last executing test programs: 6m51.188085379s ago: executing program 3 (id=202): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000240012800b00010067656e6576650000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f00000000c0)) ioctl$COMEDI_BUFCONFIG(r9, 0x8020640d, 0x0) 6m51.125035599s ago: executing program 3 (id=203): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) 6m51.124183237s ago: executing program 3 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f711010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @remote, 0x63e6}, 0x1c) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f00000005c0)={0x710, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x2}, 0x6, 0x3, 0x4, 0x6, 0x10, 'syz0\x00', "361badcc19ffff8efb31cc5dc5ebf4305dd1c129b276b15a5aa7782f95a47c24", "4bd119d1c103ad5c89c08b9ba5964ab236f935d217d1b6bfc51595166b19d81f", [{0x5b1d, 0xfffc, {0x3, 0x1}}, {0x53, 0x5, {0x2, 0x647}}, {0x7, 0x800, {0x2, 0xfffffff4}}, {0x2, 0xa}, {0x8, 0x401, {0x1, 0xe}}, {0x4, 0x7fff, {0x1, 0x3ff}}, {0x8, 0x7ff, {0x3, 0xffff}}, {0x7, 0x8000, {0x0, 0xe74}}, {0x8, 0x6, {0x1, 0x4}}, {0x401, 0xfffd, {0x0, 0x7}}, {0x6, 0x6, {0x2, 0x8}}, {0x5, 0x8, {0x3, 0x3c59}}, {0x1000, 0x6, {0x5, 0x3}}, {0xa0f, 0xf, {0x1, 0x474}}, {0xb858, 0xc69d, {0x2, 0x6}}, {0xf6, 0x2b, {0x8f37f0cc7c2b5e7e, 0x9}}, {0x2, 0x1ff, {0x3, 0x2}}, {0x0, 0x400, {0x2, 0x9}}, {0x5}, {0x3, 0x8000, {0x0, 0xff}}, {0x2, 0x8, {0x3, 0x3ff}}, {0x4, 0x80, {0x2, 0x8001}}, {0x2, 0x1, {0x2, 0x868}}, {0x7, 0x1, {0x0, 0x5}}, {0x6, 0x1, {0x1, 0xcb66}}, {0xa, 0x2, {0x0, 0xc00}}, {0xfff7, 0xe4d, {0x1, 0x8}}, {0xa173, 0x6, {0x2, 0xfffffffb}}, {0x1, 0xff81, {0x0, 0x400}}, {0x0, 0xb, {0x1, 0x3}}, {0x6, 0x4, {0x2, 0x2}}, {0x0, 0x7fff, {0x3, 0x81}}, {0x9607, 0xb68, {0x3, 0x9}}, {0x70, 0x9, {0x1, 0x491}}, {0x100, 0x4, {0x1, 0x6}}, {0xe, 0xfffb, {0x3, 0x1ff}}, {0x2, 0x1, {0x0, 0x400}}, {0x14, 0xb5e, {0x3, 0x4}}, {0x6, 0x1, {0x3, 0x6}}, {0x10, 0x8000, {0x3, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x1, 0x80000000}, 0x7, 0x6d, 0x2026, 0x4442, 0x1c, 'syz0\x00', "cad54b95806e28539de06dcae5b1239a79373917f15e9682e3c84ca6870bc44c", "87e62a0d3310de6eb3b3ed029c87f1cac0d3bea544f3fd162cac0367f9ed1c3d", [{0xdc, 0x4, {0x3, 0x9}}, {0x5000, 0xff, {0x3, 0x2}}, {0x2, 0x10, {0x1, 0xf}}, {0x5, 0x4, {0x3, 0x6c91c175}}, {0x2, 0x50d, {0x2}}, {0x1, 0xfffd, {0x3, 0x40}}, {0x8, 0x9160, {0x0, 0x7fffffff}}, {0x7, 0x8000, {0x3, 0x9}}, {0x3, 0x2, {0x3, 0x1}}, {0x200, 0x1, {0x1, 0x3}}, {0x101, 0x2, {0x3}}, {0x8, 0x8, {0x1, 0x40}}, {0xfff0, 0x26ba, {0x3, 0x737}}, {0x5f1, 0x9, {0x1, 0x5}}, {0x1, 0x4, {0x0, 0x5}}, {0x9, 0x11a, {0x2, 0x2}}, {0x2, 0x5, {0x1, 0x3}}, {0x7f, 0x5, {0x3, 0x4}}, {0x3, 0x7fff, {0x2, 0xabb}}, {0x1ff, 0x1, {0x1, 0x8000}}, {0x0, 0x1, {0x1, 0x200}}, {0x4de4, 0x1, {0x1, 0x8}}, {0x6e80, 0x2, {0x0, 0x80000001}}, {0x0, 0x0, {0x1, 0x6}}, {0x7, 0x4, {0x2, 0x6}}, {0x446b, 0x3, {0x3, 0x5}}, {0xb, 0x3, {0x1, 0xfffffff7}}, {0xc, 0x8, {0x1, 0x10000}}, {0x6, 0x4, {0x3, 0x6}}, {0xf, 0x8, {0x0, 0x1000}}, {0x4, 0x9, {0x3, 0x9}}, {0x7, 0x0, {0x1}}, {0xc, 0x5, {0x1, 0xb7ea}}, {0x8, 0xfffe, {0x3}}, {0xffff, 0x2e9, {0x3, 0x1}}, {0x5, 0x8, {0x2, 0x3}}, {0x66d, 0xb420, {0x3, 0x5}}, {0x5, 0x401, {0x0, 0xff}}, {0x6, 0x8, {0x3, 0x8}}, {0x0, 0x0, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x7, 0x3, 0x5, 0x9, 0xa, 'syz1\x00', "87ffa1c5bbd5163d1d3aa55fe724f6cd41f43c69c40632d6f803db09f1849191", "4edf40bbc6ebd3fe9cfa5f6b0ba9be2261d74fda697b0cd6309e99e48cf964b6", [{0xa8, 0x80, {0x1, 0xfff}}, {0x8, 0x9, {0x0, 0x6e}}, {0x0, 0x88a3, {0x1}}, {0x0, 0x4, {0x0, 0x7}}, {0x7ff, 0x3ff, {0x2, 0x2}}, {0x5, 0x373, {0x3, 0x7fffffff}}, {0x8000, 0xfffd, {0x3, 0x9}}, {0x3, 0x5, {0x0, 0xcbb8}}, {0xfff9, 0x3, {0x1, 0xffffff01}}, {0x7, 0x85, {0x3, 0x88f}}, {0xfffc, 0x7, {0x1, 0xffffffff}}, {0x0, 0x5, {0x0, 0x7fff}}, {0xfff, 0x7, {0x1, 0x288b}}, {0x6, 0x0, {0x3, 0x4}}, {0x3ff, 0xf}, {0x8, 0x63, {0x1, 0x2}}, {0x5, 0x3, {0x3, 0xd13}}, {0x2, 0x7fff, {0x3, 0x3}}, {0x81, 0x8, {0x3, 0x7}}, {0x3, 0x4, {0x3, 0x2717}}, {0x4e6, 0x3, {0x0, 0xffff6a55}}, {0x1ff, 0x9, {0x3, 0x9}}, {0x6f, 0x1, {0x2, 0x2}}, {0x1, 0x3, {0x1}}, {0x1, 0x401, {0x0, 0x9b9b}}, {0x9, 0x984, {0x2, 0x8}}, {0x8a1, 0x9, {0x0, 0x80}}, {0x6, 0xef70, {0x1, 0x7fffffff}}, {0xa35, 0x6fd6, {0x2, 0x9}}, {0x10, 0x2, {0x0, 0x3}}, {0x4, 0x5, {0x1, 0x3}}, {0x20, 0x7949, {0x1, 0x3}}, {0x140, 0xa144}, {0x8000, 0xf4, {0x0, 0xe0000000}}, {0x3, 0x200, {0x3, 0x4}}, {0x4, 0x5, {0x1, 0x4}}, {0x11, 0x8, {0x3, 0x3}}, {0xd11, 0x6, {0x2, 0x401}}, {0x8001, 0x1, {0x3, 0x8001}}, {0x1, 0x9726, {0x3, 0xa}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xa}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0}) 6m51.054046899s ago: executing program 3 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x103010, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) io_uring_setup(0x107f, &(0x7f0000000040)={0x0, 0x7440, 0x400, 0x57250b4f, 0x2de}) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x2, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x11a50fb, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0xa) umount2(&(0x7f0000000180)='./file0/file1\x00', 0xe) 6m50.983672492s ago: executing program 3 (id=208): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124f00000000006113520000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d35f3ff00000000650700008a6f7cfc070700004c0000003e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x7ff, 0x1, 0xc, 0x11, 0x5, 0x76, 0x1b8e, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0x101, 0xfffffffb, 0x64, 0x3, 0x80000000, 0xffffffff, 0xca9f, 0x80, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='mtd0\x00', 0x80800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x4}}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r3, 0x89e0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6m50.764930947s ago: executing program 3 (id=210): openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/3:0:0:0\x00', 0x101000, 0x0) r0 = eventfd(0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 6m50.711934476s ago: executing program 32 (id=210): openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/3:0:0:0\x00', 0x101000, 0x0) r0 = eventfd(0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 5m59.143873564s ago: executing program 2 (id=951): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x201) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 5m58.787107459s ago: executing program 2 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmsg$kcm(r1, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002680)='b', 0x1}], 0x68000}, 0x4015) 5m58.729035742s ago: executing program 4 (id=955): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0x8800) 5m58.600916807s ago: executing program 4 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 5m58.428028173s ago: executing program 0 (id=958): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x201, @mcast1, 0x5}, 0x1c) sendmmsg$sock(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x80) 5m58.362311514s ago: executing program 4 (id=959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r2, 0xae80, 0xf5) 5m58.224342414s ago: executing program 0 (id=960): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000100000000000000ff97db9f2500000000", @ANYRES32=r3, @ANYBLOB="000501000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008080) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xb8, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1d0, 0x1d8, 0x190, 0x1d0, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb8, 0x7000000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x6, 0x2, 0x0, 0x5, 0x3], 0x1, 0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000006c0)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r7}, 0x4) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r8 = fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000240)=0xdd, 0x4) r9 = fsmount(r8, 0x0, 0xf) setresuid(0x0, 0xee00, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r10, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r10, 0x40047451, &(0x7f00000002c0)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r7, @ANYRES64=r7], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @netfilter, r9, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m58.17215467s ago: executing program 2 (id=961): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x18, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "1ff338", "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"}}, 0x110) 5m57.970594907s ago: executing program 2 (id=963): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[@nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x1, 0x5f5}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0x8ea}}, @nested_amd_vmsave={0x183, 0x18}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0xc0c6}}], 0xb8}) ioctl$KVM_SMI(r1, 0xaeb7) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000002c0)={0x4, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @local}}]}, 0x110) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0xfff}}, 0x10) 5m57.967020764s ago: executing program 1 (id=964): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) eventfd2(0x0, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}}, 0x40090) 5m57.874694454s ago: executing program 2 (id=965): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000100)="0000000001000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) 5m57.874079776s ago: executing program 0 (id=966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpid() r5 = epoll_create1(0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ab, 0x400, 0x1000001, 0x230}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000025c0)={r5, r6, 0x4}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local', '=static'}}}]}) r7 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r7, 0xffff9047, 0x2, r7}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r7, 0xffff9047, 0x2, r7}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="66baa100ed66440f38811966baf80cb8f4dfd589ef66bafc0c66ed66450f71e2060f21b1652e3ef30f300f23bb66b853000f00d00f01b47b165400000fd47560", 0x40}], 0x1, 0x1f, 0x0, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x8, 0x820c, 0x6, 0x31, 0x8, 0x2, 0x6}, &(0x7f0000000280)=0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r12, 0x0, 0x83, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x90, [0xf, 0x0, 0xffffd, 0x400000000, 0x2], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x78) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000640)=r9, 0x4) 5m57.873303272s ago: executing program 1 (id=967): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002200)=""/224, 0xe0, 0x8d35) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="760a00000000000061119500000002000000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d08"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x402c894}, 0x4048000) 5m57.738126953s ago: executing program 1 (id=968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x18, 0x713, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x20, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x3628, 0xffffffff00000001, 0x3, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5m57.73794343s ago: executing program 1 (id=969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x81000000, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x28}, {0x4, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 5m56.589094637s ago: executing program 2 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000002c0)={0x8, 0x0, [{0x8000, 0x0, 0x55}, {0x8, 0x0, 0x8}, {0x1, 0x0, 0x1d41f314}, {0x6, 0x0, 0x400}, {0x7b48, 0x0, 0x100000000}, {0x1, 0x0, 0x9}, {0x720, 0x0, 0x5}, {0x5b13, 0x0, 0x1}, {0xfffffff7, 0x0, 0x4}, {0xfffffffb, 0x0, 0x8000000000000001}, {0x800, 0x0, 0x9fa9}, {0x5, 0x0, 0x8}, {0xffffffff, 0x0, 0x5000}, {0xffffffff, 0x0, 0xfff}, {0x4, 0x0, 0x7}, {0x7f, 0x0, 0x88c3}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000c06010300000000000000000000000005000100070000000900020049e17a1a00000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x240c0050) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:', 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x5, &(0x7f0000000540)=ANY=[@ANYRES64=r4, @ANYRESOCT=r4], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, r4, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000010425bd6fe2fcdbdf25000000001efabf22833984e7e179ab22e9a0b34cb6a67ab06d260bdf4b7d438716ef930d0902624113d2b47b48a4bbb176210e45c8afbe79", @ANYRES32=0x0, @ANYBLOB="0317000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000080001004000"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000200)=0x2, 