last executing test programs: 1.394007953s ago: executing program 2 (id=2110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c000380"], 0xa0}}, 0x0) 1.342899859s ago: executing program 2 (id=2111): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x2}, {0x1ff, 0x0, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.110741581s ago: executing program 2 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.044147071s ago: executing program 2 (id=2113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYRES16=r1, @ANYBLOB="110100000000000000000700000008000500000000000c0006"], 0x4c}}, 0x0) 1.043791464s ago: executing program 2 (id=2114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xa000000a}) 924.609229ms ago: executing program 2 (id=2115): socket$nl_route(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000280)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 381.296492ms ago: executing program 1 (id=2124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="110100000000000000000700000008000500000000000c0006"], 0x4c}}, 0x0) 380.411693ms ago: executing program 0 (id=2125): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x84, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r0}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) 379.385397ms ago: executing program 3 (id=2126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x9, 0x0, 0x0, 0x0, 0x208000}}, 0x120) 379.236893ms ago: executing program 0 (id=2127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 312.883196ms ago: executing program 1 (id=2128): syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 312.475857ms ago: executing program 0 (id=2129): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x100000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) 244.049096ms ago: executing program 1 (id=2130): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0]}}]}, 0x158}}, 0x0) 243.783341ms ago: executing program 0 (id=2131): ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"]) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40107447, 0x20000000) 230.379817ms ago: executing program 3 (id=2132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x880, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 107.636142ms ago: executing program 3 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresuid(0x0, 0x0, 0x0) 107.132359ms ago: executing program 1 (id=2134): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x2}, {0x1ff, 0x0, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 106.999871ms ago: executing program 3 (id=2135): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setuid(0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) 99.758239ms ago: executing program 1 (id=2136): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x0, 0x80000001, 0xb, 0x1fd, 0x1}) 53.715066ms ago: executing program 3 (id=2137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="110100000000000000000700000008000500000000000c0006"], 0x4c}}, 0x0) 53.555173ms ago: executing program 0 (id=2138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create(0x3) 1.247723ms ago: executing program 1 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1.084859ms ago: executing program 0 (id=2140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c0000000000000000000000050006"], 0xe0}}, 0x0) 0s ago: executing program 3 (id=2141): r0 = syz_io_uring_setup(0xd3f, &(0x7f0000000880), &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x7c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x1ffc6}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x30, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd2}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x7}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf}}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x7c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000013c0)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x23, &(0x7f0000000080)={r6, 0xffff, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r6, 0xd868, 0x30, 0x8, 0x2}, &(0x7f0000000340)=0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r7}, 0x10) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000200)={0x18, 0x0, {0x22, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'veth0\x00'}}, 0x1e) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020b80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) io_uring_enter(r0, 0x6a8d, 0x0, 0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): lid bInterval 0, changing to 7 [ 285.803041][ T56] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.809696][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.820223][ T56] usb 5-1: config 0 descriptor?? [ 285.827921][ T56] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 286.040186][ T5444] usb 5-1: USB disconnect, device number 13 [ 286.045334][ T5444] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 286.293180][ T9503] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 286.298889][ T9503] qnx6: wrong signature (magic) in superblock #1. [ 286.301822][ T9503] qnx6: unable to read the first superblock [ 286.589631][ T9514] ======================================================= [ 286.589631][ T9514] WARNING: The mand mount option has been deprecated and [ 286.589631][ T9514] and is ignored by this kernel. Remove the mand [ 286.589631][ T9514] option from the mount to silence this warning. [ 286.589631][ T9514] ======================================================= [ 286.589655][ T39] audit: type=1400 audit(1725377366.275:473): avc: denied { remount } for pid=9513 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 286.619786][ T9516] FAULT_INJECTION: forcing a failure. [ 286.619786][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.625521][ T9516] CPU: 2 UID: 0 PID: 9516 Comm: syz.0.1016 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 286.629952][ T9516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.634344][ T9516] Call Trace: [ 286.635710][ T9516] [ 286.636965][ T9516] dump_stack_lvl+0x16c/0x1f0 [ 286.638924][ T9516] should_fail_ex+0x497/0x5b0 [ 286.640871][ T9516] _copy_to_user+0x30/0xc0 [ 286.642757][ T9516] simple_read_from_buffer+0xd0/0x160 [ 286.644950][ T9516] proc_fail_nth_read+0x19e/0x280 [ 286.647013][ T9516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.649271][ T9516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.651549][ T9516] vfs_read+0x1d4/0xbd0 [ 286.653293][ T9516] ? __fdget_pos+0xeb/0x180 [ 286.655200][ T9516] ? __pfx_vfs_read+0x10/0x10 [ 286.657148][ T9516] ? __pfx___mutex_lock+0x10/0x10 [ 286.659256][ T9516] ? __fget_files+0x256/0x400 [ 286.661183][ T9516] ksys_read+0x12f/0x260 [ 286.662941][ T9516] ? __pfx_ksys_read+0x10/0x10 [ 286.664926][ T9516] do_syscall_64+0xcd/0x250 [ 286.666803][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.669244][ T9516] RIP: 0033:0x7fe9ca3788fc [ 286.671132][ T9516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 286.679168][ T9516] RSP: 002b:00007fe9cb1c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.682637][ T9516] RAX: ffffffffffffffda RBX: 00007fe9ca515f80 RCX: 00007fe9ca3788fc [ 286.686003][ T9516] RDX: 000000000000000f RSI: 00007fe9cb1c80a0 RDI: 0000000000000004 [ 286.689374][ T9516] RBP: 00007fe9cb1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 286.692703][ T9516] R10: 0000000000012040 R11: 0000000000000246 R12: 0000000000000001 [ 286.696026][ T9516] R13: 0000000000000000 R14: 00007fe9ca515f80 R15: 00007ffc8bbb9758 [ 286.699466][ T9516] [ 287.089719][ T9533] tmpfs: Bad value for 'mpol' [ 287.311743][ T9538] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 288.179323][ T9540] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 288.183921][ T9540] qnx6: wrong signature (magic) in superblock #1. [ 288.187037][ T9540] qnx6: unable to read the first superblock [ 288.655351][ T5353] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.263123][ T9555] sp0: Synchronizing with TNC [ 290.206408][ T9572] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 290.232704][ T9572] qnx6: wrong signature (magic) in superblock #1. [ 290.236017][ T9572] qnx6: unable to read the first superblock [ 290.372357][ T9579] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 290.381899][ T9579] qnx6: wrong signature (magic) in superblock #1. [ 290.385569][ T9579] qnx6: unable to read the first superblock [ 291.518728][ T6268] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 291.724348][ T6268] usb 6-1: Using ep0 maxpacket: 8 [ 291.729754][ T6268] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.733097][ T6268] usb 6-1: config 0 has no interface number 0 [ 291.736623][ T6268] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.741190][ T6268] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 291.745652][ T6268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.766947][ T6268] usb 6-1: config 0 descriptor?? [ 291.778749][ T6268] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 291.924680][ T5353] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.025649][ T5383] usb 6-1: USB disconnect, device number 5 [ 292.037601][ T5383] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 292.711154][ T39] audit: type=1400 audit(1725377372.395:474): avc: denied { write } for pid=9608 comm="syz.1.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.150286][ T9622] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 293.515313][ T9629] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 293.520141][ T9629] qnx6: wrong signature (magic) in superblock #1. [ 293.523983][ T9629] qnx6: unable to read the first superblock [ 294.291129][ T39] audit: type=1400 audit(1725377373.975:475): avc: denied { create } for pid=9639 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 297.635454][ T9691] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 297.639061][ T9691] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 297.641763][ T9691] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 298.044472][ T5383] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 298.234132][ T5383] usb 6-1: Using ep0 maxpacket: 8 [ 298.241079][ T5383] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.244690][ T5383] usb 6-1: config 0 has no interface number 0 [ 298.247433][ T5383] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.252056][ T5383] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.257669][ T5383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.268281][ T5383] usb 6-1: config 0 descriptor?? [ 298.298071][ T5383] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 298.535363][ T5444] usb 6-1: USB disconnect, device number 6 [ 298.542892][ T5444] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 299.571041][ T9732] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 299.574864][ T9732] netlink: 'syz.2.1072': attribute type 10 has an invalid length. [ 299.578253][ T9732] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 299.654815][ T9733] FAULT_INJECTION: forcing a failure. [ 299.654815][ T9733] name failslab, interval 1, probability 0, space 0, times 0 [ 299.661677][ T9733] CPU: 2 UID: 0 PID: 9733 Comm: syz.1.1073 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 299.665951][ T9733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.670714][ T9733] Call Trace: [ 299.672231][ T9733] [ 299.673595][ T9733] dump_stack_lvl+0x16c/0x1f0 [ 299.675733][ T9733] should_fail_ex+0x497/0x5b0 [ 299.677880][ T9733] ? fs_reclaim_acquire+0xae/0x160 [ 299.680174][ T9733] should_failslab+0xc2/0x120 [ 299.681825][ T9733] kmem_cache_alloc_node_noprof+0x71/0x310 [ 299.683800][ T9733] ? __alloc_skb+0x2b1/0x380 [ 299.685445][ T9733] __alloc_skb+0x2b1/0x380 [ 299.686971][ T9733] ? __pfx___alloc_skb+0x10/0x10 [ 299.688649][ T9733] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 299.690709][ T9733] netlink_alloc_large_skb+0x69/0x130 [ 299.692934][ T9733] netlink_sendmsg+0x689/0xd70 [ 299.694963][ T9733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.697327][ T9733] ? __import_iovec+0x1fd/0x6e0 [ 299.699513][ T9733] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 299.701799][ T9733] ____sys_sendmsg+0xab5/0xc90 [ 299.703839][ T9733] ? copy_msghdr_from_user+0x10b/0x160 [ 299.706096][ T9733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.708306][ T9733] ? find_held_lock+0x2d/0x110 [ 299.710320][ T9733] ? __pfx___lock_acquire+0x10/0x10 [ 299.712859][ T9733] ___sys_sendmsg+0x135/0x1e0 [ 299.714818][ T9733] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.717061][ T9733] ? ksys_write+0x21c/0x260 [ 299.719030][ T9733] ? __fget_light+0x173/0x210 [ 299.721040][ T9733] __sys_sendmsg+0x117/0x1f0 [ 299.722999][ T9733] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.725188][ T9733] do_syscall_64+0xcd/0x250 [ 299.727119][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.729609][ T9733] RIP: 0033:0x7f0fbd179eb9 [ 299.731524][ T9733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.739500][ T9733] RSP: 002b:00007f0fbdfc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.742990][ T9733] RAX: ffffffffffffffda RBX: 00007f0fbd315f80 RCX: 00007f0fbd179eb9 [ 299.746235][ T9733] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 299.749597][ T9733] RBP: 00007f0fbdfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 299.753159][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.756390][ T9733] R13: 0000000000000000 R14: 00007f0fbd315f80 R15: 00007fffd089cd18 [ 299.759612][ T9733] [ 301.550500][ T9772] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 301.610880][ T39] audit: type=1326 audit(1725377381.295:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.622505][ T39] audit: type=1326 audit(1725377381.305:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.632610][ T39] audit: type=1326 audit(1725377381.305:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.641972][ T39] audit: type=1326 audit(1725377381.305:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.650128][ T39] audit: type=1326 audit(1725377381.305:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.661251][ T39] audit: type=1326 audit(1725377381.305:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.669573][ T39] audit: type=1326 audit(1725377381.305:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.687767][ T39] audit: type=1326 audit(1725377381.305:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.696476][ T39] audit: type=1326 audit(1725377381.305:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 301.705446][ T39] audit: type=1326 audit(1725377381.305:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9773 