last executing test programs: 5.71660772s ago: executing program 3 (id=1713): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) 5.507273144s ago: executing program 3 (id=1714): socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x48) migrate_pages(r1, 0x9, &(0x7f00000007c0)=0x23fffffffffe, &(0x7f0000000bc0)=0x27e04072) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000700)=""/21, 0x15}], 0x1, &(0x7f0000000680)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x40, &(0x7f0000000b40)={0x0, 0x3938700}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 4.645977926s ago: executing program 3 (id=1720): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000002c0)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.344648358s ago: executing program 3 (id=1726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x581a80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000380)="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", &(0x7f00000000c0)=@udp=r1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) openat$uhid(0xffffff9c, &(0x7f0000000200), 0x802, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_delete(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r4, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4000881}, 0x0) 4.238178091s ago: executing program 3 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x9, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010401000000fcb6000000000a0000040900010073797a310063a50008000540000040040900020073797a310000000008000a40fffffffe200011800e000100636f6e6e6c696d7974acb0f4e05a8acb3ba86580d90000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x200480d5) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000022c0)={0x60, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004854}, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r5}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES64=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="5a00000002060108bc0034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a0000700c000780080028400000005f000000000000000000000020006916bccb44803966308d27bf6b69acf7155c8802a61fe0e65266f8228e9699ce23a0ba39817d08324083b9213b43a9888012696a969b1d"], 0x58}}, 0x2) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000380)={0x1c, r7, 0xad0e41e9ad2f93a7, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x848}, 0x40) 4.067937662s ago: executing program 3 (id=1734): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x4000b, 0x293002b, 0x100, 0x0, 0x1, 0x58, 0x0, 0x0, 0x1, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000006c0)={{0x8002, 0x0, 0x5, 0x3, 'syz1\x00', 0xa67}, 0x1, [0x1, 0xa2d, 0x8, 0x3, 0x8, 0x6, 0x3, 0xf, 0x1, 0x101, 0x4, 0xffff, 0x92b, 0x4, 0x6, 0x1, 0x4, 0x4, 0x8001, 0x81, 0x1, 0x0, 0x1, 0x7, 0x3, 0x200, 0x2, 0x40, 0x8, 0x2, 0x3, 0x5, 0x81, 0x8001, 0x1, 0x1, 0x7, 0x2b30, 0x8, 0x7ff, 0xf, 0x0, 0x800, 0xe, 0x1, 0x9, 0x2, 0x10000add, 0x2, 0x6, 0x1, 0xffe00000, 0x4, 0xc, 0x4, 0x7ee0, 0xd, 0xba9c, 0x6, 0x3, 0x6f03, 0x5, 0x9, 0x9, 0x668c, 0x1, 0x7, 0x675, 0x5, 0x3, 0xfffffff2, 0xffff, 0x81, 0x6, 0x9, 0xf03, 0x6, 0x200000, 0x76b121e0, 0xff, 0x3, 0x3, 0xa3d9, 0x4, 0x2, 0xe, 0xf76, 0x10001, 0x2f5, 0x5, 0x3, 0x0, 0x3, 0xfffffffb, 0x1, 0x4, 0x1, 0x9, 0x9, 0xd9b, 0x6, 0x7, 0x8, 0xfffffffe, 0x4, 0x0, 0x3, 0x9, 0x8, 0x2, 0x5, 0x48, 0x0, 0x3, 0x2c5fe90f, 0x0, 0x6ae, 0xfffffffd, 0x4b2, 0xea9, 0x7ff, 0x9, 0x78, 0x80000, 0x2, 0x8, 0x764d, 0x157]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x4, 0x0, 0x3e}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r12 = accept4(r11, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r12, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r12, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3.359312629s ago: executing program 2 (id=1741): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000040)={0xc, 0x8}) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200000, 0x44) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f00000000c0)={0x87, 0x8, 0x7, 0x8}) (async) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f00000000c0)={0x87, 0x8, 0x7, 0x8}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0xaf, 0x9}) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0xaf, 0x9}) openat$rtc(0xffffff9c, &(0x7f0000000240), 0xc040, 0x0) chdir(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000102c0)={{@local, 0x2}, 0x0, 0x2, 0x4}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000102c0)={{@local, 0x2}, 0x0, 0x2, 0x4}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000010300)) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000010440)={0x2, @win={{0x0, 0x3, 0x0, 0x9}, 0x6, 0x10, &(0x7f00000103c0)={{0x6b, 0xe, 0x8001, 0x2}, &(0x7f0000010380)={{0x7, 0x8, 0x2, 0x5}, &(0x7f0000010340)={{0x0, 0x6, 0x80, 0x52}}}}, 0xe, &(0x7f0000010400)="0531ca3127fbbb05990be1dea1a0e905bd1bb267418586c93f42a013dbde88d44718e5f902469cd6fe34c540a144e1", 0x8}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000010440)={0x2, @win={{0x0, 0x3, 0x0, 0x9}, 0x6, 0x10, &(0x7f00000103c0)={{0x6b, 0xe, 0x8001, 0x2}, &(0x7f0000010380)={{0x7, 0x8, 0x2, 0x5}, &(0x7f0000010340)={{0x0, 0x6, 0x80, 0x52}}}}, 0xe, &(0x7f0000010400)="0531ca3127fbbb05990be1dea1a0e905bd1bb267418586c93f42a013dbde88d44718e5f902469cd6fe34c540a144e1", 0x8}}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000010540)=""/251) read$msr(r1, &(0x7f0000010640), 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000010680)) ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000010740)="e8278e06c0867ad2f7b2f146446f11e98981fdd043560e5984388f5c35ed32d36a8fb809a0deca666a2e9373fc4f1bc2f2d2d320a5f1685209390b323e9a3f6aab4f3884b5584843132545dc0bc091c1cd080e919ae7a21abacb33f504908fa22a022c4417590c0abd6fe71a58d9eb61e3e041f5118e02933d5ea2ff2489ddcd356b9224d08aadf99cc4988f2a3709504f5dcf418f61b08ac658c50e") (async) ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000010740)="e8278e06c0867ad2f7b2f146446f11e98981fdd043560e5984388f5c35ed32d36a8fb809a0deca666a2e9373fc4f1bc2f2d2d320a5f1685209390b323e9a3f6aab4f3884b5584843132545dc0bc091c1cd080e919ae7a21abacb33f504908fa22a022c4417590c0abd6fe71a58d9eb61e3e041f5118e02933d5ea2ff2489ddcd356b9224d08aadf99cc4988f2a3709504f5dcf418f61b08ac658c50e") statx(r1, &(0x7f0000010800)='./file1\x00', 0x2000, 0xd4dec61a8a070cea, &(0x7f0000010840)) (async) statx(r1, &(0x7f0000010800)='./file1\x00', 0x2000, 0xd4dec61a8a070cea, &(0x7f0000010840)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000010940)='./file0\x00', 0x0, 0x10, &(0x7f0000010980)) (async) statx(r1, &(0x7f0000010940)='./file0\x00', 0x0, 0x10, &(0x7f0000010980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000010a80)={0xa0, 0x19, 0x1, {0x11, {0x20, 0x0, 0x3}, 0x42, r2, r3, 0x8001, 0x2, 0x9, 0x1, 0x7, 0x10, 0x800, 0xa0d, 0x7, 0x5e812eee, 0x4, 0x6, 0x77a, 0x101, 0x80000001}}, 0xa0) unshare(0x480) (async) unshare(0x480) listxattr(&(0x7f0000010b40)='./file1\x00', &(0x7f0000010b80)=""/177, 0xb1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000010c40)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000010c80)={{0xffff1000, 0xdddd0000, 0xf, 0x5, 0x0, 0x9, 0x2, 0x2, 0x2, 0x4, 0x42, 0x8}, {0xffff1000, 0x8080000, 0xb, 0xb, 0x1, 0xb, 0x1, 0xe, 0x22, 0x1, 0x3, 0xff}, {0x2000, 0x2, 0x4, 0xaf, 0x2, 0x3, 0x2, 0xaf, 0x0, 0xff, 0xc, 0xff}, {0x5000, 0xf000, 0x9, 0x9, 0x2, 0x1, 0x5, 0x9, 0x4, 0xeb, 0x8, 0xdc}, {0x0, 0xffff1000, 0xe, 0x2, 0xff, 0x2, 0x0, 0x1, 0x2, 0xf5, 0xd, 0x2}, {0xeffe3002, 0x10000, 0x0, 0x4, 0x7f, 0x9, 0xb, 0x4, 0x6, 0x44, 0x15, 0xff}, {0x1000, 0x4000, 0xa, 0x3, 0x12, 0x2, 0x6, 0x82, 0x2, 0x1, 0x0, 0xc}, {0x0, 0xeeef0000, 0x3, 0x3, 0xb, 0x7f, 0x0, 0x7, 0xef, 0x8, 0x45, 0xf9}, {0x80a0000, 0x2}, {0x2, 0x1}, 0x0, 0x0, 0x8080000, 0x400010, 0x1, 0x1, 0xeeee8000, [0x5, 0x4, 0x0, 0x6]}) write$6lowpan_enable(r1, &(0x7f0000010dc0)='0', 0x1) r5 = open$dir(&(0x7f0000010e00)='./file2\x00', 0x101000, 0x1cb) readlink(&(0x7f0000010e40)='./file2\x00', &(0x7f0000010e80)=""/100, 0x64) (async) readlink(&(0x7f0000010e40)='./file2\x00', &(0x7f0000010e80)=""/100, 0x64) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000010f00)={0xffa, 0x4, 0x3, 0x0, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000010f80), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010f80), r5) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000011040)={&(0x7f0000010f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000011000)={&(0x7f0000010fc0)={0x28, r6, 0x1, 0x5, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x854) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000011080)=0x5, 0x4) preadv(r4, &(0x7f00000112c0)=[{&(0x7f00000110c0)=""/91, 0x5b}, {&(0x7f0000011140)=""/102, 0x66}, {&(0x7f00000111c0)=""/252, 0xfc}], 0x3, 0x7, 0xa) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000011440)={&(0x7f0000011300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000011400)={&(0x7f0000011380)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 3.222091939s ago: executing program 2 (id=1744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000118, 0x0, 0xb195}]}) 3.05978685s ago: executing program 2 (id=1745): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x1, 'queue1\x00', 0x200000}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x500}, 0x57) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) close(0x3) 2.897765856s ago: executing program 2 (id=1747): syz_emit_ethernet(0x66, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000440)=[{r0, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) 1.450845656s ago: executing program 0 (id=1764): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x1, 'queue1\x00', 0x200000}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x500}, 0x57) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) close(0x3) 1.333461753s ago: executing program 0 (id=1765): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x3f, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x2a01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x80) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 1.333060313s ago: executing program 0 (id=1766): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0422a4af"], 0x7) 1.135659982s ago: executing program 0 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32, @ANYBLOB="29003300d0980700ffffffffffff080211000000505050505050020004f84dc103"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44050) 1.134845075s ago: executing program 0 (id=1768): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) pwrite64(r0, &(0x7f0000000180)="ab07a140cff8d4a84ee01109347229cf0ae1e73727f33ec316edc65d271281b7", 0x20, 0x2) shutdown(r0, 0x0) socket(0x11, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000a78500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000080)={r6}, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x7, 0x5) 1.098751089s ago: executing program 1 (id=1769): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100050000000000040004000000000010000200000000002000"], 0x24, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6af74ff706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce1b1973717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ed22d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e519619393cb66b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e08374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddc6ab5188e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb3d88eb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0caa0c2c5620abf503deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5615886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17e22, 0x40000, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.021426267s ago: executing program 1 (id=1770): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRESOCT=r0, @ANYBLOB="000004007cd5430a0002000000000000000000fce87f1e0848cf8df030a37870c0bf9e63642b49656f56ff1b"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000004700)=[{{&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/58, 0x3a}], 0x1, &(0x7f0000000500)=""/130, 0x82}, 0x5}, {{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000640)=""/119, 0x77}], 0x2}, 0x6}, {{&(0x7f0000000840)=@in, 0x80, &(0x7f0000000f80)=[{&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f00000009c0)=""/121, 0x79}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/133, 0x85}, {&(0x7f0000000b80)=""/165, 0xa5}, {&(0x7f0000000c40)=""/112, 0x70}, {&(0x7f0000000cc0)=""/219, 0xdb}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/136, 0x88}], 0x9, &(0x7f0000001000)=""/251, 0xfb}, 0x100}, {{&(0x7f0000001100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001180)=""/184, 0xb8}], 0x1, &(0x7f0000001240)=""/61, 0x3d}, 0x5}, {{&(0x7f0000001280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001300)=""/186, 0xba}, {&(0x7f00000013c0)=""/54, 0x36}, {&(0x7f0000001400)=""/164, 0xa4}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/100, 0x64}, {&(0x7f0000001580)=""/19, 0x13}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/89, 0x59}, {&(0x7f00000016c0)=""/43, 0x2b}, {&(0x7f0000001700)=""/128, 0x80}], 0xa, &(0x7f0000001800)=""/127, 0x7f}, 0x1}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002900)=""/207, 0xcf}, {&(0x7f0000002a00)=""/97, 0x61}, {&(0x7f0000002a80)=""/96, 0x60}, {&(0x7f0000002b00)=""/5, 0x5}, {&(0x7f0000002b40)=""/97, 0x61}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/251, 0xfb}, {&(0x7f0000002dc0)=""/211, 0xd3}, {&(0x7f0000002ec0)=""/157, 0x9d}], 0x9}, 0x8}, {{&(0x7f0000003000)=@xdp, 0x80, &(0x7f0000003680)=[{&(0x7f0000003080)=""/218, 0xda}, {&(0x7f0000003180)=""/154, 0x9a}, {&(0x7f0000003240)=""/23, 0x17}, {&(0x7f0000003280)=""/220, 0xdc}, {&(0x7f0000003380)=""/150, 0x96}, {&(0x7f0000003440)=""/66, 0x42}, {&(0x7f00000034c0)=""/45, 0x2d}, {&(0x7f0000003500)=""/24, 0x18}, {&(0x7f0000003540)=""/212, 0xd4}, {&(0x7f0000003640)=""/48, 0x30}], 0xa, &(0x7f0000003700)=""/4096, 0x1000}}], 0x7, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 291.299379ms ago: executing program 0 (id=1771): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x149181) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r6, 0x7000000, 0x138, 0x53, &(0x7f0000001cc0)="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", &(0x7f0000000640)=""/83, 0x4, 0x0, 0x47, 0x50, &(0x7f0000000380)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000000780)="408fd0050dc7945b483103067eca9bd26ffbd3dc654b88a103f6893dc2ffd1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x4, 0x0, 0x1}, 0x4c) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103fc1e000017e37efc5e00000000000000090000006772e7dc44f10db3", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x20010801) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="87f90000", @ANYRES16=r10, @ANYBLOB="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"], 0x488}, 0x1, 0x0, 0x0, 0x80}, 0x8041) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="000002fffff2ed51fe2e1af67aacd18a6f4a1e6b2b7aeb96291d961d1c2a1710dae336f9579d81c781878633e6c88709bbaf4cac27bb629f3a4f4e2dbac3964c377797c9bef21e41c0650f93e1e943c9e643de49def833b3fb69eff92d47db444800"/109], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0xc081) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000300000b000000140012800900010076657468000000000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc030) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) 283.60307ms ago: executing program 2 (id=1772): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d1, &(0x7f0000000040)) 192.370214ms ago: executing program 1 (id=1773): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x1, 'queue1\x00', 0x200000}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x500}, 0x57) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) close(0x3) 191.8838ms ago: executing program 2 (id=1774): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x2a01, 0x0) (fail_nth: 9) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 105.977887ms ago: executing program 1 (id=1775): sched_setscheduler(0x0, 0x1, 0x0) gettid() r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) syz_io_uring_setup(0x559b, &(0x7f00000003c0)={0x0, 0x420, 0x0, 0x3, 0x400336}, &(0x7f0000000100), &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 105.477739ms ago: executing program 1 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x44050) 0s ago: executing program 1 (id=1777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x524c41) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000380000000009f7d5beae970ebcddc7f72fb321e"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x99, &(0x7f0000000280)="171e3775fb51845b84e182c3057e", &(0x7f0000000180)="c240723b0634652ff7aafa0c159a0d7242ba4f8fcf6118bb2bf62e905417356eee5675188998a43e5e7e9f0cfc57df44021e2b4ba71dcfc4dbd03e93d9081f8acd53afe184f7d457e4b59e7793843076c366dc7ab3877c51411f150935f655b8e183df6911784833290f0ba9b7403a788e6b744e097866bdacc7af516da2f86c64bcccb0544f6403a80af9879ba4796833d6afdb282bd99dc4", 0x2, 0x0, 0x8}, 0x4c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041cc800060004"], 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x2006, 0x0, 0x400000, 0x40000, 0xf48, 0x1}) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2287, &(0x7f0000000000)) syz_emit_ethernet(0xbe, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rdma_map={0x2c, 0x114, 0x3, {{0x0}, 0x0, 0x9}}], 0x2c}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x7fffffff, 0x20001e58, 0xb, 0xe6a, 0x3c, 0x8, 0x6, 0x8d, 0xfffffffa]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) kernel console output (not intermixed with test programs): SB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 252.812197][ T7234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.833267][ T7234] usb 6-1: config 0 descriptor?? [ 252.843509][ T7234] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 252.854096][ T7234] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 252.960184][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 6 bytes [ 253.043692][ T6010] usb 6-1: USB disconnect, device number 35 [ 253.048431][ T6010] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 253.151719][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 253.151934][ T5997] usb 7-1: USB disconnect, device number 30 [ 253.153872][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 253.157735][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 253.575699][ T5997] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 253.739401][ T5997] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.742290][ T5997] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.745560][ T5997] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.750243][ T5997] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 253.753902][ T5997] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 253.759702][ T5997] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.762653][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.765208][ T5997] usb 7-1: Product: syz [ 253.766763][ T5997] usb 7-1: Manufacturer: syz [ 253.771243][ T5997] cdc_wdm 7-1:1.0: skipping garbage [ 253.772971][ T5997] cdc_wdm 7-1:1.0: skipping garbage [ 253.775791][ T5997] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 253.777745][ T5997] cdc_wdm 7-1:1.0: Unknown control protocol [ 253.965160][ T838] usb 7-1: USB disconnect, device number 31 [ 254.509242][ T9896] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 254.540548][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.568494][ T9896] bond0: (slave veth0_to_bond): making interface the new active one [ 254.572108][ T9896] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.632186][ T9902] netfs: Couldn't get user pages (rc=-14) [ 255.066262][ T9918] /dev/nullb0: Can't open blockdev [ 255.108999][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 255.119775][ T53] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 255.263177][ T53] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.266046][ T53] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.269247][ T53] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.272262][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 255.276767][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 255.281461][ T53] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.284215][ T53] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.286669][ T53] usb 7-1: Product: syz [ 255.288012][ T53] usb 7-1: Manufacturer: syz [ 255.292669][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 255.294314][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 255.297117][ T53] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 255.299112][ T53] cdc_wdm 7-1:1.0: Unknown control protocol [ 255.328842][ T5997] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 255.485758][ T5997] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 255.488345][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 255.492324][ T5997] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.496921][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 255.500910][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 255.506519][ T5997] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 255.510033][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 255.513647][ T5997] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.517538][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 255.521377][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 255.526105][ T5997] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 255.528956][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 255.532395][ T5997] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.536115][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 255.539974][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 255.541637][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 7 bytes [ 255.547827][ T5997] usb 5-1: string descriptor 0 read error: -22 [ 255.549928][ T5997] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 255.553296][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.564619][ T5997] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 255.743907][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.746041][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.748207][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.750310][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.752421][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.754687][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.757146][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.759387][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.761485][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.763560][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.765618][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.767672][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.769801][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.771909][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 255.774050][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.776338][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 255.791463][ T6095] usb 7-1: USB disconnect, device number 32 [ 255.793425][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 255.823693][ T53] usb 5-1: USB disconnect, device number 37 [ 255.884612][ T9936] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 255.888332][ T9936] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.990'. [ 256.309423][ T6095] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 256.344826][ T9955] program syz.0.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.464352][ T6095] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.467944][ T6095] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.472121][ T6095] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.475606][ T6095] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 256.479966][ T6095] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 256.485608][ T6095] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.489215][ T6095] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.492782][ T6095] usb 7-1: Product: syz [ 256.494549][ T6095] usb 7-1: Manufacturer: syz [ 256.498985][ T6095] cdc_wdm 7-1:1.0: skipping garbage [ 256.501395][ T6095] cdc_wdm 7-1:1.0: skipping garbage [ 256.505023][ T6095] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 256.507358][ T6095] cdc_wdm 7-1:1.0: Unknown control protocol [ 256.690597][ T5997] usb 7-1: USB disconnect, device number 33 [ 257.294418][ T5964] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 257.466230][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 257.469741][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 258.502782][T10027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.505591][T10027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.508282][T10027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.701070][T10032] /dev/nullb0: Can't open blockdev [ 258.744125][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 258.797482][T10041] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1015'. [ 259.108838][ T5964] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 259.612341][T10057] netfs: Couldn't get user pages (rc=-14) [ 259.714621][T10067] /dev/nullb0: Can't open blockdev [ 259.755674][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 259.797139][T10073] program syz.3.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.902303][T10082] FAULT_INJECTION: forcing a failure. [ 259.902303][T10082] name failslab, interval 1, probability 0, space 0, times 0 [ 259.906411][T10082] CPU: 3 UID: 0 PID: 10082 Comm: syz.3.1028 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 259.906426][T10082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.906433][T10082] Call Trace: [ 259.906438][T10082] [ 259.906443][T10082] dump_stack_lvl+0x16c/0x1f0 [ 259.906461][T10082] should_fail_ex+0x512/0x640 [ 259.906476][T10082] ? __kmalloc_node_noprof+0xc5/0x500 [ 259.906491][T10082] should_failslab+0xc2/0x120 [ 259.906506][T10082] __kmalloc_node_noprof+0xd8/0x500 [ 259.906519][T10082] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 259.906540][T10082] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 259.906569][T10082] ? dev_ethtool+0x23d9/0x5b90 [ 259.906596][T10082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.906629][T10082] ? __might_fault+0xe3/0x190 [ 259.906654][T10082] ? __might_fault+0xe3/0x190 [ 259.906670][T10082] ? __might_fault+0x13b/0x190 [ 259.906683][T10082] ? dev_ethtool+0x23d9/0x5b90 [ 259.906695][T10082] __vmalloc_node_noprof+0xad/0xf0 [ 259.906712][T10082] ? dev_ethtool+0x23d9/0x5b90 [ 259.906725][T10082] dev_ethtool+0x23d9/0x5b90 [ 259.906738][T10082] ? __lock_acquire+0xb8a/0x1c90 [ 259.906759][T10082] ? __pfx_dev_ethtool+0x10/0x10 [ 259.906770][T10082] ? __do_fast_syscall_32+0x7c/0x3a0 [ 259.906784][T10082] ? do_fast_syscall_32+0x32/0x80 [ 259.906798][T10082] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.906828][T10082] ? kasan_quarantine_put+0x10a/0x240 [ 259.906839][T10082] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.906854][T10082] ? find_held_lock+0x2b/0x80 [ 259.906869][T10082] ? __lock_acquire+0x622/0x1c90 [ 259.906893][T10082] ? find_held_lock+0x2b/0x80 [ 259.906906][T10082] ? dev_load+0x8e/0x240 [ 259.906922][T10082] dev_ioctl+0x290/0x1060 [ 259.906938][T10082] compat_sock_ioctl+0x42e/0x730 [ 259.906951][T10082] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 259.906963][T10082] ? hook_file_ioctl_common+0x145/0x410 [ 259.906983][T10082] ? __fget_files+0x20e/0x3c0 [ 259.906994][T10082] ? __fput_deferred+0x420/0x480 [ 259.907012][T10082] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 259.907023][T10082] __ia32_compat_sys_ioctl+0x23f/0x370 [ 259.907041][T10082] __do_fast_syscall_32+0x7c/0x3a0 [ 259.907057][T10082] do_fast_syscall_32+0x32/0x80 [ 259.907072][T10082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.907085][T10082] RIP: 0023:0xf711e579 [ 259.907094][T10082] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 259.907105][T10082] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 259.907116][T10082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 259.907123][T10082] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.907130][T10082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.907136][T10082] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 259.907142][T10082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.907155][T10082] [ 259.907161][T10082] warn_alloc: 1 callbacks suppressed [ 259.907166][T10082] syz.3.1028: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.021377][T10082] CPU: 2 UID: 0 PID: 10082 Comm: syz.3.1028 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 260.021394][T10082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.021401][T10082] Call Trace: [ 260.021405][T10082] [ 260.021410][T10082] dump_stack_lvl+0x16c/0x1f0 [ 260.021430][T10082] warn_alloc+0x248/0x3a0 [ 260.021444][T10082] ? __pfx_warn_alloc+0x10/0x10 [ 260.021455][T10082] ? dump_stack_lvl+0x185/0x1f0 [ 260.021473][T10082] ? rcu_is_watching+0x12/0xc0 [ 260.021487][T10082] ? __kmalloc_node_noprof+0x23b/0x500 [ 260.021504][T10082] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 260.021526][T10082] ? dev_ethtool+0x23d9/0x5b90 [ 260.021544][T10082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.021564][T10082] ? __might_fault+0xe3/0x190 [ 260.021576][T10082] ? __might_fault+0xe3/0x190 [ 260.021587][T10082] ? __might_fault+0x13b/0x190 [ 260.021600][T10082] ? dev_ethtool+0x23d9/0x5b90 [ 260.021612][T10082] __vmalloc_node_noprof+0xad/0xf0 [ 260.021629][T10082] ? dev_ethtool+0x23d9/0x5b90 [ 260.021643][T10082] dev_ethtool+0x23d9/0x5b90 [ 260.021657][T10082] ? __lock_acquire+0xb8a/0x1c90 [ 260.021678][T10082] ? __pfx_dev_ethtool+0x10/0x10 [ 260.021690][T10082] ? __do_fast_syscall_32+0x7c/0x3a0 [ 260.021705][T10082] ? do_fast_syscall_32+0x32/0x80 [ 260.021724][T10082] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.021755][T10082] ? kasan_quarantine_put+0x10a/0x240 [ 260.021767][T10082] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.021783][T10082] ? find_held_lock+0x2b/0x80 [ 260.021798][T10082] ? __lock_acquire+0x622/0x1c90 [ 260.021820][T10082] ? find_held_lock+0x2b/0x80 [ 260.021833][T10082] ? dev_load+0x8e/0x240 [ 260.021852][T10082] dev_ioctl+0x290/0x1060 [ 260.021867][T10082] compat_sock_ioctl+0x42e/0x730 [ 260.021881][T10082] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 260.021893][T10082] ? hook_file_ioctl_common+0x145/0x410 [ 260.021912][T10082] ? __fget_files+0x20e/0x3c0 [ 260.021923][T10082] ? __fput_deferred+0x420/0x480 [ 260.021942][T10082] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 260.021953][T10082] __ia32_compat_sys_ioctl+0x23f/0x370 [ 260.021973][T10082] __do_fast_syscall_32+0x7c/0x3a0 [ 260.021989][T10082] do_fast_syscall_32+0x32/0x80 [ 260.022005][T10082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.022019][T10082] RIP: 0023:0xf711e579 [ 260.022027][T10082] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 260.022038][T10082] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 260.022049][T10082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 260.022056][T10082] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.022063][T10082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.022069][T10082] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 260.022075][T10082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.022091][T10082] [ 260.022095][T10082] Mem-Info: [ 260.121135][T10082] active_anon:8571 inactive_anon:2170 isolated_anon:0 [ 260.121135][T10082] active_file:4521 inactive_file:36559 isolated_file:0 [ 260.121135][T10082] unevictable:1768 dirty:167 writeback:0 [ 260.121135][T10082] slab_reclaimable:7251 slab_unreclaimable:61041 [ 260.121135][T10082] mapped:26402 shmem:6582 pagetables:1497 [ 260.121135][T10082] sec_pagetables:322 bounce:0 [ 260.121135][T10082] kernel_misc_reclaimable:0 [ 260.121135][T10082] free:50307 free_pcp:6078 free_cma:0 [ 260.135233][T10082] Node 0 active_anon:572kB inactive_anon:172kB active_file:0kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:7272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8176kB pagetables:1832kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB [ 260.146209][T10082] Node 1 active_anon:33912kB inactive_anon:8508kB active_file:18084kB inactive_file:146232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105692kB dirty:668kB writeback:0kB shmem:19156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5736kB pagetables:4156kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 260.157177][T10082] Node 0 DMA free:1968kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:472kB local_pcp:136kB free_cma:0kB [ 260.166335][T10082] lowmem_reserve[]: 0 288 288 288 288 [ 260.168168][T10082] Node 0 DMA32 free:16328kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:496kB inactive_anon:172kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:0kB present:1032196kB managed:295668kB mlocked:0kB bounce:0kB free_pcp:13912kB local_pcp:3968kB free_cma:0kB [ 260.177849][T10082] lowmem_reserve[]: 0 0 0 0 0 [ 260.179500][T10082] Node 1 DMA32 