0xfffffffffffffff2, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r11, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r11, 0x4140, 0x0) write$P9_RSTATu(r11, 0x0, 0x6e) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r12, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000380)=0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r12, 0x7, 0x80, 0x8, 0x2, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x81, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp={0x44, 0x8, 0x9c, 0x0, 0x4, [0xf]}]}}}}}) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a6", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) 5m55.537038206s ago: executing program 0 (id=971): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4c040}, 0x8800) 5m54.900292759s ago: executing program 4 (id=972): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @empty}, {0x0, @random="3c21618477a1"}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, 'team_slave_0\x00'}) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) socket$inet(0x2, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000400)={{0x2, 0x4e20, @empty}, {0x0, @random="3c21618477a1"}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, 'team_slave_0\x00'}) (async) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) (async) 5m49.677919364s ago: executing program 0 (id=973): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 5m48.223915981s ago: executing program 1 (id=974): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x456, 0x2, 0x1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) unlink(&(0x7f0000000040)='./dev\x00') (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc9c}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x44}}, 0x4004001) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1, 0xfff1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}}, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x3}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x448402, 0x182) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000040)={0x1, 0x11, {0x1c, 0x31, 0x6, 0x1a, 0x9, 0x8, 0x5, 0x3d, 0x1}}) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) 5m46.555857033s ago: executing program 4 (id=975): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1c000, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth0_macvtap\x00', @local}) r1 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x3}, 0xe) 5m43.499328611s ago: executing program 0 (id=976): ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) 5m41.906450055s ago: executing program 4 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x54000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000505000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000001c0)="66b97608000066b86c7c00000f300f08baf80c66b86087498066efbafc0c66edbad004ed0fc759cf66660f3880a22c40bad004ecdfcb0f01c40f794b00", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m39.310879582s ago: executing program 33 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000002c0)={0x8, 0x0, [{0x8000, 0x0, 0x55}, {0x8, 0x0, 0x8}, {0x1, 0x0, 0x1d41f314}, {0x6, 0x0, 0x400}, {0x7b48, 0x0, 0x100000000}, {0x1, 0x0, 0x9}, {0x720, 0x0, 0x5}, {0x5b13, 0x0, 0x1}, {0xfffffff7, 0x0, 0x4}, {0xfffffffb, 0x0, 0x8000000000000001}, {0x800, 0x0, 0x9fa9}, {0x5, 0x0, 0x8}, {0xffffffff, 0x0, 0x5000}, {0xffffffff, 0x0, 0xfff}, {0x4, 0x0, 0x7}, {0x7f, 0x0, 0x88c3}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000c06010300000000000000000000000005000100070000000900020049e17a1a00000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x240c0050) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='enable_event:sched:', 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x5, &(0x7f0000000540)=ANY=[@ANYRES64=r4, @ANYRESOCT=r4], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, r4, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000010425bd6fe2fcdbdf25000000001efabf22833984e7e179ab22e9a0b34cb6a67ab06d260bdf4b7d438716ef930d0902624113d2b47b48a4bbb176210e45c8afbe79", @ANYRES32=0x0, @ANYBLOB="0317000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000080001004000"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000200)=0x2, 0xfffffffffffffff2, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r11, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r11, 0x4140, 0x0) write$P9_RSTATu(r11, 0x0, 0x6e) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r12, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000380)=0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r12, 0x7, 0x80, 0x8, 0x2, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x81, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp={0x44, 0x8, 0x9c, 0x0, 0x4, [0xf]}]}}}}}) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a6", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) 5m36.260275392s ago: executing program 1 (id=979): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x3, 0x7eb, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x47, 0xb1, 0xd9, 0x20, 0x2019, 0x1201, 0x38b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d9, 0x2, 0xf7, 0x10, 0x100, 0x3, "", [{{0x9, 0x4, 0x53, 0x2, 0x10, 0x1f, 0x8c, 0xb9, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xcd40, 0x3, 0x101, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x26}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x2, 0x23, 0x1, 0x6, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0xd, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xb7, 0x7fff}, @mbim={0xc, 0x24, 0x1b, 0x101, 0x1000, 0x8, 0x8, 0xb3fc, 0x3}, @mdlm_detail={0x91, 0x24, 0x13, 0x49, "cd0173efc292274f931cac1ef72b95106971153c405553acf5043963eb2365246136c00d7c4e0f2b84453e54cdcf5384500f7e901a99e519ec428525d42291829027c80aa43eb6e9f700fc45ad5e48f663acdd154c3b377ac60b66a625b075b1e51718071d517503820d75e95c80e3eaed637f508849fb4748293fba445809474de097d04a4bd8d254dd9bee25"}, @mdlm_detail={0x1c, 0x24, 0x13, 0x9, "1c537f366f3a5a21091c4d5067a498816fe3e82917fb03b8"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x6b, 0x0, 0x7, [@generic={0x6f, 