comm="syz.2.1085" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 303.055631][ T831] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 303.266009][ T831] usb 7-1: Using ep0 maxpacket: 8 [ 303.282682][ T831] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 303.286262][ T831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.289631][ T831] usb 7-1: Product: syz [ 303.291659][ T831] usb 7-1: Manufacturer: syz [ 303.293759][ T831] usb 7-1: SerialNumber: syz [ 303.297651][ T831] usb 7-1: config 0 descriptor?? [ 303.508252][ T831] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 303.529552][ T831] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 303.536404][ T831] usb 7-1: USB disconnect, device number 10 [ 303.911175][ T9822] netlink: 'syz.3.1098': attribute type 10 has an invalid length. [ 303.978960][ T9818] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 303.995860][ T9818] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 303.998941][ T9818] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 304.272134][ T9824] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 304.276840][ T9824] qnx6: wrong signature (magic) in superblock #1. [ 304.279395][ T9824] qnx6: unable to read the first superblock [ 305.022234][ T9838] syzkaller1: entered promiscuous mode [ 305.025514][ T9838] syzkaller1: entered allmulticast mode [ 305.261994][ T9848] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 305.292414][ T9848] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 305.296889][ T9848] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 306.348395][ T9874] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 306.620685][ T39] kauditd_printk_skb: 65 callbacks suppressed [ 306.620696][ T39] audit: type=1400 audit(1725377386.305:551): avc: denied { write } for pid=9866 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 306.822023][ T39] audit: type=1400 audit(1725377386.505:552): avc: denied { write } for pid=9878 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.148962][ T9887] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 307.152961][ T9887] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 307.156556][ T9887] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 307.446422][ T39] audit: type=1400 audit(1725377387.135:553): avc: denied { ioctl } for pid=9889 comm="syz.3.1115" path="socket:[25820]" dev="sockfs" ino=25820 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 308.207706][ T5444] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 308.395196][ T5444] usb 7-1: Using ep0 maxpacket: 8 [ 308.399644][ T5444] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.403109][ T5444] usb 7-1: config 0 has no interface number 0 [ 308.406192][ T5444] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.410773][ T5444] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.416450][ T5444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.425774][ T5444] usb 7-1: config 0 descriptor?? [ 308.430803][ T5444] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 308.627229][ T9910] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 308.631811][ T9910] qnx6: wrong signature (magic) in superblock #1. [ 308.634715][ T9910] qnx6: unable to read the first superblock [ 308.640314][ T831] usb 7-1: USB disconnect, device number 11 [ 309.867409][ T9924] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 309.879405][ T9924] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 309.885261][ T9924] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 310.456182][ T9935] netlink: 'syz.3.1126': attribute type 10 has an invalid length. [ 311.112142][ T39] audit: type=1400 audit(1725377390.795:554): avc: denied { accept } for pid=9942 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.492116][ T9955] mmap: syz.0.1130 (9955) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.007405][ T5444] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 312.204267][ T5444] usb 8-1: Using ep0 maxpacket: 8 [ 312.215240][ T5444] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.219072][ T5444] usb 8-1: config 0 has no interface number 0 [ 312.222176][ T5444] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.226818][ T5444] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.231041][ T5444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.236832][ T5444] usb 8-1: config 0 descriptor?? [ 312.242066][ T5444] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 312.455030][ T5352] usb 8-1: USB disconnect, device number 9 [ 312.810609][ T39] audit: type=1400 audit(1725377392.495:555): avc: denied { setattr } for pid=9974 comm="syz.2.1136" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 312.926825][ T39] audit: type=1400 audit(1725377392.615:556): avc: granted { setsecparam } for pid=9983 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 312.980614][ T9982] FAULT_INJECTION: forcing a failure. [ 312.980614][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 312.990600][ T9982] CPU: 3 UID: 0 PID: 9982 Comm: syz.0.1138 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 312.995800][ T9982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.000429][ T9982] Call Trace: [ 313.001926][ T9982] [ 313.003223][ T9982] dump_stack_lvl+0x16c/0x1f0 [ 313.005334][ T9982] should_fail_ex+0x497/0x5b0 [ 313.007400][ T9982] ? fs_reclaim_acquire+0xae/0x160 [ 313.009566][ T9982] should_failslab+0xc2/0x120 [ 313.011672][ T9982] __kmalloc_noprof+0xcb/0x400 [ 313.013782][ T9982] ? d_absolute_path+0x137/0x1b0 [ 313.015961][ T9982] tomoyo_encode2+0x100/0x3e0 [ 313.018096][ T9982] tomoyo_encode+0x29/0x50 [ 313.020027][ T9982] tomoyo_realpath_from_path+0x19d/0x720 [ 313.022276][ T9982] tomoyo_path_number_perm+0x245/0x590 [ 313.024846][ T9982] ? tomoyo_path_number_perm+0x232/0x590 [ 313.027632][ T9982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.030622][ T9982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.033171][ T9982] ? __fget_files+0x256/0x400 [ 313.035344][ T9982] security_file_ioctl+0x75/0xc0 [ 313.038405][ T9982] __x64_sys_ioctl+0xbb/0x220 [ 313.040949][ T9982] do_syscall_64+0xcd/0x250 [ 313.043555][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.046594][ T9982] RIP: 0033:0x7fe9ca379eb9 [ 313.048333][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.056553][ T9982] RSP: 002b:00007fe9cb1c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.061046][ T9982] RAX: ffffffffffffffda RBX: 00007fe9ca515f80 RCX: 00007fe9ca379eb9 [ 313.064942][ T9982] RDX: 0000000020000080 RSI: 00000000800c5011 RDI: 0000000000000004 [ 313.069481][ T9982] RBP: 00007fe9cb1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 313.073215][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.076819][ T9982] R13: 0000000000000000 R14: 00007fe9ca515f80 R15: 00007ffc8bbb9758 [ 313.080306][ T9982] [ 313.094216][ T9982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.117400][ T39] audit: type=1326 audit(1725377392.805:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.2.1141" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x0 [ 313.432127][T10004] sctp: [Deprecated]: syz.3.1144 (pid 10004) Use of int in max_burst socket option deprecated. [ 313.432127][T10004] Use struct sctp_assoc_value instead [ 313.511294][T10008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10008 comm=syz.3.1144 [ 313.574199][ T5352] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 313.705239][T10012] FAULT_INJECTION: forcing a failure. [ 313.705239][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 313.710557][T10012] CPU: 1 UID: 0 PID: 10012 Comm: syz.1.1147 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 313.715084][T10012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.719663][T10012] Call Trace: [ 313.721138][T10012] [ 313.722452][T10012] dump_stack_lvl+0x16c/0x1f0 [ 313.724699][T10012] should_fail_ex+0x497/0x5b0 [ 313.726750][T10012] ? fs_reclaim_acquire+0xae/0x160 [ 313.728904][T10012] should_failslab+0xc2/0x120 [ 313.730981][T10012] __kmalloc_noprof+0xcb/0x400 [ 313.733025][T10012] ? d_absolute_path+0x137/0x1b0 [ 313.735138][T10012] tomoyo_encode2+0x100/0x3e0 [ 313.737090][T10012] tomoyo_encode+0x29/0x50 [ 313.739071][T10012] tomoyo_realpath_from_path+0x19d/0x720 [ 313.741563][T10012] tomoyo_path_number_perm+0x245/0x590 [ 313.743837][T10012] ? tomoyo_path_number_perm+0x232/0x590 [ 313.746272][T10012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.748874][T10012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.751529][T10012] ? __fget_files+0x256/0x400 [ 313.753620][T10012] security_file_ioctl+0x75/0xc0 [ 313.755556][T10012] __x64_sys_ioctl+0xbb/0x220 [ 313.757404][T10012] do_syscall_64+0xcd/0x250 [ 313.759097][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.761702][T10012] RIP: 0033:0x7f0fbd179eb9 [ 313.763703][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.766111][ T5352] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.771316][T10012] RSP: 002b:00007f0fbdfc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.771338][T10012] RAX: ffffffffffffffda RBX: 00007f0fbd315f80 RCX: 00007f0fbd179eb9 [ 313.771351][T10012] RDX: 0000000020000080 RSI: 00000000c02c564a RDI: 0000000000000003 [ 313.771363][T10012] RBP: 00007f0fbdfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 313.771373][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.771384][T10012] R13: 0000000000000000 R14: 00007f0fbd315f80 R15: 00007fffd089cd18 [ 313.777882][ T5352] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 313.778737][T10012] [ 313.783676][T10012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.786185][ T5352] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.811713][ T5352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.817250][ T5352] usb 7-1: config 0 descriptor?? [ 313.822553][ T5352] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 314.382413][T10036] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 314.724698][T10038] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 314.737053][T10038] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 314.740699][T10038] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 315.717591][T10044] netlink: 'syz.3.1156': attribute type 12 has an invalid length. [ 315.721242][T10044] netlink: 'syz.3.1156': attribute type 11 has an invalid length. [ 315.726897][T10044] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.1156'. [ 315.760065][T10048] FAULT_INJECTION: forcing a failure. [ 315.760065][T10048] name failslab, interval 1, probability 0, space 0, times 0 [ 315.766969][T10048] CPU: 0 UID: 0 PID: 10048 Comm: syz.1.1159 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 315.771521][T10048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.776039][T10048] Call Trace: [ 315.777468][T10048] [ 315.778757][T10048] dump_stack_lvl+0x16c/0x1f0 [ 315.780797][T10048] should_fail_ex+0x497/0x5b0 [ 315.782845][T10048] ? fs_reclaim_acquire+0xae/0x160 [ 315.785054][T10048] should_failslab+0xc2/0x120 [ 315.787077][T10048] __kmalloc_noprof+0xcb/0x400 [ 315.789147][T10048] ? d_absolute_path+0x137/0x1b0 [ 315.791294][T10048] tomoyo_encode2+0x100/0x3e0 [ 315.793343][T10048] tomoyo_encode+0x29/0x50 [ 315.795263][T10048] tomoyo_realpath_from_path+0x19d/0x720 [ 315.797626][T10048] tomoyo_path_number_perm+0x245/0x590 [ 315.799944][T10048] ? tomoyo_path_number_perm+0x232/0x590 [ 315.802373][T10048] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.805056][T10048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.807676][T10048] ? __fget_files+0x256/0x400 [ 315.809708][T10048] security_file_ioctl+0x75/0xc0 [ 315.811863][T10048] __x64_sys_ioctl+0xbb/0x220 [ 315.813932][T10048] do_syscall_64+0xcd/0x250 [ 315.815980][T10048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.818496][T10048] RIP: 0033:0x7f0fbd179eb9 [ 315.820382][T10048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.828529][T10048] RSP: 002b:00007f0fbdfc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.832076][T10048] RAX: ffffffffffffffda RBX: 00007f0fbd315f80 RCX: 00007f0fbd179eb9 [ 315.835472][T10048] RDX: 00000000200000c0 RSI: 00000000c008561b RDI: 0000000000000003 [ 315.838866][T10048] RBP: 00007f0fbdfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 315.842227][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.845605][T10048] R13: 0000000000000000 R14: 00007f0fbd315f80 R15: 00007fffd089cd18 [ 315.848983][T10048] [ 315.854920][T10048] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.876190][T10044] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 315.940623][T10056] mmap: syz.3.1162 (10056): VmData 54239232 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 316.140771][T10064] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1164'. [ 316.341411][ T1291] usb 7-1: USB disconnect, device number 12 [ 317.004135][T10068] netlink: 'syz.2.1165': attribute type 10 has an invalid length. [ 317.355880][T10071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1166'. [ 317.738077][ T39] audit: type=1400 audit(1725377397.425:558): avc: denied { listen } for pid=10069 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 318.574904][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1176'. [ 318.734586][T10104] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1175'. [ 319.718530][T10118] FAULT_INJECTION: forcing a failure. [ 319.718530][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 319.726996][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.1.1180 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 319.732559][T10118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.737948][T10118] Call Trace: [ 319.739337][T10118] [ 319.740579][T10118] dump_stack_lvl+0x16c/0x1f0 [ 319.742744][T10118] should_fail_ex+0x497/0x5b0 [ 319.744915][T10118] ? fs_reclaim_acquire+0xae/0x160 [ 319.747292][T10118] should_failslab+0xc2/0x120 [ 319.749406][T10118] kmem_cache_alloc_node_noprof+0x71/0x310 [ 319.751994][T10118] ? __alloc_skb+0x2b1/0x380 [ 319.754111][T10118] __alloc_skb+0x2b1/0x380 [ 319.756110][T10118] ? __pfx___alloc_skb+0x10/0x10 [ 319.758286][T10118] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 319.760920][T10118] netlink_alloc_large_skb+0x69/0x130 [ 319.763282][T10118] netlink_sendmsg+0x689/0xd70 [ 319.765439][T10118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.767832][T10118] ? __import_iovec+0x1fd/0x6e0 [ 319.770047][T10118] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 319.772422][T10118] ____sys_sendmsg+0xab5/0xc90 [ 319.774567][T10118] ? copy_msghdr_from_user+0x10b/0x160 [ 319.776954][T10118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.779286][T10118] ? find_held_lock+0x2d/0x110 [ 319.781472][T10118] ? __pfx___lock_acquire+0x10/0x10 [ 319.783757][T10118] ___sys_sendmsg+0x135/0x1e0 [ 319.785739][T10118] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.787773][T10118] ? ksys_write+0x21c/0x260 [ 319.789556][T10118] ? __fget_light+0x173/0x210 [ 319.791400][T10118] __sys_sendmsg+0x117/0x1f0 [ 319.793298][T10118] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.795552][T10118] do_syscall_64+0xcd/0x250 [ 319.797598][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.800204][T10118] RIP: 0033:0x7f0fbd179eb9 [ 319.802173][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.810601][T10118] RSP: 002b:00007f0fbdfc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.814162][T10118] RAX: ffffffffffffffda RBX: 00007f0fbd315f80 RCX: 00007f0fbd179eb9 [ 319.817631][T10118] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 319.821112][T10118] RBP: 00007f0fbdfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 319.824371][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.827623][T10118] R13: 0000000000000000 R14: 00007f0fbd315f80 R15: 00007fffd089cd18 [ 319.831277][T10118] [ 319.860289][T10120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1181'. [ 319.894280][ T1291] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 319.904374][ T39] audit: type=1400 audit(1725377399.585:559): avc: denied { mount } for pid=10121 comm="syz.1.1182" name="/" dev="ramfs" ino=27434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 320.094164][ T1291] usb 5-1: Using ep0 maxpacket: 16 [ 320.098469][ T1291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 320.106635][ T1291] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 320.110552][ T1291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.113987][ T1291] usb 5-1: Product: syz [ 320.123346][T10131] fuse: Bad value for 'fd' [ 320.135438][ T1291] usb 5-1: Manufacturer: syz [ 320.139407][ T1291] usb 5-1: SerialNumber: syz [ 320.141502][ T39] audit: type=1400 audit(1725377399.805:560): avc: denied { write } for pid=10134 comm="syz.3.1185" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 320.155401][ T1291] usb 5-1: config 0 descriptor?? [ 320.165200][ T39] audit: type=1400 audit(1725377399.805:561): avc: denied { mounton } for pid=10121 comm="syz.1.1182" path="/325/file0" dev="ramfs" ino=27434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 320.190600][ C2] vkms_vblank_simulate: vblank timer overrun [ 320.196451][ T1291] hub 5-1:0.0: bad descriptor, ignoring hub [ 320.198979][ T1291] hub 5-1:0.0: probe with driver hub failed with error -5 [ 320.207928][ T1291] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.360620][ T1291] usb 5-1: USB disconnect, device number 14 [ 320.513270][ T5382] udevd[5382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.014469][ T39] audit: type=1400 audit(1725377400.695:562): avc: denied { unmount } for pid=5345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 321.158105][T10143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.302701][T10149] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1188'. [ 321.460824][T10161] input: syz1 as /devices/virtual/input/input10 [ 321.774297][ T5408] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 321.974820][ T5408] usb 6-1: Using ep0 maxpacket: 32 [ 321.981286][ T5408] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 321.990857][ T5408] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 321.996541][ T5408] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 322.001253][ T5408] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.009504][ T5408] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.018228][ T5408] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.022278][ T5408] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.026402][ T5408] usb 6-1: Product: syz [ 322.028704][ T5408] usb 6-1: Manufacturer: syz [ 322.030977][ T5408] usb 6-1: SerialNumber: syz [ 322.047962][ T5408] usb 6-1: config 0 descriptor?? [ 322.055492][ T5408] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.066047][ T5408] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 322.325318][T10161] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 322.378456][ T56] usb 6-1: USB disconnect, device number 7 [ 322.394341][ T56] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 322.640753][T10178] netlink: 'syz.0.1196': attribute type 12 has an invalid length. [ 322.644449][T10178] netlink: 'syz.0.1196': attribute type 11 has an invalid length. [ 322.647500][T10178] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.1196'. [ 322.825954][T10180] FAULT_INJECTION: forcing a failure. [ 322.825954][T10180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.831457][T10180] CPU: 1 UID: 0 PID: 10180 Comm: syz.0.1197 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 322.835887][T10180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.852390][T10180] Call Trace: [ 322.853899][T10180] [ 322.855169][T10180] dump_stack_lvl+0x16c/0x1f0 [ 322.857197][T10180] should_fail_ex+0x497/0x5b0 [ 322.859448][T10180] _copy_from_iter+0x2a1/0x1150 [ 322.861307][T10180] ? __pfx__copy_from_iter+0x10/0x10 [ 322.863433][T10180] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 322.866155][T10180] ? tun_build_skb.constprop.0+0x1b8/0x1390 [ 322.868800][T10180] ? __pfx_lock_release+0x10/0x10 [ 322.871280][T10180] copy_page_from_iter+0xa5/0x120 [ 322.873792][T10180] tun_build_skb.constprop.0+0x294/0x1390 [ 322.876407][T10180] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 322.879256][T10180] ? __pfx___lock_acquire+0x10/0x10 [ 322.881643][T10180] ? __pfx_mark_lock+0x10/0x10 [ 322.884291][T10180] tun_get_user+0x888/0x3c30 [ 322.887180][T10180] ? __pfx_tun_get_user+0x10/0x10 [ 322.888101][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.889500][T10180] ? find_held_lock+0x2d/0x110 [ 322.889528][T10180] ? __pfx_lock_release+0x10/0x10 [ 322.889556][T10180] tun_chr_write_iter+0xe8/0x210 [ 322.889569][T10180] vfs_write+0x6b6/0x1140 [ 322.892779][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.894740][T10180] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 322.894766][T10180] ? __pfx_vfs_write+0x10/0x10 [ 322.894781][T10180] ? __fget_files+0x256/0x400 [ 322.894794][T10180] ? __fget_light+0x173/0x210 [ 322.894805][T10180] ksys_write+0x12f/0x260 [ 322.894816][T10180] ? __pfx_ksys_write+0x10/0x10 [ 322.894829][T10180] do_syscall_64+0xcd/0x250 [ 322.916786][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.919447][T10180] RIP: 0033:0x7fe9ca37899f [ 322.922657][T10180] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 322.931787][T10180] RSP: 002b:00007fe9cb1c8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 322.935360][T10180] RAX: ffffffffffffffda RBX: 00007fe9ca515f80 RCX: 00007fe9ca37899f [ 322.939183][T10180] RDX: 0000000000000056 RSI: 0000000020000100 RDI: 00000000000000c8 [ 322.942680][T10180] RBP: 00007fe9cb1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 322.946459][T10180] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000001 [ 322.949976][T10180] R13: 0000000000000000 R14: 00007fe9ca515f80 R15: 00007ffc8bbb9758 [ 322.954647][T10180] [ 323.425130][ T5408] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 323.625242][ T5408] usb 8-1: Using ep0 maxpacket: 8 [ 323.636746][ T5408] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.640497][ T5408] usb 8-1: config 0 has no interface number 0 [ 323.643540][ T5408] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.651318][ T5408] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.659280][ T5408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.672543][ T5408] usb 8-1: config 0 descriptor?? [ 323.710855][ T5408] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 323.961299][ C2] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 323.985619][ T1291] usb 8-1: USB disconnect, device number 10 [ 324.022106][ T1291] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected [ 324.213217][ C3] vkms_vblank_simulate: vblank timer overrun [ 325.418800][T10219] FAULT_INJECTION: forcing a failure. [ 325.418800][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 325.423672][T10219] CPU: 2 UID: 0 PID: 10219 Comm: syz.1.1208 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 325.428163][T10219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.432346][T10219] Call Trace: [ 325.433643][T10219] [ 325.434803][T10219] dump_stack_lvl+0x16c/0x1f0 [ 325.436774][T10219] should_fail_ex+0x497/0x5b0 [ 325.438674][T10219] ? fs_reclaim_acquire+0xae/0x160 [ 325.440670][T10219] should_failslab+0xc2/0x120 [ 325.442488][T10219] kmem_cache_alloc_node_noprof+0x71/0x310 [ 325.444934][T10219] ? __alloc_skb+0x2b1/0x380 [ 325.446453][T10219] __alloc_skb+0x2b1/0x380 [ 325.447777][T10219] ? __pfx___alloc_skb+0x10/0x10 [ 325.461735][T10219] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 325.464251][T10219] netlink_alloc_large_skb+0x69/0x130 [ 325.467985][T10219] netlink_sendmsg+0x689/0xd70 [ 325.471782][T10219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.474365][T10219] ? __import_iovec+0x1fd/0x6e0 [ 325.476786][T10219] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.479390][T10219] ____sys_sendmsg+0xab5/0xc90 [ 325.481433][T10219] ? copy_msghdr_from_user+0x10b/0x160 [ 325.483526][T10219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.485733][T10219] ? find_held_lock+0x2d/0x110 [ 325.487779][T10219] ? __pfx___lock_acquire+0x10/0x10 [ 325.490138][T10219] ___sys_sendmsg+0x135/0x1e0 [ 325.492420][T10219] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.494850][T10219] ? ksys_write+0x21c/0x260 [ 325.496969][T10219] ? __fget_light+0x173/0x210 [ 325.499477][T10219] __sys_sendmsg+0x117/0x1f0 [ 325.502310][T10219] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.505462][T10219] do_syscall_64+0xcd/0x250 [ 325.508270][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.511027][T10219] RIP: 0033:0x7f0fbd179eb9 [ 325.512697][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.520613][T10219] RSP: 002b:00007f0fbdfc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.524185][T10219] RAX: ffffffffffffffda RBX: 00007f0fbd315f80 RCX: 00007f0fbd179eb9 [ 325.527545][T10219] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 325.530647][T10219] RBP: 00007f0fbdfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 325.533701][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.538793][T10219] R13: 0000000000000000 R14: 00007f0fbd315f80 R15: 00007fffd089cd18 [ 325.542419][T10219] [ 325.675203][T10222] evm: overlay not supported [ 325.682362][ T39] audit: type=1804 audit(1725377405.365:563): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1209" name="/newroot/332/bus/file0" dev="overlay" ino=1761 res=1 errno=0 [ 325.690515][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.725935][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.800121][T10226] FAULT_INJECTION: forcing a failure. [ 325.800121][T10226] name failslab, interval 1, probability 0, space 0, times 0 [ 325.807952][T10226] CPU: 2 UID: 0 PID: 10226 Comm: syz.1.1211 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 325.812976][T10226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.817519][T10226] Call Trace: [ 325.818816][T10226] [ 325.819957][T10226] dump_stack_lvl+0x16c/0x1f0 [ 325.821837][T10226] should_fail_ex+0x497/0x5b0 [ 325.823837][T10226] ? fs_reclaim_acquire+0xae/0x160 [ 325.826129][T10226] should_failslab+0xc2/0x120 [ 325.826579][ T39] audit: type=1400 audit(1725377405.515:564): avc: denied { write } for pid=10221 comm="syz.3.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.828199][T10226] __kmalloc_noprof+0xcb/0x400 [ 325.828234][T10226] tomoyo_encode2+0x100/0x3e0 [ 325.828260][T10226] tomoyo_encode+0x29/0x50 [ 325.828279][T10226] tomoyo_realpath_from_path+0x19d/0x720 [ 325.828302][T10226] ? tomoyo_profile+0x47/0x60 [ 325.828328][T10226] tomoyo_path_number_perm+0x245/0x590 [ 325.828352][T10226] ? tomoyo_path_number_perm+0x232/0x590 [ 325.851230][T10226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.853895][T10226] ? __switch_to+0x749/0x1180 [ 325.855917][T10226] ? __pfx___schedule+0x10/0x10 [ 325.858029][T10226] ? __fget_files+0x256/0x400 [ 325.860006][T10226] security_file_ioctl+0x75/0xc0 [ 325.861955][T10226] __x64_sys_ioctl+0xbb/0x220 [ 325.863848][T10226] do_syscall_64+0xcd/0x250 [ 325.865797][T10226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.868269][T10226] RIP: 0033:0x7f0fbd179eb9 [ 325.870211][T10226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.878266][T10226] RSP: 002b:00007f0fbdfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.881582][T10226] RAX: ffffffffffffffda RBX: 00007f0fbd316058 RCX: 00007f0fbd179eb9 [ 325.884841][T10226] RDX: 0000000000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 325.888307][T10226] RBP: 00007f0fbdfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 325.891580][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.895064][T10226] R13: 0000000000000001 R14: 00007f0fbd316058 R15: 00007fffd089cd18 [ 325.898422][T10226] [ 325.910741][T10226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.155360][ T30] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 326.168547][ T39] audit: type=1400 audit(1725377405.855:565): avc: denied { create } for pid=10229 comm="syz.0.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 326.187301][T10234] openvswitch: netlink: Message has 4 unknown bytes. [ 326.200435][T10235] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 326.200699][T10235] qnx6: wrong signature (magic) in superblock #1. [ 326.200708][T10235] qnx6: unable to read the first superblock [ 326.334207][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 326.339065][ T30] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 326.344969][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.349794][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.761112][ C3] vkms_vblank_simulate: vblank timer overrun [ 326.970645][ T39] audit: type=1400 audit(1725377406.655:566): avc: denied { connect } for pid=10221 comm="syz.3.