last executing test programs: 4.829480476s ago: executing program 0 (id=2328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000987010073797a30"], 0xe8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8d28}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.306331155s ago: executing program 0 (id=2333): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000700), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20882) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSW(r2, 0x80044501, &(0x7f0000000300)=""/243) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000001200), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r5) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240), 0x0, r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x0, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) 3.065679046s ago: executing program 2 (id=2345): r0 = syz_io_uring_setup(0xe7f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000020240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 2.999875273s ago: executing program 2 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7ff, &(0x7f0000000040)=0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_setup(0x10001, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="a1", 0x1}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r5}, 0x10) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108"], 0x3c}}, 0x0) 2.766084048s ago: executing program 2 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)={0x24, r1, 0x501, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) 2.704142164s ago: executing program 2 (id=2349): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x2}) 2.628878932s ago: executing program 2 (id=2351): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xffffffffffffbfff, 0x726440) syz_usb_disconnect(r2) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000001780)='%U', 0x2, 0x4044005, 0x0, 0x0) sendto$inet(r4, &(0x7f00000003c0)="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", 0xffffffffffffff7c, 0x10, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/120, 0x78, 0x0, 0x0}, &(0x7f0000000080)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r1, r3) socket$nl_route(0x10, 0x3, 0x0) 2.021039253s ago: executing program 0 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7ff, &(0x7f0000000040)=0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_setup(0x10001, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="a1", 0x1}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r5}, 0x10) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108"], 0x3c}}, 0x0) 1.7514314s ago: executing program 0 (id=2358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r1, &(0x7f0000001a00)=""/177, 0xb1) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000000000) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x6, 0x200, 0x1, 0xa}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3, 0x922578b275cbcafb}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x86) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x330, r5}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc0040, 0x0) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) unshare(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.638820058s ago: executing program 1 (id=2359): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x2}) 1.438172016s ago: executing program 0 (id=2362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) close(r0) 1.389741916s ago: executing program 1 (id=2363): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) 1.389061069s ago: executing program 0 (id=2365): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0xc0045b0f, 0x0) 1.329576075s ago: executing program 3 (id=2366): socket$inet6(0xa, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000030000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="38007a8014000200ef0d60b924c6e115b3b4cb52be6a65430c000300046b97a2d52c9bb714000100d25b495c5f683be934851877dd48efe9"], 0x54}}, 0x0) 1.219455887s ago: executing program 3 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7ff, &(0x7f0000000040)=0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_setup(0x10001, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="a1", 0x1}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r5}, 0x10) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108"], 0x3c}}, 0x0) 1.039552777s ago: executing program 1 (id=2368): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0xf0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000004c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000140)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYRES8=r2, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x10) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r8, &(0x7f0000000200)=""/209, 0xd1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r9}, {r9}], 0x2, 0x54704099) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x129, @tick, 0xfc, {0x1}, 0x0, 0x0, 0xff}) tkill(r7, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000480)={{0x80}, 'port1\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x500) read$FUSE(r9, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x4}, [{0x2, 0x4}, {}, {0x2, 0x5}, {0x2, 0x0, r10}], {0x4, 0x4}, [{0x8, 0x1, r11}, {0x8, 0x2, r12}, {0x8, 0x6, r13}], {0x10, 0x1}, {0x20, 0x1}}, 0x5c, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x87}, {0x6}]}) r14 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r14, &(0x7f0000000440), 0x10) 1.005601605s ago: executing program 3 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x1e, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000080)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x900}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x80140912, 0x0) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000100)=@nfc, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, &(0x7f0000000340)="050000000100", 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0857f9f582f03000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 335.343038ms ago: executing program 3 (id=2370): r0 = io_uring_setup(0x522, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000240)=r3, 0x1) 229.852595ms ago: executing program 3 (id=2371): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x2}) 214.467763ms ago: executing program 3 (id=2372): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x4010, r1, 0x132ca000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) r4 = io_uring_setup(0x30d1, &(0x7f0000000000)={0x0, 0x63d7, 0x0, 0x0, 0x0, 0x0, r2}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r6, &(0x7f0000000480)=[@t={0x4, 0x0, 0x0, 0x0, @generic}, @t={0x81, 0x0, 0x0, 0x0, @generic}], 0x10) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000480)=0x2, 0x4) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000001c0)="16cd294e1754a6b9e405ea70495ca6f58136abfe4507a4fe03a6b48a55", &(0x7f00000004c0)="158ad207c96d13e85d3a9fd1f7a0d6bb938c7c89d1a3738746902c48b41e35034fbfb8f0ed3625ae534a3d66bf8239f5222aa34a2214d0c3aa5db8a6b9b6c15a834500c4b7709ec6fcc12aec91072a5438b9097b22b3bc88d78a80ed153cbec987de860fee46ba092c81e59271d5c86325c6044f4c7a8c614b44f4acf359a3f6ef631f537904489b0db2ff84dbf19fed576fd8c47eac4b4b5e7f0f259a6eb35c8942f81a3beccff7234f8f"}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x0) 198.232448ms ago: executing program 1 (id=2373): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc0046686, 0x0) 87.438002ms ago: executing program 1 (id=2374): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) 87.200627ms ago: executing program 2 (id=2375): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001580)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x4800) socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r3}, 0x38) 0s ago: executing program 1 (id=2376): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.0.1525'. [ 281.594395][T10051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1525'. [ 281.737152][ T76] team0 (unregistering): Port device team_slave_1 removed [ 281.836280][ T76] team0 (unregistering): Port device team_slave_0 removed [ 281.966433][ T5348] Bluetooth: hci3: command tx timeout [ 283.100113][T10074] netlink: 'syz.0.1531': attribute type 18 has an invalid length. [ 283.532534][ T76] team0 (unregistering): Port device team_slave_1 removed [ 283.627692][ T76] team0 (unregistering): Port device team_slave_0 removed [ 284.033708][ T5341] Bluetooth: hci3: command tx timeout [ 284.113553][ T5341] Bluetooth: hci2: command 0x0406 tx timeout [ 284.380070][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.393647][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.413704][ T9994] bridge_slave_0: entered allmulticast mode [ 284.417872][ T9994] bridge_slave_0: entered promiscuous mode [ 284.423785][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.426970][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.430099][ T9994] bridge_slave_1: entered allmulticast mode [ 284.435109][ T9994] bridge_slave_1: entered promiscuous mode [ 284.560346][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.566140][ T39] audit: type=1400 audit(540.401:689): avc: denied { append } for pid=10079 comm="syz.0.1534" name="usbmon6" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 284.575222][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.686787][ T9994] team0: Port device team_slave_0 added [ 284.728425][ T9994] team0: Port device team_slave_1 added [ 284.732470][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.741042][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.874130][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.876946][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.891149][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.897204][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.906835][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.928558][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.935820][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.947924][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.013950][T10093] input: syz1 as /devices/virtual/input/input27 [ 285.118091][ T39] audit: type=1400 audit(540.951:690): avc: denied { mount } for pid=10095 comm="syz.1.1480" name="/" dev="hugetlbfs" ino=36168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 285.123116][ T9994] hsr_slave_0: entered promiscuous mode [ 285.142471][ T9994] hsr_slave_1: entered promiscuous mode [ 285.254400][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 285.286351][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 285.478225][T10103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.482035][T10103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.485870][T10103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.489673][T10103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.517114][T10103] Zero length message leads to an empty skb [ 285.630291][ T9994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.781776][ T9994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.965634][ T9994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.001055][ T39] audit: type=1400 audit(541.821:691): avc: denied { append } for pid=10106 comm="syz.0.1541" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 286.069822][ T9994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.088652][ T39] audit: type=1400 audit(541.921:692): avc: denied { bind } for pid=10108 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 286.113828][ T5348] Bluetooth: hci3: command tx timeout [ 286.176273][ T76] bridge_slave_1: left allmulticast mode [ 286.179788][ T76] bridge_slave_1: left promiscuous mode [ 286.182553][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.195542][ T76] bridge_slave_0: left allmulticast mode [ 286.197974][ T76] bridge_slave_0: left promiscuous mode [ 286.200752][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.424306][T10117] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 286.466107][ T39] audit: type=1400 audit(542.301:693): avc: denied { append } for pid=10116 comm="syz.1.1546" name="rtc0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 286.619913][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.629063][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.642358][ T76] bond0 (unregistering): Released all slaves [ 286.792221][ T76] bond1 (unregistering): Released all slaves [ 287.215541][ T9994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.225229][ T9994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.247901][ T9994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.374975][ T9994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.480998][T10135] input: syz1 as /devices/virtual/input/input28 [ 287.582112][ T76] hsr_slave_0: left promiscuous mode [ 287.592626][ T76] hsr_slave_1: left promiscuous mode [ 287.600420][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.604161][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.608569][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.611747][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.688329][ T76] veth1_macvtap: left promiscuous mode [ 287.690695][ T76] veth0_macvtap: left promiscuous mode [ 287.693311][ T76] veth1_vlan: left promiscuous mode [ 287.699101][ T76] veth0_vlan: left promiscuous mode [ 289.139735][ T76] team0 (unregistering): Port device team_slave_1 removed [ 289.260112][T10165] input: syz1 as /devices/virtual/input/input29 [ 289.331441][ T76] team0 (unregistering): Port device team_slave_0 removed [ 290.389709][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.420217][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.439645][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.442487][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.467428][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.470577][ T835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.684136][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.730793][ T9994] veth0_vlan: entered promiscuous mode [ 290.740729][ T9994] veth1_vlan: entered promiscuous mode [ 290.769282][ T9994] veth0_macvtap: entered promiscuous mode [ 290.777656][ T9994] veth1_macvtap: entered promiscuous mode [ 290.791818][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.797147][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.801383][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.806179][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.810755][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.815774][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.821323][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.827887][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.832318][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.837122][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.841612][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.846976][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.851905][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.858257][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.869301][ T9994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.873078][ T9994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.877632][ T9994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.881446][ T9994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.936725][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.944127][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.971817][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.999679][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.170385][ T39] audit: type=1400 audit(547.001:694): avc: denied { write } for pid=10193 comm="syz.2.1575" path="socket:[36235]" dev="sockfs" ino=36235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 291.179778][ T39] audit: type=1400 audit(547.001:695): avc: denied { nlmsg_write } for pid=10193 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 291.191441][ T39] audit: type=1400 audit(547.011:696): avc: denied { nlmsg_read } for pid=10193 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 291.361638][ T5348] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 291.950414][ T39] audit: type=1400 audit(547.781:697): avc: denied { setopt } for pid=10221 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.777484][ T39] audit: type=1400 audit(548.611:698): avc: denied { associate } for pid=10239 comm="syz.3.1591" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 292.792798][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.796647][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.799342][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.802047][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.807490][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.810110][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.812670][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.816174][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.819413][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.822389][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.824954][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.827792][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.831096][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.834786][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.837945][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.840843][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.843910][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.846882][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.851390][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.855907][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.859133][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.862342][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.865945][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.869108][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.872179][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.875362][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.878578][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.881724][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.884929][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.888310][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.891710][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.895139][ T5339] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 292.908977][ T5339] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz0] on syz0 [ 292.957509][ T5348] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 292.995542][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 293.242751][ T39] audit: type=1400 audit(549.071:699): avc: denied { connect } for pid=10254 comm="syz.3.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 293.363935][ T39] audit: type=1400 audit(549.191:700): avc: denied { write } for pid=10258 comm="syz.3.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.460216][ T39] audit: type=1400 audit(549.291:701): avc: denied { accept } for pid=10262 comm="syz.3.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.831367][T10280] syz.0.1607: attempt to access beyond end of device [ 293.831367][T10280] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 293.838238][T10280] VFS: unable to read V7 FS superblock on device nbd0. [ 293.841483][T10280] VFS: could not find a valid V7 on nbd0. [ 294.138209][ T5348] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 294.988318][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 295.210554][ T5348] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 295.215413][ T5348] CPU: 3 UID: 0 PID: 5348 Comm: kworker/u33:5 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 295.219880][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.223582][ T39] audit: type=1400 audit(551.051:702): avc: denied { map } for pid=10317 comm="syz.0.1622" path="/dev/dri/card0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.224434][ T5348] Workqueue: hci2 hci_rx_work [ 295.235542][ T5348] Call Trace: [ 295.237163][ T5348] [ 295.238415][ T5348] dump_stack_lvl+0x16c/0x1f0 [ 295.240461][ T5348] sysfs_warn_dup+0x7f/0xa0 [ 295.242519][ T5348] sysfs_create_dir_ns+0x24d/0x2b0 [ 295.244807][ T5348] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 295.247163][ T5348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.249456][ T5348] ? do_raw_spin_unlock+0x172/0x230 [ 295.251530][ T5348] kobject_add_internal+0x2c8/0x990 [ 295.253718][ T5348] kobject_add+0x16f/0x240 [ 295.255582][ T5348] ? __pfx_kobject_add+0x10/0x10 [ 295.257670][ T5348] ? do_raw_spin_unlock+0x172/0x230 [ 295.259839][ T5348] ? kobject_put+0xbe/0x5b0 [ 295.261752][ T5348] device_add+0x289/0x1a70 [ 295.263689][ T5348] ? __pfx_dev_set_name+0x10/0x10 [ 295.265728][ T5348] ? __pfx_device_add+0x10/0x10 [ 295.267754][ T5348] ? mgmt_send_event_skb+0x2f2/0x460 [ 295.270049][ T5348] hci_conn_add_sysfs+0x17e/0x230 [ 295.272128][ T5348] le_conn_complete_evt+0x1078/0x1d80 [ 295.274441][ T5348] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 295.276778][ T5348] ? trace_contention_end+0xea/0x140 [ 295.278983][ T5348] ? __mutex_lock+0x1a6/0x9c0 [ 295.281073][ T5348] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 295.283516][ T5348] ? skb_pull_data+0x166/0x210 [ 295.285521][ T5348] hci_le_meta_evt+0x2e2/0x5d0 [ 295.287639][ T5348] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 295.290443][ T5348] hci_event_packet+0x666/0x1180 [ 295.292476][ T5348] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 295.294867][ T5348] ? __pfx_hci_event_packet+0x10/0x10 [ 295.297207][ T5348] ? mark_held_locks+0x9f/0xe0 [ 295.299197][ T5348] ? kcov_remote_start+0x3d1/0x6e0 [ 295.301400][ T5348] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.303805][ T5348] hci_rx_work+0x2c6/0x1610 [ 295.305806][ T5348] process_one_work+0x9c5/0x1b40 [ 295.307918][ T5348] ? __pfx_lock_acquire+0x10/0x10 [ 295.310235][ T5348] ? __pfx_process_one_work+0x10/0x10 [ 295.312693][ T5348] ? assign_work+0x1a0/0x250 [ 295.315022][ T5348] worker_thread+0x6c8/0xf20 [ 295.317213][ T5348] ? __pfx_worker_thread+0x10/0x10 [ 295.319569][ T5348] kthread+0x2c1/0x3a0 [ 295.321406][ T5348] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.323684][ T5348] ? __pfx_kthread+0x10/0x10 [ 295.325679][ T5348] ret_from_fork+0x45/0x80 [ 295.327486][ T5348] ? __pfx_kthread+0x10/0x10 [ 295.329423][ T5348] ret_from_fork_asm+0x1a/0x30 [ 295.331470][ T5348] [ 295.333152][ T5348] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 295.339064][ T5348] Bluetooth: hci2: failed to register connection device [ 295.827737][ T39] audit: type=1400 audit(551.661:703): avc: denied { read } for pid=10333 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 296.047480][T10344] fuse: Bad value for 'fd' [ 297.395458][ T5348] Bluetooth: hci2: command 0x0406 tx timeout [ 297.457651][ T5348] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 297.462134][ T5348] CPU: 3 UID: 0 PID: 5348 Comm: kworker/u33:5 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 297.466737][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.471375][ T5348] Workqueue: hci3 hci_rx_work [ 297.481386][ T5348] Call Trace: [ 297.482891][ T5348] [ 297.484194][ T5348] dump_stack_lvl+0x16c/0x1f0 [ 297.486334][ T5348] sysfs_warn_dup+0x7f/0xa0 [ 297.488313][ T5348] sysfs_create_dir_ns+0x24d/0x2b0 [ 297.490524][ T5348] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 297.501849][ T5348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.504230][ T5348] ? do_raw_spin_unlock+0x172/0x230 [ 297.521331][ T5348] kobject_add_internal+0x2c8/0x990 [ 297.523474][ T5348] kobject_add+0x16f/0x240 [ 297.525543][ T5348] ? __pfx_kobject_add+0x10/0x10 [ 297.527432][ T5348] ? do_raw_spin_unlock+0x172/0x230 [ 297.529506][ T5348] ? kobject_put+0xbe/0x5b0 [ 297.531499][ T5348] device_add+0x289/0x1a70 [ 297.533222][ T5348] ? __pfx_dev_set_name+0x10/0x10 [ 297.535069][ T5348] ? __pfx_device_add+0x10/0x10 [ 297.541120][ T5348] ? mgmt_send_event_skb+0x2f2/0x460 [ 297.543187][ T5348] hci_conn_add_sysfs+0x17e/0x230 [ 297.545183][ T5348] le_conn_complete_evt+0x1078/0x1d80 [ 297.547304][ T5348] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 297.549500][ T5348] ? trace_contention_end+0xea/0x140 [ 297.551538][ T5348] ? __mutex_lock+0x1a6/0x9c0 [ 297.553383][ T5348] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 297.555627][ T5348] ? skb_pull_data+0x166/0x210 [ 297.557466][ T5348] hci_le_meta_evt+0x2e2/0x5d0 [ 297.559290][ T5348] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 297.561776][ T5348] hci_event_packet+0x666/0x1180 [ 297.563719][ T5348] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 297.565777][ T5348] ? __pfx_hci_event_packet+0x10/0x10 [ 297.567866][ T5348] ? mark_held_locks+0x9f/0xe0 [ 297.569680][ T5348] ? kcov_remote_start+0x3d1/0x6e0 [ 297.571418][ T5348] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.573334][ T5348] hci_rx_work+0x2c6/0x1610 [ 297.575104][ T5348] process_one_work+0x9c5/0x1b40 [ 297.577315][ T5348] ? __pfx_lock_acquire+0x10/0x10 [ 297.579277][ T5348] ? __pfx_process_one_work+0x10/0x10 [ 297.581354][ T5348] ? assign_work+0x1a0/0x250 [ 297.583145][ T5348] worker_thread+0x6c8/0xf20 [ 297.584940][ T5348] ? __pfx_worker_thread+0x10/0x10 [ 297.586934][ T5348] kthread+0x2c1/0x3a0 [ 297.588537][ T5348] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.590557][ T5348] ? __pfx_kthread+0x10/0x10 [ 297.592342][ T5348] ret_from_fork+0x45/0x80 [ 297.594098][ T5348] ? __pfx_kthread+0x10/0x10 [ 297.595870][ T5348] ret_from_fork_asm+0x1a/0x30 [ 297.597730][ T5348] [ 297.600843][ T5348] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 297.606671][ T5348] Bluetooth: hci3: failed to register connection device [ 298.263295][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.267052][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.270284][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.273189][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.277255][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.280388][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.284783][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.287772][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.290930][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.294599][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.297804][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.300872][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.304706][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.307884][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.310901][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.314381][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.317351][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.319765][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.322222][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.324929][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.328285][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.331554][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.335328][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.339212][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.344586][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.347976][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.350993][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.355282][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.358123][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.361123][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.364912][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.369236][ T59] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 298.376980][ T59] hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz0] on syz0 [ 299.235532][T10372] fuse: Bad value for 'fd' [ 299.280617][T10388] binder: 10387:10388 ioctl 40046210 0 returned -14 [ 299.284689][T10388] binder: 10387:10388 ioctl c0306201 20000280 returned -11 [ 299.633597][ T5348] Bluetooth: hci3: command tx timeout [ 300.258600][ T39] audit: type=1326 audit(556.091:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.293950][ T39] audit: type=1326 audit(556.091:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.315696][ T5348] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 300.320384][ T39] audit: type=1326 audit(556.091:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.336489][ T39] audit: type=1326 audit(556.091:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.357683][ T39] audit: type=1326 audit(556.091:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.366757][ T39] audit: type=1326 audit(556.091:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.376894][ T39] audit: type=1326 audit(556.091:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.387457][ T39] audit: type=1326 audit(556.091:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.396962][ T39] audit: type=1326 audit(556.101:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.405425][ T39] audit: type=1326 audit(556.101:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.0.