348][ T5825] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 288.444180][T12188] tipc: Enabled bearer , priority 0 [ 288.581814][ T5825] usb 9-1: USB disconnect, device number 10 [ 288.581884][ C2] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 288.588210][ T5825] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 288.678891][T12176] tipc: Disabling bearer [ 288.766450][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 289.230594][T12186] tipc: Disabling bearer [ 289.453331][T12205] tipc: Enabled bearer , priority 0 [ 289.457373][T12205] syzkaller0: entered promiscuous mode [ 289.459710][T12205] syzkaller0: entered allmulticast mode [ 289.535811][T12206] FAULT_INJECTION: forcing a failure. [ 289.535811][T12206] name failslab, interval 1, probability 0, space 0, times 0 [ 289.541728][T12206] CPU: 2 UID: 0 PID: 12206 Comm: syz.5.1884 Not tainted syzkaller #0 PREEMPT(full) [ 289.541753][T12206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.541765][T12206] Call Trace: [ 289.541772][T12206] [ 289.541779][T12206] dump_stack_lvl+0x16c/0x1f0 [ 289.541801][T12206] should_fail_ex+0x512/0x640 [ 289.541827][T12206] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 289.541847][T12206] should_failslab+0xc2/0x120 [ 289.541868][T12206] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 289.541885][T12206] ? __alloc_skb+0x2b2/0x380 [ 289.541917][T12206] __alloc_skb+0x2b2/0x380 [ 289.541942][T12206] ? __pfx___alloc_skb+0x10/0x10 [ 289.541973][T12206] ? if_nlmsg_size+0x475/0xaf0 [ 289.541995][T12206] rtmsg_ifinfo_build_skb+0x81/0x280 [ 289.542020][T12206] rtnetlink_event+0xf3/0x1f0 [ 289.542049][T12206] notifier_call_chain+0xbc/0x410 [ 289.542073][T12206] ? __pfx_rtnetlink_event+0x10/0x10 [ 289.542101][T12206] call_netdevice_notifiers_info+0xbe/0x140 [ 289.542125][T12206] netif_set_mtu_ext+0x590/0x7d0 [ 289.542146][T12206] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 289.542161][T12206] ? stack_depot_save_flags+0x29/0x9c0 [ 289.542203][T12206] netif_set_mtu+0x98/0x140 [ 289.542220][T12206] ? __pfx_netif_set_mtu+0x10/0x10 [ 289.542250][T12206] ? full_name_hash+0xbc/0x110 [ 289.542275][T12206] dev_set_mtu+0xb2/0x260 [ 289.542296][T12206] dev_ifsioc+0xd1f/0x1ee0 [ 289.542326][T12206] ? __pfx_dev_ifsioc+0x10/0x10 [ 289.542353][T12206] ? __pfx___mutex_lock+0x10/0x10 [ 289.542383][T12206] ? dev_load+0x8e/0x240 [ 289.542414][T12206] dev_ioctl+0x223/0x1060 [ 289.542442][T12206] sock_do_ioctl+0x19d/0x280 [ 289.542463][T12206] ? __pfx_sock_do_ioctl+0x10/0x10 [ 289.542485][T12206] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.542505][T12206] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.542528][T12206] compat_sock_ioctl+0x301/0x730 [ 289.542552][T12206] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 289.542574][T12206] ? hook_file_ioctl_common+0x145/0x410 [ 289.542600][T12206] ? __fget_files+0x20e/0x3c0 [ 289.542634][T12206] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 289.542655][T12206] __ia32_compat_sys_ioctl+0x242/0x370 [ 289.542683][T12206] __do_fast_syscall_32+0x7c/0x300 [ 289.542704][T12206] do_fast_syscall_32+0x32/0x80 [ 289.542723][T12206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.542745][T12206] RIP: 0023:0xf708e579 [ 289.542759][T12206] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.542776][T12206] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 289.542793][T12206] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 289.542804][T12206] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.542814][T12206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.542824][T12206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.542835][T12206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.542859][T12206] [ 289.544790][T12206] tipc: Resetting bearer [ 289.680387][T12204] tipc: Resetting bearer [ 289.833441][T12204] tipc: Disabling bearer [ 290.390731][ T53] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 290.448953][T12230] hfsplus: unable to find HFS+ superblock [ 290.571926][ T53] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.576127][ T53] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.579979][ T53] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.582912][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.606746][T12225] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 290.612121][T12234] tipc: Enabled bearer , priority 0 [ 290.628584][ T53] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.829448][ T6020] usb 10-1: USB disconnect, device number 7 [ 291.200644][ T5825] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 291.335296][T12232] tipc: Disabling bearer [ 291.358640][ T5825] usb 8-1: config 0 has an invalid interface number: 199 but max is 0 [ 291.365572][ T5825] usb 8-1: config 0 has no interface number 0 [ 291.367661][ T5825] usb 8-1: config 0 interface 199 has no altsetting 0 [ 291.373223][ T5825] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=8e.1e [ 291.378987][ T5825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.382069][ T5825] usb 8-1: Product: syz [ 291.383713][ T5825] usb 8-1: Manufacturer: syz [ 291.385631][ T5825] usb 8-1: SerialNumber: syz [ 291.389495][ T5825] usb 8-1: config 0 descriptor?? [ 291.602340][ T5825] usbtest 8-1:0.199: couldn't get endpoints, -22 [ 291.604572][ T5825] usbtest 8-1:0.199: probe with driver usbtest failed with error -22 [ 291.614833][ T5825] usb 8-1: USB disconnect, device number 3 [ 292.940883][T12275] siw: device registration error -23 [ 293.185594][T12281] virtio-fs: tag not found [ 293.235701][T12283] pimreg: entered allmulticast mode [ 293.239104][T12283] pimreg: left allmulticast mode [ 293.374343][T12293] tipc: Enabled bearer , priority 0 [ 293.381506][T12283] gfs2: Unknown parameter 'barrierer0' [ 294.129505][T12288] tipc: Disabling bearer [ 294.276271][ T41] audit: type=1326 audit(1759431281.892:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.5.1909" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 294.473849][T12298] orangefs_mount: mount request failed with -4 [ 294.560868][T12312] evm: overlay not supported [ 294.849489][T12326] siw: device registration error -23 [ 294.996384][T12329] FAULT_INJECTION: forcing a failure. [ 294.996384][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.001480][T12329] CPU: 2 UID: 0 PID: 12329 Comm: syz.3.1916 Not tainted syzkaller #0 PREEMPT(full) [ 295.001496][T12329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.001503][T12329] Call Trace: [ 295.001507][T12329] [ 295.001512][T12329] dump_stack_lvl+0x16c/0x1f0 [ 295.001527][T12329] should_fail_ex+0x512/0x640 [ 295.001547][T12329] _copy_to_user+0x32/0xd0 [ 295.001559][T12329] simple_read_from_buffer+0xcb/0x170 [ 295.001578][T12329] proc_fail_nth_read+0x197/0x240 [ 295.001598][T12329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.001617][T12329] ? rw_verify_area+0xcf/0x6c0 [ 295.001634][T12329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.001652][T12329] vfs_read+0x1e4/0xcf0 [ 295.001666][T12329] ? __pfx_vfs_read+0x10/0x10 [ 295.001675][T12329] ? find_held_lock+0x2b/0x80 [ 295.001693][T12329] ? __fget_files+0x20e/0x3c0 [ 295.001709][T12329] ? fput+0x40/0xd0 [ 295.001726][T12329] ksys_read+0x12a/0x250 [ 295.001751][T12329] ? __pfx_ksys_read+0x10/0x10 [ 295.001768][T12329] ? rcu_is_watching+0x12/0xc0 [ 295.001785][T12329] __do_fast_syscall_32+0x7c/0x300 [ 295.001799][T12329] do_fast_syscall_32+0x32/0x80 [ 295.001811][T12329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.001827][T12329] RIP: 0023:0xf700e579 [ 295.001836][T12329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.001847][T12329] RSP: 002b:00000000f53dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 295.001859][T12329] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dd620 [ 295.001866][T12329] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 295.001873][T12329] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 295.001879][T12329] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 295.001886][T12329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.001900][T12329] [ 295.188890][T12332] tipc: Enabled bearer , priority 0 [ 295.759088][T12339] syz.0.1920 (12339) used greatest stack depth: 19736 bytes left [ 295.775671][T12340] siw: device registration error -23 [ 295.973503][T12330] tipc: Disabling bearer [ 295.981048][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 296.000100][T12347] nft_compat: unsupported protocol 0 [ 296.144583][ T5976] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 297.083377][T12379] siw: device registration error -23 [ 297.350735][T12389] tipc: Enabled bearer , priority 0 [ 297.659193][T12395] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1936'. [ 297.836207][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 298.108244][T12385] tipc: Disabling bearer [ 298.150641][ T5976] Bluetooth: hci3: command 0x0405 tx timeout [ 298.467800][T12413] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 298.608230][ T41] audit: type=1800 audit(1759431286.222:922): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1943" name="bus" dev="overlay" ino=1503 res=0 errno=0 [ 298.608925][T12420] FAULT_INJECTION: forcing a failure. [ 298.608925][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 298.622747][T12420] CPU: 0 UID: 0 PID: 12420 Comm: syz.4.1943 Not tainted syzkaller #0 PREEMPT(full) [ 298.622768][T12420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.622776][T12420] Call Trace: [ 298.622781][T12420] [ 298.622787][T12420] dump_stack_lvl+0x16c/0x1f0 [ 298.622805][T12420] should_fail_ex+0x512/0x640 [ 298.622825][T12420] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 298.622841][T12420] should_failslab+0xc2/0x120 [ 298.622856][T12420] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 298.622868][T12420] ? alloc_unbound_pwq+0x3ff/0xe10 [ 298.622898][T12420] alloc_unbound_pwq+0x3ff/0xe10 [ 298.622917][T12420] apply_wqattrs_prepare+0x8a0/0xbd0 [ 298.622938][T12420] apply_workqueue_attrs_locked+0x64/0xe0 [ 298.622955][T12420] __alloc_workqueue+0x1005/0x1810 [ 298.622978][T12420] alloc_workqueue_noprof+0xd2/0x200 [ 298.622996][T12420] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 298.623023][T12420] loop_configure+0xf5f/0x15c0 [ 298.623050][T12420] ? __lock_acquire+0xb97/0x1ce0 [ 298.623070][T12420] ? __pfx_loop_configure+0x10/0x10 [ 298.623101][T12420] lo_ioctl+0x265/0x1cc0 [ 298.623121][T12420] ? __pfx_lo_ioctl+0x10/0x10 [ 298.623142][T12420] ? kasan_quarantine_put+0x10a/0x240 [ 298.623162][T12420] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.623175][T12420] ? blk_get_meta_cap+0xbc/0x700 [ 298.623191][T12420] ? find_held_lock+0x2b/0x80 [ 