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.648634][ T5408] usb 8-1: USB disconnect, device number 11 [ 328.904232][ T39] audit: type=1400 audit(1725377408.575:567): avc: denied { ioctl } for pid=10270 comm="syz.2.1223" path="socket:[29267]" dev="sockfs" ino=29267 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 328.918864][ T39] audit: type=1400 audit(1725377408.575:568): avc: denied { connect } for pid=10270 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 329.659400][T10287] netlink: 'syz.2.1227': attribute type 12 has an invalid length. [ 329.667435][T10287] netlink: 'syz.2.1227': attribute type 11 has an invalid length. [ 329.670929][T10287] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.1227'. [ 329.938267][T10290] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1226'. [ 331.657466][ T39] audit: type=1400 audit(1725377411.345:569): avc: denied { ioctl } for pid=10320 comm="syz.0.1236" path="/dev/nullb0" dev="devtmpfs" ino=693 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.688480][T10317] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1235'. [ 332.141028][T10329] netlink: 'syz.0.1238': attribute type 10 has an invalid length. [ 332.197022][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.471953][T10334] netlink: 'syz.0.1240': attribute type 12 has an invalid length. [ 332.476077][T10334] netlink: 'syz.0.1240': attribute type 11 has an invalid length. [ 332.480432][T10334] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.1240'. [ 332.546402][ T5352] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 332.744427][ T5352] usb 6-1: Using ep0 maxpacket: 8 [ 332.750312][ T5352] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.755162][ T5352] usb 6-1: config 0 has no interface number 0 [ 332.758836][ T5352] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.771470][ T5352] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.776852][ T5352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.791094][ T5352] usb 6-1: config 0 descriptor?? [ 332.841930][T10342] fuse: Bad value for 'fd' [ 332.845297][ T5352] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 333.063829][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 333.068111][ T831] usb 6-1: USB disconnect, device number 8 [ 333.071789][ T831] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 333.343970][T10354] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 333.368342][T10354] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 333.371787][T10354] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 333.478649][T10357] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 333.496025][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.500424][T10357] qnx6: wrong signature (magic) in superblock #1. [ 333.521061][T10357] qnx6: unable to read the first superblock [ 334.405604][T10364] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 334.540862][T10370] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 334.555120][T10370] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 334.559909][T10370] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 335.306211][ T39] audit: type=1400 audit(1725377414.995:570): avc: denied { watch_reads } for pid=10383 comm="syz.0.1252" path="/proc/914" dev="proc" ino=28592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 336.387869][T10409] netlink: 'syz.2.1258': attribute type 10 has an invalid length. [ 337.177745][T10430] netlink: 'syz.2.1263': attribute type 12 has an invalid length. [ 337.181804][T10430] netlink: 'syz.2.1263': attribute type 11 has an invalid length. [ 337.186081][T10430] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.1263'. [ 337.314169][ T1291] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 337.524926][ T1291] usb 6-1: Using ep0 maxpacket: 8 [ 337.532328][ T1291] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.538652][ T1291] usb 6-1: config 0 has no interface number 0 [ 337.543493][ T1291] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.549386][ T1291] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 337.553719][ T1291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.563343][ T1291] usb 6-1: config 0 descriptor?? [ 337.595045][ T1291] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 337.691229][T10442] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 337.698183][T10442] qnx6: wrong signature (magic) in superblock #1. [ 337.702249][T10442] qnx6: unable to read the first superblock [ 337.813749][ T1291] usb 6-1: USB disconnect, device number 9 [ 337.816751][ C2] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 337.825023][ T1291] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 338.346927][T10446] fuse: Bad value for 'fd' [ 338.927634][T10462] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 339.241853][T10463] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 339.244505][T10464] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 339.247373][T10464] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 339.580381][T10462] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 339.595031][T10462] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 340.896448][ T6268] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 341.063388][T10491] fuse: Bad value for 'fd' [ 341.126408][ T6268] usb 5-1: Using ep0 maxpacket: 8 [ 341.137806][ T6268] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.142735][ T6268] usb 5-1: config 0 has no interface number 0 [ 341.145816][ T6268] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.170026][ T6268] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.174124][ T6268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.181439][ T6268] usb 5-1: config 0 descriptor?? [ 341.212582][ T6268] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 341.458785][ T6268] usb 5-1: USB disconnect, device number 15 [ 341.458927][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 341.471399][ T6268] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 341.746679][T10507] netlink: 'syz.3.1284': attribute type 12 has an invalid length. [ 341.749920][T10507] netlink: 'syz.3.1284': attribute type 11 has an invalid length. [ 341.753476][T10507] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.1284'. [ 342.638688][T10532] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 343.570892][T10547] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 343.952278][T10550] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 343.957016][T10550] netlink: 'syz.2.1296': attribute type 11 has an invalid length. [ 343.961951][T10550] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.1296'. [ 344.540959][ T39] audit: type=1400 audit(1725377424.225:571): avc: denied { write } for pid=10555 comm="syz.2.1298" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.494595][ T57] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 345.714867][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 345.725421][ T57] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.733522][ T57] usb 5-1: config 0 has no interface number 0 [ 345.742588][ T57] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.756313][ T57] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.770194][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.811432][ T57] usb 5-1: config 0 descriptor?? [ 345.980553][ T57] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 346.091963][T10585] FAULT_INJECTION: forcing a failure. [ 346.091963][T10585] name failslab, interval 1, probability 0, space 0, times 0 [ 346.098842][T10585] CPU: 1 UID: 0 PID: 10585 Comm: syz.1.1305 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 346.104013][T10585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 346.109284][T10585] Call Trace: [ 346.110758][T10585] [ 346.112034][T10585] dump_stack_lvl+0x16c/0x1f0 [ 346.114186][T10585] should_fail_ex+0x497/0x5b0 [ 346.116162][T10585] ? fs_reclaim_acquire+0xae/0x160 [ 346.119027][T10585] should_failslab+0xc2/0x120 [ 346.121776][T10585] kmem_cache_alloc_node_noprof+0x71/0x310 [ 346.125141][T10585] ? __alloc_skb+0x2b1/0x380 [ 346.127166][T10585] __alloc_skb+0x2b1/0x380 [ 346.129053][T10585] ? __pfx___alloc_skb+0x10/0x10 [ 346.131255][T10585] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 346.131703][ C3] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 346.133831][T10585] netlink_alloc_large_skb+0x69/0x130 [ 346.138572][ T35] usb 5-1: USB disconnect, device number 16 [ 346.139947][T10585] netlink_sendmsg+0x689/0xd70 [ 346.139977][T10585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.139998][T10585] ? __import_iovec+0x1fd/0x6e0 [ 346.140024][T10585] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 346.140052][T10585] ____sys_sendmsg+0xab5/0xc90 [ 346.153578][T10585] ? copy_msghdr_from_user+0x10b/0x160 [ 346.156019][T10585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.158657][T10585] ? __pfx___lock_acquire+0x10/0x10 [ 346.161295][T10585] ___sys_sendmsg+0x135/0x1e0 [ 346.163326][T10585] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.165627][T10585] ? __fget_light+0x173/0x210 [ 346.167890][T10585] __sys_sendmsg+0x117/0x1f0 [ 346.169922][T10585] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.172153][T10585] do_syscall_64+0xcd/0x250 [ 346.174249][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.177360][T10585] RIP: 0033:0x7f0fbd179eb9 [ 346.179468][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.188729][T10585] RSP: 002b:00007f0fbdfc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.192451][T10585] RAX: ffffffffffffffda RBX: 00007f0fbd315f80 RCX: 00007f0fbd179eb9 [ 346.196111][T10585] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 346.200148][T10585] RBP: 00007f0fbdfc2090 R08: 0000000000000000 R09: 0000000000000000 [ 346.203683][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.207391][T10585] R13: 0000000000000000 R14: 00007f0fbd315f80 R15: 00007fffd089cd18 [ 346.211107][T10585] [ 346.212497][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.241953][ T35] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 346.649433][T10588] netlink: 'syz.1.1306': attribute type 12 has an invalid length. [ 346.653471][T10588] netlink: 'syz.1.1306': attribute type 11 has an invalid length. [ 346.658152][T10588] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.1306'. [ 347.227174][T10600] netlink: 'syz.1.1310': attribute type 12 has an invalid length. [ 347.237302][T10600] netlink: 'syz.1.1310': attribute type 11 has an invalid length. [ 347.240894][T10600] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.1310'. [ 347.387531][T10603] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 347.452613][T10604] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 347.456869][T10604] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 347.788091][T10607] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 347.798783][T10607] qnx6: wrong signature (magic) in superblock #1. [ 347.801787][T10607] qnx6: unable to read the first superblock [ 348.617871][T10614] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1313'. [ 349.489731][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'. [ 349.724352][ T56] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 349.932490][T10653] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1321'. [ 349.944157][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 350.013677][ T56] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.017694][ T56] usb 8-1: config 0 has no interface number 0 [ 350.020601][ T56] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.028348][ T56] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.032989][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.047136][ T56] usb 8-1: config 0 descriptor?? [ 350.086481][ T56] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 350.353041][ T831] usb 8-1: USB disconnect, device number 12 [ 350.386585][ T831] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected [ 351.093245][ T39] audit: type=1400 audit(1725377430.775:572): avc: denied { getopt } for pid=10659 comm="syz.0.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.125617][T10660] io-wq is not configured for unbound workers [ 352.055475][ T39] audit: type=1326 audit(1725377431.725:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.2.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 352.065961][ T39] audit: type=1326 audit(1725377431.735:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.2.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 352.076438][ T39] audit: type=1326 audit(1725377431.755:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.2.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 352.119424][ T39] audit: type=1326 audit(1725377431.805:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.2.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 352.130377][ T39] audit: type=1326 audit(1725377431.805:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.2.