0x8, "4883f93fa8e320c35e751f0f7980e84b58a7b2e9bf6705329b59d8cd3c837830a0549e567adb3dfcc67a69460cc1fce8b0853c0cfa768239d725e3d9f0a8b2766e208aecab89ea90638d43b3bdef3057d3a4e7c2e2543ddb3b27ce07ff1456ae84530f10353abde2ec8a0876e5"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x7, 0x2, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}, @generic={0x93, 0xc, "c354c6cb1bd589d50ee05cc07fc8dd3c35e412a524ad17f9b4598174b8d3a0e35989dc5077d0a2c498ef382228fecfe995217bd8f75a186c0fc3a9b58e655aab33e823e9a442cf5d99cd29760b25d266becd3cc08a4efb0ee605d647fd7fe5277288345adaa62a6ab9d99874a93191b6bc3cf051079c7f511cd541454e9d25dd564b27bedf7ba91a0bc75768b02de109f5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xbd, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0x2650da1e925b5784, 0x2, 0x400, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x647b10e64987acfc, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0xfd, 0x40, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x81}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x2, 0xd4, 0x26, [@generic={0x86, 0xc, "110176161448ae9ab09119b5d756ddda604421a56120235ef67896e23011a87a3a7a0fcaeb9237e98575fb932e4f42acfb308874cac9093db8eb9abb2690ebd2576257508ef56b642e4915f189d1becdf1eba99a805408c799079676723dd4bb5b8b3e877bae8137e811baa68388515ed56ad39aa90c4d007cbeeb0c49df58a013238641"}, @uac_iso={0x7, 0x25, 0x1, 0x88753324b3b20017, 0x40, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0xa1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x5}, @generic={0x63, 0xb, "bd2f42a9723632481af8b57a33d3cb4c7fcf140203f128264f9a934a50d57192f73ecb275db2a5b9d092015767bef3e2b1362d85b1bb472175a6d771d970243d8e3f858a925f27d0ceb2d79e97aaa99697f0fcd4d5c201d3cd55ff3bc64ec9af52"}]}}, {{0x9, 0x5, 0x8d, 0x8, 0x0, 0x81, 0x4, 0x3}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x7, 0xb, 0xfe, [@generic={0x21, 0x4, "d67fbc4fd66f1dc9ead9b604999bf18de9ba275e34689c8ba32adeb342c7c4"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0xf, 0xe, 0x6c}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x6, 0x6, 0x70}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x8, 0xff, [@generic={0xe4, 0x23, "1879327093d53646bf2e6c643d4911c888e2c5989a9059c6fd2d0b5c7b1b36189e4df7bfb8e9de80a5950ddf243893702ecff736e1204e18a288bf16a0d532e8c056cf58518e399667e8471f160dc17902a5c71941883a18dbf50c404848d372e8736ed2335fb098cfce5263e9cb1b8a2c7910a4c60f7302c200f1b14e03532175e4330acfb641217903e7a8df69b6a5d44b6bb1f73a1b62ffc9246558b3c36416200258b13416b10ba51e15edd2c2736179409dafeb377cd87f6494d8a8caf4649dfeec82633e8bf914d17fa6fbc58c86e6f8e016bf22e82d0bc430da93d6948e82"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xbf, 0x3ff}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x4, 0x1, 0x81, [@generic={0x48, 0x8, "ab16eb906ada278c2bd1672dc4885e5526030cf394629c652096720b2701615b14b2eeb006959f6b663c7b4ec64be3234040c8d759aaeb260859534d0d2379ebec3b21b9da21"}, @generic={0x34, 0x11, "c639f65ffc6ab218ba2244972502ae57bef210c09f9d043a8862c533c21101a19be5350395cd47b089caa1ea24366261a9f9"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xfd, 0xc, 0x5}}]}}, {{0x9, 0x4, 0x1e, 0x9, 0x9, 0xf0, 0x86, 0x29, 0x3, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x54, 0x98, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xff, 0x8, 0xab}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0xb, 0x3, 0x6, [@generic={0x86, 0x22, "e259c0ab1ba785f6243237fc62327df18ea08c36236b58e5cd4fd3c0918fe4ba97363e98a5ce7fc23dcdf990942af9f221efb387bec3ac6e1de3728bf7b97c88f09b3f60649990d1f5864b9a12a890d730c48d0379f9928e1d6b76dfeb2cad07542c20c2b1debb646c9d677b247af42f09a6da0ff23e95b94c17bc9c1ac4970b59c64b1d"}, @generic={0x63, 0x30, "e76756a81dd52fc385a884f261ae67082bff83beed26dafb8f16b101da54870c6b5c33906f404fe2126e4e185a4190eee8b2f02382628630c14c93062b8d32e01ee4bc616159cb8be961def7aaca02c8d16a90b3c6ba4afa9cf639f102f536f0c5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x5, 0x7, [@generic={0x29, 0x11, "f11ee61f05d796ab125f1eb05e09648ff6054fe4c6904317ffbb82336f69329db6e61cf24bf186"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x9, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}, @generic={0x2, 0x24}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x7, 0x95, 0xa, [@generic={0x4, 0x2c, "8d86"}, @generic={0xff, 0x2c, "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"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xf6, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x3, 0xb1}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x300, 0x6, 0x9, 0x5, 0xff, 0x5e}, 0x10, &(0x7f0000000880)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x7b, 0x8c}]}, 0xa, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x809}}, {0x85, &(0x7f0000000940)=ANY=[@ANYBLOB="8503c9ff991e4e356832484380caf8e002a91a3dbbe4f558134dac6a8532df53d0c36586f5643884f772c9f61c6cdbb77cfee3b672c731bea988e7148280f429dedcf41c6f35c3abcf9891d1bcc59d39fdf2a95f974829c153a2da38793cfe2b96cb8e6849030a29055bf433e1e459d7e8cf4fea2172e562a07a19e218e0e40d0ae3027d36"]}, {0xe4, &(0x7f0000000a00)=@string={0xe4, 0x3, "b26a5b2c8da5bb942aa37afe64764b6bca9d868800f377e4f1d01e063d117a8f031e7d172806219ff3358d4ca7d5e8dc2482b67db5dd51db53f33b049608758fb016add0988d46d016951e786a142ba409a4cf14b143e55d9868ab0318869226520f89ffaa4f0a4953d69582b760b0f0bd87e08b14fe66464299be7fae1401936747723ebae871c54fc6a11ed2103a358a49f7349812ea211be5ce4913988a13d5eab2160ef38e0def3e0986e65703e12caabdd91abbe426f3b2e07b6a1dea47796a81da241ad2d89e7dbf923dd743b40ff739a7c1f76f741d4a3df0a1813b4ebeda"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x444}}, {0xa0, &(0x7f0000000b40)=@string={0xa0, 0x3, "1b4ac841542aa71c81856e4ec785c3c41405ca30bb927a1ebe259fd8b5226deed690966df79fed52e1e4603e737690a6be11d3d702aed719073ba34c938c6415ab374bd6a942e9692d672fe2c05a69a7ded9124d43159c8ee48c8d7496ea708b460fbd00462643ab0f73912fff2f16a7e085a305aea6ce8c4e54ac154a9c044ac960b2b20c6339b9e2850d39d900b358df02bb85bf196867a22c2f973f67"}}, {0x27, &(0x7f0000000c00)=@string={0x27, 0x3, "12b21038105cd9f2931eada5807c7d0906ab1b167919f3af89884d5610343db2494dee3c5f"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x41e}}, {0x68, &(0x7f0000000cc0)=@string={0x68, 0x3, "31701d2341e71cb31987d8a3e3db24e7269bd7379c0dc7a50a8cf78fc23188c3a189b1d82f3348b4cee8b9440d5969f6690358c4d1827ddd8e13be5dc1065e98806924c08eb7826e9deddfb23c87a3fc9a1abb47ebe618be6e21672abd3c2750d48ebfd6bb2d"}}]}) r2 