298.623205][T12420] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 298.623244][T12420] lo_compat_ioctl+0xb9/0x170 [ 298.623263][T12420] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 298.623280][T12420] compat_blkdev_ioctl+0x2eb/0x7a0 [ 298.623298][T12420] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 298.623316][T12420] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 298.623332][T12420] __ia32_compat_sys_ioctl+0x242/0x370 [ 298.623353][T12420] __do_fast_syscall_32+0x7c/0x300 [ 298.623369][T12420] do_fast_syscall_32+0x32/0x80 [ 298.623383][T12420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.623400][T12420] RIP: 0023:0xf70fe579 [ 298.623411][T12420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.623424][T12420] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 298.623438][T12420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 298.623446][T12420] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.623454][T12420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.623461][T12420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.623469][T12420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.623485][T12420] [ 299.867083][T12435] Bluetooth: MGMT ver 1.23 [ 300.083843][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.087641][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.104186][T12444] bond_slave_0: left promiscuous mode [ 300.106155][T12444] bond_slave_1: left promiscuous mode [ 300.152375][ T5968] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 300.156056][ T5968] Bluetooth: hci2: Injecting HCI hardware error event [ 300.163772][ T5968] Bluetooth: hci2: hardware error 0x00 [ 300.374924][T12450] tipc: Enabled bearer , priority 0 [ 300.378802][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.383960][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.390404][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.394806][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.814605][T12440] tipc: Disabling bearer [ 300.896008][T12469] 8021q: VLANs not supported on ipvlan1 [ 301.663722][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.667256][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.681739][T12484] bond_slave_0: left promiscuous mode [ 301.683500][T12484] bond_slave_1: left promiscuous mode [ 301.690244][T12484] tipc: Resetting bearer [ 301.798227][T12484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.815965][T12484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.951078][T12488] siw: device registration error -23 [ 301.975628][ T1143] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.978687][ T1143] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.982630][ T1143] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.985888][ T1143] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.123470][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1961'. [ 302.193085][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1961'. [ 302.230961][ T5968] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 302.308530][T12502] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1962'. [ 302.465121][ T41] audit: type=1800 audit(1759431290.082:923): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1964" name="bus" dev="overlay" ino=1543 res=0 errno=0 [ 302.763474][T12517] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 303.007580][T12526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1978'. [ 303.420613][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 303.582557][ T24] usb 5-1: config 0 has no interfaces? [ 303.585759][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 303.591534][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.601131][ T24] usb 5-1: config 0 descriptor?? [ 303.921882][ T53] usb 5-1: USB disconnect, device number 10 [ 303.993872][T12543] 9pnet_virtio: no channels available for device syz [ 304.395909][T12552] netlink: 'syz.5.1976': attribute type 1 has an invalid length. [ 304.419858][T12552] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1976'. [ 304.423393][T12548] input: syz1 as /devices/virtual/input/input8 [ 304.555082][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1979'. [ 304.644523][T12562] fuse: Unknown parameter 'Fd' [ 304.646609][T12562] Invalid source name [ 304.647906][T12562] UBIFS error (pid: 12562): cannot open "./file0", error -22 [ 304.767389][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 304.830570][T12452] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 305.001861][T12452] usb 10-1: Using ep0 maxpacket: 32 [ 305.014722][T12452] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 305.020526][T12452] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.034152][T12452] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.037818][T12452] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.044900][T12452] usb 10-1: config 0 interface 0 has no altsetting 0 [ 305.090520][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1987'. [ 305.098756][T12452] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.114471][T12452] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.121102][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 305.140815][T12452] usb 10-1: Product: syz [ 305.145815][T12452] usb 10-1: Manufacturer: syz [ 305.157269][T12452] usb 10-1: SerialNumber: syz [ 305.526189][T12452] usb 10-1: config 0 descriptor?? [ 305.540908][T12452] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.564787][T12452] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.875159][T12559] veth5: entered promiscuous mode [ 305.911072][T12595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.914636][T12595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.963565][ T6020] usb 10-1: USB disconnect, device number 8 [ 305.986502][ T6020] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 306.153962][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1996'. [ 306.967794][T12452] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 307.133489][T12452] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 307.136589][T12452] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 307.139750][T12452] usb 10-1: config 0 interface 0 has no altsetting 0 [ 307.152752][T12452] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.155635][T12452] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 307.158775][T12452] usb 10-1: Product: syz [ 307.160305][T12452] usb 10-1: Manufacturer: syz [ 307.170707][T12452] usb 10-1: SerialNumber: syz [ 307.173376][T12452] usb 10-1: config 0 descriptor?? [ 307.183145][T12452] hub 10-1:0.0: bad descriptor, ignoring hub [ 307.185401][T12452] hub 10-1:0.0: probe with driver hub failed with error -5 [ 307.189893][T12452] usb 10-1: selecting invalid altsetting 0 [ 307.606845][T12621] syz.4.1998 (12621) used greatest stack depth: 18744 bytes left [ 307.854244][T12635] __nla_validate_parse: 1 callbacks suppressed [ 307.854256][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 307.859080][T12635] netlink: 'syz.4.2002': attribute type 5 has an invalid length. [ 307.861492][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2002'. [ 307.867734][T12635] geneve2: entered promiscuous mode [ 307.869366][T12635] geneve2: entered allmulticast mode [ 307.873103][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 307.876098][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 307.879169][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 307.883031][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 307.897946][T12638] FAULT_INJECTION: forcing a failure. [ 307.897946][T12638] name failslab, interval 1, probability 0, space 0, times 0 [ 307.902089][T12638] CPU: 2 UID: 0 PID: 12638 Comm: syz.4.2003 Not tainted syzkaller #0 PREEMPT(full) [ 307.902105][T12638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.902112][T12638] Call Trace: [ 307.902116][T12638] [ 307.902121][T12638] dump_stack_lvl+0x16c/0x1f0 [ 307.902136][T12638] should_fail_ex+0x512/0x640 [ 307.902154][T12638] ? __kmalloc_noprof+0xbf/0x510 [ 307.902166][T12638] ? bpf_test_init.isra.0+0x88/0x130 [ 307.902183][T12638] should_failslab+0xc2/0x120 [ 307.902195][T12638] __kmalloc_noprof+0xd2/0x510 [ 307.902205][T12638] ? __lock_acquire+0x62e/0x1ce0 [ 307.902224][T12638] bpf_test_init.isra.0+0x88/0x130 [ 307.902242][T12638] bpf_prog_test_run_xdp+0x556/0x1670 [ 307.902256][T12638] ? __fget_files+0x204/0x3c0 [ 307.902274][T12638] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 307.902286][T12638] ? __might_fault+0x80/0x190 [ 307.902298][T12638] ? fput+0x9b/0xd0 [ 307.902311][T12638] ? __bpf_prog_get+0x97/0x2a0 [ 307.902326][T12638] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 307.902337][T12638] __sys_bpf+0x1032/0x4980 [ 307.902350][T12638] ? __pfx___sys_bpf+0x10/0x10 [ 307.902361][T12638] ? find_held_lock+0x2b/0x80 [ 307.902376][T12638] ? find_held_lock+0x2b/0x80 [ 307.902391][T12638] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 307.902410][T12638] ? fput+0x9b/0xd0 [ 307.902422][T12638] ? ksys_write+0x1ac/0x250 [ 307.902432][T12638] ? __pfx_ksys_write+0x10/0x10 [ 307.902445][T12638] __ia32_sys_bpf+0x76/0xe0 [ 307.902457][T12638] __do_fast_syscall_32+0x7c/0x300 [ 307.902470][T12638] do_fast_syscall_32+0x32/0x80 [ 307.902481][T12638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.902495][T12638] RIP: 0023:0xf70fe579 [ 307.902504][T12638] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.902515][T12638] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 307.902525][T12638] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800008c0 [ 307.902532][T12638] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.902538][T12638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.902544][T12638] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.902550][T12638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.902563][T12638] [ 308.152697][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2005'. [ 308.312680][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 309.661744][T12666] siw: device registration error -23 [ 310.043451][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2014'. [ 310.068038][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 311.102084][ T6013] usb 10-1: USB disconnect, device number 9 [ 311.307593][T12701] loop2: detected capacity change from 0 to 7 [ 311.313988][T12701] Dev loop2: unable to read RDB block 7 [ 311.316314][T12701] loop2: unable to read partition table [ 311.318328][T12701] loop2: partition table beyond EOD, truncated [ 311.320707][T12701] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 311.329183][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 