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 353.242669][T10697] input: syz1 as /devices/virtual/input/input11 [ 353.654316][ T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 353.795107][T10710] create_pit_timer: 1 callbacks suppressed [ 353.795122][T10710] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 353.855516][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 353.860291][T10702] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 353.861731][ T57] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 353.877863][ T57] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 353.882506][ T57] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 353.891444][ T57] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 353.891500][T10702] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 353.898956][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 353.906074][T10702] kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 353.906140][ T57] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 353.913913][ T57] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 353.918897][ T57] usb 7-1: Product: syz [ 353.920789][ T57] usb 7-1: Manufacturer: syz [ 353.922801][ T57] usb 7-1: SerialNumber: syz [ 353.930602][ T57] usb 7-1: config 0 descriptor?? [ 353.936277][ T57] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 353.941958][ T57] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 354.085343][ T6268] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 354.154468][ T57] usb 7-1: USB disconnect, device number 13 [ 354.160408][ T57] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 354.285792][ T6268] usb 6-1: Using ep0 maxpacket: 8 [ 354.297382][ T6268] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.304753][ T6268] usb 6-1: config 0 has no interface number 0 [ 354.307552][ T6268] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.324795][ T6268] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 354.336400][ T6268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.348539][ T6268] usb 6-1: config 0 descriptor?? [ 354.382005][ T6268] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 354.559730][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 354.572162][ T6268] usb 6-1: USB disconnect, device number 10 [ 354.578250][ T6268] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 354.888867][T10722] fuse: Bad value for 'fd' [ 356.175228][T10756] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 356.187220][T10756] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 356.190887][T10756] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 356.947430][T10764] netlink: 'syz.1.1349': attribute type 12 has an invalid length. [ 356.951350][T10764] netlink: 'syz.1.1349': attribute type 11 has an invalid length. [ 356.956732][T10764] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.1349'. [ 357.458261][T10770] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 357.464759][T10770] qnx6: wrong signature (magic) in superblock #1. [ 357.469831][T10770] qnx6: unable to read the first superblock [ 359.714302][ T57] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 359.894822][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 359.899741][ T57] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.903220][ T57] usb 7-1: config 0 has no interface number 0 [ 359.914745][ T57] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.920404][ T57] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 359.927986][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.937055][ T57] usb 7-1: config 0 descriptor?? [ 359.973374][ T57] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 360.182002][ T57] usb 7-1: USB disconnect, device number 14 [ 360.182082][ C2] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 360.203986][T10807] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1360'. [ 360.233895][ T57] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 360.574917][T10803] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1359'. [ 361.297839][T10816] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 361.302465][T10816] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 361.308999][T10816] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 361.668847][ T6268] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 361.854144][ T6268] usb 5-1: Using ep0 maxpacket: 8 [ 361.858492][ T6268] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.861837][ T6268] usb 5-1: config 0 has no interface number 0 [ 361.864398][ T6268] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.868816][ T6268] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.872385][ T6268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.878878][ T6268] usb 5-1: config 0 descriptor?? [ 361.884249][ T6268] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 362.011963][T10827] netlink: 'syz.2.1367': attribute type 12 has an invalid length. [ 362.015536][T10827] netlink: 'syz.2.1367': attribute type 11 has an invalid length. [ 362.018959][T10827] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.1367'. [ 362.091009][ T6268] usb 5-1: USB disconnect, device number 17 [ 362.100535][ T6268] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 362.724142][ T1291] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 362.831068][T10849] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1372'. [ 362.924370][ T1291] usb 8-1: Using ep0 maxpacket: 8 [ 362.951219][ T1291] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.955509][ T1291] usb 8-1: config 0 has no interface number 0 [ 362.959220][ T1291] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.966280][ T1291] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 362.971378][ T1291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.989162][ T1291] usb 8-1: config 0 descriptor?? [ 363.027535][ T1291] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 363.078298][ T39] audit: type=1400 audit(1725377442.765:578): avc: denied { unmount } for pid=5342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 363.221459][ T35] usb 8-1: USB disconnect, device number 13 [ 363.237523][ T35] iowarrior 8-1:0.1: I/O-Warror #0 now disconnected [ 363.568330][T10863] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 363.574244][T10863] qnx6: wrong signature (magic) in superblock #1. [ 363.578591][T10863] qnx6: unable to read the first superblock [ 364.517780][T10869] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 364.770689][T10877] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1378'. [ 365.736852][T10885] netlink: 'syz.2.1380': attribute type 12 has an invalid length. [ 365.740268][T10885] netlink: 'syz.2.1380': attribute type 11 has an invalid length. [ 365.743551][T10885] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.1380'. [ 366.307008][T10917] netlink: 'syz.1.1387': attribute type 10 has an invalid length. [ 366.986482][T10927] netlink: 'syz.3.1389': attribute type 12 has an invalid length. [ 366.992796][T10927] netlink: 'syz.3.1389': attribute type 11 has an invalid length. [ 366.996947][T10927] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.1389'. [ 367.397965][ T39] audit: type=1326 audit(1725377447.075:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.429911][ T39] audit: type=1326 audit(1725377447.075:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.446063][ T39] audit: type=1326 audit(1725377447.085:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.462143][ T39] audit: type=1326 audit(1725377447.085:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.473390][ T39] audit: type=1326 audit(1725377447.085:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.483039][ T39] audit: type=1326 audit(1725377447.085:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.496397][ T39] audit: type=1326 audit(1725377447.085:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.506459][ T39] audit: type=1326 audit(1725377447.085:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 367.517112][ T39] audit: type=1326 audit(1725377447.085:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.1396" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 369.683718][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 369.683732][ T39] audit: type=1400 audit(1725377449.365:668): avc: denied { lock } for pid=11055 comm="syz.2.1441" path="socket:[34087]" dev="sockfs" ino=34087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 370.530845][ T39] audit: type=1400 audit(1725377450.215:669): avc: denied { bind } for pid=11088 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 370.606136][T11096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1459'. [ 370.774281][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 371.036594][ T39] audit: type=1400 audit(1725377450.725:670): avc: denied { bind } for pid=11138 comm="syz.0.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 371.466965][ T39] audit: type=1326 audit(1725377451.155:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11160 comm="syz.2.1485" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x0 [ 371.589511][ T39] audit: type=1400 audit(1725377451.275:672): avc: denied { setattr } for pid=11168 comm="syz.2.1487" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.712020][T11176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 371.719082][T11176] batman_adv: batadv0: Adding interface: ip6gretap1 [ 371.721942][T11176] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.732313][T11176] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 371.742214][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 371.746106][T11176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.750802][T11176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.754159][T11176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.757897][T11176] batman_adv: batadv0: Removing interface: ip6gretap1 [ 372.180444][T11197] syzkaller0: entered promiscuous mode [ 372.182942][T11197] syzkaller0: entered allmulticast mode [ 372.346806][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'. [ 372.419959][ T39] audit: type=1400 audit(1725377452.105:673): avc: denied { read } for pid=11208 comm="syz.3.1506" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 372.430859][ T39] audit: type=1400 audit(1725377452.105:674): avc: denied { open } for pid=11208 comm="syz.3.1506" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 372.486005][ T39] audit: type=1400 audit(1725377452.175:675): avc: denied { bind } for pid=11212 comm="syz.1.1508" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 372.496078][ T39] audit: type=1400 audit(1725377452.175:676): avc: denied { node_bind } for pid=11212 comm="syz.1.1508" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 372.535855][ T39] audit: type=1400 audit(1725377452.225:677): avc: denied { module_request } for pid=11216 comm="syz.1.1510" kmod="net-pf-10-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 372.598860][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 372.616020][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 372.714645][ T6268] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 372.896780][ T6268] usb 8-1: Using ep0 maxpacket: 32 [ 372.901876][ T6268] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.906961][ T6268] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.912236][ T6268] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 372.918119][ T6268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.925731][ T6268] usb 8-1: config 0 descriptor?? [ 373.425646][ T831] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 373.617659][ T831] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 373.621467][ T831] usb 5-1: config 0 has no interface number 0 [ 373.624935][ T831] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 373.628817][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.635826][ T831] usb 5-1: config 0 descriptor?? [ 373.640935][ T831] cp210x 5-1:0.3: cp210x converter detected [ 373.721495][ T6268] usbhid 8-1:0.0: can't add hid device: -71 [ 373.724754][ T6268] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 373.732217][ T6268] usb 8-1: USB disconnect, device number 14 [ 374.049255][ T831] cp210x 5-1:0.3: failed to get vendor val 0x000e size 3: -71 [ 374.062638][ T831] usb 5-1: cp210x converter now attached to ttyUSB0 [ 374.085090][ T831] usb 5-1: USB disconnect, device number 18 [ 374.094955][ T831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 374.098825][ T831] cp210x 5-1:0.3: device disconnected [ 374.147481][T11270] netlink: 'syz.2.1531': attribute type 10 has an invalid length. [ 374.151612][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.155144][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.169168][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.172420][T11270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.175843][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.178834][T11270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.186526][T11270] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 374.239323][T11272] Cannot find del_set index 2 as target [ 374.822791][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 374.822806][ T39] audit: type=1326 audit(1725377454.505:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.840664][ T39] audit: type=1326 audit(1725377454.505:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.853363][ T39] audit: type=1326 audit(1725377454.515:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.864361][ T39] audit: type=1326 audit(1725377454.515:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.875243][ T39] audit: type=1326 audit(1725377454.515:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.885433][ T39] audit: type=1326 audit(1725377454.515:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.895410][ T39] audit: type=1326 audit(1725377454.515:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.906293][ T39] audit: type=1326 audit(1725377454.515:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.916109][ T39] audit: type=1326 audit(1725377454.515:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 374.926042][ T39] audit: type=1326 audit(1725377454.515:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11288 comm="syz.3.1539" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 375.101984][T11301] batadv_slave_0: entered promiscuous mode [ 375.104251][T11301] batadv_slave_0: left allmulticast mode [ 375.869181][T11327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.878026][T11327] batadv_slave_0: entered promiscuous mode [ 376.529977][T11345] netlink: 'syz.2.1563': attribute type 21 has an invalid length. [ 376.867899][T11360] batadv0: entered promiscuous mode [ 377.334197][ T57] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 377.494735][ T57] usb 7-1: device descriptor read/64, error -71 [ 377.761356][T11387] Cannot find del_set index 2 as target [ 377.784161][ T57] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 377.934815][ T57] usb 7-1: device descriptor read/64, error -71 [ 378.064899][ T57] usb usb7-port1: attempt power cycle [ 378.086566][T11406] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 378.484790][ T57] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 378.526595][ T57] usb 7-1: device descriptor read/8, error -71 [ 378.825019][ T57] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 378.865938][ T57] usb 7-1: device descriptor read/8, error -71 [ 378.984555][ T57] usb usb7-port1: unable to enumerate USB device [ 379.974146][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 381.484554][ T58] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 381.596820][ T39] kauditd_printk_skb: 266 callbacks suppressed [ 381.596830][ T39] audit: type=1326 audit(1725377461.285:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.2.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 381.609908][ T39] audit: type=1326 audit(1725377461.285:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.2.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 381.618977][ T39] audit: type=1326 audit(1725377461.285:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.2.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 381.627715][ T39] audit: type=1326 audit(1725377461.285:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.2.