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 300.427192][T10413] x_tables: ip_tables: SET.2 target: invalid size 16 (kernel) != (user) 0 [ 300.735418][ T5341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.743093][ T5341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.761168][ T5341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.771168][ T5341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.783053][ T5341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 300.792487][ T5341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.123637][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.129824][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.211173][T10420] chnl_net:caif_netlink_parms(): no params data found [ 301.274357][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.278512][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.515555][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.529952][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.531915][T10433] use of bytesused == 0 is deprecated and will be removed in the future, [ 301.549440][T10433] use the actual size instead. [ 301.566680][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.569983][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.573201][T10420] bridge_slave_0: entered allmulticast mode [ 301.577205][T10420] bridge_slave_0: entered promiscuous mode [ 301.586385][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.592126][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.598661][T10420] bridge_slave_1: entered allmulticast mode [ 301.602703][T10420] bridge_slave_1: entered promiscuous mode [ 301.646621][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.650848][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.682438][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.688246][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.741595][T10420] team0: Port device team_slave_0 added [ 301.750510][T10420] team0: Port device team_slave_1 added [ 301.810378][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.816707][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.827832][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.834632][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.837562][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.850506][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.986072][T10420] hsr_slave_0: entered promiscuous mode [ 301.992200][T10420] hsr_slave_1: entered promiscuous mode [ 301.995235][T10420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.998249][T10420] Cannot create hsr debugfs directory [ 302.061034][ T5348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.066480][ T5348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.075232][ T11] bridge_slave_1: left allmulticast mode [ 302.078250][ T5348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.084346][ T5348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.087452][ T11] bridge_slave_1: left promiscuous mode [ 302.092250][ T5348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 302.093318][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.099710][ T5348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.107682][ T11] bridge_slave_0: left allmulticast mode [ 302.110215][ T11] bridge_slave_0: left promiscuous mode [ 302.112902][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.140591][T10450] ax25_connect(): syz.3.1667 uses autobind, please contact jreuter@yaina.de [ 302.373072][ T5341] Bluetooth: hci2: command 0x0406 tx timeout [ 302.590852][T10461] overlay: ./file1 is not a directory [ 302.761413][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.778044][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.786598][ T11] bond0 (unregistering): Released all slaves [ 302.837274][ T5341] Bluetooth: hci0: command tx timeout [ 303.289304][T10447] chnl_net:caif_netlink_parms(): no params data found [ 303.405602][ T11] hsr_slave_0: left promiscuous mode [ 303.409591][ T11] hsr_slave_1: left promiscuous mode [ 303.412677][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.419689][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.423634][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.427082][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.472715][ T11] veth1_macvtap: left promiscuous mode [ 303.478183][ T11] veth0_macvtap: left promiscuous mode [ 303.480805][ T11] veth1_vlan: left promiscuous mode [ 303.483181][ T11] veth0_vlan: left promiscuous mode [ 304.206790][ T5341] Bluetooth: hci4: command tx timeout [ 304.552923][ T11] team0 (unregistering): Port device team_slave_1 removed [ 304.643206][ T11] team0 (unregistering): Port device team_slave_0 removed [ 304.916862][ T5341] Bluetooth: hci0: command tx timeout [ 305.075661][T10502] overlay: ./file0 is not a directory [ 305.477418][T10491] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1677'. [ 305.560950][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.565938][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.569494][T10447] bridge_slave_0: entered allmulticast mode [ 305.580908][T10447] bridge_slave_0: entered promiscuous mode [ 305.599847][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.606165][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.615408][T10447] bridge_slave_1: entered allmulticast mode [ 305.619658][T10447] bridge_slave_1: entered promiscuous mode [ 305.697301][T10447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.717883][T10447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.873908][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 305.873925][ T39] audit: type=1400 audit(561.711:726): avc: denied { setopt } for pid=10514 comm="syz.0.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.939284][T10447] team0: Port device team_slave_0 added [ 305.945050][T10447] team0: Port device team_slave_1 added [ 306.036496][T10447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.039423][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.075977][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.092137][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.103483][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.119704][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.135333][T10420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.155124][T10420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.166923][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1686'. [ 306.179720][T10420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.214273][T10420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.263885][T10447] hsr_slave_0: entered promiscuous mode [ 306.267251][T10447] hsr_slave_1: entered promiscuous mode [ 306.270298][T10447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.275175][T10447] Cannot create hsr debugfs directory [ 306.283938][ T5341] Bluetooth: hci4: command tx timeout [ 306.469430][ T835] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz1 [ 306.551464][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.558507][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.697040][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.701749][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.802570][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.807241][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.871633][T10420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.905986][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.919608][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.939719][T10420] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.956191][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.959255][ T6349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.965292][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.968139][ T6349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.005429][ T5341] Bluetooth: hci0: command tx timeout [ 307.067696][ T11] team0: left allmulticast mode [ 307.070042][ T11] team_slave_0: left allmulticast mode [ 307.072934][ T11] team_slave_1: left allmulticast mode [ 307.076510][ T11] bridge0: port 2(team0) entered disabled state [ 307.082771][ T11] bridge_slave_0: left allmulticast mode [ 307.085836][ T11] bridge_slave_0: left promiscuous mode [ 307.088514][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.116768][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.133729][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.140526][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.162657][ T11] bond0 (unregistering): Released all slaves [ 308.251660][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.329655][T10420] veth0_vlan: entered promiscuous mode [ 308.339843][T10420] veth1_vlan: entered promiscuous mode [ 308.353650][ T5341] Bluetooth: hci4: command tx timeout [ 308.414319][T10420] veth0_macvtap: entered promiscuous mode [ 308.421062][T10420] veth1_macvtap: entered promiscuous mode [ 308.443678][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.447762][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.451571][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.459086][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.463815][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.468691][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.475710][T10420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.486499][ T835] hid-generic 0000:0000:0000.001A: hidraw1: HID v0.00 Device [syz1] on syz1 [ 308.504693][ T59] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 308.626132][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.630880][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.635245][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.639476][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.645746][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.649676][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.655572][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.683682][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 308.687563][T10420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.688836][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.691359][T10420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.691388][T10420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.700558][ T59] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 308.708093][ T59] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 308.711169][T10420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.711582][ T59] usb 5-1: Product: syz [ 308.718016][ T59] usb 5-1: Manufacturer: syz [ 308.720423][ T59] usb 5-1: SerialNumber: syz [ 308.725973][ T59] usb 5-1: config 0 descriptor?? [ 308.878107][ T11] hsr_slave_0: left promiscuous mode [ 308.881405][ T11] hsr_slave_1: left promiscuous mode [ 308.885129][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.888458][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.892997][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.897876][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.936957][ T11] veth1_macvtap: left promiscuous mode [ 308.939418][ T11] veth0_macvtap: left promiscuous mode [ 308.941888][ T11] veth1_vlan: left promiscuous mode [ 309.071433][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.079176][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.085547][ T5341] Bluetooth: hci0: command tx timeout [ 309.093566][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.101244][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.125180][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.137030][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.821029][ T1110] Bluetooth: hci1: Frame reassembly failed (-84) [ 309.825706][T10596] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 309.975725][ T11] team_slave_1 (unregistering): left promiscuous mode [ 309.982405][ T11] team0 (unregistering): Port device team_slave_1 removed [ 310.080758][ T11] team_slave_0 (unregistering): left promiscuous mode [ 310.086719][ T11] team0 (unregistering): Port device team_slave_0 removed [ 310.434930][ T5348] Bluetooth: hci4: command tx timeout [ 310.908058][T10447] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.935089][T10447] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.939680][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.943360][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.960909][T10447] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.991249][T10447] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.035689][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.039122][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.120468][ T8] usb 5-1: USB disconnect, device number 10 [ 311.262033][T10447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.298624][T10447] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.315820][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.329569][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.338598][ T5348] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 311.366810][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: kworker/u33:5 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 311.371046][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.375304][ T5348] Workqueue: hci0 hci_rx_work [ 311.377399][ T5348] Call Trace: [ 311.379142][ T5348] [ 311.380799][ T5348] dump_stack_lvl+0x16c/0x1f0 [ 311.382882][ T5348] sysfs_warn_dup+0x7f/0xa0 [ 311.384802][ T5348] sysfs_create_dir_ns+0x24d/0x2b0 [ 311.387883][ T5348] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 311.390300][ T5348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.392980][ T5348] ? do_raw_spin_unlock+0x172/0x230 [ 311.396498][ T5348] kobject_add_internal+0x2c8/0x990 [ 311.401579][ T5348] kobject_add+0x16f/0x240 [ 311.403616][ T5348] ? __pfx_kobject_add+0x10/0x10 [ 311.418886][ T5348] ? do_raw_spin_unlock+0x172/0x230 [ 311.427784][ T5348] ? kobject_put+0xbe/0x5b0 [ 311.430011][ T5348] device_add+0x289/0x1a70 [ 311.432109][ T5348] ? __pfx_dev_set_name+0x10/0x10 [ 311.434311][ T5348] ? __pfx_device_add+0x10/0x10 [ 311.436252][ T5348] ? mgmt_send_event_skb+0x2f2/0x460 [ 311.438668][ T5348] hci_conn_add_sysfs+0x17e/0x230 [ 311.441392][ T5348] le_conn_complete_evt+0x1078/0x1d80 [ 311.443890][ T5348] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 311.446485][ T5348] ? trace_contention_end+0xea/0x140 [ 311.449370][ T5348] ? __mutex_lock+0x1a6/0x9c0 [ 311.451784][ T5348] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 311.455241][ T5348] ? skb_pull_data+0x166/0x210 [ 311.457870][ T5348] hci_le_meta_evt+0x2e2/0x5d0 [ 311.460653][ T5348] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 311.464258][ T5348] hci_event_packet+0x666/0x1180 [ 311.466747][ T5348] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 311.469490][ T5348] ? __pfx_hci_event_packet+0x10/0x10 [ 311.471955][ T5348] ? mark_held_locks+0x9f/0xe0 [ 311.474747][ T5348] ? kcov_remote_start+0x3d1/0x6e0 [ 311.477962][ T5348] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.480814][ T5348] hci_rx_work+0x2c6/0x1610 [ 311.483638][ T5348] process_one_work+0x9c5/0x1b40 [ 311.486795][ T5348] ? __pfx_lock_acquire+0x10/0x10 [ 311.489975][ T5348] ? __pfx_process_one_work+0x10/0x10 [ 311.493333][ T5348] ? assign_work+0x1a0/0x250 [ 311.496238][ T5348] worker_thread+0x6c8/0xf20 [ 311.498389][ T5348] ? __pfx_worker_thread+0x10/0x10 [ 311.500551][ T5348] kthread+0x2c1/0x3a0 [ 311.502616][ T5348] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.504797][ T5348] ? __pfx_kthread+0x10/0x10 [ 311.506666][ T5348] ret_from_fork+0x45/0x80 [ 311.508444][ T5348] ? __pfx_kthread+0x10/0x10 [ 311.510155][ T5348] ret_from_fork_asm+0x1a/0x30 [ 311.512195][ T5348] [ 311.520268][ T5348] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 311.527008][ T5348] Bluetooth: hci0: failed to register connection device [ 311.548335][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.551610][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.755655][T10447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.792401][T10447] veth0_vlan: entered promiscuous mode [ 311.812590][T10447] veth1_vlan: entered promiscuous mode [ 311.847047][T10447] veth0_macvtap: entered promiscuous mode [ 311.851232][T10447] veth1_macvtap: entered promiscuous mode [ 311.863736][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.863752][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.863762][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.863773][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.863782][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.863794][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.874384][ T5341] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 311.884123][T10447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.909149][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.920780][ T5341] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 311.924437][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.955532][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.955549][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.955563][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.955572][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.957407][T10447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.964544][T10447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.989435][T10447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.994722][T10447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.994752][T10447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.103604][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.104409][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.106927][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.110183][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.259598][ T39] audit: type=1400 audit(568.091:727): avc: denied { write } for pid=10637 comm="syz.1.1713" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.630184][ T39] audit: type=1400 audit(568.461:728): avc: denied { write } for pid=10657 comm="syz.0.1718" path="socket:[36583]" dev="sockfs" ino=36583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 312.640406][ T39] audit: type=1400 audit(568.481:729): avc: denied { setopt } for pid=10657 comm="syz.0.1718" lport=55679 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 312.933591][T10669] syz.3.1722 (10669) used obsolete PPPIOCDETACH ioctl [ 312.938206][T10669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10669 comm=syz.3.1722 [ 312.946532][ T4763] Bluetooth: Unexpected continuation frame (len 44) [ 312.954815][T10672] netem: change failed [ 312.966871][T10674] binder: 10673:10674 ioctl c0306201 0 returned -14 [ 313.115817][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1726'. [ 313.119642][T10682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.122647][T10682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.140538][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 313.483662][ T57] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 313.685450][ T57] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 313.689885][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.695859][ T57] usb 6-1: config 0 descriptor?? [ 313.700575][ T57] cp210x 6-1:0.0: cp210x converter detected [ 313.931110][ T39] audit: type=1400 audit(569.761:730): avc: denied { mount } for pid=10686 comm="syz.1.1729" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 314.007610][T10696] syz.2.1731: attempt to access beyond end of device [ 314.007610][T10696] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 314.017462][T10696] syz.2.1731: attempt to access beyond end of device [ 314.017462][T10696] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 314.029898][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 314.052189][T10696] syz.2.1731: attempt to access beyond end of device [ 314.052189][T10696] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 314.064234][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 314.068151][T10696] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 314.072005][T10696] UDF-fs: Scanning with blocksize 512 failed [ 314.089586][T10696] syz.2.1731: attempt to access beyond end of device [ 314.089586][T10696] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 314.098244][T10696] syz.2.1731: attempt to access beyond end of device [ 314.098244][T10696] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 314.116304][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 314.139990][T10696] syz.2.1731: attempt to access beyond end of device [ 314.139990][T10696] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 314.150443][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 314.161768][T10696] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 314.168949][T10696] UDF-fs: Scanning with blocksize 1024 failed [ 314.182185][ T57] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 314.188405][T10696] syz.2.1731: attempt to access beyond end of device [ 314.188405][T10696] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 314.194385][T10696] syz.2.1731: attempt to access beyond end of device [ 314.194385][T10696] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 314.196163][ T57] cp210x 6-1:0.0: querying part number failed [ 314.214507][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 314.224678][ T57] usb 6-1: cp210x converter now attached to ttyUSB0 [ 314.229223][T10696] syz.2.1731: attempt to access beyond end of device [ 314.229223][T10696] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 314.235137][ T57] usb 6-1: USB disconnect, device number 14 [ 314.248926][ T57] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 314.249506][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 314.257477][ T57] cp210x 6-1:0.0: device disconnected [ 314.263089][T10696] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 314.268189][T10696] UDF-fs: Scanning with blocksize 2048 failed [ 314.272220][T10696] syz.2.1731: attempt to access beyond end of device [ 314.272220][T10696] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 314.292190][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 314.297375][T10696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 314.301813][T10696] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 314.305916][T10696] UDF-fs: Scanning with blocksize 4096 failed [ 314.309041][T10696] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 314.500885][T10707] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 314.854798][T10720] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1738'. [ 314.863596][T10720] netlink: 'syz.1.1738': attribute type 2 has an invalid length. [ 314.872525][T10720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1738'. [ 316.114419][ T6349] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 316.322661][ T6349] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 316.326809][ T6349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.328638][ T6349] usb 6-1: config 0 descriptor?? [ 316.345501][ T6349] cp210x 6-1:0.0: cp210x converter detected [ 316.719850][ T6349] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 316.733187][ T6349] cp210x 6-1:0.0: querying part number failed [ 316.741851][ T6349] usb 6-1: cp210x converter now attached to ttyUSB0 [ 316.754751][ T6349] usb 6-1: USB disconnect, device number 15 [ 316.763886][ T6349] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.767388][ T6349] cp210x 6-1:0.0: device disconnected [ 316.995100][ T4763] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 316.999071][ T4763] Bluetooth: hci0: Injecting HCI hardware error event [ 317.003848][ T5341] Bluetooth: hci0: hardware error 0x00 [ 317.320003][T10788] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1763'. [ 317.326067][T10788] netlink: 'syz.1.1763': attribute type 2 has an invalid length. [ 317.338359][T10788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1763'. [ 317.350054][ T4763] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 317.393313][T10794] capability: warning: `syz.1.1764' uses 32-bit capabilities (legacy support in use) [ 317.498414][ T39] audit: type=1400 audit(573.331:731): avc: denied { mounton } for pid=10799 comm="syz.1.1765" path="/22/file0/file0" dev="ramfs" ino=42328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 317.518329][T10800] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 317.522126][T10800] overlayfs: failed to set xattr on upper [ 317.525748][T10800] overlayfs: ...falling back to redirect_dir=nofollow. [ 317.529197][T10800] overlayfs: ...falling back to index=off. [ 317.532154][T10800] overlayfs: ...falling back to uuid=null. [ 317.548652][ T39] audit: type=1400 audit(573.381:732): avc: denied { create } for pid=10799 comm="syz.1.1765" name="#15" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 317.573514][ T39] audit: type=1400 audit(573.381:733): avc: denied { link } for pid=10799 comm="syz.1.1765" name="#15" dev="ramfs" ino=42332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 317.593533][ T39] audit: type=1400 audit(573.381:734): avc: denied { rename } for pid=10799 comm="syz.1.1765" name="#16" dev="ramfs" ino=42332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 317.620528][ T39] audit: type=1400 audit(573.451:735): avc: denied { unlink } for pid=10420 comm="syz-executor" name="#15" dev="ramfs" ino=42332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 317.698233][T10809] netem: change failed [ 317.708308][ T39] audit: type=1400 audit(573.541:736): avc: denied { map } for pid=10807 comm="syz.1.1768" path="socket:[42343]" dev="sockfs" ino=42343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 317.720774][ T39] audit: type=1400 audit(573.541:737): avc: denied { accept } for pid=10807 comm="syz.1.1768" path="socket:[42343]" dev="sockfs" ino=42343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 317.789889][ T39] audit: type=1800 audit(573.621:738): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1769" name="/" dev="9p" ino=2 res=0 errno=0 [ 317.957935][T10815] XFS (nullb0): Invalid superblock magic number [ 318.280454][ T39] audit: type=1400 audit(574.091:739): avc: denied { mount } for pid=10824 comm="syz.2.1772" name="/" dev="rpc_pipefs" ino=41287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 318.411461][ T39] audit: type=1400 audit(574.241:740): avc: denied { watch } for pid=10824 comm="syz.2.1772" path="/11/file0" dev="rpc_pipefs" ino=41287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 318.610446][ T4763] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 318.614939][ T4763] Bluetooth: hci4: Injecting HCI hardware error event [ 318.620146][ T4763] Bluetooth: hci4: hardware error 0x00 [ 318.785537][T10841] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 318.788572][T10841] overlayfs: failed to set xattr on upper [ 318.791093][T10841] overlayfs: ...falling back to redirect_dir=nofollow. [ 318.795156][T10841] overlayfs: ...falling back to index=off. [ 318.797762][T10841] overlayfs: ...falling back to uuid=null. [ 319.075129][ T5341] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 319.099354][T10855] bridge0: port 3(team0) entered disabled state [ 319.102605][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.106070][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.140024][T10855] bridge0: port 3(team0) entered blocking state [ 319.142855][T10855] bridge0: port 3(team0) entered listening state [ 319.145559][T10855] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.148256][T10855] bridge0: port 2(bridge_slave_1) entered listening state [ 319.151146][T10855] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.153875][T10855] bridge0: port 1(bridge_slave_0) entered listening state [ 319.157403][T10855] bridge0: entered promiscuous mode [ 319.159475][T10855] bridge0: entered allmulticast mode [ 319.609649][ T832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 319.821073][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.825824][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.831663][ T832] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 319.839195][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.154604][ T832] usb 5-1: config 0 descriptor?? [ 320.607503][ T832] hid (null): bogus close delimiter [ 320.674048][ T4763] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 320.807205][ T832] usb 5-1: language id specifier not provided by device, defaulting to English [ 321.215689][ T832] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input30 [ 321.318017][ T832] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input31 [ 321.344635][ T832] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input32 [ 321.373872][ T8] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 321.394834][ T4763] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 321.395891][ T832] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input33 [ 321.398279][ T4763] Bluetooth: hci2: Injecting HCI hardware error event [ 321.409595][ T4763] Bluetooth: hci2: hardware error 0x00 [ 321.452383][ T832] uclogic 0003:256C:006D.001B: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 321.573533][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 321.578026][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.602216][ T8] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.606589][ T8] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.617817][ T8] usb 8-1: Product: syz [ 321.620193][ T8] usb 8-1: Manufacturer: syz [ 321.622367][ T8] usb 8-1: SerialNumber: syz [ 321.660547][ T8] usb 8-1: config 0 descriptor?? [ 321.888379][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.891886][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.901196][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.904450][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.911628][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.915061][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.994499][ T59] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 322.147838][ T835] usb 8-1: USB disconnect, device number 15 [ 322.203641][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 322.209131][ T59] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 322.212666][ T59] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 322.216745][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 322.220665][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.224697][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.228448][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.233150][ T59] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 322.236604][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.241343][ T59] usb 7-1: config 0 descriptor?? [ 322.464351][ T8] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 322.470223][ T59] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 322.476816][ T59] usb 7-1: USB disconnect, device number 13 [ 322.481752][ T59] usblp0: removed [ 322.996780][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.999792][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.053558][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 323.146526][T10915] SET target dimension over the limit! [ 323.253609][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 323.263103][ T59] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 323.273865][ T59] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 323.277843][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 323.284114][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.288575][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.293326][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 323.301649][ T59] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 323.307021][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.321297][ T59] usb 7-1: config 0 descriptor?? [ 323.321635][T10921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.335210][ T835] usb 5-1: USB disconnect, device number 11 [ 323.422708][T10923] misc userio: Can't change port type on an already running userio instance [ 323.473641][ T4763] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 323.543805][ T59] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 323.842274][ T991] usb 7-1: USB disconnect, device number 14 [ 323.849666][ T991] usblp0: removed [ 324.792643][T10935] bridge0: port 3(team0) entered disabled state [ 324.796311][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.799618][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.806764][T10935] bridge0: left promiscuous mode [ 324.809864][T10935] bridge0: left allmulticast mode [ 324.823982][ T5341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.830501][ T5341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.836038][ T5341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.842216][ T5341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.847705][ T5341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 324.852020][ T5341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.856616][T10935] bridge0: port 3(team0) entered blocking state [ 324.860024][T10935] bridge0: port 3(team0) entered listening state [ 324.863274][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.866515][T10935] bridge0: port 2(bridge_slave_1) entered listening state [ 324.870303][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.873820][T10935] bridge0: port 1(bridge_slave_0) entered listening state [ 324.878104][T10935] bridge0: entered promiscuous mode [ 324.880339][T10935] bridge0: entered allmulticast mode [ 325.037488][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 325.037501][ T39] audit: type=1326 audit(580.871:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.0.1812" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ad2577299 code=0x0 [ 325.058497][T10946] misc userio: Can't change port type on an already running userio instance [ 325.087969][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.158718][T10950] tipc: Enabling of bearer rejected, failed to enable media [ 325.225971][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.345260][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.391787][T10960] Mount JFS Failure: -22 [ 325.405108][T10960] jfs_mount failed w/return code = -22 [ 325.420211][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.428581][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.432132][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.468209][T10936] chnl_net:caif_netlink_parms(): no params data found [ 325.474758][T10959] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.477888][T10959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.481203][T10959] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.484412][T10959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.489795][T10959] bridge0: entered promiscuous mode [ 325.493575][T10959] bridge0: entered allmulticast mode [ 325.717154][T10936] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.720566][T10936] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.726681][T10936] bridge_slave_0: entered allmulticast mode [ 325.730880][T10936] bridge_slave_0: entered promiscuous mode [ 325.737166][T10936] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.740312][T10936] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.743635][T10936] bridge_slave_1: entered allmulticast mode [ 325.748605][T10936] bridge_slave_1: entered promiscuous mode [ 326.753605][ T5341] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 326.757408][ T5341] Bluetooth: hci3: Injecting HCI hardware error event [ 326.762987][ T4763] Bluetooth: hci3: hardware error 0x00 [ 326.856055][T10936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.862524][T10936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.917801][ T5341] Bluetooth: hci1: command tx timeout [ 326.930030][ T11] bridge_slave_1: left allmulticast mode [ 326.932515][ T11] bridge_slave_1: left promiscuous mode [ 326.940116][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.967586][ T11] bridge_slave_0: left allmulticast mode [ 326.970199][ T11] bridge_slave_0: left promiscuous mode [ 326.972556][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.181999][T10987] misc userio: Can't change port type on an already running userio instance [ 327.338400][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.344526][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.349512][ T11] bond0 (unregistering): Released all slaves [ 327.380089][T10936] team0: Port device team_slave_0 added [ 327.401336][T10936] team0: Port device team_slave_1 added [ 327.495532][T10936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.498985][T10936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.515647][T10936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.522146][T10936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.529547][T10936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.540555][T10936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.737410][T10936] hsr_slave_0: entered promiscuous mode [ 327.741234][T10936] hsr_slave_1: entered promiscuous mode [ 327.745120][T10936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.747936][T10936] Cannot create hsr debugfs directory [ 328.092694][ T11] hsr_slave_0: left promiscuous mode [ 328.098026][ T11] hsr_slave_1: left promiscuous mode [ 328.102971][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.111978][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.120424][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.123806][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.169449][ T11] veth1_macvtap: left promiscuous mode [ 328.171733][ T11] veth0_macvtap: left promiscuous mode [ 328.175251][ T11] veth1_vlan: left promiscuous mode [ 328.177487][ T11] veth0_vlan: left promiscuous mode [ 328.727411][T11026] Mount JFS Failure: -22 [ 328.729735][T11026] jfs_mount failed w/return code = -22 [ 328.833705][ T4763] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 328.995863][ T4763] Bluetooth: hci1: command tx timeout [ 329.468685][ T11] team0 (unregistering): Port device team_slave_1 removed [ 329.567357][ T11] team0 (unregistering): Port device team_slave_0 removed [ 330.355868][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 330.375374][T11013] batman_adv: batadv1: Adding interface: netdevsim0 [ 330.378225][T11013] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.391194][T11013] batman_adv: batadv1: Interface activated: netdevsim0 [ 330.584493][ T39] audit: type=1400 audit(586.421:752): avc: denied { getopt } for pid=11044 comm="syz.0.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 330.785229][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 330.813994][T11059] batman_adv: batadv1: Adding interface: netdevsim0 [ 330.816727][T11059] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.827081][T11059] batman_adv: batadv1: Interface activated: netdevsim0 [ 331.073568][ T4763] Bluetooth: hci1: command tx timeout [ 331.192410][T10936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.246052][T10936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 331.259892][T10936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.270458][T10936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.287723][T11092] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 331.416309][T10936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.440898][T10936] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.451212][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.454574][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.468502][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.471495][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.638178][T11098] loop0: detected capacity change from 0 to 7 [ 331.679658][T11098] Dev loop0: unable to read RDB block 7 [ 331.682801][T11098] loop0: AHDI p4 [ 331.689874][T11098] loop0: partition table partially beyond EOD, [ 331.689993][T10936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.710042][T11098] truncated [ 331.748273][T10936] veth0_vlan: entered promiscuous mode [ 331.759092][T10936] veth1_vlan: entered promiscuous mode [ 331.788490][T10936] veth0_macvtap: entered promiscuous mode [ 331.794265][T10936] veth1_macvtap: entered promiscuous mode [ 331.808356][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.813156][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.819882][T10936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.829489][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.834073][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.838315][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.842871][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.848053][T10936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.852628][T10936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.859093][T10936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.866099][T10936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.869923][T10936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.875401][T10936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.879251][T10936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.023158][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.030933][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.116866][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.124059][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.225056][ T59] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 332.230932][ T59] hid-generic 0000:0000:0000.001C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 332.595366][ T39] audit: type=1400 audit(588.411:753): avc: denied { listen } for pid=11144 comm="syz.2.1866" laddr=0:0:0:1:: faddr=::ffff:100:0:0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.023364][T11150] loop0: detected capacity change from 0 to 7 [ 333.028870][T11150] Dev loop0: unable to read RDB block 7 [ 333.031320][T11150] loop0: AHDI p4 [ 333.032795][T11150] loop0: partition table partially beyond EOD, truncated [ 333.427777][ T39] audit: type=1400 audit(589.261:754): avc: denied { write } for pid=11157 comm="syz.1.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 333.489060][ T5380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 333.495634][ T5380] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 333.556289][ T5383] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 333.736450][ T5383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.741018][ T5383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.745529][ T5383] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 333.749637][ T5383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.757563][ T5383] usb 7-1: config 0 descriptor?? [ 333.884940][T11179] loop0: detected capacity change from 0 to 7 [ 333.888471][T11179] Dev loop0: unable to read RDB block 7 [ 333.890709][T11179] loop0: AHDI p4 [ 333.892219][T11179] loop0: partition table partially beyond EOD, truncated [ 334.212443][ T5383] hid (null): bogus close delimiter [ 334.420713][ T5383] usb 7-1: language id specifier not provided by device, defaulting to English [ 334.832034][ T5383] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001E/input/input37 [ 334.915540][ T5383] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001E/input/input38 [ 334.925733][ T5383] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001E/input/input39 [ 334.936928][ T5383] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001E/input/input40 [ 334.952220][ T5383] uclogic 0003:256C:006D.001E: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 335.563806][T11193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.579344][T11193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.586530][T11195] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1884'. [ 335.590395][T11195] nbd: illegal input index -436207601 [ 335.754316][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 335.779131][T11206] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 335.782286][T11206] batman_adv: batadv1: Removing interface: netdevsim0 [ 335.786718][T11206] batman_adv: batadv2: Adding interface: netdevsim0 [ 335.790123][T11206] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.813304][T11206] batman_adv: batadv2: Interface activated: netdevsim0 [ 336.052707][ T5383] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 336.889672][ T5380] usb 7-1: USB disconnect, device number 15 [ 336.986926][ T39] audit: type=1400 audit(592.831:755): avc: denied { create } for pid=11247 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 336.999085][ T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 337.089012][ T5341] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 337.094001][ T5341] Bluetooth: hci1: Injecting HCI hardware error event [ 337.119246][ T4763] Bluetooth: hci1: hardware error 0x00 [ 337.123620][ T39] audit: type=1400 audit(592.951:756): avc: denied { setopt } for pid=11247 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 337.164997][ T59] usb 5-1: device descriptor read/64, error -71 [ 337.443997][ T59] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 337.603569][ T59] usb 5-1: device descriptor read/64, error -71 [ 337.729481][ T59] usb usb5-port1: attempt power cycle [ 338.192155][ T59] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.254221][ T59] usb 5-1: device descriptor read/8, error -71 [ 338.445111][T11248] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 338.448778][T11248] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 338.543597][ T59] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 338.588978][ T59] usb 5-1: device descriptor read/8, error -71 [ 338.730681][ T59] usb usb5-port1: unable to enumerate USB device [ 338.846943][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.860124][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.874658][T11266] bridge0: left promiscuous mode [ 338.877320][T11266] bridge0: left allmulticast mode [ 338.891227][T11266] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.894809][T11266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.900111][T11266] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.904741][T11266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.982204][T11266] team0: Port device bridge0 added [ 339.233776][ T4763] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 340.227514][ T834] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 340.284156][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 340.288484][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 340.291688][ C3] bridge0: port 3(team0) entered learning state [ 340.416715][ T834] usb 5-1: Using ep0 maxpacket: 16 [ 340.466395][ T834] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.489097][ T834] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 340.494447][ T834] usb 5-1: can't read configurations, error -71 [ 340.596750][ T39] audit: type=1400 audit(596.421:757): avc: denied { append } for pid=11291 comm="syz.1.1919" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.015611][T11316] tipc: Started in network mode [ 343.021170][T11316] tipc: Node identity e0000001, cluster identity 4711 [ 343.025421][T11316] tipc: Enabling of bearer rejected, failed to enable media [ 343.783593][ T6349] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 344.001451][ T6349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.007340][ T6349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.012780][ T6349] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 344.021833][ T6349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.054133][ T6349] usb 7-1: config 0 descriptor?? [ 344.529180][ T6349] hid (null): bogus close delimiter [ 344.730040][ T6349] usb 7-1: language id specifier not provided by device, defaulting to English [ 345.181111][T11346] overlayfs: failed to clone upperpath [ 345.208661][ T6349] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001F/input/input41 [ 345.281183][T11348] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1940'. [ 345.313116][ T6349] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001F/input/input42 [ 345.330800][ T6349] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001F/input/input43 [ 345.343982][ T6349] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:256C:006D.001F/input/input44 [ 345.382168][ T6349] uclogic 0003:256C:006D.001F: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 345.653543][ T5383] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 345.676870][T11357] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 345.703356][ T39] audit: type=1400 audit(601.531:758): avc: denied { execute } for pid=11365 comm="syz.1.1946" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 345.845685][ T5383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.851212][ T5383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.855863][ T5383] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.862511][ T5383] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.868514][ T5383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.876439][ T5383] usb 5-1: config 0 descriptor?? [ 345.903061][ T39] audit: type=1400 audit(601.731:759): avc: denied { connect } for pid=11373 comm="syz.1.