311.570630][ T6020] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 311.592933][T12706] lo speed is unknown, defaulting to 1000 [ 311.760696][ T6020] usb 9-1: Using ep0 maxpacket: 16 [ 311.785854][ T6020] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.789259][ T6020] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.799311][ T6020] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.815300][ T6020] usb 9-1: config 1 interface 0 has no altsetting 0 [ 311.824084][ T6020] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.838147][ T6020] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.841531][ T6020] usb 9-1: Product: syz [ 311.843204][ T6020] usb 9-1: Manufacturer: syz [ 311.845074][ T6020] usb 9-1: SerialNumber: syz [ 312.380806][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 312.532780][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.534149][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.538093][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.540308][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.546070][ T5976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.548239][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.553929][ T5976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.556395][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.561190][ T5976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.606936][T12718] lo speed is unknown, defaulting to 1000 [ 312.735191][T12718] chnl_net:caif_netlink_parms(): no params data found [ 312.789389][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 312.792063][ T24] usbtmc 5-1:16.0: can't read capabilities [ 312.877987][T12718] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.880347][T12718] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.884403][T12718] bridge_slave_0: entered allmulticast mode [ 312.887916][T12718] bridge_slave_0: entered promiscuous mode [ 312.893416][T12718] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.896910][T12718] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.899944][T12718] bridge_slave_1: entered allmulticast mode [ 312.904100][T12718] bridge_slave_1: entered promiscuous mode [ 312.950723][T12718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.955829][T12718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.016057][T12718] team0: Port device team_slave_0 added [ 313.022539][T12718] team0: Port device team_slave_1 added [ 314.049415][ T6020] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 314.059399][ T6020] usb 9-1: USB disconnect, device number 11 [ 314.065593][ T6020] usblp1: removed [ 314.166383][T12718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.168766][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.180709][T12718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.187697][T12718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.189906][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.202634][T12718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.246591][T12718] hsr_slave_0: entered promiscuous mode [ 314.249711][T12718] hsr_slave_1: entered promiscuous mode [ 314.252510][T12718] debugfs: 'hsr0' already exists in 'hsr' [ 314.254619][T12718] Cannot create hsr debugfs directory [ 314.271690][ T6013] usb 5-1: USB disconnect, device number 11 [ 314.295320][T12737] input: syz1 as /devices/virtual/input/input9 [ 314.465779][T12742] siw: device registration error -23 [ 314.480903][T12718] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.493839][T12718] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.500419][T12718] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.511012][T12718] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.574528][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.595189][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.603031][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.605655][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.616380][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.620030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.630830][ T5976] Bluetooth: hci1: command tx timeout [ 314.782749][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.004570][T12718] veth0_vlan: entered promiscuous mode [ 315.010974][T12718] veth1_vlan: entered promiscuous mode [ 315.036366][T12718] veth0_macvtap: entered promiscuous mode [ 315.040377][T12718] veth1_macvtap: entered promiscuous mode [ 315.057941][T12718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.066795][T12718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.082523][ T81] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.086180][ T81] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.089897][ T81] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.093623][ T81] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.121167][ T53] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 315.136760][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.139015][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.187033][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.190162][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.255077][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2023'. [ 315.260373][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2023'. [ 315.304007][ T53] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 315.306667][ T53] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.309856][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.344283][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.348288][ T53] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.360883][T12772] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2030'. [ 315.365235][ T53] usb 5-1: Product: syz [ 315.367145][ T53] usb 5-1: Manufacturer: syz [ 315.369335][ T53] usb 5-1: SerialNumber: syz [ 315.383218][ T53] usb 5-1: config 0 descriptor?? [ 315.387639][ T53] hub 5-1:0.0: bad descriptor, ignoring hub [ 315.394511][ T53] hub 5-1:0.0: probe with driver hub failed with error -5 [ 315.400067][ T53] usb 5-1: selecting invalid altsetting 0 [ 316.710630][ T5976] Bluetooth: hci1: command tx timeout [ 317.012319][T12452] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 317.190682][T12452] usb 10-1: Using ep0 maxpacket: 16 [ 317.207992][T12452] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 317.218227][T12452] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 317.225753][T12452] usb 10-1: Product: syz [ 317.230160][T12452] usb 10-1: Manufacturer: syz [ 317.233160][T12452] usb 10-1: SerialNumber: syz [ 317.237290][T12452] usb 10-1: config 0 descriptor?? [ 317.397905][T12828] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2040'. [ 317.598464][T12841] siw: device registration error -23 [ 317.809691][T12851] netlink: 'syz.5.2032': attribute type 4 has an invalid length. [ 317.845872][T12851] netlink: 'syz.5.2032': attribute type 4 has an invalid length. [ 317.953823][T12854] siw: device registration error -23 [ 318.255744][ T53] usb 5-1: USB disconnect, device number 12 [ 318.398417][T12859] sp0: Synchronizing with TNC [ 318.790617][ T5976] Bluetooth: hci1: command tx timeout [ 319.368474][T12873] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2048'. [ 319.415111][T12878] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 319.415112][T12877] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 319.429677][T12877] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2050'. [ 319.500584][T12878] bond1: (slave bridge1): making interface the new active one [ 319.505003][T12878] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 319.548018][T12884] netlink: 'syz.6.2053': attribute type 1 has an invalid length. [ 319.575570][T12885] bond1 (unregistering): Released all slaves [ 320.187300][T12894] siw: device registration error -23 [ 320.381465][ T6013] usb 10-1: USB disconnect, device number 10 [ 320.471046][ T53] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 320.559721][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2056'. [ 320.565751][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 320.622574][ T53] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.630782][ T53] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.633347][T12907] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2060'. [ 320.638053][ T53] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 320.641634][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.645901][ T53] usb 11-1: config 0 descriptor?? [ 320.651059][ T53] hub 11-1:0.0: bad descriptor, ignoring hub [ 320.653327][ T53] hub 11-1:0.0: probe with driver hub failed with error -5 [ 320.656565][ T53] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 320.658861][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 320.663976][ T53] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.667408][ T53] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 320.669673][ T53] usb 11-1: media controller created [ 320.672961][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.683033][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 320.684990][ T53] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.693661][ T53] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input10 [ 320.701914][ T53] dvb-usb: schedule remote query interval to 150 msecs. [ 320.704212][ T53] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.713770][T12911] FAULT_INJECTION: forcing a failure. [ 320.713770][T12911] name failslab, interval 1, probability 0, space 0, times 0 [ 320.718076][T12911] CPU: 3 UID: 0 PID: 12911 Comm: syz.0.2058 Not tainted syzkaller #0 PREEMPT(full) [ 320.718092][T12911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.718098][T12911] Call Trace: [ 320.718103][T12911] [ 320.718108][T12911] dump_stack_lvl+0x16c/0x1f0 [ 320.718124][T12911] should_fail_ex+0x512/0x640 [ 320.718142][T12911] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 320.718160][T12911] should_failslab+0xc2/0x120 [ 320.718173][T12911] __kmalloc_cache_noprof+0x6a/0x3e0 [ 320.718190][T12911] ? fuse_file_alloc+0xc9/0x2d0 [ 320.718204][T12911] fuse_file_alloc+0xc9/0x2d0 [ 320.718216][T12911] fuse_file_open+0xb5/0x780 [ 320.718227][T12911] ? do_raw_spin_lock+0x12c/0x2b0 [ 320.718241][T12911] fuse_do_open+0x50/0xd0 [ 320.718252][T12911] fuse_dir_open+0x130/0x2b0 [ 320.718268][T12911] do_dentry_open+0x97f/0x1530 [ 320.718280][T12911] ? __pfx_fuse_dir_open+0x10/0x10 [ 320.718296][T12911] vfs_open+0x82/0x3f0 [ 320.718312][T12911] path_openat+0x1de4/0x2cb0 [ 320.718327][T12911] ? __pfx_path_openat+0x10/0x10 [ 320.718338][T12911] ? __lock_acquire+0xb97/0x1ce0 [ 