free:182932kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:6144KB free_highatomic:6144KB active_anon:34040kB inactive_anon:8508kB active_file:18084kB inactive_file:146232kB unevictable:3536kB writepending:688kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:9716kB local_pcp:1656kB free_cma:0kB [ 260.189547][T10082] lowmem_reserve[]: 0 0 0 0 0 [ 260.191147][T10082] Node 0 DMA: 2*4kB (UM) 11*8kB (U) 9*16kB (UM) 8*32kB (UM) 3*64kB (M) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1968kB [ 260.195763][T10082] Node 0 DMA32: 6*4kB (UM) 98*8kB (UME) 64*16kB (ME) 135*32kB (UME) 75*64kB (UME) 36*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16328kB [ 260.200811][T10082] Node 1 DMA32: 700*4kB (UME) 786*8kB (ME) 188*16kB (UME) 821*32kB (UME) 510*64kB (UME) 120*128kB (UME) 51*256kB (UME) 33*512kB (UME) 19*1024kB (UM) 13*2048kB (UMEH) 5*4096kB (UMH) = 182880kB [ 260.207644][T10082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.210717][T10082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.213668][T10082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.217026][T10082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.219962][T10082] 48015 total pagecache pages [ 260.221541][T10082] 253 pages in swap cache [ 260.222989][T10082] Free swap = 117268kB [ 260.224461][T10082] Total swap = 124996kB [ 260.225819][T10082] 524155 pages RAM [ 260.227009][T10082] 0 pages HighMem/MovableOnly [ 260.228504][T10082] 209327 pages reserved [ 260.229833][T10082] 0 pages cma reserved [ 260.268448][T10083] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.377258][ T5964] Bluetooth: hci2: command 0x0406 tx timeout [ 260.463051][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 260.465096][ T5964] Bluetooth: hci0: command 0x0406 tx timeout [ 260.603584][ T5964] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 260.824735][ T6023] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 260.900192][T10104] /dev/nullb0: Can't open blockdev [ 260.939531][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 260.968739][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.972169][ T6023] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.974980][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.980504][ T6023] usb 7-1: config 0 descriptor?? [ 261.178551][ T6023] usbhid 7-1:0.0: can't add hid device: -71 [ 261.180742][ T6023] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 261.185794][ T6023] usb 7-1: USB disconnect, device number 34 [ 261.196145][ T53] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 261.265805][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 261.316959][T10117] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1036'. [ 261.340245][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.344053][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.347005][ T53] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.350710][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.354237][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.357681][ T53] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.360622][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.370236][T10108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 261.375846][ T53] hub 6-1:1.0: bad descriptor, ignoring hub [ 261.377873][ T53] hub 6-1:1.0: probe with driver hub failed with error -5 [ 261.380320][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 261.381917][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 261.384822][ T53] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 261.386839][ T53] cdc_wdm 6-1:1.0: Unknown control protocol [ 261.625888][ T6023] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 261.786779][ T6023] usb 7-1: Using ep0 maxpacket: 32 [ 261.789688][ T6023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.792755][ T6023] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 261.795358][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.799667][ T6023] usb 7-1: config 0 descriptor?? [ 261.802781][ T6023] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 262.106772][T10108] cdc_wdm 6-1:1.0: Error autopm - -16 [ 262.109173][ T53] usb 6-1: USB disconnect, device number 36 [ 262.111449][T10097] cdc_wdm 6-1:1.0: Error autopm - -16 [ 262.113462][ T6023] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 262.119467][ T6023] usb 7-1: USB disconnect, device number 35 [ 262.125852][ T6023] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 262.243976][ T53] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 262.386694][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 262.390102][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.393694][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.397006][ T53] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.400835][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.404361][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 262.408708][ T53] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 262.411726][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.428073][T10127] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 262.432062][ T53] hub 6-1:1.0: bad descriptor, ignoring hub [ 262.432953][T10142] /dev/nullb0: Can't open blockdev [ 262.438171][ T53] hub 6-1:1.0: probe with driver hub failed with error -5 [ 262.441680][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 262.443472][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 262.447391][ T53] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 262.449878][ T53] cdc_wdm 6-1:1.0: Unknown control protocol [ 262.486161][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 262.729979][ T53] usb 6-1: USB disconnect, device number 37 [ 262.853755][ T6023] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 262.861138][T10154] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 262.998143][ T6023] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.000954][ T6023] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 263.004259][ T6023] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.007189][ T6023] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 263.010682][ T6023] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 263.015687][ T6023] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.018522][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.021066][ T6023] usb 7-1: Product: syz [ 263.022412][ T6023] usb 7-1: Manufacturer: syz [ 263.026856][ T6023] cdc_wdm 7-1:1.0: skipping garbage [ 263.028575][ T6023] cdc_wdm 7-1:1.0: skipping garbage [ 263.031026][ T6023] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 263.032961][ T6023] cdc_wdm 7-1:1.0: Unknown control protocol [ 263.196137][T10157] random: crng reseeded on system resumption [ 263.271165][ C3] wdm_int_callback: 82 callbacks suppressed [ 263.271191][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 7 bytes [ 263.463819][ C3] wdm_int_callback: 80 callbacks suppressed [ 263.463835][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 263.466800][ T1341] usb 7-1: USB disconnect, device number 36 [ 263.467742][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 263.471560][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 263.726273][T10172] /dev/nullb0: Can't open blockdev [ 263.764456][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 263.846572][T10181] block device autoloading is deprecated and will be removed. [ 263.854073][T10181] netlink: 'syz.0.1049': attribute type 6 has an invalid length. [ 263.856719][T10181] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1049'. [ 263.882386][ T1341] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 264.026939][ T1341] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.029784][ T1341] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.032980][ T1341] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.036023][ T1341] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.039403][ T1341] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.044228][ T1341] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.047104][ T1341] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.049619][ T1341] usb 7-1: Product: syz [ 264.050959][ T1341] usb 7-1: Manufacturer: syz [ 264.057021][ T1341] cdc_wdm 7-1:1.0: skipping garbage [ 264.058688][ T1341] cdc_wdm 7-1:1.0: skipping garbage [ 264.061126][ T1341] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 264.063043][ T1341] cdc_wdm 7-1:1.0: Unknown control protocol [ 264.247380][ T1341] usb 7-1: USB disconnect, device number 37 [ 264.864897][ T5964] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 265.474197][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 265.477499][T10212] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 265.479989][T10212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.509162][T10215] /dev/nullb0: Can't open blockdev [ 265.548371][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 265.587468][T10221] FAULT_INJECTION: forcing a failure. [ 265.587468][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.593134][T10221] CPU: 2 UID: 0 PID: 10221 Comm: syz.1.1062 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 265.593157][T10221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.593167][T10221] Call Trace: [ 265.593172][T10221] [ 265.593179][T10221] dump_stack_lvl+0x16c/0x1f0 [ 265.593205][T10221] should_fail_ex+0x512/0x640 [ 265.593230][T10221] _copy_from_user+0x2e/0xd0 [ 265.593254][T10221] kvm_arch_vcpu_ioctl+0xee9/0x52d0 [ 265.593272][T10221] ? kvm_arch_vcpu_ioctl+0xebd/0x52d0 [ 265.593289][T10221] ? is_bpf_text_address+0x94/0x1a0 [ 265.593313][T10221] ? kernel_text_address+0x8d/0x100 [ 265.593333][T10221] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 265.593360][T10221] ? stack_trace_save+0x8e/0xc0 [ 265.593383][T10221] ? __lock_acquire+0xb8a/0x1c90 [ 265.593409][T10221] ? kasan_save_stack+0x42/0x60 [ 265.593427][T10221] ? kasan_save_track+0x14/0x30 [ 265.593446][T10221] ? __mutex_trylock_common+0xe9/0x250 [ 265.593470][T10221] ? __pfx___mutex_trylock_common+0x10/0x10 [ 265.593495][T10221] ? __pfx___might_resched+0x10/0x10 [ 265.593516][T10221] ? rcu_is_watching+0x12/0xc0 [ 265.593534][T10221] ? trace_contention_end+0xdd/0x130 [ 265.593557][T10221] ? __mutex_lock+0x1ca/0xb90 [ 265.593582][T10221] ? kvm_vcpu_ioctl+0x280/0x1690 [ 265.593604][T10221] ? __pfx___mutex_lock+0x10/0x10 [ 265.593634][T10221] ? kasan_quarantine_put+0x10a/0x240 [ 265.593655][T10221] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 265.593674][T10221] kvm_vcpu_ioctl+0x1236/0x1690 [ 265.593698][T10221] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 265.593720][T10221] ? tomoyo_path_number_perm+0x18d/0x580 [ 265.593747][T10221] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 265.593781][T10221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.593807][T10221] ? do_vfs_ioctl+0x128/0x14f0 [ 265.593831][T10221] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 265.593865][T10221] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 265.593887][T10221] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 265.593909][T10221] ? __fget_files+0x20e/0x3c0 [ 265.593923][T10221] ? __fput_deferred+0x420/0x480 [ 265.593948][T10221] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 265.593981][T10221] __ia32_compat_sys_ioctl+0x23f/0x370 [ 265.594009][T10221] __do_fast_syscall_32+0x7c/0x3a0 [ 265.594034][T10221] do_fast_syscall_32+0x32/0x80 [ 265.594056][T10221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.594076][T10221] RIP: 0023:0xf7fa4579 [ 265.594095][T10221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.594111][T10221] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 265.594132][T10221] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004008ae89 [ 265.594142][T10221] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.594152][T10221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.594161][T10221] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 265.594171][T10221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.594193][T10221] [ 265.997556][ T1341] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 266.143774][ T1341] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.147604][ T1341] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 266.152052][ T1341] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.156006][ T1341] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 266.161087][ T1341] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 266.167578][ T1341] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.171976][ T1341] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.175368][ T1341] usb 6-1: Product: syz [ 266.177150][ T1341] usb 6-1: Manufacturer: syz [ 266.185363][ T1341] cdc_wdm 6-1:1.0: skipping garbage [ 266.195833][ T1341] cdc_wdm 6-1:1.0: skipping garbage [ 266.199736][ T1341] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 266.203092][ T1341] cdc_wdm 6-1:1.0: Unknown control protocol [ 266.606858][ T1341] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 266.651868][ C2] cdc_wdm 6-1:1.0: Unexpected error -71 [ 266.652006][ T6095] usb 6-1: USB disconnect, device number 38 [ 266.654735][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 266.657764][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 266.659670][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 266.790303][ T1341] usb 5-1: Using ep0 maxpacket: 32 [ 266.813537][ T1341] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 266.857654][ T1341] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 266.886545][ T1341] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 266.920793][ T1341] usb 5-1: Product: syz [ 266.939955][ T1341] usb 5-1: Manufacturer: syz [ 266.957812][ T1341] usb 5-1: SerialNumber: syz [ 266.973076][ T5964] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 267.009163][ T1341] usb 5-1: config 0 descriptor?? [ 267.012867][T10236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 267.025303][ T1341] hub 5-1:0.0: bad descriptor, ignoring hub [ 267.033261][ T1341] hub 5-1:0.0: probe with driver hub failed with error -5 [ 267.479470][T10251] /dev/nullb0: Can't open blockdev [ 267.538490][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 267.549977][ T6010] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 267.614959][T10257] netlink: 'syz.1.1072': attribute type 21 has an invalid length. [ 267.618005][T10257] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1072'. [ 267.622426][T10257] netlink: 'syz.1.1072': attribute type 4 has an invalid length. [ 267.625497][T10257] netlink: 'syz.1.1072': attribute type 3 has an invalid length. [ 267.629087][T10257] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1072'. [ 267.725091][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.728824][ T6010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.733127][ T6010] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.737672][ T6010] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.742968][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.750129][ T6010] usb 8-1: config 0 descriptor?? [ 267.774910][T10262] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 267.777184][T10262] binder: 10261:10262 ioctl 4018620d 80000080 returned -1 [ 267.844615][T10264] program syz.1.1075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.011472][T10269] capability: warning: `syz.1.1077' uses 32-bit capabilities (legacy support in use) [ 268.177856][ T6010] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.313153][T10235] usb 5-1: reset high-speed USB device number 38 using dummy_hcd [ 268.317253][T10235] usb 5-1: device reset changed ep0 maxpacket size! [ 268.322224][ T1341] usb 5-1: USB disconnect, device number 38 [ 268.454917][ T1341] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 268.609774][ T1341] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.613188][ T1341] usb 5-1: config 8 has an invalid interface number: 8 but max is 0 [ 268.615686][ T1341] usb 5-1: config 8 has no interface number 0 [ 268.620396][ T1341] usb 5-1: string descriptor 0 read error: -22 [ 268.622401][ T1341] usb 5-1: New USB device found, idVendor=14aa, idProduct=0225, bcdDevice=e7.32 [ 268.625198][ T1341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.634238][ T1341] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in cold state, will try to load a firmware [ 268.640025][ T1341] usb 5-1: Direct firmware load for dvb-usb-wt220u-fc03.fw failed with error -2 [ 268.642868][ T1341] usb 5-1: Falling back to sysfs fallback for: dvb-usb-wt220u-fc03.fw [ 