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 381.640900][ T39] audit: type=1326 audit(1725377461.285:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.2.1626" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 381.683352][T11510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1630'. [ 381.684308][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 381.688701][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 381.697319][ T58] usb 8-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 381.701377][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.706324][ T58] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 255 [ 381.713415][ T58] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 381.717465][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.720895][ T58] usb 8-1: Product: syz [ 381.722843][ T58] usb 8-1: Manufacturer: syz [ 381.725012][ T58] usb 8-1: SerialNumber: syz [ 381.731222][ T58] r8152-cfgselector 8-1: Unknown version 0x0000 [ 381.954227][ T57] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 382.145061][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 382.158881][ T57] usb 7-1: config 0 has no interfaces? [ 382.161597][ T57] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 382.166327][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.178884][ T57] usb 7-1: config 0 descriptor?? [ 382.390938][ T57] usb 7-1: USB disconnect, device number 19 [ 382.608220][T11520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11520 comm=syz.3.1625 [ 382.966543][T11529] bridge_slave_1: left allmulticast mode [ 382.968942][T11529] bridge_slave_1: left promiscuous mode [ 382.971816][T11529] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.981648][T11531] bridge0: port 3(gretap0) entered blocking state [ 382.984918][T11531] bridge0: port 3(gretap0) entered disabled state [ 382.991877][T11531] gretap0: entered allmulticast mode [ 383.000773][T11531] gretap0: entered promiscuous mode [ 383.004301][T11531] bridge0: port 3(gretap0) entered blocking state [ 383.007642][T11531] bridge0: port 3(gretap0) entered forwarding state [ 383.015894][T11532] netlink: 'syz.0.1634': attribute type 4 has an invalid length. [ 383.072997][T11531] gretap0: left allmulticast mode [ 383.075400][T11531] gretap0: left promiscuous mode [ 383.079718][T11531] bridge0: port 3(gretap0) entered disabled state [ 383.528536][ T39] audit: type=1326 audit(1725377463.215:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 383.537779][ T39] audit: type=1326 audit(1725377463.225:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 383.546650][ T39] audit: type=1326 audit(1725377463.225:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 383.555992][ T39] audit: type=1326 audit(1725377463.225:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 383.564821][ T39] audit: type=1326 audit(1725377463.225:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.1.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 383.753713][T11532] syz.0.1634 (11532) used greatest stack depth: 21296 bytes left [ 383.769891][T11544] dccp_close: ABORT with 88 bytes unread [ 383.974543][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 384.173370][T11568] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1651'. [ 384.177317][T11568] 0ªX¹¦À: renamed from caif0 [ 384.182337][T11568] 0ªX¹¦À: entered allmulticast mode [ 384.185805][T11568] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 384.274251][ T30] r8152-cfgselector 8-1: USB disconnect, device number 15 [ 384.355206][ T1382] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.358009][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.399238][T11581] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1656'. [ 384.787639][T11608] autofs: Bad value for 'fd' [ 384.792490][T11608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1668'. [ 384.933373][T11621] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1675'. [ 384.937544][T11621] 0ªX¹¦D: renamed from gretap0 (while UP) [ 384.941293][T11621] 0ªX¹¦D: entered allmulticast mode [ 384.943748][T11621] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 385.020009][T11627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1677'. [ 385.043470][T11631] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1680'. [ 385.047360][T11631] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 385.052006][T11631] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 385.338954][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 385.573583][T11692] batadv_slave_0: entered promiscuous mode [ 385.581098][T11692] batadv_slave_0: left promiscuous mode [ 385.699553][T11707] syz.3.1715[11707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.699624][T11707] syz.3.1715[11707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.994911][T11719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1720'. [ 386.562469][T11734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11734 comm=syz.2.1727 [ 387.113769][T11726] Process accounting resumed [ 389.067777][T11764] pim6reg1: entered promiscuous mode [ 389.069762][T11764] pim6reg1: entered allmulticast mode [ 389.146251][T11789] loop7: detected capacity change from 0 to 16384 [ 389.160960][T11791] xt_bpf: check failed: parse error [ 389.272913][ T49] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 389.380042][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.384714][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.388046][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.391200][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.393774][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.397335][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.400009][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.402960][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.407149][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.410289][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.412927][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.416632][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.420169][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.425090][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.428440][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.431444][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.435080][T11794] ldm_validate_partition_table(): Disk read failed. [ 389.437970][T11794] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.441593][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 389.441604][ T39] audit: type=1400 audit(1725377469.125:968): avc: denied { map } for pid=11792 comm="syz.1.1749" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 389.452845][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.458884][T11794] Buffer I/O error on dev loop7, logical block 0, async page read [ 389.461712][T11794] Dev loop7: unable to read RDB block 0 [ 389.464123][ T39] audit: type=1400 audit(1725377469.125:969): avc: denied { execute } for pid=11792 comm="syz.1.1749" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 389.474394][T11794] loop7: unable to read partition table [ 389.476475][T11794] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 389.601219][T11813] binder: 11807:11813 ioctl 4018620d 0 returned -22 [ 390.100956][ T39] audit: type=1400 audit(1725377469.785:970): avc: denied { setattr } for pid=11818 comm="syz.2.1757" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 390.350771][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 390.398808][ T39] audit: type=1326 audit(1725377470.085:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.1.1759" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 390.414217][ T39] audit: type=1326 audit(1725377470.085:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.1.1759" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 390.422947][ T39] audit: type=1326 audit(1725377470.085:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.1.1759" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 390.432902][ T39] audit: type=1326 audit(1725377470.085:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.1.1759" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 390.441344][ T39] audit: type=1326 audit(1725377470.085:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11823 comm="syz.1.1759" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 391.437532][T11847] ptrace attach of "/syz-executor exec"[5342] was attempted by "/syz-executor exec"[11847] [ 391.991849][ T39] audit: type=1326 audit(1725377471.675:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.1.1774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 392.000765][ T39] audit: type=1326 audit(1725377471.675:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.1.1774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd179eb9 code=0x7ffc0000 [ 393.066166][T11899] ip6erspan0: entered promiscuous mode [ 393.592726][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 394.065240][ T57] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 394.244740][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 394.248336][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.253288][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.258138][ T57] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 394.262140][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.271177][ T57] usb 7-1: config 0 descriptor?? [ 394.280646][T11924] deleting an unspecified loop device is not supported. [ 394.373830][T11923] input: syz0 as /devices/virtual/input/input13 [ 394.381650][T11930] syz.1.1795[11930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.381737][T11930] syz.1.1795[11930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.577956][ T57] usbhid 7-1:0.0: can't add hid device: -71 [ 394.616115][ T57] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 394.630715][ T57] usb 7-1: USB disconnect, device number 20 [ 395.481134][T11951] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 395.941085][T11961] loop7: detected capacity change from 0 to 16384 [ 396.395270][ T58] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 396.604342][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 396.609409][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.613706][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.618579][ T58] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 396.622512][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.634930][ T58] usb 7-1: config 0 descriptor?? [ 396.926118][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 396.929006][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 396.950156][ T58] usb 7-1: USB disconnect, device number 21 [ 398.048902][T12014] SELinux: Context :yz1 is not valid (left unmapped). [ 398.053806][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 398.053816][ T39] audit: type=1400 audit(1725377477.735:991): avc: denied { relabelto } for pid=12013 comm="syz.2.1823" name="file0" dev="tmpfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 398.065994][ T39] audit: type=1400 audit(1725377477.735:992): avc: denied { associate } for pid=12013 comm="syz.2.1823" name="file0" dev="tmpfs" ino=2376 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":yz1" [ 398.088450][ T39] audit: type=1400 audit(1725377477.775:993): avc: denied { unlink } for pid=5342 comm="syz-executor" name="file0" dev="tmpfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 398.807277][ T831] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 398.994579][ T831] usb 6-1: Using ep0 maxpacket: 32 [ 399.001831][ T831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.007536][ T831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.011381][ T831] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 399.016351][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.022087][ T831] usb 6-1: config 0 descriptor?? [ 399.164184][ T5408] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 399.303056][ T831] usbhid 6-1:0.0: can't add hid device: -71 [ 399.307705][ T831] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 399.313109][ T831] usb 6-1: USB disconnect, device number 11 [ 399.344906][ T5408] usb 5-1: Using ep0 maxpacket: 16 [ 399.349554][ T5408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.353963][ T5408] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 399.359539][ T5408] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 399.364620][ T5408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.367956][ T5408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.375027][T12030] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.380159][ T5408] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 399.591290][ T5408] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 399.599728][ T5408] usb 5-1: USB disconnect, device number 19 [ 399.794724][ T5352] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 399.938058][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.951391][T12051] bridge_slave_1: left allmulticast mode [ 399.953967][T12051] bridge_slave_1: left promiscuous mode [ 399.956601][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.963035][T12051] bridge_slave_0: left promiscuous mode [ 399.967882][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.984285][ T5352] usb 8-1: Using ep0 maxpacket: 32 [ 399.995870][ T5352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.000131][ T5352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.008884][ T5352] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 400.011883][ T5352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.017591][ T5352] usb 8-1: config 0 descriptor?? [ 400.518775][ T5352] usbhid 8-1:0.0: can't add hid device: -71 [ 400.521103][ T5352] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 400.532594][ T5352] usb 8-1: USB disconnect, device number 16 [ 401.114155][ T30] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 401.490544][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1844'. [ 401.495047][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'. [ 401.812659][T11588] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 401.846946][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.851711][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.856123][ T30] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 401.860692][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.866539][ T30] usb 7-1: config 0 descriptor?? [ 402.004775][T11588] usb 8-1: Using ep0 maxpacket: 32 [ 402.016584][T11588] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.021401][T11588] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.030510][T11588] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 402.035686][T11588] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.042363][T11588] usb 8-1: config 0 descriptor?? [ 402.388483][ T30] hid (null): bogus close delimiter [ 402.513718][ T30] usb 7-1: language id specifier not provided by device, defaulting to English [ 402.862745][ T39] audit: type=1326 audit(1725377482.545:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 402.866599][T11588] usbhid 8-1:0.0: can't add hid device: -71 [ 402.882708][ T39] audit: type=1326 audit(1725377482.555:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 402.889818][T11588] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 402.899830][T11588] usb 8-1: USB disconnect, device number 17 [ 402.914187][ T39] audit: type=1326 audit(1725377482.555:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 402.929278][ T39] audit: type=1326 audit(1725377482.555:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 402.931860][ T30] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.0002/input/input14 [ 402.941196][T12098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.943693][ T39] audit: type=1326 audit(1725377482.555:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 402.959653][T12098] batadv_slave_0: entered promiscuous mode [ 402.968513][ T39] audit: type=1326 audit(1725377482.555:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 402.979562][ T39] audit: type=1326 audit(1725377482.555:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.3.1852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 403.228795][ T30] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.0002/input/input15 [ 403.242649][ T30] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.0002/input/input16 [ 403.265242][ T30] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.0002/input/input17 [ 403.445838][ T30] uclogic 0003:256C:006D.0002: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 403.481865][ T30] usb 7-1: USB disconnect, device number 22 [ 403.736713][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 403.736728][ T39] audit: type=1400 audit(1725377483.425:1002): avc: denied { read } for pid=12116 comm="syz.2.