320.718355][T12911] do_filp_open+0x20b/0x470 [ 320.718365][T12911] ? __pfx_do_filp_open+0x10/0x10 [ 320.718385][T12911] ? _raw_spin_unlock+0x28/0x50 [ 320.718400][T12911] ? alloc_fd+0x471/0x7d0 [ 320.718421][T12911] do_sys_openat2+0x11b/0x1d0 [ 320.718436][T12911] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.718452][T12911] ? __fget_files+0x20e/0x3c0 [ 320.718467][T12911] ? handle_mm_fault+0x200/0xd10 [ 320.718485][T12911] __ia32_compat_sys_openat+0x16d/0x210 [ 320.718501][T12911] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 320.718520][T12911] ? ksys_write+0x1ac/0x250 [ 320.718533][T12911] ? rcu_is_watching+0x12/0xc0 [ 320.718547][T12911] __do_fast_syscall_32+0x7c/0x300 [ 320.718560][T12911] do_fast_syscall_32+0x32/0x80 [ 320.718571][T12911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.718586][T12911] RIP: 0023:0xf706e579 [ 320.718595][T12911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.718606][T12911] RSP: 002b:00000000f541c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 320.718616][T12911] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080004280 [ 320.718623][T12911] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 320.718629][T12911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.718635][T12911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 320.718642][T12911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.718654][T12911] [ 320.861809][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 320.864298][ T53] dvb-usb: error while querying for an remote control event. [ 320.881163][ T5976] Bluetooth: hci1: command tx timeout [ 320.883895][ T24] usb 11-1: USB disconnect, device number 2 [ 320.921398][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 321.938340][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2067'. [ 321.942921][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 321.996697][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.095824][T12939] siw: device registration error -23 [ 323.850412][T12938] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 323.853256][T12938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 323.857954][T12938] vhci_hcd vhci_hcd.0: Device attached [ 323.888870][ T41] audit: type=1800 audit(1759431323.503:924): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2065" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 324.151759][ T53] usb 38-1: SetAddress Request (2) to port 0 [ 324.162446][T12960] tipc: Enabled bearer , priority 0 [ 324.167606][ T53] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 324.261799][T12951] vhci_hcd: connection reset by peer [ 324.270771][ T81] vhci_hcd: stop threads [ 324.274985][ T81] vhci_hcd: release socket [ 324.277555][ T81] vhci_hcd: disconnect device [ 324.382135][T12963] siw: device registration error -23 [ 324.625641][T12966] tipc: Started in network mode [ 324.627354][T12966] tipc: Node identity 0abb6d6be4a, cluster identity 4711 [ 324.630118][T12966] tipc: Enabled bearer , priority 0 [ 324.647102][T12968] binder_alloc: binder_alloc_mmap_handler: 12967 80ffd000-80ffe000 already mapped failed -16 [ 324.657643][T12968] delete_channel: no stack [ 324.942051][T12958] tipc: Disabling bearer [ 325.265132][T12984] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 325.362359][ T41] audit: type=1800 audit(1759431324.983:925): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2078" name="bus" dev="overlay" ino=801 res=0 errno=0 [ 325.383455][T12964] tipc: Disabling bearer [ 325.508901][T12986] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2079'. [ 325.557825][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2080'. [ 325.567979][T12988] hsr_slave_0: left promiscuous mode [ 325.670159][T12988] hsr_slave_1: left promiscuous mode [ 326.253463][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2085'. [ 326.302488][T13002] tipc: Enabled bearer , priority 0 [ 326.340539][ T54] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 326.503163][ T54] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 326.506912][ T54] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 326.511495][ T54] usb 10-1: config 0 interface 0 has no altsetting 0 [ 326.517806][ T54] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 326.522015][ T54] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 326.525979][ T54] usb 10-1: Product: syz [ 326.528166][ T54] usb 10-1: Manufacturer: syz [ 326.530593][ T54] usb 10-1: SerialNumber: syz [ 326.541514][ T54] usb 10-1: config 0 descriptor?? [ 326.546961][ T54] hub 10-1:0.0: bad descriptor, ignoring hub [ 326.549774][ T54] hub 10-1:0.0: probe with driver hub failed with error -5 [ 326.567379][ T54] usb 10-1: selecting invalid altsetting 0 [ 327.070858][T12997] tipc: Disabling bearer [ 327.175306][T13012] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2088'. [ 327.198594][T13013] tipc: Enabled bearer , priority 0 [ 327.242907][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2089'. [ 327.450618][ T24] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 327.620765][ T24] usb 11-1: Using ep0 maxpacket: 16 [ 327.626179][ T24] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 327.629188][ T24] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 327.632194][ T24] usb 11-1: Product: syz [ 327.634287][ T24] usb 11-1: Manufacturer: syz [ 327.635984][ T24] usb 11-1: SerialNumber: syz [ 327.639143][ T24] usb 11-1: config 0 descriptor?? [ 327.948832][T13009] tipc: Disabling bearer [ 328.143945][T13028] netlink: 'syz.6.2090': attribute type 4 has an invalid length. [ 328.246056][T13031] netlink: 'syz.6.2090': attribute type 4 has an invalid length. [ 328.952234][T13037] siw: device registration error -23 [ 329.130899][ T54] usb 10-1: USB disconnect, device number 11 [ 329.153691][T13040] tipc: Enabled bearer , priority 0 [ 329.270604][ T53] usb 38-1: device descriptor read/8, error -110 [ 329.324603][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 329.476026][T13053] wireguard0: entered promiscuous mode [ 329.478489][T13053] wireguard0: entered allmulticast mode [ 329.683270][ T53] usb usb38-port1: attempt power cycle [ 330.014660][T13038] tipc: Disabling bearer [ 330.106174][T13064] FAULT_INJECTION: forcing a failure. [ 330.106174][T13064] name failslab, interval 1, probability 0, space 0, times 0 [ 330.110868][T13064] CPU: 3 UID: 0 PID: 13064 Comm: syz.5.2103 Not tainted syzkaller #0 PREEMPT(full) [ 330.110884][T13064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.110891][T13064] Call Trace: [ 330.110895][T13064] [ 330.110900][T13064] dump_stack_lvl+0x16c/0x1f0 [ 330.110916][T13064] should_fail_ex+0x512/0x640 [ 330.110934][T13064] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 330.110947][T13064] should_failslab+0xc2/0x120 [ 330.110960][T13064] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 330.110971][T13064] ? __alloc_skb+0x2b2/0x380 [ 330.110990][T13064] __alloc_skb+0x2b2/0x380 [ 330.111007][T13064] ? __pfx___alloc_skb+0x10/0x10 [ 330.111024][T13064] ? genl_rcv_msg+0x550/0x800 [ 330.111037][T13064] ? genl_rcv_msg+0x4bb/0x800 [ 330.111053][T13064] netlink_ack+0x15d/0xb80 [ 330.111068][T13064] netlink_rcv_skb+0x332/0x420 [ 330.111079][T13064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.111093][T13064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.111110][T13064] ? netlink_deliver_tap+0x1ae/0xd30 [ 330.111122][T13064] genl_rcv+0x28/0x40 [ 330.111134][T13064] netlink_unicast+0x5a7/0x870 [ 330.111147][T13064] ? __pfx_netlink_unicast+0x10/0x10 [ 330.111158][T13064] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 330.111174][T13064] netlink_sendmsg+0x8d1/0xdd0 [ 330.111187][T13064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.111200][T13064] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 330.111220][T13064] ____sys_sendmsg+0xa95/0xc70 [ 330.111242][T13064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.111260][T13064] ? get_compat_msghdr+0x11a/0x170 [ 330.111295][T13064] ___sys_sendmsg+0x134/0x1d0 [ 330.111314][T13064] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.111342][T13064] ? find_held_lock+0x2b/0x80 [ 330.111377][T13064] __sys_sendmsg+0x16d/0x220 [ 330.111401][T13064] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.111429][T13064] ? rcu_is_watching+0x12/0xc0 [ 330.111453][T13064] __do_fast_syscall_32+0x7c/0x300 [ 330.111473][T13064] do_fast_syscall_32+0x32/0x80 [ 330.111491][T13064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.111513][T13064] RIP: 0023:0xf708e579 [ 330.111526][T13064] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 330.111543][T13064] RSP: 002b:00000000f547e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 330.111561][T13064] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 330.111572][T13064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.111582][T13064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 330.111592][T13064] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 330.111603][T13064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.111626][T13064] [ 330.251040][ T53] usb usb38-port1: unable to enumerate USB device [ 330.340943][T12448] usb 11-1: USB disconnect, device number 3 [ 330.365653][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 330.575014][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2111'. [ 330.578237][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2111'. [ 331.024956][T13092] tipc: Enabled bearer , priority 0 [ 331.247352][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 331.255738][T13094] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 331.286496][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 331.316803][T13094] 9pnet: p9_errstr2errno: server reported unknown error @΂00000000000000000011 [ 331.423107][T13098] sp0: Synchronizing with TNC [ 331.818830][T13090] tipc: Disabling bearer [ 332.516981][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2122'. [ 334.417937][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 334.817889][T13161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2134'. [ 334.821216][T13161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2134'. [ 335.539948][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 336.861067][T13183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.146154][T13199] random: crng reseeded on system resumption [ 338.069045][T13218] vlan2: entered promiscuous mode [ 338.070903][T13218] bridge0: entered promiscuous mode [ 338.192869][T13223] siw: device registration error -23 [ 338.440644][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 338.527459][T13227] syz_tun: entered allmulticast mode [ 338.532298][T13226] syz_tun: left allmulticast mode [ 338.580641][ T34] usb 11-1: device descriptor read/64, error -71 [ 338.865057][T13231] : entered promiscuous mode [ 339.100584][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 339.215694][T13238] overlayfs: failed to resolve './file0': -2 [ 339.233676][ T34] usb 11-1: device descriptor read/64, error -71 [ 339.351003][ T34] usb usb11-port1: attempt power cycle [ 339.711685][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 339.733533][ T34] usb 11-1: device descriptor read/8, error -71 [ 339.800577][ T6174] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 339.980812][ T6174] usb 5-1: Invalid ep0 maxpacket: 16 [ 339.990948][ T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 340.021250][ T34] usb 11-1: device descriptor read/8, error -71 [ 340.056406][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 340.120564][ T6174] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 340.130954][ T34] usb usb11-port1: unable to enumerate USB device [ 340.280528][ T6174] usb 5-1: Invalid ep0 maxpacket: 16 [ 340.282441][ T6174] usb usb5-port1: attempt power cycle [ 340.640798][ T6174] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 340.670596][ T6174] usb 5-1: Invalid ep0 maxpacket: 16 [ 341.524740][ T6174] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 341.558451][ T6174] usb 5-1: Invalid ep0 maxpacket: 16 [ 341.560217][ T6174] usb usb5-port1: unable to enumerate USB device [ 342.015851][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2189'. [ 342.283328][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2194'. [ 342.598222][T13353] netlink: 'syz.6.2201': attribute type 2 has an invalid length. [ 342.661646][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2204'. [ 342.690209][T13365] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.2205' resets device [ 342.756773][T13373] FAULT_INJECTION: forcing a failure. [ 342.756773][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 342.761402][T13373] CPU: 2 UID: 0 PID: 13373 Comm: syz.6.2207 Not tainted syzkaller #0 PREEMPT(full) [ 342.761420][T13373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.761428][T13373] Call Trace: [ 342.761433][T13373] [ 342.761438][T13373] dump_stack_lvl+0x16c/0x1f0 [ 342.761457][T13373] should_fail_ex+0x512/0x640 [ 342.761478][T13373] ? __kvmalloc_node_noprof+0x124/0x620 [ 342.761502][T13373] should_failslab+0xc2/0x120 [ 342.761521][T13373] __kvmalloc_node_noprof+0x137/0x620 [ 342.761549][T13373] ? rcu_is_watching+0x12/0xc0 [ 342.761579][T13373] ? alloc_netdev_mqs+0xd2/0x1530 [ 342.761605][T13373] ? __pfx_geneve_setup+0x10/0x10 [ 342.761628][T13373] ? alloc_netdev_mqs+0xd2/0x1530 [ 342.761645][T13373] alloc_netdev_mqs+0xd2/0x1530 [ 342.761674][T13373] rtnl_create_link+0xc08/0xf90 [ 342.761701][T13373] rtnl_newlink+0xb69/0x2000 [ 342.761733][T13373] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.761763][T13373] ? kfree_skbmem+0x1a4/0x1f0 [ 342.761810][T13373] ? rcu_is_watching+0x12/0xc0 [ 342.761839][T13373] ? find_held_lock+0x2b/0x80 [ 342.761854][T13373] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.761867][T13373] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.761880][T13373] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 342.761894][T13373] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.761908][T13373] rtnetlink_rcv_msg+0x95e/0xe90 [ 342.761924][T13373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.761943][T13373] ? ref_tracker_free+0x37c/0x830 [ 342.761958][T13373] netlink_rcv_skb+0x158/0x420 [ 342.761973][T13373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.761988][T13373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.762008][T13373] ? netlink_deliver_tap+0x1ae/0xd30 [ 342.762024][T13373] netlink_unicast+0x5a7/0x870 [ 342.762040][T13373] ? __pfx_netlink_unicast+0x10/0x10 [ 342.762054][T13373] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 342.762073][T13373] netlink_sendmsg+0x8d1/0xdd0 [ 342.762089][T13373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.762105][T13373] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 342.762129][T13373] ____sys_sendmsg+0xa95/0xc70 [ 342.762148][T13373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.762164][T13373] ? get_compat_msghdr+0x11a/0x170 [ 342.762192][T13373] ___sys_sendmsg+0x134/0x1d0 [ 342.762206][T13373] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.762227][T13373] ? find_held_lock+0x2b/0x80 [ 342.762252][T13373] __sys_sendmsg+0x16d/0x220 [ 342.762265][T13373] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.762286][T13373] ? rcu_is_watching+0x12/0xc0 [ 342.762303][T13373] __do_fast_syscall_32+0x7c/0x300 [ 342.762319][T13373] do_fast_syscall_32+0x32/0x80 [ 342.762333][T13373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.762351][T13373] RIP: 0023:0xf7fc5579 [ 342.762361][T13373] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.762375][T13373] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 342.762388][T13373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 342.762396][T13373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.762403][T13373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.762411][T13373] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.762418][T13373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.762434][T13373] [ 342.929860][T13357] siw: device registration error -23 [ 342.970354][T13380] FAULT_INJECTION: forcing a failure. [ 342.970354][T13380] name failslab, interval 1, probability 0, space 0, times 0 [ 342.975493][T13380] CPU: 3 UID: 0 PID: 13380 Comm: syz.6.2210 Not tainted syzkaller #0 PREEMPT(full) [ 342.975513][T13380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.975520][T13380] Call Trace: [ 342.975527][T13380] [ 342.975533][T13380] dump_stack_lvl+0x16c/0x1f0 [ 342.975552][T13380] should_fail_ex+0x512/0x640 [ 342.975571][T13380] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 342.975586][T13380] should_failslab+0xc2/0x120 [ 342.975600][T13380] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 342.975611][T13380] ? d_instantiate+0x77/0x90 [ 342.975623][T13380] ? alloc_empty_file+0x55/0x1e0 [ 342.975640][T13380] alloc_empty_file+0x55/0x1e0 [ 342.975657][T13380] alloc_file_pseudo+0x13a/0x230 [ 342.975672][T13380] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 342.975687][T13380] ? find_held_lock+0x2b/0x80 [ 342.975703][T13380] __anon_inode_getfile+0xe8/0x280 [ 342.975719][T13380] bpf_link_prime+0x10f/0x290 [ 342.975733][T13380] bpf_raw_tp_link_attach+0x2ad/0x630 [ 342.975745][T13380] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 342.975756][T13380] ? find_held_lock+0x2b/0x80 [ 342.975768][T13380] ? __fget_files+0x204/0x3c0 [ 342.975791][T13380] ? fput+0x9b/0xd0 [ 342.975804][T13380] ? __bpf_prog_get+0x97/0x2a0 [ 342.975820][T13380] __sys_bpf+0x20c1/0x4980 [ 342.975834][T13380] ? __pfx___sys_bpf+0x10/0x10 [ 342.975845][T13380] ? find_held_lock+0x2b/0x80 [ 342.975860][T13380] ? find_held_lock+0x2b/0x80 [ 342.975875][T13380] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 342.975895][T13380] ? fput+0x9b/0xd0 [ 342.975907][T13380] ? ksys_write+0x1ac/0x250 [ 342.975918][T13380] ? __pfx_ksys_write+0x10/0x10 [ 342.975930][T13380] __ia32_sys_bpf+0x76/0xe0 [ 342.975943][T13380] __do_fast_syscall_32+0x7c/0x300 [ 342.975957][T13380] do_fast_syscall_32+0x32/0x80 [ 342.975969][T13380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.975984][T13380] RIP: 0023:0xf7fc5579 [ 342.975994][T13380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.976005][T13380] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 342.976016][T13380] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00000000800007c0 [ 342.976023][T13380] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.976029][T13380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.976036][T13380] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.976042][T13380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.976055][T13380] [ 343.095541][T13383] lo speed is unknown, defaulting to 1000 [ 343.272518][T13387] 9pnet_fd: Insufficient options for proto=fd [ 343.480685][T13389] netlink: 'syz.6.2212': attribute type 2 has an invalid length. [ 343.484361][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 343.701699][T13396] /dev/sg0: Can't lookup blockdev [ 343.827038][T13382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.830705][T13382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.832864][T13382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 343.837002][T13382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 344.392151][T13400] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 344.395165][T13400] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 344.403105][T13400] vhci_hcd vhci_hcd.0: Device attached [ 344.469351][T13409] autofs: Unknown parameter 'ٳ6M߶}5&IG$ΆPAHB-\' [ 344.571067][T13406] vhci_hcd: connection closed [ 344.571331][ T1147] vhci_hcd: stop threads [ 344.574996][ T1147] vhci_hcd: release socket [ 344.576940][ T1147] vhci_hcd: disconnect device [ 345.113722][ T5976] Bluetooth: hci4: command 0x0419 tx timeout [ 345.205130][T13414] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.307142][T13414] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.428531][T13414] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.439973][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 345.481156][T13396] syz.5.2214 (13396): drop_caches: 1 [ 345.540854][T13414] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.825384][ T40] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.833857][ T40] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.837327][ T40] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.845597][ T40] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.910695][ T5976] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.958987][T13441] netlink: 'syz.6.2226': attribute type 12 has an invalid length. [ 346.655024][T13456] FAULT_INJECTION: forcing a failure. [ 346.655024][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 346.655050][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'. [ 346.666133][T13456] CPU: 2 UID: 0 PID: 13456 Comm: syz.5.2232 Not tainted syzkaller #0 PREEMPT(full) [ 346.666151][T13456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 346.666158][T13456] Call Trace: [ 346.666163][T13456] [ 346.666168][T13456] dump_stack_lvl+0x16c/0x1f0 [ 346.666185][T13456] should_fail_ex+0x512/0x640 [ 346.666204][T13456] ? __kmalloc_noprof+0xbf/0x510 [ 346.666217][T13456] ? kernfs_fop_write_iter+0x237/0x570 [ 346.666232][T13456] should_failslab+0xc2/0x120 [ 346.666246][T13456] __kmalloc_noprof+0xd2/0x510 [ 