268.762158][T10283] /dev/nullb0: Can't open blockdev [ 268.803525][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 268.921268][ T6010] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 269.093887][ T6010] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.097419][ T6010] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.100957][ T6010] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.104447][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 269.108809][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 269.114462][ T6010] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.118170][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.122108][ T6010] usb 7-1: Product: syz [ 269.123934][ T6010] usb 7-1: Manufacturer: syz [ 269.128854][ T6010] cdc_wdm 7-1:1.0: skipping garbage [ 269.130568][ T6010] cdc_wdm 7-1:1.0: skipping garbage [ 269.134063][ T6010] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 269.136200][ T6010] cdc_wdm 7-1:1.0: Unknown control protocol [ 269.370580][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 269.427128][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 269.440132][T10297] team_slave_0: left promiscuous mode [ 269.442069][T10297] team_slave_0: left allmulticast mode [ 269.452957][T10297] team0 (unregistering): Port device team_slave_0 removed [ 269.455637][T10297] team_slave_1: left promiscuous mode [ 269.457526][T10297] team_slave_1: left allmulticast mode [ 269.463387][T10297] team0 (unregistering): Port device team_slave_1 removed [ 269.560992][ C0] cdc_wdm 7-1:1.0: Unexpected error -71 [ 269.561139][ T7234] usb 7-1: USB disconnect, device number 38 [ 269.563187][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 269.567946][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 269.570081][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 269.891876][ T5997] usb 8-1: USB disconnect, device number 36 [ 271.100753][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 271.103585][T10337] lo: left promiscuous mode [ 271.106475][T10337] lo: left allmulticast mode [ 271.111228][T10337] tunl0: left promiscuous mode [ 271.113257][T10337] tunl0: left allmulticast mode [ 271.116043][T10337] gre0: left promiscuous mode [ 271.117684][T10337] gre0: left allmulticast mode [ 271.119471][T10337] gretap0: left promiscuous mode [ 271.121081][T10337] gretap0: left allmulticast mode [ 271.123545][T10337] erspan0: left promiscuous mode [ 271.125209][T10337] erspan0: left allmulticast mode [ 271.127084][T10337] ip_vti0: left promiscuous mode [ 271.128754][T10337] ip_vti0: left allmulticast mode [ 271.130557][T10337] ip6_vti0: left promiscuous mode [ 271.132462][T10337] ip6_vti0: left allmulticast mode [ 271.134710][T10337] sit0: left promiscuous mode [ 271.136342][T10337] sit0: left allmulticast mode [ 271.138319][T10337] ip6tnl0: left promiscuous mode [ 271.139949][T10337] ip6tnl0: left allmulticast mode [ 271.144295][T10337] ip6gre0: left promiscuous mode [ 271.146181][T10337] ip6gre0: left allmulticast mode [ 271.148839][T10337] ip6gretap0: left promiscuous mode [ 271.153517][T10337] ip6gretap0: left allmulticast mode [ 271.155813][T10337] vcan0: left promiscuous mode [ 271.157409][T10337] vcan0: left allmulticast mode [ 271.159189][T10337] bond0: left promiscuous mode [ 271.164410][T10337] bond_slave_0: left promiscuous mode [ 271.166536][T10337] bond_slave_1: left promiscuous mode [ 271.168546][T10337] bond0: left allmulticast mode [ 271.170218][T10337] bond_slave_0: left allmulticast mode [ 271.171997][T10337] bond_slave_1: left allmulticast mode [ 271.175053][T10337] dummy0: left promiscuous mode [ 271.178367][T10337] nlmon0: left promiscuous mode [ 271.180494][T10337] nlmon0: left allmulticast mode [ 271.185540][T10337] caif0: left promiscuous mode [ 271.187323][T10337] caif0: left allmulticast mode [ 271.189116][T10337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.244506][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 271.352346][T10347] binder: 10346:10347 ioctl c0306201 80000540 returned -22 [ 271.626651][ T53] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 271.782405][ T53] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.785274][ T53] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 271.788519][ T53] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.791822][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 271.795621][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 271.802073][ T53] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.805762][ T53] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.808731][ T53] usb 7-1: Product: syz [ 271.810118][ T53] usb 7-1: Manufacturer: syz [ 271.815701][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 271.818822][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 271.830494][T10360] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 271.847135][ T53] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 271.849086][ T53] cdc_wdm 7-1:1.0: Unknown control protocol [ 272.247213][ C3] cdc_wdm 7-1:1.0: Unexpected error -71 [ 272.247498][ T6095] usb 7-1: USB disconnect, device number 39 [ 272.250579][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.253079][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.254984][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 272.313019][ T53] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 272.456610][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.460214][ T53] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.463141][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.467152][ T53] usb 6-1: config 0 descriptor?? [ 272.485718][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 272.664376][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 272.668739][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 272.674911][ T53] usb 6-1: USB disconnect, device number 39 [ 272.723689][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 272.734206][T10386] batadv1: entered allmulticast mode [ 272.737976][T10386] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 272.806867][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 272.962485][ T5964] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 273.018887][T10401] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 273.022166][T10401] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1116'. [ 273.170249][ T6095] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 273.322533][ T6095] usb 6-1: Using ep0 maxpacket: 32 [ 273.326088][ T6095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.329669][ T6095] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 273.332727][ T6095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.337571][ T6095] usb 6-1: config 0 descriptor?? [ 273.343287][ T6095] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 273.350240][ T6095] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 273.543799][ T5997] usb 6-1: USB disconnect, device number 40 [ 273.548308][ T5997] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 273.946027][T10418] /dev/nullb0: Can't open blockdev [ 273.997017][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 274.030455][T10424] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 274.664270][T10448] /dev/nullb0: Can't open blockdev [ 274.682066][ T5964] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 274.684348][ T5964] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 274.708457][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 274.886220][T10467] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1133'. [ 276.187859][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 276.756327][ T5964] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 277.246498][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'. [ 277.249442][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'. [ 277.289571][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 277.292704][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 277.520806][T10549] /dev/nullb0: Can't open blockdev [ 277.556816][ T53] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 277.584640][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 277.694624][ T53] usb 7-1: device descriptor read/64, error -71 [ 277.762222][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 277.762236][ T40] audit: type=1800 audit(2000021665.110:178): pid=10562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1163" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 277.924130][ T53] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 278.046829][ T53] usb 7-1: device descriptor read/64, error -71 [ 278.161668][ T53] usb usb7-port1: attempt power cycle [ 278.485351][ T53] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 278.505239][ T53] usb 7-1: device descriptor read/8, error -71 [ 279.167697][ T53] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 279.181373][ T53] usb 7-1: device descriptor read/8, error -71 [ 279.288051][ T53] usb usb7-port1: unable to enumerate USB device [ 279.454267][T10586] serio: Serial port ptm0 [ 279.463847][ T40] audit: type=1326 audit(2000021666.895:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.0.1169" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 279.646963][T10592] Cannot find set identified by id 0 to match [ 279.773238][T10599] FAULT_INJECTION: forcing a failure. [ 279.773238][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 279.778519][T10599] CPU: 2 UID: 0 PID: 10599 Comm: syz.1.1174 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 279.778544][T10599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.778555][T10599] Call Trace: [ 279.778563][T10599] [ 279.778570][T10599] dump_stack_lvl+0x16c/0x1f0 [ 279.778597][T10599] should_fail_ex+0x512/0x640 [ 279.778621][T10599] ? fs_reclaim_acquire+0xae/0x150 [ 279.778649][T10599] ? tomoyo_encode2+0x100/0x3e0 [ 279.778666][T10599] should_failslab+0xc2/0x120 [ 279.778689][T10599] __kmalloc_noprof+0xd2/0x510 [ 279.778721][T10599] tomoyo_encode2+0x100/0x3e0 [ 279.778743][T10599] tomoyo_encode+0x29/0x50 [ 279.778760][T10599] tomoyo_mount_acl+0x314/0x850 [ 279.778777][T10599] ? bpf_ksym_find+0x124/0x1c0 [ 279.778801][T10599] ? is_bpf_text_address+0x94/0x1a0 [ 279.778828][T10599] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 279.778843][T10599] ? __kernel_text_address+0xd/0x40 [ 279.778862][T10599] ? unwind_get_return_address+0x59/0xa0 [ 279.778880][T10599] ? arch_stack_walk+0xa6/0x100 [ 279.778924][T10599] ? tomoyo_domain+0xbb/0x150 [ 279.778945][T10599] ? tomoyo_profile+0x47/0x60 [ 279.778969][T10599] tomoyo_mount_permission+0x16d/0x420 [ 279.778987][T10599] ? tomoyo_mount_permission+0x14f/0x420 [ 279.779005][T10599] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 279.779037][T10599] security_sb_mount+0x9b/0x260 [ 279.779065][T10599] path_mount+0x15f/0x1fd0 [ 279.779090][T10599] ? __pfx_path_mount+0x10/0x10 [ 279.779114][T10599] ? kmem_cache_free+0x2d1/0x4d0 [ 279.779132][T10599] ? putname+0x154/0x1a0 [ 279.779154][T10599] ? getname_flags.part.0+0x1c5/0x550 [ 279.779185][T10599] ? __ia32_sys_mount+0x28b/0x310 [ 279.779206][T10599] __ia32_sys_mount+0x28b/0x310 [ 279.779228][T10599] ? __pfx___ia32_sys_mount+0x10/0x10 [ 279.779250][T10599] ? __secure_computing+0x21c/0x320 [ 279.779296][T10599] __do_fast_syscall_32+0x7c/0x3a0 [ 279.779322][T10599] do_fast_syscall_32+0x32/0x80 [ 279.779346][T10599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.779368][T10599] RIP: 0023:0xf7fa4579 [ 279.779382][T10599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 279.779400][T10599] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 279.779418][T10599] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 279.779429][T10599] RDX: 0000000080000140 RSI: 0000000000008804 RDI: 0000000080000540 [ 279.779440][T10599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.779449][T10599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 279.779459][T10599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.779484][T10599] [ 281.309120][T10626] FAULT_INJECTION: forcing a failure. [ 281.309120][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.313617][T10626] CPU: 0 UID: 0 PID: 10626 Comm: syz.1.1182 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 281.313634][T10626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.313642][T10626] Call Trace: [ 281.313648][T10626] [ 281.313652][T10626] dump_stack_lvl+0x16c/0x1f0 [ 281.313673][T10626] should_fail_ex+0x512/0x640 [ 281.313693][T10626] _copy_from_user+0x2e/0xd0 [ 281.313711][T10626] move_addr_to_kernel+0x65/0x170 [ 281.313731][T10626] __sys_connect+0xb1/0x160 [ 281.313746][T10626] ? __pfx___sys_connect+0x10/0x10 [ 281.313759][T10626] ? handle_mm_fault+0x240/0xd10 [ 281.313777][T10626] ? __pfx_ksys_write+0x10/0x10 [ 281.313793][T10626] __ia32_sys_connect+0x71/0xb0 [ 281.313808][T10626] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 281.313825][T10626] __do_fast_syscall_32+0x7c/0x3a0 [ 281.313844][T10626] do_fast_syscall_32+0x32/0x80 [ 281.313861][T10626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.313876][T10626] RIP: 0023:0xf7fa4579 [ 281.313899][T10626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 281.313912][T10626] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 281.313924][T10626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 281.313932][T10626] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 281.313939][T10626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.313946][T10626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 281.313953][T10626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.313968][T10626] [ 281.866376][T10641] /dev/nullb0: Can't open blockdev [ 281.921594][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 282.959962][T10672] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 282.962082][T10672] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.984623][T10672] vhci_hcd vhci_hcd.0: Device attached [ 283.276440][ T6010] usb 44-1: SetAddress Request (2) to port 0 [ 283.278635][ T6010] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 283.443202][T10672] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 283.446070][T10672] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 283.640344][T10676] vhci_hcd: connection reset by peer [ 283.643353][ T1254] vhci_hcd: stop threads [ 283.645036][ T1254] vhci_hcd: release socket [ 283.646994][ T1254] vhci_hcd: disconnect device [ 284.333591][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1208'. [ 284.445714][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 284.486707][ T6023] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 284.618883][T10708] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 284.658947][ T6023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.662382][ T6023] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 284.665849][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.677458][ T6023] usb 8-1: config 0 descriptor?? [ 284.881772][ T6023] usbhid 8-1:0.0: can't add hid device: -71 [ 284.883775][ T6023] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 284.893022][ T6023] usb 8-1: USB disconnect, device number 37 [ 285.391556][ T6023] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 285.398382][T10731] FAULT_INJECTION: forcing a failure. [ 285.398382][T10731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.402917][T10731] CPU: 3 UID: 0 PID: 10731 Comm: syz.1.1217 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 285.402934][T10731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.402942][T10731] Call Trace: [ 285.402946][T10731] [ 285.402951][T10731] dump_stack_lvl+0x16c/0x1f0 [ 285.402971][T10731] should_fail_ex+0x512/0x640 [ 285.402989][T10731] _copy_from_user+0x2e/0xd0 [ 285.403007][T10731] do_fb_ioctl+0x290/0x7e0 [ 285.403019][T10731] ? __pfx_do_fb_ioctl+0x10/0x10 [ 285.403030][T10731] ? lockdep_hardirqs_on+0x7c/0x110 [ 285.403046][T10731] ? find_held_lock+0x2b/0x80 [ 285.403076][T10731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 285.403097][T10731] fb_compat_ioctl+0x55e/0x670 [ 285.403108][T10731] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 285.403119][T10731] ? hook_file_ioctl_common+0x145/0x410 [ 285.403139][T10731] ? __fget_files+0x20e/0x3c0 [ 285.403149][T10731] ? __fput_deferred+0x420/0x480 [ 285.403168][T10731] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 285.403178][T10731] __ia32_compat_sys_ioctl+0x23f/0x370 [ 285.403197][T10731] __do_fast_syscall_32+0x7c/0x3a0 [ 285.403214][T10731] do_fast_syscall_32+0x32/0x80 [ 285.403252][T10731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.403267][T10731] RIP: 