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)="00000000090209000101000000402505a0a400010000000196a085e756fbb8", 0x1f) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x582, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x8, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6c7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x4, 0x40, 0xa3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0x5, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xfff8, 0xf4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0xe, 0x47, 0xff, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x3d9e, 0x4f, 0x90}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x1, 0x12, {0x7, 0x25, 0x1, 0x4, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5c, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0xf}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfff7, 0x6, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x13, 0x1, {0x7, 0x25, 0x1, 0x0, 0xff, 0xa3}}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x300, 0x5, 0xe0, 0x9, 0x40, 0x81}, 0x110, &(0x7f0000000f00)={0x5, 0xf, 0x110, 0x6, [@ptm_cap={0x3}, @generic={0xc2, 0x10, 0x5, "170e43d044ea9464442a032eb739e85cefb7c83ef83f50263554a34d1bae0b8cd5b439d52e3d540e9b250c067b12773ad0263bc57e84d8487d8135be0a3b6f76b371ad04c4480c5933de84f2fa9d884095101fd6ea9b0ce141f1043d7437226e45bcd73278098511f1c1a8b9d4f046f7432883b88ada62ab87118d1073f3b3dd975cec58adeef48eb93a3bb048c812ac703488a2cfc8e9690cdbd25942d52076ca08300e117d750162d5e0d05cbda4da6709d80c5a41eca1a642afbe429dc0"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3bea0f843f52ebf3e82f133013ac8a55"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x83d, 0xf000, 0x6, [0x0, 0x0, 0x3f00, 0xf, 0xff3f00, 0x3f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4a, 0x5, 0x3, 0x6}]}, 0x5, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x40d}}, {0x9, &(0x7f00000010c0)=@string={0x9, 0x3, "db28461019b687"}}, {0x3d, &(0x7f0000001100)=@string={0x3d, 0x3, "f12c28d9830b21bbb701bd5e9debc239a3d021b4d5d39848e33f5a3423d5e76b7eb0c605d44c97ca78de799c505167beb8394ce776f46fc3da9bd8"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x42c}}]}) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x20, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x3628, 0xffffffff00000001, 0x3, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r10, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) pread64(r1, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) 5m26.350906098s ago: executing program 34 (id=976): ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) 5m24.73557343s ago: executing program 35 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x54000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000505000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f00000001c0)="66b97608000066b86c7c00000f300f08baf80c66b86087498066efbafc0c66edbad004ed0fc759cf66660f3880a22c40bad004ecdfcb0f01c40f794b00", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m17.27711915s ago: executing program 36 (id=979): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x3, 0x7eb, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x47, 0xb1, 0xd9, 0x20, 0x2019, 0x1201, 0x38b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d9, 0x2, 0xf7, 0x10, 0x100, 0x3, "", [{{0x9, 0x4, 0x53, 0x2, 0x10, 0x1f, 0x8c, 0xb9, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xcd40, 0x3, 0x101, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x26}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x2, 0x23, 0x1, 0x6, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x5, 0xd, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xb7, 0x7fff}, @mbim={0xc, 0x24, 0x1b, 0x101, 0x1000, 0x8, 0x8, 0xb3fc, 0x3}, @mdlm_detail={0x91, 0x24, 0x13, 0x49, "cd0173efc292274f931cac1ef72b95106971153c405553acf5043963eb2365246136c00d7c4e0f2b84453e54cdcf5384500f7e901a99e519ec428525d42291829027c80aa43eb6e9f700fc45ad5e48f663acdd154c3b377ac60b66a625b075b1e51718071d517503820d75e95c80e3eaed637f508849fb4748293fba445809474de097d04a4bd8d254dd9bee25"}, @mdlm_detail={0x1c, 0x24, 0x13, 0x9, "1c537f366f3a5a21091c4d5067a498816fe3e82917fb03b8"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x6b, 0x0, 0x7, [@generic={0x6f, 0x8, "4883f93fa8e320c35e751f0f7980e84b58a7b2e9bf6705329b59d8cd3c837830a0549e567adb3dfcc67a69460cc1fce8b0853c0cfa768239d725e3d9f0a8b2766e208aecab89ea90638d43b3bdef3057d3a4e7c2e2543ddb3b27ce07ff1456ae84530f10353abde2ec8a0876e5"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x7, 0x2, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}, @generic={0x93, 0xc, "c354c6cb1bd589d50ee05cc07fc8dd3c35e412a524ad17f9b4598174b8d3a0e35989dc5077d0a2c498ef382228fecfe995217bd8f75a186c0fc3a9b58e655aab33e823e9a442cf5d99cd29760b25d266becd3cc08a4efb0ee605d647fd7fe5277288345adaa62a6ab9d99874a93191b6bc3cf051079c7f511cd541454e9d25dd564b27bedf7ba91a0bc75768b02de109f5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xbd, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0x2650da1e925b5784, 0x2, 0x400, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x647b10e64987acfc, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0xfd, 0x40, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x81}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x2, 0xd4, 0x26, [@generic={0x86, 0xc, "110176161448ae9ab09119b5d756ddda604421a56120235ef67896e23011a87a3a7a0fcaeb9237e98575fb932e4f42acfb308874cac9093db8eb9abb2690ebd2576257508ef56b642e4915f189d1becdf1eba99a805408c799079676723dd4bb5b8b3e877bae8137e811baa68388515ed56ad39aa90c4d007cbeeb0c49df58a013238641"}, @uac_iso={0x7, 0x25, 0x1, 0x88753324b3b20017, 0x40, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0xa1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x5}, @generic={0x63, 0xb, "bd2f42a9723632481af8b57a33d3cb4c7fcf140203f128264f9a934a50d57192f73ecb275db2a5b9d092015767bef3e2b1362d85b1bb472175a6d771d970243d8e3f858a925f27d0ceb2d79e97aaa99697f0fcd4d5c201d3cd55ff3bc64ec9af52"}]}}, {{0x9, 0x5, 0x8d, 0x8, 0x0, 0x81, 0x4, 0x3}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x7, 0xb, 0xfe, [@generic={0x21, 0x4, "d67fbc4fd66f1dc9ead9b604999bf18de9ba275e34689c8ba32adeb342c7c4"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0xf, 