346.666259][T13456] ? rcu_is_watching+0x12/0xc0 [ 346.666276][T13456] kernfs_fop_write_iter+0x237/0x570 [ 346.666294][T13456] iter_file_splice_write+0xa24/0x12e0 [ 346.666320][T13456] ? __pfx_iter_file_splice_write+0x10/0x10 [ 346.666340][T13456] ? __pfx_copy_splice_read+0x10/0x10 [ 346.666364][T13456] ? __pfx_iter_file_splice_write+0x10/0x10 [ 346.666382][T13456] direct_splice_actor+0x192/0x6c0 [ 346.666400][T13456] splice_direct_to_actor+0x345/0xa30 [ 346.666421][T13456] ? __pfx_direct_splice_actor+0x10/0x10 [ 346.666449][T13456] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 346.666471][T13456] ? get_pid_task+0xfc/0x250 [ 346.666507][T13456] do_splice_direct+0x174/0x240 [ 346.666531][T13456] ? __pfx_do_splice_direct+0x10/0x10 [ 346.666554][T13456] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 346.666572][T13456] ? rw_verify_area+0xcf/0x6c0 [ 346.666590][T13456] do_sendfile+0xb06/0xe50 [ 346.666610][T13456] ? __pfx_do_sendfile+0x10/0x10 [ 346.666627][T13456] ? __fget_files+0x20e/0x3c0 [ 346.666648][T13456] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 346.666662][T13456] ? ksys_write+0x1ac/0x250 [ 346.666671][T13456] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 346.666686][T13456] ? rcu_is_watching+0x12/0xc0 [ 346.666702][T13456] __do_fast_syscall_32+0x7c/0x300 [ 346.666718][T13456] do_fast_syscall_32+0x32/0x80 [ 346.666729][T13456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.666744][T13456] RIP: 0023:0xf708e579 [ 346.666754][T13456] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 346.666765][T13456] RSP: 002b:00000000f547e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 346.666776][T13456] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 346.666783][T13456] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 346.666789][T13456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.666795][T13456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 346.666801][T13456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.666814][T13456] [ 346.918324][T13471] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 346.920733][T13471] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 346.930647][T13471] vhci_hcd vhci_hcd.0: Device attached [ 346.963784][T13472] vhci_hcd: connection closed [ 346.964142][ T40] vhci_hcd: stop threads [ 346.967879][ T40] vhci_hcd: release socket [ 346.969507][ T40] vhci_hcd: disconnect device [ 347.302113][T13479] siw: device registration error -23 [ 347.555651][T13485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2241'. [ 347.564929][T13487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2241'. [ 347.604534][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 347.812403][ T839] hid_parser_main: 5 callbacks suppressed [ 347.812417][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.818084][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.825228][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.828771][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.831565][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.834151][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.836479][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.838860][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.843094][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.846913][ T839] hid-generic 0001:0800:0006.0003: unknown main item tag 0x0 [ 347.859506][ T839] hid-generic 0001:0800:0006.0003: hidraw1: HID v0.7c Device [syz1] on syz0 [ 348.003195][ T5968] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.049663][T13504] fido_id[13504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 348.199492][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2251'. [ 348.537876][T13521] siw: device registration error -23 [ 348.737325][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2261'. [ 348.761838][T13534] syz.6.2261 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 348.786487][T13534] 9pnet_fd: Insufficient options for proto=fd [ 348.849547][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2263'. [ 349.014159][T13555] FAULT_INJECTION: forcing a failure. [ 349.014159][T13555] name failslab, interval 1, probability 0, space 0, times 0 [ 349.022637][T13555] CPU: 3 UID: 0 PID: 13555 Comm: syz.0.2267 Not tainted syzkaller #0 PREEMPT(full) [ 349.022662][T13555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 349.022673][T13555] Call Trace: [ 349.022679][T13555] [ 349.022686][T13555] dump_stack_lvl+0x16c/0x1f0 [ 349.022709][T13555] should_fail_ex+0x512/0x640 [ 349.022736][T13555] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 349.022756][T13555] should_failslab+0xc2/0x120 [ 349.022775][T13555] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 349.022790][T13555] ? genl_start+0x1e8/0x980 [ 349.022808][T13555] ? __netlink_dump_start+0x60e/0x990 [ 349.022824][T13555] ? __alloc_skb+0x2b2/0x380 [ 349.022871][T13555] __alloc_skb+0x2b2/0x380 [ 349.022897][T13555] ? __pfx___alloc_skb+0x10/0x10 [ 349.022931][T13555] netlink_dump+0x19b/0xd30 [ 349.022951][T13555] ? __pfx_netlink_dump+0x10/0x10 [ 349.022979][T13555] ? __asan_memset+0x23/0x50 [ 349.023002][T13555] ? genl_start+0x67f/0x980 [ 349.023025][T13555] __netlink_dump_start+0x6d6/0x990 [ 349.023046][T13555] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 349.023069][T13555] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 349.023089][T13555] ? genl_op_from_small+0x25/0x440 [ 349.023113][T13555] ? __pfx_genl_get_cmd+0x10/0x10 [ 349.023130][T13555] ? __pfx_genl_start+0x10/0x10 [ 349.023148][T13555] ? __pfx_genl_dumpit+0x10/0x10 [ 349.023165][T13555] ? __pfx_genl_done+0x10/0x10 [ 349.023188][T13555] ? __radix_tree_lookup+0x21f/0x2c0 [ 349.023218][T13555] genl_rcv_msg+0x46e/0x800 [ 349.023241][T13555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.023262][T13555] ? __pfx_nl80211_dump_station+0x10/0x10 [ 349.023300][T13555] netlink_rcv_skb+0x158/0x420 [ 349.023317][T13555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.023338][T13555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.023366][T13555] ? netlink_deliver_tap+0x1ae/0xd30 [ 349.023387][T13555] genl_rcv+0x28/0x40 [ 349.023405][T13555] netlink_unicast+0x5a7/0x870 [ 349.023426][T13555] ? __pfx_netlink_unicast+0x10/0x10 [ 349.023443][T13555] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 349.023469][T13555] netlink_sendmsg+0x8d1/0xdd0 [ 349.023496][T13555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.023517][T13555] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 349.023549][T13555] ____sys_sendmsg+0xa95/0xc70 [ 349.023573][T13555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.023594][T13555] ? get_compat_msghdr+0x11a/0x170 [ 349.023631][T13555] ___sys_sendmsg+0x134/0x1d0 [ 349.023651][T13555] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.023679][T13555] ? find_held_lock+0x2b/0x80 [ 349.023717][T13555] __sys_sendmsg+0x16d/0x220 [ 349.023735][T13555] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.023763][T13555] ? rcu_is_watching+0x12/0xc0 [ 349.023786][T13555] __do_fast_syscall_32+0x7c/0x300 [ 349.023807][T13555] do_fast_syscall_32+0x32/0x80 [ 349.023824][T13555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.023845][T13555] RIP: 0023:0xf706e579 [ 349.023859][T13555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 349.023876][T13555] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 349.023892][T13555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 349.023904][T13555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.023914][T13555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.023923][T13555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 349.023933][T13555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.023956][T13555] [ 349.357057][T13564] input: syz1 as /devices/virtual/input/input11 [ 349.406080][T13566] siw: device registration error -23 [ 349.447956][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 350.081643][ T5968] Bluetooth: hci1: command 0x0c1a tx timeout [ 350.383362][T13602] dlm: plock device version mismatch: kernel (1.2.0), user (808976385.3223858.0) [ 350.422567][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 350.882220][T13613] FAULT_INJECTION: forcing a failure. [ 350.882220][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 350.886147][T13613] CPU: 1 UID: 0 PID: 13613 Comm: syz.4.2287 Not tainted syzkaller #0 PREEMPT(full) [ 350.886163][T13613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 350.886170][T13613] Call Trace: [ 350.886174][T13613] [ 350.886179][T13613] dump_stack_lvl+0x16c/0x1f0 [ 350.886194][T13613] should_fail_ex+0x512/0x640 [ 350.886217][T13613] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 350.886230][T13613] should_failslab+0xc2/0x120 [ 350.886243][T13613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 350.886254][T13613] ? security_file_alloc+0x34/0x2b0 [ 350.886270][T13613] security_file_alloc+0x34/0x2b0 [ 350.886283][T13613] init_file+0x93/0x4c0 [ 350.886298][T13613] alloc_empty_file+0x73/0x1e0 [ 350.886312][T13613] alloc_file_pseudo+0x13a/0x230 [ 350.886327][T13613] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 350.886341][T13613] ? hugetlbfs_get_inode+0x31f/0x730 [ 350.886362][T13613] hugetlb_file_setup+0x4ce/0x620 [ 350.886373][T13613] ksys_mmap_pgoff+0x189/0x5c0 [ 350.886387][T13613] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 350.886401][T13613] __do_fast_syscall_32+0x7c/0x300 [ 350.886414][T13613] do_fast_syscall_32+0x32/0x80 [ 350.886425][T13613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.886439][T13613] RIP: 0023:0xf70fe579 [ 350.886448][T13613] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 350.886459][T13613] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 350.886469][T13613] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000 [ 350.886476][T13613] RDX: 000000000000000b RSI: 0000000000059032 RDI: 00000000ffffffff [ 350.886483][T13613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.886489][T13613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 350.886495][T13613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.886508][T13613] [ 351.179660][T13624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.188680][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 351.434372][T13638] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.565514][T13638] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.634804][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 351.647566][T13638] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.715234][T13638] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.800872][ T40] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.814607][ T40] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.824431][ T40] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.835055][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.835973][T13658] FAULT_INJECTION: forcing a failure. [ 351.835973][T13658] name failslab, interval 1, probability 0, space 0, times 0 [ 351.842918][T13658] CPU: 2 UID: 0 PID: 13658 Comm: syz.4.2303 Not tainted syzkaller #0 PREEMPT(full) [ 351.842941][T13658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.842951][T13658] Call Trace: [ 351.842957][T13658] [ 351.842963][T13658] dump_stack_lvl+0x16c/0x1f0 [ 351.842985][T13658] should_fail_ex+0x512/0x640 [ 351.843011][T13658] ? fs_reclaim_acquire+0xae/0x150 [ 351.843034][T13658] ? tomoyo_encode2+0x100/0x3e0 [ 351.843054][T13658] should_failslab+0xc2/0x120 [ 351.843072][T13658] __kmalloc_noprof+0xd2/0x510 [ 351.843088][T13658] ? d_absolute_path+0x136/0x1a0 [ 351.843112][T13658] tomoyo_encode2+0x100/0x3e0 [ 351.843136][T13658] tomoyo_encode+0x29/0x50 [ 351.843155][T13658] tomoyo_realpath_from_path+0x18f/0x6e0 [ 351.843185][T13658] tomoyo_path_number_perm+0x245/0x580 [ 351.843202][T13658] ? tomoyo_path_number_perm+0x237/0x580 [ 351.843221][T13658] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.843267][T13658] ? find_held_lock+0x2b/0x80 [ 351.843287][T13658] ? hook_file_ioctl_common+0x145/0x410 [ 351.843313][T13658] ? __fget_files+0x20e/0x3c0 [ 351.843335][T13658] security_file_ioctl_compat+0x9b/0x240 [ 351.843349][T13658] __ia32_compat_sys_ioctl+0xc3/0x370 [ 351.843366][T13658] __do_fast_syscall_32+0x7c/0x300 [ 351.843380][T13658] do_fast_syscall_32+0x32/0x80 [ 351.843391][T13658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.843406][T13658] RIP: 0023:0xf70fe579 [ 351.843415][T13658] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.843426][T13658] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 351.843437][T13658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005514 [ 351.843444][T13658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.843450][T13658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.843461][T13658] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.843467][T13658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.843480][T13658] [ 351.843492][T13658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.900683][T10686] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 351.901644][T13658] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2303' resets device [ 352.064202][T13668] FAULT_INJECTION: forcing a failure. [ 352.064202][T13668] name failslab, interval 1, probability 0, space 0, times 0 [ 352.069905][T13668] CPU: 2 UID: 0 PID: 13668 Comm: syz.4.2306 Not tainted syzkaller #0 PREEMPT(full) [ 352.069930][T13668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 352.069940][T13668] Call Trace: [ 352.069947][T13668] [ 352.069954][T13668] dump_stack_lvl+0x16c/0x1f0 [ 352.069978][T13668] should_fail_ex+0x512/0x640 [ 352.069997][T13668] ? __kmalloc_node_noprof+0xc5/0x500 [ 352.070010][T13668] should_failslab+0xc2/0x120 [ 352.070026][T13668] __kmalloc_node_noprof+0xd8/0x500 [ 352.070036][T13668] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 352.070049][T13668] ? alloc_slab_obj_exts+0x41/0xa0 [ 352.070067][T13668] alloc_slab_obj_exts+0x41/0xa0 [ 352.070082][T13668] new_slab+0x27d/0x330 [ 352.070098][T13668] ___slab_alloc+0xcf2/0x1750 [ 352.070114][T13668] ? vm_area_dup+0x27/0x8d0 [ 352.070137][T13668] ? vm_area_dup+0x27/0x8d0 [ 352.070158][T13668] ? __slab_alloc.constprop.0+0x56/0xb0 [ 352.070174][T13668] __slab_alloc.constprop.0+0x56/0xb0 [ 352.070192][T13668] kmem_cache_alloc_noprof+0xef/0x3b0 [ 352.070202][T13668] ? __lock_acquire+0xb97/0x1ce0 [ 352.070218][T13668] ? vm_area_dup+0x27/0x8d0 [ 352.070236][T13668] vm_area_dup+0x27/0x8d0 [ 352.070253][T13668] __split_vma+0x18e/0x1070 [ 352.070272][T13668] ? __pfx___split_vma+0x10/0x10 [ 352.070287][T13668] ? __pfx___might_resched+0x10/0x10 [ 352.070308][T13668] vms_gather_munmap_vmas+0x1d2/0x1340 [ 352.070328][T13668] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 352.070347][T13668] ? mas_walk+0x6f5/0x980 [ 352.070369][T13668] __mmap_region+0x436/0x27b0 [ 352.070380][T13668] ? bpf_ksym_find+0x124/0x1c0 [ 352.070394][T13668] ? __pfx___mmap_region+0x10/0x10 [ 352.070404][T13668] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.070423][T13668] ? arch_stack_walk+0xa6/0x100 [ 352.070457][T13668] ? stack_trace_save+0x8e/0xc0 [ 352.070471][T13668] ? __pfx_stack_trace_save+0x10/0x10 [ 352.070485][T13668] ? stack_depot_save_flags+0x29/0x9c0 [ 352.070502][T13668] ? stack_trace_save+0x8e/0xc0 [ 352.070534][T13668] ? mm_get_unmapped_area+0x95/0xe0 [ 352.070551][T13668] mmap_region+0x32b/0x3f0 [ 352.070565][T13668] do_mmap+0xa3e/0x1210 [ 352.070580][T13668] ? __pfx_do_mmap+0x10/0x10 [ 352.070594][T13668] ? __pfx_down_write_killable+0x10/0x10 [ 352.070610][T13668] do_shmat+0xfd0/0x1330 [ 352.070629][T13668] ? __pfx_do_shmat+0x10/0x10 [ 352.070647][T13668] __ia32_compat_sys_shmat+0xd9/0x170 [ 352.070661][T13668] ? __pfx_ksys_write+0x10/0x10 [ 352.070672][T13668] ? __pfx___ia32_compat_sys_shmat+0x10/0x10 [ 352.070687][T13668] ? rcu_is_watching+0x12/0xc0 [ 352.070700][T13668] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 352.070712][T13668] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.070722][T13668] __do_fast_syscall_32+0x7c/0x300 [ 352.070735][T13668] do_fast_syscall_32+0x32/0x80 [ 352.070746][T13668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.070760][T13668] RIP: 0023:0xf70fe579 [ 352.070769][T13668] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 352.070780][T13668] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 000000000000018d [ 352.070791][T13668] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000080ff9000 [ 352.070798][T13668] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.070804][T13668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.070810][T13668] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 352.070816][T13668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.070829][T13668] [ 352.074136][T10686] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.150842][ T5968] Bluetooth: hci1: command 0x0c1a tx timeout [ 352.152441][T10686] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 352.207411][T10686] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.210234][T10686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.215654][T13653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.221214][T10686] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.222190][T13675] netlink: 'syz.4.2308': attribute type 2 has an invalid length. [ 352.226226][T13675] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2308'. [ 352.425261][T13653] 9pnet_fd: Insufficient options for proto=fd [ 352.438358][T10686] usb 5-1: USB disconnect, device number 17 [ 352.813007][T13687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2313'. [ 353.014037][T13693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2315'. [ 353.084919][T13696] FAULT_INJECTION: forcing a failure. [ 353.084919][T13696] name failslab, interval 1, probability 0, space 0, times 0 [ 353.090321][T13696] CPU: 2 UID: 0 PID: 13696 Comm: syz.0.2316 Not tainted syzkaller #0 PREEMPT(full) [ 353.090346][T13696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.090356][T13696] Call Trace: [ 353.090363][T13696] [ 353.090371][T13696] dump_stack_lvl+0x16c/0x1f0 [ 353.090393][T13696] should_fail_ex+0x512/0x640 [ 353.090419][T13696] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 353.090464][T13696] should_failslab+0xc2/0x120 [ 353.090485][T13696] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 353.090504][T13696] ? simple_xattr_alloc+0x41/0xa0 [ 353.090524][T13696] ? simple_xattr_set+0x5b/0x3e0 [ 353.090563][T13696] kstrdup+0x53/0x100 [ 353.090584][T13696] simple_xattr_set+0x5b/0x3e0 [ 353.090606][T13696] shmem_xattr_handler_set+0x31b/0x3b0 [ 353.090630][T13696] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 353.090649][T13696] __vfs_setxattr+0x172/0x1e0 [ 353.090677][T13696] ? __pfx___vfs_setxattr+0x10/0x10 [ 353.090701][T13696] ? apparmor_capable+0x114/0x1d0 [ 353.090724][T13696] __vfs_setxattr_noperm+0x127/0x660 [ 353.090754][T13696] __vfs_setxattr_locked+0x182/0x260 [ 353.090774][T13696] ? __lock_acquire+0x107f/0x1ce0 [ 353.090792][T13696] vfs_setxattr+0x145/0x360 [ 353.090810][T13696] ? __pfx_vfs_setxattr+0x10/0x10 [ 353.090827][T13696] ? lock_acquire+0x179/0x350 [ 353.090843][T13696] ? find_held_lock+0x2b/0x80 [ 353.090856][T13696] ? mnt_get_write_access+0x54/0x300 [ 353.090870][T13696] ovl_check_setxattr+0x181/0x320 [ 353.090890][T13696] ovl_set_origin_fh+0x70/0xa0 [ 353.090908][T13696] ovl_lookup+0x1def/0x21a0 [ 353.090925][T13696] ? __pfx_ovl_lookup+0x10/0x10 [ 353.090943][T13696] ? do_raw_spin_lock+0x12c/0x2b0 [ 353.090958][T13696] ? do_raw_spin_unlock+0x172/0x230 [ 353.090969][T13696] ? _raw_spin_unlock+0x28/0x50 [ 353.090987][T13696] lookup_one_qstr_excl+0x1d1/0x250 [ 353.091002][T13696] ? mnt_want_write+0x161/0x450 [ 353.091018][T13696] do_rmdir+0x245/0x3c0 [ 353.091029][T13696] ? __pfx_do_rmdir+0x10/0x10 [ 353.091040][T13696] ? strncpy_from_user+0x203/0x2e0 [ 353.091057][T13696] ? getname_flags.part.0+0x1c5/0x550 [ 353.091070][T13696] ? __pfx_ksys_write+0x10/0x10 [ 353.091084][T13696] __ia32_sys_unlinkat+0xef/0x130 [ 353.091096][T13696] __do_fast_syscall_32+0x7c/0x300 [ 353.091110][T13696] do_fast_syscall_32+0x32/0x80 [ 353.091121][T13696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.091136][T13696] RIP: 0023:0xf706e579 [ 353.091147][T13696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.091163][T13696] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 000000000000012d [ 353.091178][T13696] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 353.091189][T13696] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.091201][T13696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.091211][T13696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 353.091220][T13696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.091243][T13696] [ 353.249688][T13699] ------------[ cut here ]------------ [ 353.252046][T13699] WARNING: CPU: 3 PID: 13699 at fs/nsfs.c:493 nsfs_fh_to_dentry+0x9de/0xe10 [ 353.255608][T13699] Modules linked in: [ 353.258086][T13699] CPU: 3 UID: 0 PID: 13699 Comm: syz.0.2317 Not tainted syzkaller #0 PREEMPT(full) [ 353.264554][T13699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.268249][T13699] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 353.270060][T13699] Code: 50 51 ff e9 63 fe ff ff e8 9f 5a 75 ff 90 0f 0b 90 e9 7b f8 