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 403.751998][T11588] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 403.790173][ T39] audit: type=1400 audit(1725377483.475:1003): avc: denied { setopt } for pid=12116 comm="syz.2.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 403.820881][ T39] audit: type=1400 audit(1725377483.505:1004): avc: denied { mount } for pid=12114 comm="syz.1.1860" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 403.842856][ T39] audit: type=1326 audit(1725377483.525:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.854355][ T39] audit: type=1326 audit(1725377483.525:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.865514][ T39] audit: type=1326 audit(1725377483.535:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.876675][ T39] audit: type=1326 audit(1725377483.535:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.888467][ T39] audit: type=1326 audit(1725377483.535:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.904342][ T39] audit: type=1326 audit(1725377483.535:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.918099][ T39] audit: type=1326 audit(1725377483.535:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 403.938322][T12123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12123 comm=syz.2.1863 [ 403.956089][T11588] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.960868][T11588] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 403.973358][T11588] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.979906][T11588] usb 8-1: config 0 descriptor?? [ 404.442483][T11588] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 404.540006][T11588] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.0003/input/input18 [ 404.671763][T11588] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 404.827990][T11588] usb 8-1: USB disconnect, device number 18 [ 405.954437][ T35] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 406.154110][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 406.160340][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.173247][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.178564][ T35] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 406.182655][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.195571][ T35] usb 6-1: config 0 descriptor?? [ 406.944636][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 406.954281][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 406.958498][ T35] usb 6-1: USB disconnect, device number 12 [ 407.094221][T12189] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1885'. [ 407.721458][T12204] pim6reg1: entered promiscuous mode [ 407.723810][T12204] pim6reg1: entered allmulticast mode [ 407.917667][T12217] pim6reg1: entered promiscuous mode [ 407.919812][T12217] pim6reg1: entered allmulticast mode [ 407.944300][ T5402] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 408.018023][T12219] wg2: entered promiscuous mode [ 408.020241][T12219] wg2: entered allmulticast mode [ 408.134154][ T5402] usb 5-1: Using ep0 maxpacket: 32 [ 408.137580][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.143933][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.147421][ T5402] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 408.151211][ T5402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.158843][T12225] pim6reg1: entered promiscuous mode [ 408.161228][T12225] pim6reg1: entered allmulticast mode [ 408.165903][ T5402] usb 5-1: config 0 descriptor?? [ 408.921647][ T5402] usbhid 5-1:0.0: can't add hid device: -71 [ 408.924242][ T5402] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 408.934473][ T5402] usb 5-1: USB disconnect, device number 20 [ 409.001437][T12255] syz.0.1912[12255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.001522][T12255] syz.0.1912[12255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.284220][ T57] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 410.464561][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 410.468923][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.473328][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.477883][ T57] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 410.482314][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.488455][ T57] usb 7-1: config 0 descriptor?? [ 411.223498][ T57] usbhid 7-1:0.0: can't add hid device: -71 [ 411.233711][ T57] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 411.240666][ T57] usb 7-1: USB disconnect, device number 23 [ 411.814773][ T5408] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 412.004414][ T5408] usb 5-1: Using ep0 maxpacket: 32 [ 412.007520][ T5408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.011802][ T5408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.015495][ T5408] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 412.019013][ T5408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.027418][ T5408] usb 5-1: config 0 descriptor?? [ 412.245576][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1944'. [ 412.757194][ T5408] usbhid 5-1:0.0: can't add hid device: -71 [ 412.759917][ T5408] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 412.766124][ T5408] usb 5-1: USB disconnect, device number 21 [ 412.811852][T12364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 413.164614][T12371] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1956'. [ 413.210397][T12376] syz.2.1960[12376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.210552][T12376] syz.2.1960[12376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.302447][T12383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1963'. [ 413.361178][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 413.361195][ T39] audit: type=1326 audit(1725377493.045:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 413.384323][ T39] audit: type=1326 audit(1725377493.045:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 413.392726][ T39] audit: type=1326 audit(1725377493.055:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 413.402553][ T39] audit: type=1326 audit(1725377493.055:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 413.411806][ T39] audit: type=1326 audit(1725377493.065:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12386 comm="syz.3.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d2779eb9 code=0x7ffc0000 [ 413.420527][ T39] audit: type=1326 audit(1725377493.085:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.0.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ca379eb9 code=0x7ffc0000 [ 413.431640][ T39] audit: type=1326 audit(1725377493.085:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.0.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ca379eb9 code=0x7ffc0000 [ 413.442411][ T39] audit: type=1326 audit(1725377493.085:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.0.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fe9ca379eb9 code=0x7ffc0000 [ 413.453165][ T39] audit: type=1326 audit(1725377493.085:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.0.1968" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ca379eb9 code=0x7ffc0000 [ 413.466332][ T39] audit: type=1326 audit(1725377493.155:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.0.1970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ca379eb9 code=0x7ffc0000 [ 413.554210][ T5408] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 413.729654][T12411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1975'. [ 413.734192][ T5408] usb 6-1: Using ep0 maxpacket: 32 [ 413.746691][ T5408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.751375][ T5408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.755754][ T5408] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 413.759787][ T5408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.776588][ T5408] usb 6-1: config 0 descriptor?? [ 413.978776][T12430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1985'. [ 414.323495][T12448] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 414.390806][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1994'. [ 414.516357][ T5408] usbhid 6-1:0.0: can't add hid device: -71 [ 414.518873][ T5408] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 414.523715][ T5408] usb 6-1: USB disconnect, device number 13 [ 414.557624][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2001'. [ 414.665780][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2004'. [ 414.781695][T12477] batadv0: entered promiscuous mode [ 414.916980][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2010'. [ 416.217258][ T5402] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 416.415669][ T5402] usb 6-1: Using ep0 maxpacket: 32 [ 416.423491][ T5402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.430118][ T5402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.437422][ T5402] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 416.443346][ T5402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.452448][ T5402] usb 6-1: config 0 descriptor?? [ 417.202389][ T5402] usbhid 6-1:0.0: can't add hid device: -71 [ 417.206828][ T5402] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 417.213364][ T5402] usb 6-1: USB disconnect, device number 14 [ 417.448654][T12597] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 417.904408][ T5408] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 418.084237][ T5408] usb 6-1: Using ep0 maxpacket: 32 [ 418.088403][ T5408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.092286][ T5408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.096399][ T5408] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 418.102741][ T5408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.109041][ T5408] usb 6-1: config 0 descriptor?? [ 418.842989][ T5408] usbhid 6-1:0.0: can't add hid device: -71 [ 418.846489][ T5408] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 418.852055][ T5408] usb 6-1: USB disconnect, device number 15 [ 418.872817][T12646] tmpfs: Bad value for 'nr_blocks' [ 418.888066][ T39] kauditd_printk_skb: 274 callbacks suppressed [ 418.888079][ T39] audit: type=1326 audit(1725377498.575:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.901933][ T39] audit: type=1326 audit(1725377498.585:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.911203][ T39] audit: type=1326 audit(1725377498.585:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.920093][ T39] audit: type=1326 audit(1725377498.585:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.930114][ T39] audit: type=1326 audit(1725377498.585:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.934285][ T831] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 418.939973][ T39] audit: type=1326 audit(1725377498.585:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.952471][ T39] audit: type=1326 audit(1725377498.585:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 418.961790][ T39] audit: type=1326 audit(1725377498.585:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.2.2083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7553979eb9 code=0x7ffc0000 [ 419.094631][ T831] usb 8-1: device descriptor read/64, error -71 [ 419.106153][ T39] audit: type=1400 audit(1725377498.795:1317): avc: denied { create } for pid=12655 comm="syz.2.