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.294418][ T5383] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 346.299029][ T5383] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 346.306763][ T5383] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 346.383580][ T834] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 346.556058][ T5383] usb 5-1: USB disconnect, device number 18 [ 346.934542][ T39] audit: type=1400 audit(602.761:760): avc: denied { mount } for pid=11383 comm="syz.2.1954" name="/" dev="gadgetfs" ino=45385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 346.966839][ T39] audit: type=1400 audit(602.801:761): avc: denied { create } for pid=11388 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.982307][ T39] audit: type=1400 audit(602.811:762): avc: denied { bind } for pid=11388 comm="syz.1.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 347.239574][ T59] usb 7-1: USB disconnect, device number 16 [ 347.502409][ T39] audit: type=1326 audit(603.331:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.1.1969" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2d6577299 code=0x0 [ 347.725257][T11430] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 348.305211][T11452] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 348.599044][ T39] audit: type=1400 audit(604.431:764): avc: denied { read } for pid=11462 comm="syz.1.1988" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 348.613194][ T39] audit: type=1400 audit(604.431:765): avc: denied { open } for pid=11462 comm="syz.1.1988" path="/96/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 348.733686][ T6349] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 348.951490][ T6349] usb 7-1: Using ep0 maxpacket: 16 [ 348.959252][ T39] audit: type=1326 audit(604.801:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11472 comm="syz.1.1992" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2d6577299 code=0x0 [ 348.983129][ T6349] usb 7-1: unable to get BOS descriptor or descriptor too short [ 348.991769][ T6349] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 348.996275][ T6349] usb 7-1: can't read configurations, error -71 [ 349.019349][ C3] vkms_vblank_simulate: vblank timer overrun [ 349.637875][T11489] tipc: Started in network mode [ 349.643614][T11489] tipc: Node identity e0000001, cluster identity 4711 [ 349.653757][T11489] tipc: Enabling of bearer rejected, failed to enable media [ 350.779583][T11496] syzkaller0: entered promiscuous mode [ 350.782757][T11496] syzkaller0: entered allmulticast mode [ 350.786413][T11501] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 350.791671][T11501] syzkaller0: Linktype set failed because interface is up [ 350.805215][ T76] syzkaller0: tun_net_xmit 48 [ 351.272349][ T39] audit: type=1400 audit(607.101:767): avc: denied { read } for pid=11503 comm="syz.3.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 352.024247][ C3] vkms_vblank_simulate: vblank timer overrun [ 354.192280][T11573] support for cryptoloop has been removed. Use dm-crypt instead. [ 354.255983][T11579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11579 comm=syz.0.2027 [ 354.259868][ T39] audit: type=1400 audit(610.091:768): avc: denied { ioctl } for pid=11576 comm="syz.2.2025" path="socket:[44367]" dev="sockfs" ino=44367 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.265033][T11579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2027'. [ 354.750063][T11600] support for cryptoloop has been removed. Use dm-crypt instead. [ 354.832001][ T39] audit: type=1804 audit(610.661:769): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2036" name="/newroot/397/bus/bus" dev="overlay" ino=2132 res=1 errno=0 [ 355.549247][T11615] dccp_xmit_packet: Payload too large (65475) for featneg. [ 355.635105][ C3] bridge0: port 3(team0) entered forwarding state [ 355.638018][ C3] bridge0: topology change detected, propagating [ 355.641131][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.644429][ C3] bridge0: topology change detected, propagating [ 355.647924][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.651638][ C3] bridge0: topology change detected, propagating [ 356.583542][T11645] dccp_xmit_packet: Payload too large (65475) for featneg. [ 357.103749][ T835] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 357.222806][T11662] kvm: pic: non byte write [ 357.241344][T11662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294411775 (8588823550 ns) > initial count (314966016 ns). Using initial count to start timer. [ 357.294853][ T835] usb 7-1: Using ep0 maxpacket: 32 [ 357.299329][ T835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 357.309345][ T835] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 357.313248][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.320067][ T835] usb 7-1: Product: syz [ 357.322907][ T835] usb 7-1: Manufacturer: syz [ 357.327072][ T835] usb 7-1: SerialNumber: syz [ 357.345836][ T835] usb 7-1: config 0 descriptor?? [ 357.348514][T11656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.352162][ T835] hub 7-1:0.0: bad descriptor, ignoring hub [ 357.359018][T11669] syzkaller0: entered promiscuous mode [ 357.361602][T11669] syzkaller0: entered allmulticast mode [ 357.363553][ T835] hub 7-1:0.0: probe with driver hub failed with error -5 [ 357.366376][ T76] syzkaller0: tun_net_xmit 48 [ 357.370955][ T835] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input45 [ 357.376456][T11669] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 357.379477][T11669] syzkaller0: Linktype set failed because interface is up [ 357.596160][ T832] usb 7-1: USB disconnect, device number 19 [ 357.596334][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 358.164368][ T39] audit: type=1400 audit(613.971:770): avc: denied { write } for pid=11672 comm="syz.3.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 360.210277][T11715] netlink: 'syz.2.2072': attribute type 2 has an invalid length. [ 360.214224][T11715] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 360.217686][T11715] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2072'. [ 360.358564][T11718] syzkaller0: entered promiscuous mode [ 360.361411][T11718] syzkaller0: entered allmulticast mode [ 360.369820][ T1146] syzkaller0: tun_net_xmit 48 [ 360.382730][T11718] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 360.386718][T11718] syzkaller0: Linktype set failed because interface is up [ 361.138506][ T39] audit: type=1400 audit(616.971:771): avc: denied { write } for pid=11729 comm="syz.3.2076" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 361.237319][ T39] audit: type=1400 audit(617.041:772): avc: denied { setattr } for pid=11729 comm="syz.3.2076" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 361.706038][ T5339] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 361.903497][ T5339] usb 5-1: Using ep0 maxpacket: 8 [ 361.914364][ T5339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.926982][ T5339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.941427][ T5339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.956657][ T5339] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.971490][ T5339] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 361.980940][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.238513][ T5339] usb 5-1: GET_CAPABILITIES returned 0 [ 362.241371][ T5339] usbtmc 5-1:16.0: can't read capabilities [ 362.453771][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.459447][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.463188][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.467296][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.471005][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.483671][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.487283][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.490740][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.494270][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.507703][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.512074][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.516093][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.520375][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.529528][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.534188][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.537990][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.545298][ T57] usb 5-1: USB disconnect, device number 19 [ 363.052306][ T39] audit: type=1400 audit(618.881:773): avc: denied { listen } for pid=11746 comm="syz.3.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 363.134104][T11750] loop0: detected capacity change from 0 to 7 [ 363.141211][T11750] Dev loop0: unable to read RDB block 7 [ 363.146114][T11750] loop0: AHDI p3 [ 363.147748][T11750] loop0: partition table partially beyond EOD, truncated [ 363.268280][T11756] netlink: 'syz.0.2085': attribute type 10 has an invalid length. [ 363.277393][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2085'. [ 363.497162][T11771] netlink: 'syz.0.2090': attribute type 10 has an invalid length. [ 363.499826][ T39] audit: type=1400 audit(619.331:774): avc: denied { mounton } for pid=11759 comm="syz.3.2087" path="/proc/364/cgroup" dev="proc" ino=46391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 363.864208][ T7668] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 364.713526][ T7668] usb 7-1: Using ep0 maxpacket: 8 [ 364.733676][ T7668] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.737989][ T7668] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.742833][ T7668] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.753527][ T7668] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.761884][ T7668] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.772931][ T7668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.784340][T11785] loop0: detected capacity change from 0 to 7 [ 364.790087][T11785] Dev loop0: unable to read RDB block 7 [ 364.794105][T11785] loop0: AHDI p3 [ 364.796654][T11785] loop0: partition table partially beyond EOD, truncated [ 365.019637][ T7668] usb 7-1: GET_CAPABILITIES returned 0 [ 365.022355][ T7668] usbtmc 7-1:16.0: can't read capabilities [ 365.154647][ T5380] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 365.330173][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.335973][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.339781][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.343298][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.356787][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.363375][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.369107][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.375079][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.379257][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.388336][ T5380] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 365.391993][ T5380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.399907][ T5380] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 365.405039][ T5380] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 365.408496][ T5380] usb 6-1: Manufacturer: syz [ 365.412528][ T5380] usb 6-1: config 0 descriptor?? [ 365.513842][ T5380] rc_core: IR keymap rc-hauppauge not found [ 365.519201][ T5380] Registered IR keymap rc-empty [ 365.534079][ T5380] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 365.540023][ T5380] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input46 [ 365.630026][ T39] audit: type=1400 audit(621.461:775): avc: denied { map } for pid=11814 comm="syz.0.2107" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 365.668790][ T39] audit: type=1400 audit(621.471:776): avc: denied { execute } for pid=11814 comm="syz.0.2107" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 365.681974][ T57] usb 6-1: USB disconnect, device number 16 [ 365.698461][ T39] audit: type=1400 audit(621.521:777): avc: denied { map } for pid=11814 comm="syz.0.2107" path="socket:[47341]" dev="sockfs" ino=47341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 365.707366][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.712477][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.716767][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.721612][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.725737][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.730406][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.732009][ T39] audit: type=1400 audit(621.571:778): avc: denied { setattr } for pid=11814 comm="syz.0.2107" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 365.734670][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 365.744184][ T991] usb 7-1: USB disconnect, device number 20 [ 366.299551][T11829] overlay: filesystem on ./file0 is read-only [ 366.310131][T11831] futex_wake_op: syz.2.2112 tries to shift op by 32; fix this program [ 366.405066][T11836] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð#>÷‰r¹[›5´Û­ [ 366.747809][T11844] binder: 11830:11844 ioctl c0306201 200011c0 returned -14 [ 366.854722][T11849] netlink: 'syz.3.2118': attribute type 2 has an invalid length. [ 366.858104][T11849] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 366.869839][T11849] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2118'. [ 367.583578][ T57] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 367.756829][T11858] overlay: filesystem on ./file0 is read-only [ 367.768598][ T57] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 367.773704][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.795185][ T57] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 367.799854][ T57] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 367.804052][ T57] usb 7-1: Manufacturer: syz [ 367.807409][ T57] usb 7-1: config 0 descriptor?? [ 367.873520][ T57] rc_core: IR keymap rc-hauppauge not found [ 367.877315][ T57] Registered IR keymap rc-empty [ 367.880238][ T57] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 367.892673][ T57] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input47 [ 368.003602][ T7668] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 368.034089][ T57] usb 7-1: USB disconnect, device number 21 [ 368.224305][ T7668] usb 8-1: Using ep0 maxpacket: 8 [ 368.234636][ T7668] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.241081][ T7668] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.249184][ T7668] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.263782][ T7668] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.272350][ T7668] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.278275][ T7668] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.509582][ T7668] usb 8-1: GET_CAPABILITIES returned 0 [ 368.512612][ T7668] usbtmc 8-1:16.0: can't read capabilities [ 