0xe, 0x6c}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x6, 0x6, 0x70}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0x8, 0xff, [@generic={0xe4, 0x23, "1879327093d53646bf2e6c643d4911c888e2c5989a9059c6fd2d0b5c7b1b36189e4df7bfb8e9de80a5950ddf243893702ecff736e1204e18a288bf16a0d532e8c056cf58518e399667e8471f160dc17902a5c71941883a18dbf50c404848d372e8736ed2335fb098cfce5263e9cb1b8a2c7910a4c60f7302c200f1b14e03532175e4330acfb641217903e7a8df69b6a5d44b6bb1f73a1b62ffc9246558b3c36416200258b13416b10ba51e15edd2c2736179409dafeb377cd87f6494d8a8caf4649dfeec82633e8bf914d17fa6fbc58c86e6f8e016bf22e82d0bc430da93d6948e82"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xbf, 0x3ff}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x4, 0x1, 0x81, [@generic={0x48, 0x8, "ab16eb906ada278c2bd1672dc4885e5526030cf394629c652096720b2701615b14b2eeb006959f6b663c7b4ec64be3234040c8d759aaeb260859534d0d2379ebec3b21b9da21"}, @generic={0x34, 0x11, "c639f65ffc6ab218ba2244972502ae57bef210c09f9d043a8862c533c21101a19be5350395cd47b089caa1ea24366261a9f9"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xfd, 0xc, 0x5}}]}}, {{0x9, 0x4, 0x1e, 0x9, 0x9, 0xf0, 0x86, 0x29, 0x3, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x54, 0x98, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xff, 0x8, 0xab}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0xb, 0x3, 0x6, [@generic={0x86, 0x22, "e259c0ab1ba785f6243237fc62327df18ea08c36236b58e5cd4fd3c0918fe4ba97363e98a5ce7fc23dcdf990942af9f221efb387bec3ac6e1de3728bf7b97c88f09b3f60649990d1f5864b9a12a890d730c48d0379f9928e1d6b76dfeb2cad07542c20c2b1debb646c9d677b247af42f09a6da0ff23e95b94c17bc9c1ac4970b59c64b1d"}, @generic={0x63, 0x30, "e76756a81dd52fc385a884f261ae67082bff83beed26dafb8f16b101da54870c6b5c33906f404fe2126e4e185a4190eee8b2f02382628630c14c93062b8d32e01ee4bc616159cb8be961def7aaca02c8d16a90b3c6ba4afa9cf639f102f536f0c5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x5, 0x7, [@generic={0x29, 0x11, "f11ee61f05d796ab125f1eb05e09648ff6054fe4c6904317ffbb82336f69329db6e61cf24bf186"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x9, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}, @generic={0x2, 0x24}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x7, 0x95, 0xa, [@generic={0x4, 0x2c, "8d86"}, @generic={0xff, 0x2c, "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"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xf6, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x3, 0xb1}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x300, 0x6, 0x9, 0x5, 0xff, 0x5e}, 0x10, &(0x7f0000000880)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x7b, 0x8c}]}, 0xa, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x809}}, {0x85, &(0x7f0000000940)=ANY=[@ANYBLOB="8503c9ff991e4e356832484380caf8e002a91a3dbbe4f558134dac6a8532df53d0c36586f5643884f772c9f61c6cdbb77cfee3b672c731bea988e7148280f429dedcf41c6f35c3abcf9891d1bcc59d39fdf2a95f974829c153a2da38793cfe2b96cb8e6849030a29055bf433e1e459d7e8cf4fea2172e562a07a19e218e0e40d0ae3027d36"]}, {0xe4, &(0x7f0000000a00)=@string={0xe4, 0x3, "b26a5b2c8da5bb942aa37afe64764b6bca9d868800f377e4f1d01e063d117a8f031e7d172806219ff3358d4ca7d5e8dc2482b67db5dd51db53f33b049608758fb016add0988d46d016951e786a142ba409a4cf14b143e55d9868ab0318869226520f89ffaa4f0a4953d69582b760b0f0bd87e08b14fe66464299be7fae1401936747723ebae871c54fc6a11ed2103a358a49f7349812ea211be5ce4913988a13d5eab2160ef38e0def3e0986e65703e12caabdd91abbe426f3b2e07b6a1dea47796a81da241ad2d89e7dbf923dd743b40ff739a7c1f76f741d4a3df0a1813b4ebeda"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x444}}, {0xa0, &(0x7f0000000b40)=@string={0xa0, 0x3, "1b4ac841542aa71c81856e4ec785c3c41405ca30bb927a1ebe259fd8b5226deed690966df79fed52e1e4603e737690a6be11d3d702aed719073ba34c938c6415ab374bd6a942e9692d672fe2c05a69a7ded9124d43159c8ee48c8d7496ea708b460fbd00462643ab0f73912fff2f16a7e085a305aea6ce8c4e54ac154a9c044ac960b2b20c6339b9e2850d39d900b358df02bb85bf196867a22c2f973f67"}}, {0x27, &(0x7f0000000c00)=@string={0x27, 0x3, "12b21038105cd9f2931eada5807c7d0906ab1b167919f3af89884d5610343db2494dee3c5f"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x41e}}, {0x68, &(0x7f0000000cc0)=@string={0x68, 0x3, "31701d2341e71cb31987d8a3e3db24e7269bd7379c0dc7a50a8cf78fc23188c3a189b1d82f3348b4cee8b9440d5969f6690358c4d1827ddd8e13be5dc1065e98806924c08eb7826e9deddfb23c87a3fc9a1abb47ebe618be6e21672abd3c2750d48ebfd6bb2d"}}]}) r2 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)="00000000090209000101000000402505a0a400010000000196a085e756fbb8", 0x1f) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x582, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x8, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6c7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x4, 0x40, 0xa3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0x5, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xfff8, 0xf4, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0xe, 0x47, 0xff, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x3d9e, 0x4f, 0x90}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x1, 0x12, {0x7, 0x25, 0x1, 0x4, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5c, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0xf}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xfff7, 0x6, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x13, 0x1, {0x7, 0x25, 0x1, 0x0, 0xff, 0xa3}}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x300, 0x5, 0xe0, 0x9, 0x40, 0x81}, 0x110, &(0x7f0000000f00)={0x5, 0xf, 0x110, 0x6, [@ptm_cap={0x3}, @generic={0xc2, 0x10, 0x5, "170e43d044ea9464442a032eb739e85cefb7c83ef83f50263554a34d1bae0b8cd5b439d52e3d540e9b250c067b12773ad0263bc57e84d8487d8135be0a3b6f76b371ad04c4480c5933de84f2fa9d884095101fd6ea9b0ce141f1043d7437226e45bcd73278098511f1c1a8b9d4f046f7432883b88ada62ab87118d1073f3b3dd975cec58adeef48eb93a3bb048c812ac703488a2cfc8e9690cdbd25942d52076ca08300e117d750162d5e0d05cbda4da6709d80c5a41eca1a642afbe429dc0"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3bea0f843f52ebf3e82f133013ac8a55"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x83d, 0xf000, 0x6, [0x0, 0x0, 0x3f00, 0xf, 0xff3f00, 0x3f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4a, 0x5, 0x3, 0x6}]}, 