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 419.118628][ T39] audit: type=1400 audit(1725377498.795:1318): avc: denied { write } for pid=12655 comm="syz.2.2087" path="socket:[41504]" dev="sockfs" ino=41504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 419.189519][T12663] __nla_validate_parse: 6 callbacks suppressed [ 419.189535][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2090'. [ 419.200311][T12663] unsupported nlmsg_type 40 [ 419.222866][T12666] TCP: tcp_parse_options: Illegal window scaling value 129 > 14 received [ 419.268877][T12670] syz.2.2094[12670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.269001][T12670] syz.2.2094[12670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.367127][ T831] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 419.457205][ T832] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 419.524299][ T831] usb 8-1: device descriptor read/64, error -71 [ 419.586077][T12690] syz.2.2103[12690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.586243][T12690] syz.2.2103[12690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.654292][ T831] usb usb8-port1: attempt power cycle [ 419.654640][ T832] usb 6-1: Using ep0 maxpacket: 32 [ 419.666356][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.671734][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.678008][ T832] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 419.681930][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.690068][ T832] usb 6-1: config 0 descriptor?? [ 420.420642][ T832] usbhid 6-1:0.0: can't add hid device: -71 [ 420.423306][ T832] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 420.427746][ T832] usb 6-1: USB disconnect, device number 16 [ 420.474363][ T831] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 420.512192][ T831] usb 8-1: device descriptor read/8, error -71 [ 420.648134][T12707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2110'. [ 420.788912][ T831] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 420.815750][ T831] usb 8-1: device descriptor read/8, error -71 [ 420.923600][T12714] netlink: 'syz.2.2112': attribute type 10 has an invalid length. [ 420.927472][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2112'. [ 420.931485][T12714] veth0_vlan: entered allmulticast mode [ 420.934942][T12714] bridge0: port 2(veth0_vlan) entered blocking state [ 420.935335][ T831] usb usb8-port1: unable to enumerate USB device [ 420.938091][T12714] bridge0: port 2(veth0_vlan) entered disabled state [ 420.947836][T12714] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 421.394158][ T831] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 421.584823][ T831] usb 7-1: Using ep0 maxpacket: 32 [ 421.588889][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.595312][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.599417][ T831] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 421.603700][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.608414][ T831] usb 7-1: config 0 descriptor?? [ 421.722708][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.727037][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.729815][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.732982][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.736555][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.739674][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.742800][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.746293][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.749499][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.752650][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.757052][ T832] hid-generic 0009:0000:0000.0004: unknown main item tag 0x0 [ 421.777704][ T832] hid-generic 0009:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 421.860325][T12757] @: renamed from vlan0 (while UP) [ 422.098991][T12778] ------------[ cut here ]------------ [ 422.102245][T12778] WARNING: CPU: 1 PID: 12778 at include/linux/rwsem.h:195 follow_pte+0x414/0x4c0 [ 422.107252][T12778] Modules linked in: [ 422.109064][T12778] CPU: 1 UID: 0 PID: 12778 Comm: syz.3.2141 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 422.116611][T12778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.121311][T12778] RIP: 0010:follow_pte+0x414/0x4c0 [ 422.123588][T12778] Code: bf 98 01 00 00 be ff ff ff ff e8 a7 d8 44 09 31 ff 41 89 c4 89 c6 e8 9b cd b9 ff 45 85 e4 0f 85 80 fc ff ff e8 4d cb b9 ff 90 <0f> 0b 90 e9 72 fc ff ff e8 3f cb b9 ff 90 0f 0b 48 c7 c7 58 76 14 [ 422.133220][T12778] RSP: 0018:ffffc90007f074d0 EFLAGS: 00010287 [ 422.136643][T12778] RAX: 000000000001072b RBX: 00007f734272f000 RCX: ffffc90006ec3000 [ 422.140405][T12778] RDX: 0000000000040000 RSI: ffffffff81d1f503 RDI: 0000000000000005 [ 422.143902][T12778] RBP: ffff888024127ba0 R08: 0000000000000005 R09: 0000000000000000 [ 422.148561][T12778] R10: 0000000000000000 R11: 000000000000022a R12: 0000000000000000 [ 422.152013][T12778] R13: ffffc90007f07530 R14: ffffc90007f07550 R15: ffff8880287dcc00 [ 422.155585][T12778] FS: 00007f80d35556c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 422.160035][T12778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.162717][T12778] CR2: 00007f0fbde456c0 CR3: 00000000507c4000 CR4: 0000000000350ef0 [ 422.166281][T12778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.169735][T12778] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.173814][T12778] Call Trace: [ 422.175372][T12778] [ 422.176705][T12778] ? show_regs+0x8c/0xa0 [ 422.178628][T12778] ? __warn+0xe5/0x3c0 [ 422.180454][T12778] ? follow_pte+0x414/0x4c0 [ 422.182449][T12778] ? report_bug+0x3c0/0x580 [ 422.184528][T12778] ? handle_bug+0x3d/0x70 [ 422.186458][T12778] ? exc_invalid_op+0x17/0x50 [ 422.189124][T12778] ? asm_exc_invalid_op+0x1a/0x20 [ 422.191357][T12778] ? follow_pte+0x413/0x4c0 [ 422.193351][T12778] ? follow_pte+0x414/0x4c0 [ 422.195450][T12778] get_pat_info+0xf2/0x510 [ 422.197411][T12778] ? __pfx_get_pat_info+0x10/0x10 [ 422.199640][T12778] untrack_pfn+0xf7/0x4d0 [ 422.201554][T12778] ? __pfx_untrack_pfn+0x10/0x10 [ 422.204500][T12778] ? zap_page_range_single+0x307/0x560 [ 422.207268][T12778] ? __pfx_lock_release+0x10/0x10 [ 422.209585][T12778] ? uprobe_munmap+0x20/0x5d0 [ 422.211734][T12778] unmap_single_vma+0x1bd/0x2b0 [ 422.213967][T12778] zap_page_range_single+0x326/0x560 [ 422.216430][T12778] ? __pfx_zap_page_range_single+0x10/0x10 [ 422.219653][T12778] ? __pfx___might_resched+0x10/0x10 [ 422.222073][T12778] ? vma_interval_tree_subtree_search+0x14d/0x1b0 [ 422.225032][T12778] unmap_mapping_range+0x1ee/0x280 [ 422.227334][T12778] ? __pfx_unmap_mapping_range+0x10/0x10 [ 422.229868][T12778] ? inode_newsize_ok+0x13b/0x200 [ 422.232118][T12778] truncate_pagecache+0x53/0x90 [ 422.234936][T12778] simple_setattr+0xf2/0x120 [ 422.237035][T12778] notify_change+0xf41/0x1230 [ 422.239159][T12778] do_truncate+0x15c/0x220 [ 422.241110][T12778] ? __pfx_do_truncate+0x10/0x10 [ 422.243295][T12778] path_openat+0x27a8/0x2d20 [ 422.245496][T12778] ? __pfx_path_openat+0x10/0x10 [ 422.247683][T12778] ? __pfx___lock_acquire+0x10/0x10 [ 422.250678][T12778] ? find_held_lock+0x2d/0x110 [ 422.252837][T12778] do_filp_open+0x1dc/0x430 [ 422.254977][T12778] ? __pfx_do_filp_open+0x10/0x10 [ 422.257252][T12778] ? find_held_lock+0x2d/0x110 [ 422.259417][T12778] ? _raw_spin_unlock+0x28/0x50 [ 422.261402][T12778] ? alloc_fd+0x2d7/0x6c0 [ 422.263130][T12778] do_sys_openat2+0x17a/0x1e0 [ 422.265134][T12778] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.267793][T12778] __x64_sys_openat+0x175/0x210 [ 422.269757][T12778] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.271884][T12778] do_syscall_64+0xcd/0x250 [ 422.273933][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.276629][T12778] RIP: 0033:0x7f80d2779eb9 [ 422.278555][T12778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.287585][T12778] RSP: 002b:00007f80d3555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.291226][T12778] RAX: ffffffffffffffda RBX: 00007f80d2915f80 RCX: 00007f80d2779eb9 [ 422.294734][T12778] RDX: 0000000000003f00 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 422.298731][T12778] RBP: 00007f80d27e793e R08: 0000000000000000 R09: 0000000000000000 [ 422.302193][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.305750][T12778] R13: 0000000000000000 R14: 00007f80d2915f80 R15: 00007ffcde425c88 [ 422.309574][T12778] [ 422.310848][T12778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 422.313802][T12778] CPU: 1 UID: 0 PID: 12778 Comm: syz.3.2141 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 422.318548][T12778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 422.323255][T12778] Call Trace: [ 422.324757][T12778] [ 422.326077][T12778] dump_stack_lvl+0x3d/0x1f0 [ 422.328162][T12778] panic+0x6dc/0x7c0 [ 422.329966][T12778] ? __pfx_panic+0x10/0x10 [ 422.331969][T12778] ? show_trace_log_lvl+0x363/0x500 [ 422.334330][T12778] ? follow_pte+0x414/0x4c0 [ 422.336397][T12778] check_panic_on_warn+0xab/0xb0 [ 422.338589][T12778] __warn+0xf1/0x3c0 [ 422.340365][T12778] ? follow_pte+0x414/0x4c0 [ 422.342331][T12778] report_bug+0x3c0/0x580 [ 422.344292][T12778] handle_bug+0x3d/0x70 [ 422.346180][T12778] exc_invalid_op+0x17/0x50 [ 422.348241][T12778] asm_exc_invalid_op+0x1a/0x20 [ 422.350443][T12778] RIP: 0010:follow_pte+0x414/0x4c0 [ 422.352729][T12778] Code: bf 98 01 00 00 be ff ff ff ff e8 a7 d8 44 09 31 ff 41 89 c4 89 c6 e8 9b cd b9 ff 45 85 e4 0f 85 80 fc ff ff e8 4d cb b9 ff 90 <0f> 0b 90 e9 72 fc ff ff e8 3f cb b9 ff 90 0f 0b 48 c7 c7 58 76 14 [ 422.360963][T12778] RSP: 0018:ffffc90007f074d0 EFLAGS: 00010287 [ 422.363387][T12778] RAX: 000000000001072b RBX: 00007f734272f000 RCX: ffffc90006ec3000 [ 422.366780][T12778] RDX: 0000000000040000 RSI: ffffffff81d1f503 RDI: 0000000000000005 [ 422.370257][T12778] RBP: ffff888024127ba0 R08: 0000000000000005 R09: 0000000000000000 [ 422.373687][T12778] R10: 0000000000000000 R11: 000000000000022a R12: 0000000000000000 [ 422.377110][T12778] R13: ffffc90007f07530 R14: ffffc90007f07550 R15: ffff8880287dcc00 [ 422.380573][T12778] ? follow_pte+0x413/0x4c0 [ 422.382602][T12778] get_pat_info+0xf2/0x510 [ 422.384681][T12778] ? __pfx_get_pat_info+0x10/0x10 [ 422.386896][T12778] untrack_pfn+0xf7/0x4d0 [ 422.388841][T12778] ? __pfx_untrack_pfn+0x10/0x10 [ 422.391067][T12778] ? zap_page_range_single+0x307/0x560 [ 422.393425][T12778] ? __pfx_lock_release+0x10/0x10 [ 422.395640][T12778] ? uprobe_munmap+0x20/0x5d0 [ 422.397745][T12778] unmap_single_vma+0x1bd/0x2b0 [ 422.399913][T12778] zap_page_range_single+0x326/0x560 [ 422.402257][T12778] ? __pfx_zap_page_range_single+0x10/0x10 [ 422.404801][T12778] ? __pfx___might_resched+0x10/0x10 [ 422.407139][T12778] ? vma_interval_tree_subtree_search+0x14d/0x1b0 [ 422.409981][T12778] unmap_mapping_range+0x1ee/0x280 [ 422.412236][T12778] ? __pfx_unmap_mapping_range+0x10/0x10 [ 422.414873][T12778] ? inode_newsize_ok+0x13b/0x200 [ 422.417136][T12778] truncate_pagecache+0x53/0x90 [ 422.419211][T12778] simple_setattr+0xf2/0x120 [ 422.421045][T12778] notify_change+0xf41/0x1230 [ 422.422872][T12778] do_truncate+0x15c/0x220 [ 422.424427][T12778] ? __pfx_do_truncate+0x10/0x10 [ 422.426221][T12778] path_openat+0x27a8/0x2d20 [ 422.427864][T12778] ? __pfx_path_openat+0x10/0x10 [ 422.429632][T12778] ? __pfx___lock_acquire+0x10/0x10 [ 422.431725][T12778] ? find_held_lock+0x2d/0x110 [ 422.433729][T12778] do_filp_open+0x1dc/0x430 [ 422.435601][T12778] ? __pfx_do_filp_open+0x10/0x10 [ 422.437741][T12778] ? find_held_lock+0x2d/0x110 [ 422.439765][T12778] ? _raw_spin_unlock+0x28/0x50 [ 422.441818][T12778] ? alloc_fd+0x2d7/0x6c0 [ 422.443642][T12778] do_sys_openat2+0x17a/0x1e0 [ 422.445582][T12778] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.447637][T12778] __x64_sys_openat+0x175/0x210 [ 422.449484][T12778] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.451684][T12778] do_syscall_64+0xcd/0x250 [ 422.453410][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.455608][T12778] RIP: 0033:0x7f80d2779eb9 [ 422.457575][T12778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.465496][T12778] RSP: 002b:00007f80d3555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.469093][T12778] RAX: ffffffffffffffda RBX: 00007f80d2915f80 RCX: 00007f80d2779eb9 [ 422.472355][T12778] RDX: 0000000000003f00 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 422.474827][T12778] RBP: 00007f80d27e793e R08: 0000000000000000 R09: 0000000000000000 [ 422.477179][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.479571][T12778] R13: 0000000000000000 R14: 00007f80d2915f80 R15: 00007ffcde425c88 [ 422.482542][T12778] [ 422.484853][T12778] Kernel Offset: disabled [ 422.487339][T12778] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:31:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b20183 RBX=0000000000000000 RCX=ffffffff8b16dc59 RDX=0000000000000000 RSI=ffffffff8b4cd740 RDI=ffffffff8bb0f980 RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed100d4c6fd9 R10=ffff88806a637ecb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff90144358 R15=0000000000000000 RIP=ffffffff8b16f04f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555643f6808 CR3=00000000473fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000200 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd089d0b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8502e7e0 RDI=ffffffff9a5b2f20 RBP=ffffffff9a5b2ee0 RSP=ffffc90007f06e58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34b6636 R15=dffffc0000000000 RIP=ffffffff8502e807 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f80d35556c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0fbde456c0 CR3=00000000507c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d27e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d27e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d27e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d27e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d27e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d27e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d28eb488 00007f80d28eb480 00007f80d28eb478 00007f80d28eb450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d344d100 00007f80d28eb440 00007f80d28eb458 00007f80d28eb4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80d28eb498 00007f80d28eb490 00007f80d28eb488 00007f80d28eb480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000005ed RBX=ffffffff969a18d0 RCX=1ffff11006ac982b RDX=0000000000000046 RSI=0000000000000000 RDI=ffff88803564c150 RBP=ffffffff8dffa358 RSP=ffffc900064af6e8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff9014435f R11=0000000000000001 R12=ffff88803564c150 R13=0000000000000000 R14=0000000000000000 R15=ffffffff9a31d160 RIP=ffffffff8b16cbc4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555643f6500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0fbd1528a0 CR3=0000000029bee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd089d0b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fbd1e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff96922708 RBX=0000000000000019 RCX=ffffffff8168c94e RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96922700 RBP=ffffffff96966208 RSP=ffffc90003ccf490 R8 =0000000000000000 R9 =fffffbfff2d244f5 R10=ffffffff969227af R11=0000000000000000 R12=dffffc0000000000 R13=ffff8880306f0bf8 R14=0000000000000002 R15=ffff8880306f0000 RIP=ffffffff81ea7bdb RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b46b500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe9cb0456c0 CR3=000000001e6ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000200 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8bbb9af0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ca3e8762 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ca3e876f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ca3e8769 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ca3e877d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ca3e8803 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ca3e88e1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000