368.750059][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.755366][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.762857][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.773755][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.815224][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.819319][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.819358][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.819389][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.819792][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.836795][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.836834][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.836869][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.843448][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.858939][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.862785][T11872] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 368.863347][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.870176][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 368.980404][ T5339] usb 8-1: USB disconnect, device number 16 [ 369.698694][T11884] netlink: 'syz.3.2131': attribute type 2 has an invalid length. [ 369.702756][T11884] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 369.707055][T11884] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2131'. [ 370.187315][T11894] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 370.218207][T11894] input: syz1 as /devices/virtual/input/input48 [ 370.747914][T11904] overlay: filesystem on ./file0 is read-only [ 370.829097][T11908] futex_wake_op: syz.3.2138 tries to shift op by 32; fix this program [ 371.027961][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2140'. [ 372.022128][T11908] sched: RT throttling activated [ 372.571458][T11929] netlink: 'syz.1.2145': attribute type 2 has an invalid length. [ 372.575303][T11929] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 372.578840][T11929] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2145'. [ 372.650288][T11918] binder: 11907:11918 ioctl c0306201 200011c0 returned -14 [ 373.294130][T11946] netlink: 'syz.3.2151': attribute type 10 has an invalid length. [ 373.314990][T11949] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.319920][T11946] macvlan0: entered promiscuous mode [ 373.326366][T11949] input: syz1 as /devices/virtual/input/input49 [ 373.368048][T11947] fuse: Bad value for 'fd' [ 373.455215][T11946] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 374.189748][T11965] futex_wake_op: syz.3.2157 tries to shift op by 32; fix this program [ 374.493620][ T834] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 374.685463][ T834] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 374.689355][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.696339][ T834] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 374.700367][ T834] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 374.705375][ T834] usb 7-1: Manufacturer: syz [ 374.712458][ T834] usb 7-1: config 0 descriptor?? [ 374.784393][ T834] rc_core: IR keymap rc-hauppauge not found [ 374.788067][ T834] Registered IR keymap rc-empty [ 374.796405][ T834] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 374.801837][ T834] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input50 [ 374.932355][ T57] usb 7-1: USB disconnect, device number 22 [ 374.976932][ T39] audit: type=1400 audit(630.811:779): avc: denied { unmount } for pid=10420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 375.943788][T11969] binder: 11964:11969 ioctl c0306201 200011c0 returned -14 [ 376.554244][T12030] futex_wake_op: syz.2.2182 tries to shift op by 32; fix this program [ 377.032757][T12045] binder: 12029:12045 ioctl c0306201 200011c0 returned -14 [ 378.195260][T12082] futex_wake_op: syz.1.2201 tries to shift op by 32; fix this program [ 378.532050][T12090] binder: 12081:12090 ioctl c0306201 200011c0 returned -14 [ 378.873773][ T5339] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 379.055557][ T5339] usb 8-1: Using ep0 maxpacket: 8 [ 379.145735][ T5339] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.151325][ T5339] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.158961][ T5339] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.168251][ T5339] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.190778][ T5339] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.200986][ T5339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.447791][ T5339] usb 8-1: GET_CAPABILITIES returned 0 [ 379.450004][ T5339] usbtmc 8-1:16.0: can't read capabilities [ 379.525964][ T39] audit: type=1400 audit(635.361:780): avc: denied { write } for pid=12106 comm="syz.0.2210" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 379.537040][ T39] audit: type=1400 audit(635.361:781): avc: denied { ioctl } for pid=12106 comm="syz.0.2210" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 379.671624][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.671673][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.671710][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.671745][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.673427][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.674211][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.674262][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.674764][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.675049][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.675366][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.676663][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.730287][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.730325][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.730357][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.758193][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.758228][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.759271][ T835] usb 8-1: USB disconnect, device number 17 [ 380.365814][T12127] x_tables: duplicate underflow at hook 2 [ 381.749559][ T39] audit: type=1804 audit(381.588:782): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2224" name="/newroot/165/bus/bus" dev="overlay" ino=902 res=1 errno=0 [ 382.276255][ T39] audit: type=1400 audit(382.118:783): avc: denied { write } for pid=12159 comm="syz.3.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 382.378131][T12167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2230'. [ 382.479258][T12173] binder: 12172:12173 ioctl 4018620d 0 returned -22 [ 384.192646][T12187] delete_channel: no stack [ 384.447883][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.451207][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.455641][T12196] block nbd0: shutting down sockets [ 384.497595][T12184] block nbd3: shutting down sockets [ 384.679567][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2243'. [ 384.869123][T12208] futex_wake_op: syz.3.2246 tries to shift op by 32; fix this program [ 385.593888][ T39] audit: type=1400 audit(385.438:784): avc: denied { map } for pid=12228 comm="syz.0.2255" path="socket:[47855]" dev="sockfs" ino=47855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 386.564076][ T39] audit: type=1326 audit(386.408:785): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 386.573890][ T39] audit: type=1326 audit(386.408:786): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 386.583548][ T39] audit: type=1326 audit(386.408:787): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 386.593292][T12220] binder: 12207:12220 ioctl c0306201 200011c0 returned -14 [ 386.593350][ T39] audit: type=1326 audit(386.408:788): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 386.609608][ T39] audit: type=1326 audit(386.408:789): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 386.621948][ T39] audit: type=1326 audit(386.408:790): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 386.633225][ T39] audit: type=1326 audit(386.408:791): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12243 comm="syz.0.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad2577299 code=0x7ffc0000 [ 387.375027][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 387.375042][ T39] audit: type=1400 audit(387.208:795): avc: denied { write } for pid=834 comm="kworker/3:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48693 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 387.590383][ T39] audit: type=1326 audit(387.428:796): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.600577][ T39] audit: type=1326 audit(387.428:797): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.612761][ T39] audit: type=1326 audit(387.438:798): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.622724][ T39] audit: type=1326 audit(387.438:799): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.633060][ T39] audit: type=1326 audit(387.438:800): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.649465][ T39] audit: type=1326 audit(387.438:801): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.670735][ T39] audit: type=1326 audit(387.438:802): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.702132][ T39] audit: type=1326 audit(387.438:803): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 387.729491][ T39] audit: type=1326 audit(387.438:804): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ad977299 code=0x7ffc0000 [ 388.028311][T12296] block nbd2: shutting down sockets [ 389.127213][T12318] block nbd3: shutting down sockets [ 389.133326][T12317] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2285'. [ 389.400099][T12335] binder: 12334:12335 ioctl 4018620d 0 returned -22 [ 390.445678][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2298'. [ 390.553601][ T5383] IPVS: starting estimator thread 0... [ 390.567429][T12349] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 390.663836][T12350] IPVS: using max 21 ests per chain, 50400 per kthread [ 391.473714][T12370] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 391.477497][T12370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 392.242496][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2314'. [ 392.247376][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2314'. [ 392.354749][T12389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2315'. [ 392.434558][ T8] IPVS: starting estimator thread 0... [ 392.453941][T12390] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 392.533606][T12391] IPVS: using max 19 ests per chain, 45600 per kthread [ 394.048451][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 394.048466][ T39] audit: type=1400 audit(393.888:809): avc: denied { setattr } for pid=12411 comm="syz.0.2322" name="NETLINK" dev="sockfs" ino=48074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.050695][T12412] netlink: 'syz.0.2322': attribute type 4 has an invalid length. [ 394.177017][T12409] block nbd3: shutting down sockets [ 394.757795][T12430] overlayfs: failed to resolve './file0': -2 [ 394.766922][ T39] audit: type=1400 audit(394.608:810): avc: denied { accept } for pid=12429 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.770765][T12430] overlayfs: failed to resolve './file0': -2 [ 395.257196][ T833] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 395.440236][ T833] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 395.445492][ T833] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 395.449878][ T833] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 395.458707][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.474973][T12438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 396.708692][ T833] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 396.712796][ T833] input: Aiptek as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:17.0/input/input51 [ 396.747075][T12486] overlayfs: failed to resolve './file0': -2 [ 396.765272][ T833] usb 5-1: USB disconnect, device number 20 [ 396.767867][ C2] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 396.777912][T12486] overlayfs: failed to resolve './file0': -2 [ 397.007183][ T39] audit: type=1326 audit(396.848:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2352" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd2b77299 code=0x0 [ 397.016060][ T5383] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 397.094954][T12492] Bluetooth: MGMT ver 1.23 [ 397.201401][ T5383] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 397.205317][ T5383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.208796][ T5383] usb 7-1: Product: syz [ 397.210631][ T5383] usb 7-1: Manufacturer: syz [ 397.212595][ T5383] usb 7-1: SerialNumber: syz [ 397.217068][ T5383] usb 7-1: config 0 descriptor?? [ 397.325989][ T3200] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 397.425542][ T833] usb 7-1: USB disconnect, device number 23 [ 397.631156][T12483] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 397.633555][ T39] audit: type=1400 audit(397.468:812): avc: denied { bind } for pid=12482 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.213760][ T7668] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 398.393552][ T7668] usb 5-1: Using ep0 maxpacket: 8 [ 398.402580][ T7668] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 398.413568][ T7668] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.417892][ T7668] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.422112][ T7668] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.442636][ T7668] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.458452][ T7668] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.462385][ T7668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.500780][ T39] audit: type=1326 audit(398.338:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12544 comm="syz.1.2368" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2d6577299 code=0x0 [ 398.673996][ C2] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 398.701254][ T7668] usb 5-1: usb_control_msg returned -32 [ 398.703879][ T7668] usbtmc 5-1:16.0: can't read capabilities [ 399.272955][T12567] binder: 12564:12567 ioctl 4018620d 0 returned -22 [ 399.323935][ C3] ================================================================== [ 399.328009][ C3] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0 [ 399.331344][ C3] Read of size 4 at addr ffffc9000355fa50 by task syz.1.2376/12569 [ 399.335990][ C3] [ 399.337048][ C3] CPU: 3 UID: 0 PID: 12569 Comm: syz.1.2376 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 399.341336][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 399.345639][ C3] Call Trace: [ 399.347031][ C3] [ 399.348133][ C3] dump_stack_lvl+0x116/0x1f0 [ 399.350014][ C3] print_report+0xc3/0x620 [ 399.351794][ C2] vkms_vblank_simulate: vblank timer overrun [ 399.352224][ C3] ? __virt_addr_valid+0x5e/0x590 [ 399.358179][ C3] kasan_report+0xd9/0x110 [ 399.360192][ C3] ? xdp_do_check_flushed+0x41c/0x4e0 [ 399.362264][ C3] ? xdp_do_check_flushed+0x41c/0x4e0 [ 399.364182][ C3] xdp_do_check_flushed+0x41c/0x4e0 [ 399.366356][ C3] __napi_poll.constprop.0+0xd1/0x550 [ 399.368748][ C3] net_rx_action+0xa92/0x1010 [ 399.370677][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 399.373300][ C3] ? __pfx_mark_lock+0x10/0x10 [ 399.376224][ C3] ? __pfx_rcu_is_watching+0x10/0x10 [ 399.378335][ C3] ? trace_rcu_utilization+0x100/0x160 [ 399.380643][ C3] ? mark_held_locks+0x9f/0xe0 [ 399.382695][ C3] handle_softirqs+0x216/0x8f0 [ 399.384621][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 399.386751][ C3] irq_exit_rcu+0xbb/0x120 [ 399.388755][ C3] sysvec_apic_timer_interrupt+0x95/0xb0 [ 399.391337][ C3] [ 399.392652][ C3] [ 399.393937][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.396711][ C3] RIP: 0010:lock_acquire+0x1f2/0x560 [ 399.398916][ C3] Code: c1 05 6a 1f 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 399.407417][ C3] RSP: 0018:ffffc9000355f4a8 EFLAGS: 00000206 [ 399.410096][ C3] RAX: dffffc0000000000 RBX: 1ffff920006abe97 RCX: 0000000000000001 [ 399.413647][ C3] RDX: 0000000000000001 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08c00 [ 399.417511][ C3] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c4ad8 [ 399.421057][ C3] R10: ffffffff946256c7 R11: 0000000000000000 R12: 0000000000000000 [ 399.424424][ C3] R13: 0000000000000000 R14: ffffffff8ddb5220 R15: 0000000000000000 [ 399.428013][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 399.430426][ C3] ? lock_acquire+0x1b1/0x560 [ 399.432667][ C3] ? find_held_lock+0x2d/0x110 [ 399.434992][ C3] ? __page_table_check_pte_clear+0x2d4/0x580 [ 399.442321][ C3] page_ext_get+0x3a/0x310 [ 399.444119][ C3] ? page_ext_get+0x34/0x310 [ 399.445831][ C3] page_table_check_clear.part.0+0x32/0x540 [ 399.447844][ C3] __page_table_check_pte_clear+0x328/0x580 [ 399.450008][ C3] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 399.452478][ C3] ? const_folio_flags.constprop.0+0x56/0x150 [ 399.454816][ C3] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 399.457787][ C3] unmap_page_range+0x21ac/0x3c10 [ 399.459887][ C3] ? __pfx_unmap_page_range+0x10/0x10 [ 399.462174][ C3] ? uprobe_munmap+0x20/0x5d0 [ 399.464251][ C3] unmap_single_vma+0x194/0x2b0 [ 399.466288][ C3] unmap_vmas+0x22f/0x490 [ 399.468069][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 399.470184][ C3] ? __pfx_lock_release+0x10/0x10 [ 399.472349][ C3] ? lru_add_drain_cpu+0x454/0x860 [ 399.474525][ C3] exit_mmap+0x1b8/0xb20 [ 399.476196][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 399.478044][ C3] __mmput+0x12a/0x480 [ 399.479630][ C3] mmput+0x62/0x70 [ 399.480966][ C3] do_exit+0x9bf/0x2bb0 [ 399.482490][ C3] ? get_signal+0x8f2/0x2770 [ 399.484427][ C3] ? __pfx_do_exit+0x10/0x10 [ 399.487066][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 399.489168][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.491913][ C3] do_group_exit+0xd3/0x2a0 [ 399.493809][ C3] get_signal+0x25fd/0x2770 [ 399.495690][ C3] ? vfs_write+0x917/0x1140 [ 399.497578][ C3] ? vfs_write+0x14d/0x1140 [ 399.499591][ C3] ? __pfx_get_signal+0x10/0x10 [ 399.501708][ C3] ? __pfx_do_futex+0x10/0x10 [ 399.503746][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 399.506198][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 399.509022][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 399.511754][ C3] do_syscall_64+0xda/0x250 [ 399.516014][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.519397][ C3] RIP: 0033:0x7fb2d6577299 [ 399.522179][ C3] Code: Unable to access opcode bytes at 0x7fb2d657726f. [ 399.526593][ C3] RSP: 002b:00007fb2d728c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.531228][ C3] RAX: fffffffffffffe00 RBX: 00007fb2d6705f88 RCX: 00007fb2d6577299 [ 399.534730][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2d6705f88 [ 399.537916][ C3] RBP: 00007fb2d6705f80 R08: 00007fb2d728c6c0 R09: 00007fb2d728c6c0 [ 399.541847][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2d6705f8c [ 399.545399][ C3] R13: 000000000000000b R14: 00007ffc0b403740 R15: 00007ffc0b403828 [ 399.548738][ C3] [ 399.550075][ C3] [ 399.551133][ C3] The buggy address belongs to stack of task syz.1.2376/12569 [ 399.554587][ C3] and is located at offset 24 in frame: [ 399.556972][ C3] exit_mmap+0x0/0xb20 [ 399.558746][ C3] [ 399.559828][ C3] This frame has 2 objects: [ 399.561584][ C3] [32, 96) 'vmi' [ 399.561595][ C3] [128, 256) 'tlb' [ 399.563317][ C3] [ 399.565926][ C3] The buggy address belongs to the virtual mapping at [ 399.565926][ C3] [ffffc90003558000, ffffc90003561000) created by: [ 399.565926][ C3] kernel_clone+0xfd/0x980 [ 399.573547][ C3] [ 399.574607][ C3] The buggy address belongs to the physical page: [ 399.577551][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x20089 pfn:0x207cd [ 399.581177][ C3] memcg:ffff888046bda802 [ 399.582878][ C3] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 399.585835][ C3] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 399.589608][ C3] raw: 0000000000020089 0000000000000000 00000001ffffffff ffff888046bda802 [ 399.593346][ C3] page dumped because: kasan: bad access detected [ 399.596156][ C3] page_owner tracks the page as allocated [ 399.598944][ C3] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 12435, tgid 12435 (syz.0.2333), ts 395827447369, free_ts 395423666967 [ 399.607217][ C3] post_alloc_hook+0x2d1/0x350 [ 399.609452][ C3] get_page_from_freelist+0x1351/0x2e50 [ 399.612364][ C3] __alloc_pages_noprof+0x22b/0x2460 [ 399.614720][ C3] alloc_pages_mpol_noprof+0x275/0x610 [ 399.617177][ C3] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 399.620371][ C3] copy_process+0x2f3b/0x8de0 [ 399.622424][ C3] kernel_clone+0xfd/0x980 [ 399.624527][ C3] __do_sys_clone3+0x1f5/0x270 [ 399.626633][ C3] do_syscall_64+0xcd/0x250 [ 399.628643][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.631055][ C3] page last free pid 0 tgid 0 stack trace: [ 399.633598][ C3] free_unref_page+0x64a/0xe40 [ 399.635703][ C3] __folio_put+0x31c/0x3e0 [ 399.637646][ C3] free_page_and_swap_cache+0x249/0x2c0 [ 399.640049][ C3] tlb_remove_table_rcu+0x89/0xe0 [ 399.642855][ C3] rcu_core+0x828/0x16b0 [ 399.645074][ C3] handle_softirqs+0x216/0x8f0 [ 399.647058][ C3] irq_exit_rcu+0xbb/0x120 [ 399.648750][ C3] sysvec_apic_timer_interrupt+0x95/0xb0 [ 399.650902][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.653296][ C3] [ 399.654378][ C3] Memory state around the buggy address: [ 399.656945][ C3] ffffc9000355f900: 00 f2 f2 f2 00 f2 f2 f2 00 00 f2 f2 00 00 00 00 [ 399.661127][ C3] ffffc9000355f980: 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 399.664652][ C3] >ffffc9000355fa00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 [ 399.668044][ C3] ^ [ 399.671164][ C3] ffffc9000355fa80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 399.674967][ C3] ffffc9000355fb00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 [ 399.678673][ C3] ================================================================== [ 399.682204][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.685318][ C3] CPU: 3 UID: 0 PID: 12569 Comm: syz.1.2376 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 399.689829][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 399.695062][ C3] Call Trace: [ 399.696493][ C3] [ 399.697739][ C3] dump_stack_lvl+0x3d/0x1f0 [ 399.699927][ C3] panic+0x6f5/0x7a0 [ 399.701776][ C3] ? __pfx_panic+0x10/0x10 [ 399.703490][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 399.705417][ C3] check_panic_on_warn+0xab/0xb0 [ 399.707309][ C3] end_report+0x117/0x180 [ 399.709108][ C3] kasan_report+0xe9/0x110 [ 399.710781][ C3] ? xdp_do_check_flushed+0x41c/0x4e0 [ 399.713190][ C3] ? xdp_do_check_flushed+0x41c/0x4e0 [ 399.715515][ C3] xdp_do_check_flushed+0x41c/0x4e0 [ 399.718389][ C3] __napi_poll.constprop.0+0xd1/0x550 [ 399.721313][ C3] net_rx_action+0xa92/0x1010 [ 399.723467][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 399.725925][ C3] ? __pfx_mark_lock+0x10/0x10 [ 399.728103][ C3] ? __pfx_rcu_is_watching+0x10/0x10 [ 399.730303][ C3] ? trace_rcu_utilization+0x100/0x160 [ 399.732694][ C3] ? mark_held_locks+0x9f/0xe0 [ 399.734952][ C3] handle_softirqs+0x216/0x8f0 [ 399.737015][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 399.739200][ C3] irq_exit_rcu+0xbb/0x120 [ 399.740817][ C3] sysvec_apic_timer_interrupt+0x95/0xb0 [ 399.742687][ C3] [ 399.744050][ C3] [ 399.745504][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.748245][ C3] RIP: 0010:lock_acquire+0x1f2/0x560 [ 399.750980][ C3] Code: c1 05 6a 1f 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 399.760295][ C3] RSP: 0018:ffffc9000355f4a8 EFLAGS: 00000206 [ 399.762777][ C3] RAX: dffffc0000000000 RBX: 1ffff920006abe97 RCX: 0000000000000001 [ 399.765863][ C3] RDX: 0000000000000001 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08c00 [ 399.769160][ C3] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c4ad8 [ 399.772215][ C3] R10: ffffffff946256c7 R11: 0000000000000000 R12: 0000000000000000 [ 399.775779][ C3] R13: 0000000000000000 R14: ffffffff8ddb5220 R15: 0000000000000000 [ 399.779008][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 399.781191][ C3] ? lock_acquire+0x1b1/0x560 [ 399.783063][ C3] ? find_held_lock+0x2d/0x110 [ 399.784905][ C3] ? __page_table_check_pte_clear+0x2d4/0x580 [ 399.787317][ C3] page_ext_get+0x3a/0x310 [ 399.789024][ C3] ? page_ext_get+0x34/0x310 [ 399.790923][ C3] page_table_check_clear.part.0+0x32/0x540 [ 399.793190][ C3] __page_table_check_pte_clear+0x328/0x580 [ 399.795619][ C3] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 399.798006][ C3] ? const_folio_flags.constprop.0+0x56/0x150 [ 399.800214][ C3] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 399.803028][ C3] unmap_page_range+0x21ac/0x3c10 [ 399.804977][ C3] ? __pfx_unmap_page_range+0x10/0x10 [ 399.807001][ C3] ? uprobe_munmap+0x20/0x5d0 [ 399.808895][ C3] unmap_single_vma+0x194/0x2b0 [ 399.811004][ C3] unmap_vmas+0x22f/0x490 [ 399.813134][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 399.814932][ C3] ? __pfx_lock_release+0x10/0x10 [ 399.816708][ C3] ? lru_add_drain_cpu+0x454/0x860 [ 399.818773][ C3] exit_mmap+0x1b8/0xb20 [ 399.820554][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 399.822380][ C3] __mmput+0x12a/0x480 [ 399.823953][ C3] mmput+0x62/0x70 [ 399.825735][ C3] do_exit+0x9bf/0x2bb0 [ 399.827630][ C3] ? get_signal+0x8f2/0x2770 [ 399.829613][ C3] ? __pfx_do_exit+0x10/0x10 [ 399.831677][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 399.834001][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.836231][ C3] do_group_exit+0xd3/0x2a0 [ 399.838179][ C3] get_signal+0x25fd/0x2770 [ 399.839926][ C3] ? vfs_write+0x917/0x1140 [ 399.841642][ C3] ? vfs_write+0x14d/0x1140 [ 399.843274][ C3] ? __pfx_get_signal+0x10/0x10 [ 399.845284][ C3] ? __pfx_do_futex+0x10/0x10 [ 399.847261][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 399.849578][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 399.852093][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 399.854358][ C3] do_syscall_64+0xda/0x250 [ 399.856215][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.858502][ C3] RIP: 0033:0x7fb2d6577299 [ 399.860258][ C3] Code: Unable to access opcode bytes at 0x7fb2d657726f. [ 399.863093][ C3] RSP: 002b:00007fb2d728c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.866325][ C3] RAX: fffffffffffffe00 RBX: 00007fb2d6705f88 RCX: 00007fb2d6577299 [ 399.869733][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2d6705f88 [ 399.872734][ C3] RBP: 00007fb2d6705f80 R08: 00007fb2d728c6c0 R09: 00007fb2d728c6c0 [ 399.875310][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2d6705f8c [ 399.878372][ C3] R13: 000000000000000b R14: 00007ffc0b403740 R15: 00007ffc0b403828 [ 399.881443][ C3] [ 399.883333][ C3] Kernel Offset: disabled [ 399.885345][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:07:26 Registers: info registers vcpu 0 CPU#0 RAX=ffff7fffffffffff RBX=0000000000000000 RCX=ffffffff8191d046 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff90129fd8 RBP=0000000000000293 RSP=ffffc900000d7b70 R8 =0000000000000000 R9 =ffffed1002cef506 R10=ffffffff90129fdf R11=0000000000000000 R12=000000000003db4c R13=0000000000000293 R14=0000000000000001 R15=ffff88802b2a0c00 RIP=ffffffff81e7a659 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=0000000049cb8000 CR4=00350ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe558f81b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88806b13ee00 RCX=0000000000000001 RDX=1ffff1100d627f1b RSI=ffffffff8b4cc880 RDI=ffff88806b13f8d8 RBP=0000000000000086 RSP=ffffc900008b0ec8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc900008b0f18 R13=ffff88801a0448b8 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff815c69a1 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002000 CR3=0000000048714000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000007fff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555801355fc 0000555580135440 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555801a1604 00005555801a1600 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558012e4a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555801a9966 00005555801a9540 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558013b944 000055558013b940 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580130790 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580130810 00005555801307d0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84030894928d8808 0001fc030894928d 88080001f4030004 840001f003000484 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030002000286030a 40a0808200028403 0430888082000284 0300108080820002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002001ac000a0004 0a028c0300048400 0290030004840002 8c03000484000288 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401800401941000 06013fda2801ec00 0860808080020802 c0808080022001cc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103ffffffff0401 8004019410000601 3fda2801ec000860 808080020802c080 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080022001cc0020 01ac000a00040a02 8c03000484000290 0300048400028c03 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004840002880300 02000286030a40a0 8082000284030430 8880820002840300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1080808200028403 0894928d88080001 fc030894928d8808 0001f40300048400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000669aaf RBX=0000000000000002 RCX=ffffffff8b112529 RDX=0000000000000000 RSI=ffffffff8b4cc580 RDI=ffffffff8bb08c00 RBP=ffffed100305b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fe1 R10=ffff88806b237f0b R11=0000000000000000 R12=0000000000000002 R13=ffff8880182d8000 R14=ffffffff90129fd8 R15=0000000000000000 RIP=ffffffff8b11391f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb2d67020c0 CR3=0000000050f46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813075ef ffffffff813075ef ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813075ef ffffffff813075ef ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813075ef ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad25e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad26d5488 00007f9ad26d5480 00007f9ad26d5478 00007f9ad26d5450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad323d100 00007f9ad26d5440 00007f9a00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ad26d5498 00007f9ad26d5490 00007f9ad26d5488 00007f9ad26d5480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff816b5a4e RDX=ffff8880298fc880 RSI=0000000000000000 RDI=0000000000000001 RBP=000000000000001f RSP=ffffc90000908968 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=725f746e69727020 R12=0000000000000000 R13=ffff8880182d8000 R14=ffffffff8d67e803 R15=ffffc900009089f0 RIP=ffffffff818a800a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f20dff8 CR3=000000003f30a000 CR4=00350ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b403bb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2d65e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2d65e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2d65e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2d65e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2d65e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2d65e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000