0023:0xf7fa4579 [ 285.403276][T10731] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 285.403288][T10731] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 285.403299][T10731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 285.403306][T10731] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.403313][T10731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.403319][T10731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 285.403326][T10731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.403340][T10731] [ 285.553180][ T6023] usb 8-1: Using ep0 maxpacket: 32 [ 285.558877][ T6023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.562568][ T6023] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 285.565623][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.569607][ T6023] usb 8-1: config 0 descriptor?? [ 285.574183][ T6023] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 285.579900][ T6023] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 285.770627][ T6023] usb 8-1: USB disconnect, device number 38 [ 285.775967][ T6023] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 286.453373][ T6023] IPVS: starting estimator thread 0... [ 286.582368][T10765] IPVS: using max 42 ests per chain, 100800 per kthread [ 287.363891][T10777] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1230'. [ 287.371768][T10777] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 287.373945][T10777] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 287.377563][T10777] vhci_hcd vhci_hcd.0: Device attached [ 287.507633][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 287.563256][ T6023] vhci_hcd: vhci_device speed not set [ 287.629740][ T6023] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 288.115990][ T6010] usb 44-1: device descriptor read/8, error -110 [ 288.158833][T10778] vhci_hcd: connection reset by peer [ 288.161644][ T1169] vhci_hcd: stop threads [ 288.171529][ T1169] vhci_hcd: release socket [ 288.175168][ T1169] vhci_hcd: disconnect device [ 288.235858][T10799] /dev/nullb0: Can't open blockdev [ 288.285886][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 288.506768][ T6010] usb usb44-port1: attempt power cycle [ 289.098924][T10835] /dev/nullb0: Can't open blockdev [ 289.118113][ T6010] usb usb44-port1: unable to enumerate USB device [ 289.146875][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 289.944347][ T6010] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 290.064553][T10857] random: crng reseeded on system resumption [ 290.117915][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.122789][ T6010] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.126579][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.131144][ T6010] usb 7-1: config 0 descriptor?? [ 290.329518][ T6010] usbhid 7-1:0.0: can't add hid device: -71 [ 290.331621][ T6010] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 290.337667][ T6010] usb 7-1: USB disconnect, device number 44 [ 290.401183][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 291.065122][T10885] FAULT_INJECTION: forcing a failure. [ 291.065122][T10885] name failslab, interval 1, probability 0, space 0, times 0 [ 291.069239][T10885] CPU: 3 UID: 0 PID: 10885 Comm: syz.2.1260 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 291.069255][T10885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.069262][T10885] Call Trace: [ 291.069266][T10885] [ 291.069270][T10885] dump_stack_lvl+0x16c/0x1f0 [ 291.069289][T10885] should_fail_ex+0x512/0x640 [ 291.069304][T10885] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 291.069318][T10885] should_failslab+0xc2/0x120 [ 291.069332][T10885] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 291.069345][T10885] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 291.069360][T10885] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 291.069375][T10885] idr_get_free+0x528/0xa30 [ 291.069393][T10885] idr_alloc_u32+0x190/0x2f0 [ 291.069407][T10885] ? __pfx_idr_alloc_u32+0x10/0x10 [ 291.069422][T10885] ? tcf_exts_init_ex+0x1bc/0x610 [ 291.069440][T10885] basic_change+0xcb1/0x1400 [ 291.069458][T10885] ? __pfx_basic_change+0x10/0x10 [ 291.069482][T10885] ? __pfx_basic_change+0x10/0x10 [ 291.069497][T10885] tc_new_tfilter+0xa32/0x2340 [ 291.069516][T10885] ? __pfx_tc_new_tfilter+0x10/0x10 [ 291.069527][T10885] ? stack_trace_save+0x8e/0xc0 [ 291.069552][T10885] ? find_held_lock+0x2b/0x80 [ 291.069565][T10885] ? __pfx_tc_new_tfilter+0x10/0x10 [ 291.069574][T10885] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 291.069591][T10885] ? __pfx_tc_new_tfilter+0x10/0x10 [ 291.069602][T10885] rtnetlink_rcv_msg+0x95e/0xe90 [ 291.069619][T10885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.069639][T10885] ? ref_tracker_free+0x37c/0x830 [ 291.069660][T10885] netlink_rcv_skb+0x155/0x420 [ 291.069677][T10885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.069694][T10885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.069716][T10885] ? netlink_deliver_tap+0x1ae/0xd30 [ 291.069735][T10885] netlink_unicast+0x58d/0x850 [ 291.069754][T10885] ? __pfx_netlink_unicast+0x10/0x10 [ 291.069776][T10885] netlink_sendmsg+0x8d1/0xdd0 [ 291.069795][T10885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.069813][T10885] ? __import_iovec+0x1dd/0x650 [ 291.069833][T10885] ____sys_sendmsg+0xa98/0xc70 [ 291.069845][T10885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.069855][T10885] ? get_compat_msghdr+0x11a/0x170 [ 291.069877][T10885] ___sys_sendmsg+0x134/0x1d0 [ 291.069893][T10885] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.069915][T10885] ? find_held_lock+0x2b/0x80 [ 291.069936][T10885] __sys_sendmsg+0x16d/0x220 [ 291.069951][T10885] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.069973][T10885] ? rcu_is_watching+0x12/0xc0 [ 291.069988][T10885] __do_fast_syscall_32+0x7c/0x3a0 [ 291.070004][T10885] do_fast_syscall_32+0x32/0x80 [ 291.070018][T10885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.070032][T10885] RIP: 0023:0xf7f56579 [ 291.070041][T10885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 291.070051][T10885] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 291.070062][T10885] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 291.070069][T10885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.070075][T10885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.070081][T10885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 291.070087][T10885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.070100][T10885] [ 291.190328][T10883] Bluetooth: MGMT ver 1.23 [ 291.257282][T10890] FAULT_INJECTION: forcing a failure. [ 291.257282][T10890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.261486][T10890] CPU: 2 UID: 0 PID: 10890 Comm: syz.2.1262 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 291.261501][T10890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.261508][T10890] Call Trace: [ 291.261513][T10890] [ 291.261517][T10890] dump_stack_lvl+0x16c/0x1f0 [ 291.261536][T10890] should_fail_ex+0x512/0x640 [ 291.261553][T10890] _copy_from_user+0x2e/0xd0 [ 291.261570][T10890] compat_ioctl_preallocate+0xbb/0x220 [ 291.261587][T10890] ? __pfx_compat_ioctl_preallocate+0x10/0x10 [ 291.261610][T10890] __ia32_compat_sys_ioctl+0x2e1/0x370 [ 291.261633][T10890] __do_fast_syscall_32+0x7c/0x3a0 [ 291.261650][T10890] do_fast_syscall_32+0x32/0x80 [ 291.261665][T10890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.261679][T10890] RIP: 0023:0xf7f56579 [ 291.261688][T10890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 291.261699][T10890] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 291.261709][T10890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5839 [ 291.261716][T10890] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.261722][T10890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.261728][T10890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 291.261734][T10890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.261747][T10890] [ 291.999812][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 292.172747][T10909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'. [ 292.337019][ T40] audit: type=1800 audit(2000023216.414:180): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1270" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 292.519682][ T7234] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 292.546197][ T6023] vhci_hcd: vhci_device speed not set [ 292.680375][ T7234] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.684896][ T7234] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 292.688114][ T7234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.693122][ T7234] usb 8-1: config 0 descriptor?? [ 292.897437][ T7234] usbhid 8-1:0.0: can't add hid device: -71 [ 292.899529][ T7234] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 292.905971][ T7234] usb 8-1: USB disconnect, device number 39 [ 293.366656][T10956] /dev/nullb0: Can't open blockdev [ 293.422369][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 293.498467][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 293.746734][T10983] /dev/nullb0: Can't open blockdev [ 293.807319][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 294.126099][ T53] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 294.279722][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.283268][ T53] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 294.286307][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.290333][ T53] usb 7-1: config 0 descriptor?? [ 294.486580][ T53] usbhid 7-1:0.0: can't add hid device: -71 [ 294.489271][ T53] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 294.493306][ T53] usb 7-1: USB disconnect, device number 45 [ 294.883812][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 294.923583][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'. [ 294.994566][T11020] hsr_slave_0 (unregistering): left promiscuous mode [ 296.508321][T11048] /dev/nullb0: Can't open blockdev [ 296.575466][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 297.265961][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 297.340091][T11071] hsr_slave_0 (unregistering): left promiscuous mode [ 297.478002][T11075] /dev/nullb0: Can't open blockdev [ 297.516495][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 298.437787][T11100] veth0_macvtap: left promiscuous mode [ 298.507011][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 298.511631][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1331'. [ 298.596842][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1334'. [ 298.914300][T11130] FAULT_INJECTION: forcing a failure. [ 298.914300][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 298.918403][T11130] CPU: 2 UID: 0 PID: 11130 Comm: syz.3.1342 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 298.918418][T11130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.918425][T11130] Call Trace: [ 298.918429][T11130] [ 298.918433][T11130] dump_stack_lvl+0x16c/0x1f0 [ 298.918451][T11130] should_fail_ex+0x512/0x640 [ 298.918466][T11130] ? current_time+0x11d/0x1a0 [ 298.918480][T11130] should_failslab+0xc2/0x120 [ 298.918494][T11130] __kmalloc_cache_noprof+0x6a/0x3e0 [ 298.918505][T11130] ? __pfx_shmem_get_link+0x10/0x10 [ 298.918517][T11130] ? nd_alloc_stack+0x85/0x110 [ 298.918534][T11130] nd_alloc_stack+0x85/0x110 [ 298.918549][T11130] step_into+0x1ac7/0x2270 [ 298.918562][T11130] ? __pfx_step_into+0x10/0x10 [ 298.918581][T11130] ? lookup_fast+0x156/0x610 [ 298.918604][T11130] walk_component+0xfc/0x5b0 [ 298.918615][T11130] link_path_walk+0x627/0xe20 [ 298.918630][T11130] path_lookupat+0x15a/0x6d0 [ 298.918642][T11130] filename_lookup+0x224/0x5f0 [ 298.918655][T11130] ? __pfx_filename_lookup+0x10/0x10 [ 298.918671][T11130] ? __pfx_shmem_put_link+0x10/0x10 [ 298.918690][T11130] ? __pfx_shmem_put_link+0x10/0x10 [ 298.918712][T11130] ? getname_flags.part.0+0x1c5/0x550 [ 298.918730][T11130] path_removexattrat+0x1ef/0x5e0 [ 298.918742][T11130] ? __pfx_path_removexattrat+0x10/0x10 [ 298.918765][T11130] ? ksys_write+0x1ac/0x250 [ 298.918777][T11130] ? __pfx_ksys_write+0x10/0x10 [ 298.918792][T11130] __ia32_sys_removexattr+0x59/0x80 [ 298.918805][T11130] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 298.918820][T11130] __do_fast_syscall_32+0x7c/0x3a0 [ 298.918836][T11130] do_fast_syscall_32+0x32/0x80 [ 298.918851][T11130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.918865][T11130] RIP: 0023:0xf711e579 [ 298.918874][T11130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.918885][T11130] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000eb [ 298.918896][T11130] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 298.918903][T11130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.918909][T11130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.918915][T11130] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.918922][T11130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.918935][T11130] [ 299.146369][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1343'. [ 299.559696][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 299.964531][T11157] Cannot find del_set index 3 as target [ 300.297834][T11164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1353'. [ 300.398315][ T40] audit: type=1326 audit(2000027832.878:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.406762][ T40] audit: type=1326 audit(2000027832.878:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.413688][ T40] audit: type=1326 audit(2000027832.878:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.419926][ T40] audit: type=1326 audit(2000027832.878:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.426634][ T40] audit: type=1326 audit(2000027832.878:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.434187][ T40] audit: type=1326 audit(2000027832.878:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.440886][ T40] audit: type=1326 audit(2000027832.878:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.447986][ T40] audit: type=1326 audit(2000027832.878:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.454504][ T40] audit: type=1326 audit(2000027832.878:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 300.461205][ T40] audit: type=1326 audit(2000027832.878:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.2.1354" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ff00000 [ 301.498237][T11190] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1360'. [ 301.504737][T11190] netlink: 'syz.1.1360': attribute type 11 has an invalid length. [ 303.647942][T11244] comedi comedi3: comedi_config --init_data is deprecated [ 304.279426][T11266] veth0_macvtap: entered allmulticast mode [ 304.287217][T11266] bridge0: port 1(veth0_macvtap) entered blocking state [ 304.291830][T11266] bridge0: port 1(veth0_macvtap) entered disabled state [ 304.675911][T11282] loop6: detected capacity change from 0 to 524287999 [ 304.682835][ C2] blk_print_req_error: 54 callbacks suppressed [ 304.682846][ C2] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 304.687691][ C2] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 304.691213][ C2] I/O error, dev loop6, sector 1026 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 304.694199][ C2] I/O error, dev loop6, sector 1026 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 304.697238][ C2] I/O error, dev loop6, sector 2050 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 304.700346][ C2] I/O error, dev loop6, sector 2050 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 304.703482][ C2] I/O error, dev loop6, sector 3074 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 304.706598][ C2] I/O error, dev loop6, sector 3074 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 304.709743][ C2] I/O error, dev loop6, sector 4098 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 304.709942][ C0] I/O error, dev loop6, sector 5122 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 0 [ 305.077162][T11296] fuse: Bad value for 'fd' [ 305.244810][ T40] kauditd_printk_skb: 20957 callbacks suppressed [ 305.244822][ T40] audit: type=1326 audit(2000029373.968:21148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.284611][ T40] audit: type=1326 audit(2000029373.968:21149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.349471][ T40] audit: type=1326 audit(2000029373.968:21150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.359330][ T40] audit: type=1326 audit(2000029373.968:21151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.368077][ T40] audit: type=1326 