0x5, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x40d}}, {0x9, &(0x7f00000010c0)=@string={0x9, 0x3, "db28461019b687"}}, {0x3d, &(0x7f0000001100)=@string={0x3d, 0x3, "f12c28d9830b21bbb701bd5e9debc239a3d021b4d5d39848e33f5a3423d5e76b7eb0c605d44c97ca78de799c505167beb8394ce776f46fc3da9bd8"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x42c}}]}) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x20, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x3628, 0xffffffff00000001, 0x3, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r10, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) pread64(r1, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) 27.849641999s ago: executing program 6 (id=1572): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) syz_open_pts(0xffffffffffffffff, 0x408000) connect$bt_rfcomm(r0, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) 26.706418782s ago: executing program 6 (id=1577): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x63, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="84ca", 0x2, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 24.94708774s ago: executing program 6 (id=1581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='+ 1 0 3 1 0\n', 0xc) write(r0, &(0x7f0000000380)='+ 1 0 6 1', 0x9) write(r0, &(0x7f0000000640)='+ 1 0 4 60 0\n', 0xd) 23.668952058s ago: executing program 6 (id=1584): r0 = syz_open_dev$amidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) socket$kcm(0xf, 0x3, 0x2) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000340)=""/58) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x180) semget(0x1, 0x4, 0x60) semget$private(0x0, 0x1, 0x4) r2 = semget(0x2, 0x3, 0x200) r3 = semget(0x0, 0x2, 0x313) semctl$IPC_RMID(r3, 0x0, 0x0) semtimedop(r2, 0x0, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./sys\x00', 0x240682, 0x8) write(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='zstd', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 21.800665371s ago: executing program 6 (id=1586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1f, 0x1, 0x32}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x8045}], 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000004c0)={0xfa00000000000000, 0xeeee0000, 0x1008000009, 0x8, 0x2}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) 20.489347919s ago: executing program 6 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='11', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='18', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='19', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) 10.655217618s ago: executing program 5 (id=1613): ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 8.855495111s ago: executing program 5 (id=1615): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 7.975727663s ago: executing program 5 (id=1616): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000010)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r1, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) 7.062228362s ago: executing program 5 (id=1618): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x0, 0x1a0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x8, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0xd, 0x24, 0x35, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x4fc8, 0x5, 0x4, 0x100, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7ffb, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x7, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x2, 0xb, 0x1, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x20002, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x6, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x3, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x808, 0x6, 0x226, 0x5, 0x5, 0x0, 0x1ff, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd5, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.902943954s ago: executing program 8 (id=1622): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = socket(0x1f, 0x5, 0x8) bind(r1, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(r1, 0x112, 0x14, 0x0, 0x0) 5.501625892s ago: executing program 7 (id=1623): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000dc0)={&(0x7f0000000980)={{@my=0x1, 0x5}, {@local, 0x6}, 0x400, "39b5edf4d53e0d8a9924eff538bc98b1033bd8c06e6247a969aa233d29a2ae97ec296175dd9e0d2a42f7faee80ba455761bb71f1130d23e6452d5e30b0da61f5dbc38ff92fb34f48addd04de7518c8c0277c60b1f91668873cbf38fbe7cf9f53338c1ab11d15a48bccf2da583056eac829195c03ab946e76acf2626f154a877b2d943c1176255105d94c99bc4d0e2e78eb9ac1a8277d90b421404624913fd73d87843c1251314a2fd97a25bede0ef8dd0ccfb470fccd43b7e383d127e5146ec481f4dc012679c15a4b4e78f216623ec77e4f04b78077b9780bc01169a48ac6055d87c778ee2d95f36d98f7ea19a480a56c3bb3f4ef5d086ab1074de987b75dfb373a154cc3eb9dbb98b742df58cb6bb7e15397a7d052db440fe79ed12ec4968393063d79c6ee6f1698c4b4f0607967cefd65bcaf682863110b8ad05a837f5c7b223078a6514da8a178e677c9f07171231035f41314d880c41687203ec4bbd85e8b6ce3c7ef56c9d710bf88278cc29ff8212731a9ba02d675579a4732ae89f54e2c78558b8ad95b719930ae57afba2fc65f346b29c22096ac3234d7d146707d862b39466ea1e9f5d4afa5b05f1e0dce1e3ca188fe04f775e1ced3af2131302ff629b4b7dce6989ce65c855164498d4ce4472a7d360e4e2b68f8f80f10e6daa68cd392717f22cf83c0e9cb884aa21633645ef56b3367cd0ee261bed77e52427cc7abe9a4e36b6cc0a2ee3b10661d4c5fe81c4bff199d31cf316491caa17ac6bf3498b511d26d26da96cce420a7da8ca6fc8307f8450d8157d125292bd81e68e1e0eb0170f791ac44b7c11619c31ad2d16d888f827f6c363cea885235b1623289abd8fd29c951226319e8067d59fb5c6cdb99632d512937ff328234fcb1c93b598b21829c0e47c82c196d5188c7ecf4e1570a9d696899adc0a09ef8605f3210af0b89ef2d9bdc1168448937124cea0f31a5028ceb3f8409703294e7a1982ebd6102ab5652a614a88241d3a82ce0771bf9591085b86370540e49d9bff467aed1097979833cf35b605305b491b55c1e15529226953a98fdb384a40030f0198a7954bbe99a07bc65b1fde85d867db58d4a1f89965f5aa0b1ae23a426c063f67a8c10e1dcf94c25935e8b1b80dc84e003b88d3d849d6d9249279ee656dd4ec532a09104834a80e672a375c56a1d13457c9e0d4e1c9ef560559a16f5be0e00a07b78ce08a79ddc456a09f2d4a2ca318d7ccdea6bff70a5f91c2d66730187d7ac1e91df00e1d7ddf340984d97f636255d2b310956f1de320437abd938a33eac0b47497003878244bbb6414e388716c151d1a334bf407d0341745dd67fcbaa75d607c26dbc12e653db964de181f11d0f2e5aceb58329ddff0da9eb1edadc1adada6a6d6a25d16511423cccc6a7798816a422dd9769ade4adff14f20c86398b62fccd9c9b7e"}, 