ff ff e8 91 5a 75 ff 90 0f 0b 90 e9 ce f8 ff ff e8 83 5a 75 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 75 5a 75 ff 49 8d 7d 10 48 b8 00 00 00 [ 353.275712][T13699] RSP: 0018:ffffc90006137b18 EFLAGS: 00010283 [ 353.277650][T13699] RAX: 0000000000000070 RBX: 0000000000000000 RCX: ffffc90006c49000 [ 353.280099][T13699] RDX: 0000000000080000 RSI: ffffffff82452e2d RDI: 0000000000000004 [ 353.282660][T13699] RBP: ffff888023503208 R08: 0000000000000004 R09: 00000000effffff9 [ 353.285214][T13699] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000c26f64 [ 353.287716][T13699] R13: ffffffff9acff158 R14: 00000000effffff9 R15: 0000000000000003 [ 353.290194][T13699] FS: 0000000000000000(0000) GS:ffff888097f66000(0063) knlGS:00000000f545eb40 [ 353.293250][T13699] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 353.295464][T13699] CR2: 00000000f738e278 CR3: 0000000064625000 CR4: 0000000000352ef0 [ 353.297999][T13699] Call Trace: [ 353.299044][T13699] [ 353.300013][T13699] ? do_handle_open+0x564/0xc90 [ 353.301632][T13699] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 353.303382][T13699] ? __kasan_kmalloc+0xaa/0xb0 [ 353.305018][T13699] ? __kmalloc_noprof+0x223/0x510 [ 353.306799][T13699] ? do_handle_open+0x564/0xc90 [ 353.308562][T13699] ? __do_fast_syscall_32+0x7c/0x300 [ 353.310325][T13699] ? do_fast_syscall_32+0x32/0x80 [ 353.312158][T13699] exportfs_decode_fh_raw+0x164/0x7d0 [ 353.313940][T13699] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 353.315811][T13699] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 353.317562][T13699] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 353.319437][T13699] do_handle_open+0x702/0xc90 [ 353.321029][T13699] ? __pfx_do_handle_open+0x10/0x10 [ 353.322707][T13699] ? xfd_validate_state+0x61/0x180 [ 353.324401][T13699] ? __do_fast_syscall_32+0x7c/0x300 [ 353.326153][T13699] __do_fast_syscall_32+0x7c/0x300 [ 353.327865][T13699] do_fast_syscall_32+0x32/0x80 [ 353.329527][T13699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.331947][T13699] RIP: 0023:0xf706e579 [ 353.333492][T13699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.339619][T13699] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 353.342308][T13699] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 353.345112][T13699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.347712][T13699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.350378][T13699] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 353.353369][T13699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.356363][T13699] [ 353.357686][T13699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.360907][T13699] CPU: 3 UID: 0 PID: 13699 Comm: syz.0.2317 Not tainted syzkaller #0 PREEMPT(full) [ 353.364736][T13699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.369553][T13699] Call Trace: [ 353.371234][T13699] [ 353.372715][T13699] dump_stack_lvl+0x3d/0x1f0 [ 353.374847][T13699] vpanic+0x6e8/0x7a0 [ 353.376562][T13699] ? __pfx_vpanic+0x10/0x10 [ 353.378488][T13699] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 353.380667][T13699] panic+0xca/0xd0 [ 353.382290][T13699] ? __pfx_panic+0x10/0x10 [ 353.384198][T13699] check_panic_on_warn+0xab/0xb0 [ 353.386347][T13699] __warn+0xf6/0x3c0 [ 353.387999][T13699] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 353.390010][T13699] report_bug+0x3c3/0x580 [ 353.391686][T13699] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 353.393697][T13699] handle_bug+0x184/0x210 [ 353.395112][T13699] exc_invalid_op+0x17/0x50 [ 353.396548][T13699] asm_exc_invalid_op+0x1a/0x20 [ 353.398083][T13699] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 353.399867][T13699] Code: 50 51 ff e9 63 fe ff ff e8 9f 5a 75 ff 90 0f 0b 90 e9 7b f8 ff ff e8 91 5a 75 ff 90 0f 0b 90 e9 ce f8 ff ff e8 83 5a 75 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 75 5a 75 ff 49 8d 7d 10 48 b8 00 00 00 [ 353.405888][T13699] RSP: 0018:ffffc90006137b18 EFLAGS: 00010283 [ 353.407781][T13699] RAX: 0000000000000070 RBX: 0000000000000000 RCX: ffffc90006c49000 [ 353.410237][T13699] RDX: 0000000000080000 RSI: ffffffff82452e2d RDI: 0000000000000004 [ 353.412693][T13699] RBP: ffff888023503208 R08: 0000000000000004 R09: 00000000effffff9 [ 353.415206][T13699] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000c26f64 [ 353.417690][T13699] R13: ffffffff9acff158 R14: 00000000effffff9 R15: 0000000000000003 [ 353.420268][T13699] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 353.422249][T13699] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 353.424498][T13699] ? do_handle_open+0x564/0xc90 [ 353.426320][T13699] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 353.428149][T13699] ? __kasan_kmalloc+0xaa/0xb0 [ 353.429682][T13699] ? __kmalloc_noprof+0x223/0x510 [ 353.431277][T13699] ? do_handle_open+0x564/0xc90 [ 353.432837][T13699] ? __do_fast_syscall_32+0x7c/0x300 [ 353.434532][T13699] ? do_fast_syscall_32+0x32/0x80 [ 353.436142][T13699] exportfs_decode_fh_raw+0x164/0x7d0 [ 353.437848][T13699] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 353.439703][T13699] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 353.441411][T13699] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 353.443285][T13699] do_handle_open+0x702/0xc90 [ 353.444921][T13699] ? __pfx_do_handle_open+0x10/0x10 [ 353.446667][T13699] ? xfd_validate_state+0x61/0x180 [ 353.448395][T13699] ? __do_fast_syscall_32+0x7c/0x300 [ 353.450121][T13699] __do_fast_syscall_32+0x7c/0x300 [ 353.451711][T13699] do_fast_syscall_32+0x32/0x80 [ 353.453213][T13699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.455175][T13699] RIP: 0023:0xf706e579 [ 353.456464][T13699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.462293][T13699] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 353.465117][T13699] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 353.467673][T13699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.470388][T13699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.472960][T13699] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 353.475408][T13699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.477989][T13699] [ 353.479757][T13699] Kernel Offset: disabled [ 353.481192][T13699] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:55:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000bd87a5 RBX=0000000000000000 RCX=ffffffff8b4d7fb9 RDX=0000000000000000 RSI=ffffffff8d9c2638 RDI=ffffffff8bd00dc0 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff9060a290 R15=0000000000000000 RIP=ffffffff8b4d6aff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097c66000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71a0660 CR3=000000004c247000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=040b10e9671da1a1 RBX=ffff88801bbd2480 RCX=ffffffff81c27acf RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8dab10c5 RBP=0000000000000293 RSP=ffffc90000587b30 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff9060a297 R11=0000000000000001 R12=ffff888023202838 R13=0000000000000293 R14=0000000000000001 R15=ffff888049e8a000 RIP=ffffffff8b4d8860 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097d66000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=000000004c247000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff9101e5f4 RDX=1ffff9200068ce30 RSI=0000000000000001 RDI=ffffffff907abb7c RBP=ffffc90003467190 RSP=ffffc900034670d8 R8 =ffffffff9101e5f8 R9 =0000000000000000 R10=0000000000000001 R11=0000000000011d8d R12=ffffc90003467198 R13=ffffc90003467148 R14=0000000000000005 R15=0000000000000000 RIP=ffffffff816a4b44 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc157383300 ffffffff 00c00000 GS =0000 ffff888097e66000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d3e9a9cf40 CR3=000000004b263000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=01679177b4fae952 7c99d7f0d5bb305c 01679177b4fae952 7c99d7f0d5bb305c 01679177b4fae952 7c99d7f0d5bb305c 01679177b4fae952 7c99d7f0d5bb305c ZMM18=3f89bf314356253a 3372c42950488170 3f89bf314356253a 3372c42950488170 3f89bf314356253a 3372c42950488170 3f89bf314356253a 3372c42950488170 ZMM19=390f000000000000 0000000000000004 390f000000000000 0000000000000003 390f000000000000 0000000000000002 390f000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88030004000c8403 1404000c80030c80 0267800318080005 8abfe80201000002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060101c85fff fffffe0800058abf f803000800058abf f003000400058abf ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec03200400058abf e803200800060800 2008000602719004 8c08000208001408 ZMM24=5048817050488170 5048817050488170 5048817050488170 5048817050488170 5048817050488170 5048817050488170 5048817050488170 5048817050488170 ZMM25=3372c4293372c429 3372c4293372c429 3372c4293372c429 3372c4293372c429 3372c4293372c429 3372c4293372c429 3372c4293372c429 3372c4293372c429 ZMM26=4356253a4356253a 4356253a4356253a 4356253a4356253a 4356253a4356253a 4356253a4356253a 4356253a4356253a 4356253a4356253a 4356253a4356253a ZMM27=3f89bf313f89bf31 3f89bf313f89bf31 3f89bf313f89bf31 3f89bf313f89bf31 3f89bf313f89bf31 3f89bf313f89bf31 3f89bf313f89bf31 3f89bf313f89bf31 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=380f0000380f0000 380f0000380f0000 380f0000380f0000 380f0000380f0000 380f0000380f0000 380f0000380f0000 380f0000380f0000 380f0000380f0000 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851d3355 RDI=ffffffff9ab52140 RBP=ffffffff9ab52100 RSP=ffffc90006137480 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9ab52100 R15=ffffffff851d32f0 RIP=ffffffff851d337f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097f66000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f738e278 CR3=0000000064625000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d119c1a22779c302 37e332ace1290bb5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ffcd4938dae4b47 98a9adcb11ca479b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e30468c60f17c2b7 d3673b258a47e7f4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bdd0bf56b78ad34b cfa0973731621f23 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004c80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d7000000d7 2f3995fa00800100 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d7 000000d700800100 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d72d7cab6e 2cd1902a0033a839 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d72f5e6c38 2f3af8122ad28fda ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a98894150bad8178 09b2333971df42fb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8d93948620b0221 02384080d1e79c71 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000