audit(2000029373.968:21152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.377988][ T40] audit: type=1326 audit(2000029373.968:21153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.387461][ T40] audit: type=1326 audit(2000029373.968:21154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.397538][ T40] audit: type=1326 audit(2000029373.968:21155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.407171][ T40] audit: type=1326 audit(2000029373.968:21156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 305.433363][ T40] audit: type=1326 audit(2000029373.968:21157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.2.1398" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 306.790473][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.948131][T11348] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1419'. [ 307.004202][T11352] FAULT_INJECTION: forcing a failure. [ 307.004202][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 307.008621][T11352] CPU: 3 UID: 0 PID: 11352 Comm: syz.2.1412 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 307.008639][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.008647][T11352] Call Trace: [ 307.008652][T11352] [ 307.008656][T11352] dump_stack_lvl+0x16c/0x1f0 [ 307.008677][T11352] should_fail_ex+0x512/0x640 [ 307.008695][T11352] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 307.008710][T11352] should_failslab+0xc2/0x120 [ 307.008726][T11352] __kmalloc_cache_noprof+0x6a/0x3e0 [ 307.008738][T11352] ? sctp_has_association+0xdd/0x270 [ 307.008754][T11352] ? sctp_association_new+0xbb/0x2a00 [ 307.008769][T11352] sctp_association_new+0xbb/0x2a00 [ 307.008784][T11352] sctp_connect_new_asoc+0x1b6/0x790 [ 307.008799][T11352] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 307.008813][T11352] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 307.008834][T11352] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 307.008854][T11352] sctp_sendmsg+0x15f9/0x1ee0 [ 307.008872][T11352] ? __pfx_sctp_sendmsg+0x10/0x10 [ 307.008885][T11352] ? __pfx___might_resched+0x10/0x10 [ 307.008906][T11352] ? __might_fault+0xe3/0x190 [ 307.008920][T11352] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.008941][T11352] ? __pfx_sctp_sendmsg+0x10/0x10 [ 307.008954][T11352] inet_sendmsg+0x11c/0x140 [ 307.008970][T11352] __sys_sendto+0x43c/0x520 [ 307.008987][T11352] ? __pfx___sys_sendto+0x10/0x10 [ 307.009015][T11352] ? ksys_write+0x1ac/0x250 [ 307.009028][T11352] ? __pfx_ksys_write+0x10/0x10 [ 307.009043][T11352] __ia32_sys_sendto+0xdd/0x1b0 [ 307.009058][T11352] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.009073][T11352] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 307.009090][T11352] __do_fast_syscall_32+0x7c/0x3a0 [ 307.009109][T11352] do_fast_syscall_32+0x32/0x80 [ 307.009125][T11352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.009141][T11352] RIP: 0023:0xf7f56579 [ 307.009151][T11352] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.009163][T11352] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 307.009179][T11352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 307.009190][T11352] RDX: 0000000000000001 RSI: 0000000004040054 RDI: 0000000080000140 [ 307.009200][T11352] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 307.009210][T11352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.009220][T11352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.009243][T11352] [ 307.313271][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1418'. [ 307.996947][T11395] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 308.419946][T11401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.436870][T11401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.466379][T11418] xt_socket: unknown flags 0xd0 [ 308.504392][T11420] netlink: 'syz.0.1430': attribute type 10 has an invalid length. [ 308.567365][T11401] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.570980][T11401] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.574642][T11401] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.578324][T11401] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.644746][T11412] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 308.681105][T11416] bond0: (slave bond_slave_0): Releasing backup interface [ 308.691830][T11416] bond0: (slave bond_slave_1): Releasing backup interface [ 308.708966][T11416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.715314][T11416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.721944][T11416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.732872][T11416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.752321][T11420] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 308.782030][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.791106][T11420] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.003600][T11434] binder: 11433:11434 ioctl c0046209 0 returned -22 [ 309.158148][T11437] netlink: 'syz.1.1436': attribute type 9 has an invalid length. [ 310.016769][T11452] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 310.024763][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 310.063346][T11452] team0: left promiscuous mode [ 310.065503][T11452] team_slave_0: left promiscuous mode [ 310.068014][T11452] team_slave_1: left promiscuous mode [ 310.071243][T11452] batman_adv: batadv0: Adding interface: team0 [ 310.074129][T11452] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.084353][T11452] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 310.090792][T11452] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 310.094186][T11452] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1441'. [ 310.097610][T11452] team0: entered promiscuous mode [ 310.099479][T11452] team_slave_0: entered promiscuous mode [ 310.101521][T11452] team_slave_1: entered promiscuous mode [ 310.104085][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.106199][T11452] batman_adv: batadv0: Interface activated: team0 [ 310.108229][T11452] batman_adv: batadv0: Interface deactivated: team0 [ 310.110225][T11452] batman_adv: batadv0: Removing interface: team0 [ 310.321796][ T40] kauditd_printk_skb: 1062 callbacks suppressed [ 310.321809][ T40] audit: type=1800 audit(2000033219.289:22220): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1443" name="/" dev="fuse" ino=1 res=0 errno=0 [ 310.332594][ T40] audit: type=1804 audit(2000033219.289:22221): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1443" name="/newroot/351/file1" dev="fuse" ino=1 res=1 errno=0 [ 310.462548][ T5964] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6 [ 310.604709][T11494] FAULT_INJECTION: forcing a failure. [ 310.604709][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 310.611467][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.2.1454 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 310.611484][T11494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.611491][T11494] Call Trace: [ 310.611495][T11494] [ 310.611500][T11494] dump_stack_lvl+0x16c/0x1f0 [ 310.611529][T11494] should_fail_ex+0x512/0x640 [ 310.611548][T11494] ? __kmalloc_noprof+0xbf/0x510 [ 310.611562][T11494] ? lsm_blob_alloc+0x68/0x90 [ 310.611575][T11494] should_failslab+0xc2/0x120 [ 310.611590][T11494] __kmalloc_noprof+0xd2/0x510 [ 310.611606][T11494] lsm_blob_alloc+0x68/0x90 [ 310.611619][T11494] security_prepare_creds+0x30/0x270 [ 310.611633][T11494] prepare_creds+0x56f/0x7d0 [ 310.611652][T11494] copy_creds+0xa7/0xa50 [ 310.611671][T11494] copy_process+0xff6/0x7650 [ 310.611686][T11494] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.611706][T11494] ? __pfx_copy_process+0x10/0x10 [ 310.611720][T11494] ? native_apic_msr_write+0x28/0x40 [ 310.611736][T11494] ? __irq_work_queue_local+0x1d7/0x580 [ 310.611749][T11494] ? __pfx___irq_work_queue_local+0x10/0x10 [ 310.611763][T11494] kernel_clone+0xfc/0x960 [ 310.611779][T11494] ? __pfx_kernel_clone+0x10/0x10 [ 310.611802][T11494] __do_compat_sys_ia32_clone+0xcb/0x110 [ 310.611818][T11494] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 310.611841][T11494] ? syscall_trace_enter+0x1cb/0x260 [ 310.611854][T11494] ? rcu_is_watching+0x12/0xc0 [ 310.611868][T11494] __do_fast_syscall_32+0x7c/0x3a0 [ 310.611885][T11494] do_fast_syscall_32+0x32/0x80 [ 310.611900][T11494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.611914][T11494] RIP: 0023:0xf7f56579 [ 310.611923][T11494] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.611937][T11494] RSP: 002b:00000000f507650c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 310.611948][T11494] RAX: ffffffffffffffda RBX: 0000000000025000 RCX: 0000000000000000 [ 310.611955][T11494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.611962][T11494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.611968][T11494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 310.611975][T11494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.611988][T11494] [ 310.865693][T11502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1457'. [ 311.050084][ T40] audit: type=1326 audit(2000034756.057:22222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.057183][ T40] audit: type=1326 audit(2000034756.057:22223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.064029][ T40] audit: type=1326 audit(2000034756.057:22224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.071700][ T40] audit: type=1326 audit(2000034756.057:22225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.080530][ T40] audit: type=1326 audit(2000034756.057:22226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.089345][ T40] audit: type=1326 audit(2000034756.057:22227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.096246][ T40] audit: type=1326 audit(2000034756.057:22228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.103385][ T40] audit: type=1326 audit(2000034756.057:22229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.0.1463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ff00000 [ 311.416902][T11526] FAULT_INJECTION: forcing a failure. [ 311.416902][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 311.422503][T11526] CPU: 1 UID: 0 PID: 11526 Comm: syz.3.1465 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 311.422520][T11526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.422528][T11526] Call Trace: [ 311.422532][T11526] [ 311.422537][T11526] dump_stack_lvl+0x16c/0x1f0 [ 311.422555][T11526] should_fail_ex+0x512/0x640 [ 311.422573][T11526] should_failslab+0xc2/0x120 [ 311.422588][T11526] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 311.422602][T11526] ? skb_clone+0x190/0x3f0 [ 311.422620][T11526] skb_clone+0x190/0x3f0 [ 311.422636][T11526] netlink_deliver_tap+0xabd/0xd30 [ 311.422656][T11526] netlink_unicast+0x62f/0x850 [ 311.422675][T11526] ? __pfx_netlink_unicast+0x10/0x10 [ 311.422697][T11526] netlink_sendmsg+0x8d1/0xdd0 [ 311.422716][T11526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.422735][T11526] ? __import_iovec+0x1dd/0x650 [ 311.422755][T11526] ____sys_sendmsg+0xa98/0xc70 [ 311.422768][T11526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.422778][T11526] ? get_compat_msghdr+0x11a/0x170 [ 311.422800][T11526] ___sys_sendmsg+0x134/0x1d0 [ 311.422817][T11526] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.422839][T11526] ? find_held_lock+0x2b/0x80 [ 311.422862][T11526] __sys_sendmsg+0x16d/0x220 [ 311.422878][T11526] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.422900][T11526] ? rcu_is_watching+0x12/0xc0 [ 311.422915][T11526] __do_fast_syscall_32+0x7c/0x3a0 [ 311.422932][T11526] do_fast_syscall_32+0x32/0x80 [ 311.422947][T11526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.422961][T11526] RIP: 0023:0xf711e579 [ 311.422970][T11526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.423001][T11526] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 311.423024][T11526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 311.423034][T11526] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.423043][T11526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.423052][T11526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.423062][T11526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.423077][T11526] [ 311.546115][T11528] /dev/nullb0: Can't open blockdev [ 311.613173][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 311.707440][T11538] bridge2: entered promiscuous mode [ 311.709147][T11538] bridge2: entered allmulticast mode [ 311.715390][T11538] team0: Port device bridge2 added [ 311.844329][T11541] random: crng reseeded on system resumption [ 311.957557][T11545] syz_tun: entered promiscuous mode [ 312.528570][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1477'. [ 312.742421][T11564] FAULT_INJECTION: forcing a failure. [ 312.742421][T11564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.746432][T11564] CPU: 2 UID: 0 PID: 11564 Comm: syz.3.1478 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 312.746448][T11564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.746455][T11564] Call Trace: [ 312.746460][T11564] [ 312.746464][T11564] dump_stack_lvl+0x16c/0x1f0 [ 312.746483][T11564] should_fail_ex+0x512/0x640 [ 312.746501][T11564] _copy_from_iter+0x29f/0x16f0 [ 312.746519][T11564] ? __alloc_skb+0x200/0x380 [ 312.746535][T11564] ? __pfx__copy_from_iter+0x10/0x10 [ 312.746552][T11564] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 312.746574][T11564] netlink_sendmsg+0x829/0xdd0 [ 312.746595][T11564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.746613][T11564] ? __import_iovec+0x1dd/0x650 [ 312.746632][T11564] ____sys_sendmsg+0xa98/0xc70 [ 312.746645][T11564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.746655][T11564] ? get_compat_msghdr+0x11a/0x170 [ 312.746678][T11564] ___sys_sendmsg+0x134/0x1d0 [ 312.746694][T11564] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.746716][T11564] ? find_held_lock+0x2b/0x80 [ 312.746740][T11564] __sys_sendmsg+0x16d/0x220 [ 312.746755][T11564] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.746770][T11564] ? __pfx_bpf_trace_run2+0x10/0x10 [ 312.746790][T11564] ? syscall_trace_enter+0x1cb/0x260 [ 312.746803][T11564] ? rcu_is_watching+0x12/0xc0 [ 312.746817][T11564] __do_fast_syscall_32+0x7c/0x3a0 [ 312.746834][T11564] do_fast_syscall_32+0x32/0x80 [ 312.746849][T11564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.746864][T11564] RIP: 0023:0xf711e579 [ 312.746872][T11564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 312.746883][T11564] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 312.746894][T11564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 312.746901][T11564] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.746908][T11564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.746914][T11564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 312.746920][T11564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.746934][T11564] [ 313.882068][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 314.012945][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 314.162137][T11616] FAULT_INJECTION: forcing a failure. [ 314.162137][T11616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.166249][T11616] CPU: 2 UID: 0 PID: 11616 Comm: syz.2.1493 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 314.166270][T11616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.166277][T11616] Call Trace: [ 314.166281][T11616] [ 314.166287][T11616] dump_stack_lvl+0x16c/0x1f0 [ 314.166319][T11616] should_fail_ex+0x512/0x640 [ 314.166337][T11616] _copy_to_user+0x32/0xd0 [ 314.166354][T11616] drm_ioctl+0x5eb/0xc30 [ 314.166374][T11616] ? __pfx_drm_gem_flink_ioctl+0x10/0x10 [ 314.166389][T11616] ? __pfx_drm_ioctl+0x10/0x10 [ 314.166416][T11616] drm_compat_ioctl+0x327/0x460 [ 314.166428][T11616] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 314.166440][T11616] __ia32_compat_sys_ioctl+0x23f/0x370 [ 314.166459][T11616] __do_fast_syscall_32+0x7c/0x3a0 [ 314.166476][T11616] do_fast_syscall_32+0x32/0x80 [ 314.166491][T11616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.166505][T11616] RIP: 0023:0xf7f56579 [ 314.166515][T11616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.166526][T11616] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 314.166537][T11616] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008640a [ 314.166544][T11616] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.166550][T11616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.166556][T11616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 314.166563][T11616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.166576][T11616] [ 314.218306][ C2] vkms_vblank_simulate: vblank timer overrun [ 315.626593][ T40] kauditd_printk_skb: 19247 callbacks suppressed [ 315.626609][ T40] audit: type=1800 audit(2000034760.865:41477): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1507" name="file0" dev="9p" ino=37617797 res=0 errno=0 [ 315.899104][T11675] FAULT_INJECTION: forcing a failure. [ 315.899104][T11675] name failslab, interval 1, probability 0, space 0, times 0 [ 315.916096][T11675] CPU: 1 UID: 0 PID: 11675 Comm: syz.2.1508 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 315.916116][T11675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.916123][T11675] Call Trace: [ 315.916128][T11675] [ 315.916133][T11675] dump_stack_lvl+0x16c/0x1f0 [ 315.916153][T11675] should_fail_ex+0x512/0x640 [ 315.916171][T11675] should_failslab+0xc2/0x120 [ 315.916186][T11675] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 315.916200][T11675] ? skb_clone+0x190/0x3f0 [ 315.916218][T11675] skb_clone+0x190/0x3f0 [ 315.916234][T11675] netlink_deliver_tap+0xabd/0xd30 [ 315.916254][T11675] netlink_unicast+0x62f/0x850 [ 315.916274][T11675] ? __pfx_netlink_unicast+0x10/0x10 [ 315.916295][T11675] netlink_sendmsg+0x8d1/0xdd0 [ 315.916314][T11675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.916333][T11675] ? __import_iovec+0x1dd/0x650 [ 315.916352][T11675] ____sys_sendmsg+0xa98/0xc70 [ 315.916366][T11675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.916377][T11675] ? get_compat_msghdr+0x11a/0x170 [ 315.916399][T11675] ___sys_sendmsg+0x134/0x1d0 [ 315.916415][T11675] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.916438][T11675] ? find_held_lock+0x2b/0x80 [ 315.916479][T11675] __sys_sendmsg+0x16d/0x220 [ 315.916495][T11675] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.916510][T11675] ? __pfx_bpf_trace_run2+0x10/0x10 [ 315.916531][T11675] ? syscall_trace_enter+0x1cb/0x260 [ 315.916544][T11675] ? rcu_is_watching+0x12/0xc0 [ 315.916559][T11675] __do_fast_syscall_32+0x7c/0x3a0 [ 315.916575][T11675] do_fast_syscall_32+0x32/0x80 [ 315.916590][T11675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.916605][T11675] RIP: 0023:0xf7f56579 [ 315.916615][T11675] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.916626][T11675] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 315.916637][T11675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 315.916644][T11675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.916650][T11675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.916657][T11675] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 315.916663][T11675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.916677][T11675] [ 316.063347][T11679] /dev/nullb0: Can't open blockdev [ 316.073129][T11677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1511'. [ 316.124142][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'. [ 316.127401][T11682] 9pnet_fd: Insufficient options for proto=fd [ 316.317169][T11703] can0: slcan on pty26. [ 316.696305][T11719] tipc: Enabling of bearer rejected, failed to enable media [ 316.828911][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 316.988321][T11732] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.991568][T11732] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 317.055259][T11688] can0 (unregistered): slcan off pty26. [ 317.082510][T11744] bridge0: port 3(team0) entered disabled state [ 317.207844][T11744] team0 (unregistering): left allmulticast mode [ 317.209905][T11744] team_slave_0: left allmulticast mode [ 317.211662][T11744] team_slave_1: left allmulticast mode [ 317.213416][T11744] bridge0: port 3(team0) entered disabled state [ 317.238381][T11744] team_slave_0: left promiscuous mode [ 317.258364][T11744] team0 (unregistering): Port device team_slave_0 removed [ 317.261709][T11744] team_slave_1: left promiscuous mode [ 317.268200][T11744] team0 (unregistering): Port device team_slave_1 removed [ 317.277046][T11744] team0 (unregistering): Port device bridge2 removed [ 317.737247][ T5964] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 318.433869][T11788] ALSA: seq fatal error: cannot create timer (-22) [ 318.664674][T11789] wireguard0: entered promiscuous mode [ 318.666519][T11789] wireguard0: entered allmulticast mode [ 318.721769][ T6023] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 318.864212][ T6023] usb 7-1: Using ep0 maxpacket: 16 [ 318.867688][ T6023] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 318.870525][ T6023] usb 7-1: config 1 has no interface number 0 [ 318.872632][ T6023] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 318.876956][ T6023] usb 7-1: config 1 interface 105 has no altsetting 0 [ 318.882355][ T6023] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 318.885903][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.888490][ T6023] usb 7-1: Product: syz [ 318.889925][ T6023] usb 7-1: Manufacturer: syz [ 318.891541][ T6023] usb 7-1: SerialNumber: syz [ 318.896625][T11797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.096657][T11797] FAULT_INJECTION: forcing a failure. [ 319.096657][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 319.100633][T11797] CPU: 2 UID: 0 PID: 11797 Comm: syz.2.1540 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 319.100649][T11797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.100656][T11797] Call Trace: [ 319.100660][T11797] [ 319.100666][T11797] dump_stack_lvl+0x16c/0x1f0 [ 319.100685][T11797] should_fail_ex+0x512/0x640 [ 319.100700][T11797] ? fs_reclaim_acquire+0xae/0x150 [ 319.100718][T11797] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 319.100730][T11797] should_failslab+0xc2/0x120 [ 319.100745][T11797] __kmalloc_noprof+0xd2/0x510 [ 319.100761][T11797] tomoyo_realpath_from_path+0xc2/0x6e0 [ 319.100774][T11797] ? tomoyo_profile+0x47/0x60 [ 319.100789][T11797] tomoyo_path_number_perm+0x245/0x580 [ 319.100805][T11797] ? tomoyo_path_number_perm+0x237/0x580 [ 319.100824][T11797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.100855][T11797] ? find_held_lock+0x2b/0x80 [ 319.100868][T11797] ? hook_file_ioctl_common+0x145/0x410 [ 319.100887][T11797] ? __fget_files+0x20e/0x3c0 [ 319.100898][T11797] ? __fput_deferred+0x420/0x480 [ 319.100915][T11797] security_file_ioctl_compat+0x9b/0x240 [ 319.100934][T11797] __ia32_compat_sys_ioctl+0xc3/0x370 [ 319.100952][T11797] __do_fast_syscall_32+0x7c/0x3a0 [ 319.100969][T11797] do_fast_syscall_32+0x32/0x80 [ 319.100984][T11797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.100998][T11797] RIP: 0023:0xf7f56579 [ 319.101007][T11797] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.101019][T11797] RSP: 002b:00000000f50744f4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 319.101030][T11797] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 319.101037][T11797] RDX: 00000000f5074538 RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 319.101043][T11797] RBP: 00000000f73e4ff4 R08: 0000000000000000 R09: 0000000000000000 [ 319.101050][T11797] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.101056][T11797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.101070][T11797] [ 319.101074][T11797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.178725][ T6023] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22 [ 319.185723][ T6023] usb 7-1: USB disconnect, device number 46 [ 319.614877][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'. [ 319.869966][T11840] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 320.104188][T11848] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 320.109049][T11849] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 321.046781][ T5964] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 321.121735][T11875] syzkaller0: entered promiscuous mode [ 321.124242][T11875] syzkaller0: entered allmulticast mode [ 321.425235][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 322.473875][T11897] fuse: Bad value for 'fd' [ 323.253906][T11918] FAULT_INJECTION: forcing a failure. [ 323.253906][T11918] name failslab, interval 1, probability 0, space 0, times 0 [ 323.257932][T11918] CPU: 2 UID: 0 PID: 11918 Comm: syz.3.1573 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 323.257948][T11918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.257955][T11918] Call Trace: [ 323.257959][T11918] [ 323.257964][T11918] dump_stack_lvl+0x16c/0x1f0 [ 323.257983][T11918] should_fail_ex+0x512/0x640 [ 323.257998][T11918] ? __kmalloc_noprof+0xbf/0x510 [ 323.258013][T11918] ? bpf_test_init.isra.0+0x9e/0x140 [ 323.258027][T11918] should_failslab+0xc2/0x120 [ 323.258042][T11918] __kmalloc_noprof+0xd2/0x510 [ 323.258057][T11918] bpf_test_init.isra.0+0x9e/0x140 [ 323.258073][T11918] bpf_prog_test_run_nf+0x271/0xb10 [ 323.258093][T11918] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 323.258121][T11918] ? fput+0x70/0xf0 [ 323.258135][T11918] ? __bpf_prog_get+0x97/0x2a0 [ 323.258151][T11918] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 323.258167][T11918] __sys_bpf+0x170a/0x4ea0 [ 323.258180][T11918] ? __pfx___sys_bpf+0x10/0x10 [ 323.258191][T11918] ? ksys_write+0x190/0x250 [ 323.258205][T11918] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 323.258228][T11918] ? fput+0x70/0xf0 [ 323.258242][T11918] ? ksys_write+0x1ac/0x250 [ 323.258253][T11918] ? __pfx_ksys_write+0x10/0x10 [ 323.258267][T11918] __ia32_sys_bpf+0x76/0xe0 [ 323.258283][T11918] __do_fast_syscall_32+0x7c/0x3a0 [ 323.258300][T11918] do_fast_syscall_32+0x32/0x80 [ 323.258315][T11918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.258330][T11918] RIP: 0023:0xf711e579 [ 323.258339][T11918] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.258350][T11918] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 323.258361][T11918] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000040 [ 323.258368][T11918] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 323.258374][T11918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.258381][T11918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 323.258387][T11918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.258401][T11918] [ 323.606205][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 323.610756][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'. [ 323.731492][T11930] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1577'. [ 323.811698][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 324.023227][ T5964] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 324.720749][T11945] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1580'. [ 324.729442][T11958] tipc: Enabling of bearer rejected, failed to enable media [ 325.277281][ T5964] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 325.649956][T11997] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 325.702559][T11998] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 325.942941][T12004] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 325.948587][T12004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1597'. [ 326.362618][ T1341] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-fc03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 326.374824][ T1341] usb 5-1: USB disconnect, device number 39 [ 326.390822][T12004] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 326.455407][T12008] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 326.732726][T12024] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 326.754307][T12024] bond1: (slave bridge0): making interface the new active one [ 326.756985][T12024] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 326.906687][T12029] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1606'. [ 326.917598][T12029] 0ªX¹¦D: renamed from macvtap0 [ 326.944396][T12029] veth0_macvtap: entered promiscuous mode [ 326.950730][T12029] 0ªX¹¦D: entered allmulticast mode [ 326.955952][T12029] veth0_macvtap: entered allmulticast mode [ 326.962599][T12029] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 327.704504][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1611'. [ 327.904000][T12050] FAULT_INJECTION: forcing a failure. [ 327.904000][T12050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.910294][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.2.1610 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 327.910311][T12050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.910318][T12050] Call Trace: [ 327.910323][T12050] [ 327.910327][T12050] dump_stack_lvl+0x16c/0x1f0 [ 327.910347][T12050] should_fail_ex+0x512/0x640 [ 327.910365][T12050] _copy_to_iter+0x463/0x16f0 [ 327.910385][T12050] ? __pfx__copy_to_iter+0x10/0x10 [ 327.910400][T12050] ? vlan_seq_from_index+0x189/0x230 [ 327.910415][T12050] ? find_held_lock+0x2b/0x80 [ 327.910429][T12050] ? vlan_seq_stop+0x31/0xb0 [ 327.910444][T12050] seq_read_iter+0xcf8/0x12c0 [ 327.910468][T12050] seq_read+0x39e/0x4e0 [ 327.910485][T12050] ? __pfx_seq_read+0x10/0x10 [ 327.910505][T12050] ? __bpf_trace_contention_end+0xc9/0x110 [ 327.910527][T12050] ? __pfx_seq_read+0x10/0x10 [ 327.910543][T12050] proc_reg_read+0x23d/0x330 [ 327.910557][T12050] ? __pfx_proc_reg_read+0x10/0x10 [ 327.910572][T12050] vfs_read+0x1e1/0xc60 [ 327.910584][T12050] ? fdget_pos+0x2a2/0x370 [ 327.910597][T12050] ? __pfx_vfs_read+0x10/0x10 [ 327.910607][T12050] ? find_held_lock+0x2b/0x80 [ 327.910622][T12050] ? __fget_files+0x20e/0x3c0 [ 327.910637][T12050] ksys_read+0x12a/0x250 [ 327.910648][T12050] ? __pfx_ksys_read+0x10/0x10 [ 327.910659][T12050] ? syscall_trace_enter+0x1cb/0x260 [ 327.910671][T12050] ? rcu_is_watching+0x12/0xc0 [ 327.910686][T12050] __do_fast_syscall_32+0x7c/0x3a0 [ 327.910702][T12050] do_fast_syscall_32+0x32/0x80 [ 327.910717][T12050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 327.910732][T12050] RIP: 0023:0xf7f56579 [ 327.910741][T12050] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 327.910752][T12050] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 327.910763][T12050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 327.910770][T12050] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.910777][T12050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.910783][T12050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 327.910790][T12050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.910803][T12050] [ 328.122905][ T5964] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 328.221051][ T40] audit: type=1800 audit(2000035542.086:41478): pid=12069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1617" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 329.009010][ T5964] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 329.841869][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 329.846544][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 330.932167][T12132] /dev/nullb0: Can't lookup blockdev [ 331.013496][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 331.336073][T12148] smc: net device bond0 erased user defined pnetid SYZ2 [ 332.773920][T12183] comedi comedi0: Minor 5 could not be opened [ 332.885269][T12189] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1657'. [ 332.947165][ T5964] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 333.147727][T12200] tipc: Enabling of bearer rejected, failed to enable media [ 333.320037][T12213] fuse: Bad value for 'group_id' [ 333.320050][T12213] fuse: Bad value for 'group_id' [ 333.339144][T12212] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 333.379487][T12209] befs: (nbd2): No write support. Marking filesystem read-only [ 333.384185][T12209] syz.2.1664: attempt to access beyond end of device [ 333.384185][T12209] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 333.390568][T12209] befs: (nbd2): unable to read superblock [ 333.699034][T12222] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 333.815069][T12232] netlink: 'syz.1.1672': attribute type 10 has an invalid length. [ 333.832195][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 333.835171][T12232] team0: left promiscuous mode [ 333.836943][T12232] team_slave_0: left promiscuous mode [ 333.840414][T12232] team_slave_1: left promiscuous mode [ 334.532600][T12269] netlink: 'syz.2.1681': attribute type 11 has an invalid length. [ 334.536236][T12269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1681'. [ 335.034477][T12291] /dev/nullb0: Can't open blockdev [ 335.083191][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 335.608002][T12320] /dev/nullb0: Can't lookup blockdev [ 335.663207][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 336.017072][T12327] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 336.170151][T12338] befs: (nbd3): No write support. Marking filesystem read-only [ 336.173046][T12338] syz.3.1700: attempt to access beyond end of device [ 336.173046][T12338] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 336.180875][T12338] befs: (nbd3): unable to read superblock [ 336.241209][T12341] fuse: Bad value for 'fd' [ 336.278440][T12344] fuse: Unknown parameter 'grou00000000000000000000' [ 336.308422][T12349] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 336.657997][ T34] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 336.833915][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.837850][ T34] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 336.841541][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.849221][ T34] usb 7-1: config 0 descriptor?? [ 337.047709][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 337.050457][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 337.054471][ T34] usb 7-1: USB disconnect, device number 47 [ 337.507371][ T6446] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 337.550731][T12385] netlink: 'syz.3.1714': attribute type 11 has an invalid length. [ 337.553247][T12385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1714'. [ 337.898773][ T6446] usb 7-1: Using ep0 maxpacket: 32 [ 337.901880][ T6446] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.905503][ T6446] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 337.935502][ T6446] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.944772][ T6446] usb 7-1: config 0 descriptor?? [ 337.948203][ T6446] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 337.954545][ T6446] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 338.147199][ T6446] usb 7-1: USB disconnect, device number 48 [ 338.159558][ T6446] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 338.480014][T12426] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 338.482510][T12426] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1726'. [ 339.223269][ T40] audit: type=1326 audit(2000039393.634:41479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.258203][ T40] audit: type=1326 audit(2000039393.634:41480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.281880][ T40] audit: type=1326 audit(2000039393.634:41481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.306408][ T40] audit: type=1326 audit(2000039393.634:41482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.325442][ T40] audit: type=1326 audit(2000039393.634:41483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.333674][ T40] audit: type=1326 audit(2000039393.634:41484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.342288][ T40] audit: type=1326 audit(2000039393.634:41485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.349469][ T40] audit: type=1326 audit(2000039393.634:41486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.357720][ T40] audit: type=1326 audit(2000039393.634:41487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.366985][ T40] audit: type=1326 audit(2000039393.645:41488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.0.1739" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 339.801042][T12485] /dev/nullb0: Can't open blockdev [ 339.880584][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 340.021238][T12502] fuse: Bad value for 'fd' [ 340.502680][T12514] overlayfs: failed to clone upperpath [ 340.668158][T12519] /dev/nullb0: Can't lookup blockdev [ 340.712605][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 340.811965][T12529] fuse: Bad value for 'fd' [ 341.096571][T12544] siw: device registration error -23 [ 341.449159][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 341.490576][T12551] overlayfs: failed to clone upperpath [ 341.753352][T12560] fuse: Bad value for 'fd' [ 342.443297][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 342.445596][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 342.462853][T12562] ceph: No mds server is up or the cluster is laggy [ 342.626144][T12573] /dev/nullb0: Can't lookup blockdev [ 342.672721][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 342.748557][T12579] random: crng reseeded on system resumption [ 342.751133][T12579] FAULT_INJECTION: forcing a failure. [ 342.751133][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 342.756332][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.2.1774 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 342.756348][T12579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.756366][T12579] Call Trace: [ 342.756373][T12579] [ 342.756378][T12579] dump_stack_lvl+0x16c/0x1f0 [ 342.756397][T12579] should_fail_ex+0x512/0x640 [ 342.756416][T12579] should_failslab+0xc2/0x120 [ 342.756431][T12579] __kmalloc_cache_noprof+0x6a/0x3e0 [ 342.756442][T12579] ? do_raw_spin_lock+0x12c/0x2b0 [ 342.756454][T12579] ? find_held_lock+0x2b/0x80 [ 342.756466][T12579] ? async_schedule_node_domain+0x54/0x120 [ 342.756482][T12579] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 342.756497][T12579] async_schedule_node_domain+0x54/0x120 [ 342.756513][T12579] dev_cache_fw_image+0x38e/0x490 [ 342.756528][T12579] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 342.756543][T12579] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 342.756557][T12579] dpm_for_each_dev+0x5a/0xb0 [ 342.756573][T12579] fw_pm_notify+0x81/0x150 [ 342.756584][T12579] notifier_call_chain+0xbc/0x410 [ 342.756599][T12579] ? __pfx_fw_pm_notify+0x10/0x10 [ 342.756614][T12579] blocking_notifier_call_chain_robust+0xc8/0x160 [ 342.756630][T12579] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 342.756652][T12579] pm_notifier_call_chain_robust+0x27/0x60 [ 342.756669][T12579] snapshot_open+0x218/0x2b0 [ 342.756685][T12579] ? __pfx_snapshot_open+0x10/0x10 [ 342.756700][T12579] misc_open+0x35a/0x420 [ 342.756713][T12579] ? __pfx_misc_open+0x10/0x10 [ 342.756725][T12579] chrdev_open+0x234/0x6a0 [ 342.756739][T12579] ? __pfx_apparmor_file_open+0x10/0x10 [ 342.756758][T12579] ? __pfx_chrdev_open+0x10/0x10 [ 342.756772][T12579] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 342.756799][T12579] do_dentry_open+0x744/0x1c10 [ 342.756813][T12579] ? __pfx_chrdev_open+0x10/0x10 [ 342.756830][T12579] vfs_open+0x82/0x3f0 [ 342.756847][T12579] path_openat+0x1de4/0x2cb0 [ 342.756864][T12579] ? __pfx_path_openat+0x10/0x10 [ 342.756881][T12579] do_filp_open+0x20b/0x470 [ 342.756893][T12579] ? __pfx_do_filp_open+0x10/0x10 [ 342.756920][T12579] ? _raw_spin_unlock+0x3e/0x50 [ 342.756933][T12579] ? alloc_fd+0x471/0x7d0 [ 342.756949][T12579] do_sys_openat2+0x11b/0x1d0 [ 342.756964][T12579] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.756982][T12579] ? __fget_files+0x20e/0x3c0 [ 342.756996][T12579] __ia32_compat_sys_openat+0x16d/0x210 [ 342.757013][T12579] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 342.757029][T12579] ? ksys_write+0x1ac/0x250 [ 342.757043][T12579] ? rcu_is_watching+0x12/0xc0 [ 342.757059][T12579] __do_fast_syscall_32+0x7c/0x3a0 [ 342.757076][T12579] do_fast_syscall_32+0x32/0x80 [ 342.757091][T12579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.757106][T12579] RIP: 0023:0xf7f56579 [ 342.757116][T12579] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.757127][T12579] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 342.757138][T12579] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001180 [ 342.757146][T12579] RDX: 0000000000002a01 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.757152][T12579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.757159][T12579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.757165][T12579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.757179][T12579] [ 342.762394][T12579] [ 342.869478][T12579] ============================================ [ 342.871412][T12579] WARNING: possible recursive locking detected [ 342.873344][T12579] 6.16.0-syzkaller-00857-gced1b9e0392d #0 Not tainted [ 342.876102][T12579] -------------------------------------------- [ 342.878821][T12579] syz.2.1774/12579 is trying to acquire lock: [ 342.880667][T12579] ffffffff8f514d28 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 342.883117][T12579] [ 342.883117][T12579] but task is already holding lock: [ 342.885371][T12579] ffffffff8f514d28 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 342.887841][T12579] [ 342.887841][T12579] other info that might help us debug this: [ 342.890290][T12579] Possible unsafe locking scenario: [ 342.890290][T12579] [ 342.892605][T12579] CPU0 [ 342.893669][T12579] ---- [ 342.894758][T12579] lock(fw_lock); [ 342.895974][T12579] lock(fw_lock); [ 342.897168][T12579] [ 342.897168][T12579] *** DEADLOCK *** [ 342.897168][T12579] [ 342.899664][T12579] May be due to missing lock nesting notation [ 342.899664][T12579] [ 342.902167][T12579] 5 locks held by syz.2.1774/12579: [ 342.903839][T12579] #0: ffffffff8f302a28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 342.906402][T12579] #1: ffffffff8e488228 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 342.909645][T12579] #2: ffffffff8e4c8910 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 342.913253][T12579] #3: ffffffff8f514d28 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 342.915904][T12579] #4: ffffffff8f50f728 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 342.918749][T12579] [ 342.918749][T12579] stack backtrace: [ 342.920601][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.2.1774 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 342.920616][T12579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.920623][T12579] Call Trace: [ 342.920628][T12579] [ 342.920634][T12579] dump_stack_lvl+0x116/0x1f0 [ 342.920651][T12579] print_deadlock_bug+0x1e9/0x240 [ 342.920667][T12579] __lock_acquire+0x1106/0x1c90 [ 342.920684][T12579] ? __kasan_slab_free+0x51/0x70 [ 342.920699][T12579] lock_acquire+0x179/0x350 [ 342.920715][T12579] ? assign_fw+0x4e/0x640 [ 342.920728][T12579] ? __pfx___might_resched+0x10/0x10 [ 342.920741][T12579] ? do_sys_openat2+0x11b/0x1d0 [ 342.920756][T12579] ? __ia32_compat_sys_openat+0x16d/0x210 [ 342.920772][T12579] ? __do_fast_syscall_32+0x7c/0x3a0 [ 342.920788][T12579] __mutex_lock+0x199/0xb90 [ 342.920802][T12579] ? assign_fw+0x4e/0x640 [ 342.920814][T12579] ? assign_fw+0x4e/0x640 [ 342.920827][T12579] ? __pfx___mutex_lock+0x10/0x10 [ 342.920843][T12579] ? kasan_quarantine_put+0x10a/0x240 [ 342.920854][T12579] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.920868][T12579] ? assign_fw+0x4e/0x640 [ 342.920880][T12579] assign_fw+0x4e/0x640 [ 342.920892][T12579] ? _request_firmware+0x957/0x1470 [ 342.920905][T12579] _request_firmware+0x988/0x1470 [ 342.920920][T12579] ? __pfx__request_firmware+0x10/0x10 [ 342.920933][T12579] ? dump_stack_lvl+0x197/0x1f0 [ 342.920947][T12579] ? dump_stack_lvl+0x1a3/0x1f0 [ 342.920964][T12579] __async_dev_cache_fw_image+0xb1/0x340 [ 342.920979][T12579] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 342.920993][T12579] ? mark_held_locks+0x49/0x80 [ 342.921008][T12579] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.921021][T12579] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 342.921035][T12579] async_schedule_node_domain+0xd4/0x120 [ 342.921050][T12579] dev_cache_fw_image+0x38e/0x490 [ 342.921063][T12579] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 342.921077][T12579] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 342.921089][T12579] dpm_for_each_dev+0x5a/0xb0 [ 342.921101][T12579] fw_pm_notify+0x81/0x150 [ 342.921112][T12579] notifier_call_chain+0xbc/0x410 [ 342.921126][T12579] ? __pfx_fw_pm_notify+0x10/0x10 [ 342.921139][T12579] blocking_notifier_call_chain_robust+0xc8/0x160 [ 342.921154][T12579] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 342.921171][T12579] pm_notifier_call_chain_robust+0x27/0x60 [ 342.921188][T12579] snapshot_open+0x218/0x2b0 [ 342.921203][T12579] ? __pfx_snapshot_open+0x10/0x10 [ 342.921217][T12579] misc_open+0x35a/0x420 [ 342.921229][T12579] ? __pfx_misc_open+0x10/0x10 [ 342.921241][T12579] chrdev_open+0x234/0x6a0 [ 342.921254][T12579] ? __pfx_apparmor_file_open+0x10/0x10 [ 342.921273][T12579] ? __pfx_chrdev_open+0x10/0x10 [ 342.921286][T12579] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 342.921300][T12579] do_dentry_open+0x744/0x1c10 [ 342.921312][T12579] ? __pfx_chrdev_open+0x10/0x10 [ 342.921326][T12579] vfs_open+0x82/0x3f0 [ 342.921341][T12579] path_openat+0x1de4/0x2cb0 [ 342.921354][T12579] ? __pfx_path_openat+0x10/0x10 [ 342.921367][T12579] do_filp_open+0x20b/0x470 [ 342.921378][T12579] ? __pfx_do_filp_open+0x10/0x10 [ 342.921394][T12579] ? _raw_spin_unlock+0x3e/0x50 [ 342.921406][T12579] ? alloc_fd+0x471/0x7d0 [ 342.921418][T12579] do_sys_openat2+0x11b/0x1d0 [ 342.921433][T12579] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.921449][T12579] ? __fget_files+0x20e/0x3c0 [ 342.921460][T12579] __ia32_compat_sys_openat+0x16d/0x210 [ 342.921476][T12579] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 342.921493][T12579] ? ksys_write+0x1ac/0x250 [ 342.921505][T12579] ? rcu_is_watching+0x12/0xc0 [ 342.921518][T12579] __do_fast_syscall_32+0x7c/0x3a0 [ 342.921533][T12579] do_fast_syscall_32+0x32/0x80 [ 342.921548][T12579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.921562][T12579] RIP: 0023:0xf7f56579 [ 342.921572][T12579] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.921584][T12579] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 342.921594][T12579] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001180 [ 342.921601][T12579] RDX: 0000000000002a01 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.921607][T12579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.921614][T12579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 342.921620][T12579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.921630][T12579] [ 343.108520][ T5964] Bluetooth: hci0: unexpected event 0x1c length: 4 < 5 VM DIAGNOSIS: 20:59:35 Registers: info registers vcpu 0 CPU#0 RAX=ffffed100460f910 RBX=ffffed100460f911 RCX=ffffffff8189e27c RDX=0000000000000001 RSI=0000000000000008 RDI=ffff88802307c880 RBP=ffffed100460f910 RSP=ffffc90002a3f948 R8 =0000000000000000 R9 =ffffed100460f910 R10=ffff88802307c887 R11=ffff88802b23acd8 R12=ffffffff8df2cf38 R13=ffff88802b23af08 R14=ffffffff8df2ce50 R15=ffff88802b23a400 RIP=ffffffff821fb04b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097506000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080004000 CR3=0000000068071000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855d3965 RDI=ffffffff9b0c6840 RBP=ffffffff9b0c6800 RSP=ffffc900224bed00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b0c6800 R15=ffffffff855d3900 RIP=ffffffff855d398f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097606000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5054fac CR3=0000000068071000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 920c8eff79b38f99 c7e88dc7a30a273c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a561a670fcea86a6 e597181bb74fbff7 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d9b6a03c87fe2a79 e4d705706cacacf0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 addc84826667b98c 571b9601680a06c6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000068 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53e17386b64599b7 0000000100000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c904e4900000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1dc4bd5ef5d34922 f657762f790a59e6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ee765b88 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 378dcb23c5abc28f 493e58ddc964621a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc4f6ad2969951b2 0fc5ec34033d88d1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888029fd8000 RCX=1ffffd1ff58472d6 RDX=1ffff11005687482 RSI=ffff888029fd8000 RDI=ffff88801dee4880 RBP=ffffc9000047fde8 RSP=ffffc900022efa40 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff888029fd8558 R14=ffff888050006400 R15=ffff88802b43a400 RIP=ffffffff812c0028 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097706000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff364d085d0 CR3=000000004dcad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b341fa0 RCX=ffffffff81af49ad RDX=ffff888022622440 RSI=ffffffff81af4989 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90006f2f770 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000002c00 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056683f5 R15=ffff88802b53b6c0 RIP=ffffffff81bb55bb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097806000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d38a0 CR3=000000000e382000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000