0x418, 0x8500000}) 5.397722493s ago: executing program 5 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006") ioctl(r1, 0x400c0930, 0x0) 5.093023922s ago: executing program 8 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='ra', 0x2) 4.966202286s ago: executing program 7 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/2-1:1.0/authorized\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) 3.865856156s ago: executing program 37 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='11', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='12', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='13', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='14', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='15', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='18', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='19', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) 3.815166815s ago: executing program 8 (id=1628): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='3', 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000600)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200e2f90000000101000001ef0101010a000001"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200ddf90000000106000001ef0101010a000001"], 0x0) 3.747065307s ago: executing program 7 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffde7, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3.117109608s ago: executing program 7 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1:0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='readonly', 0x8) 2.873875388s ago: executing program 5 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$rfkill(r1, &(0x7f0000000140)={0x1, 0x0, 0x3, 0x1, 0xff}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2.534276699s ago: executing program 8 (id=1632): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x8, 0x5, 0xf801, @broadcast, 'veth1_virt_wifi\x00'}) 1.659893112s ago: executing program 7 (id=1633): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x102, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140100003000010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.33996361s ago: executing program 8 (id=1634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 717.141957ms ago: executing program 7 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000100)=""/43, 0x2b) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 0s ago: executing program 8 (id=1636): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000002440)={0x0, @bt={0x3, 0x9, 0x1, 0x2, 0x7, 0x3, 0x4b3f, 0x5, 0x5, 0x7, 0xfffffff5, 0x5, 0xf7e7, 0x1, 0x8, 0x4, {0x7, 0x6}, 0x3, 0x4}}) kernel console output (not intermixed with test programs): L syzkaller #0 PREEMPT(full) [ 350.451515][ T9806] Tainted: [L]=SOFTLOCKUP [ 350.451520][ T9806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.451526][ T9806] Call Trace: [ 350.451531][ T9806] [ 350.451536][ T9806] dump_stack_lvl+0x100/0x190 [ 350.451556][ T9806] should_fail_ex.cold+0x5/0xa [ 350.451573][ T9806] ? __pfx_kyber_init_hctx+0x10/0x10 [ 350.451592][ T9806] should_failslab+0xc2/0x120 [ 350.451608][ T9806] __kmalloc_cache_node_noprof+0x94/0x720 [ 350.451624][ T9806] ? kyber_init_hctx+0x82/0xab0 [ 350.451641][ T9806] ? __pfx_kyber_init_hctx+0x10/0x10 [ 350.451656][ T9806] kyber_init_hctx+0x82/0xab0 [ 350.451674][ T9806] ? __pfx_kyber_init_hctx+0x10/0x10 [ 350.451688][ T9806] blk_mq_init_sched+0x39e/0x6c0 [ 350.451705][ T9806] elevator_switch+0x1e3/0x7e0 [ 350.451719][ T9806] elevator_change+0x352/0x530 [ 350.451733][ T9806] elv_iosched_store+0x3be/0x460 [ 350.451747][ T9806] ? __pfx_elv_iosched_store+0x10/0x10 [ 350.451763][ T9806] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 350.451777][ T9806] ? __pfx_elv_iosched_store+0x10/0x10 [ 350.451790][ T9806] queue_attr_store+0x25f/0x2f0 [ 350.451808][ T9806] ? __pfx_queue_attr_store+0x10/0x10 [ 350.451824][ T9806] ? __lock_acquire+0x5c0/0x1f40 [ 350.451841][ T9806] ? lock_acquire+0x1d1/0x380 [ 350.451852][ T9806] ? sysfs_file_kobj+0x21/0x290 [ 350.451865][ T9806] ? find_held_lock+0x2b/0x80 [ 350.451881][ T9806] ? sysfs_file_kobj+0xe4/0x290 [ 350.451893][ T9806] ? sysfs_file_kobj+0xe4/0x290 [ 350.451909][ T9806] ? __pfx_queue_attr_store+0x10/0x10 [ 350.451925][ T9806] sysfs_kf_write+0xf2/0x150 [ 350.451939][ T9806] kernfs_fop_write_iter+0x3e0/0x5f0 [ 350.451951][ T9806] ? __pfx_sysfs_kf_write+0x10/0x10 [ 350.451966][ T9806] vfs_write+0x6af/0x1050 [ 350.451980][ T9806] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 350.451993][ T9806] ? __pfx_vfs_write+0x10/0x10 [ 350.452004][ T9806] ? find_held_lock+0x2b/0x80 [ 350.452030][ T9806] ksys_write+0x12a/0x250 [ 350.452041][ T9806] ? __pfx_ksys_write+0x10/0x10 [ 350.452057][ T9806] do_syscall_64+0x123/0x790 [ 350.452076][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.452088][ T9806] RIP: 0033:0x7fd0cab9e159 [ 350.452098][ T9806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.452108][ T9806] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.452120][ T9806] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 350.452128][ T9806] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 350.452135][ T9806] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 350.452142][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.452148][ T9806] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 350.452163][ T9806] [ 350.452187][ T9806] elv: switch to "kyber" failed, falling back to "none" [ 350.577469][ T9812] FAULT_INJECTION: forcing a failure. [ 350.577469][ T9812] name failslab, interval 1, probability 0, space 0, times 0 [ 350.577490][ T9812] CPU: 0 UID: 0 PID: 9812 Comm: syz.6.1179 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.577505][ T9812] Tainted: [L]=SOFTLOCKUP [ 350.577509][ T9812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.577515][ T9812] Call Trace: [ 350.577519][ T9812] [ 350.577524][ T9812] dump_stack_lvl+0x100/0x190 [ 350.577551][ T9812] should_fail_ex.cold+0x5/0xa [ 350.577569][ T9812] should_failslab+0xc2/0x120 [ 350.577585][ T9812] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 350.577600][ T9812] ? sock_alloc_inode+0x26/0x2c0 [ 350.577618][ T9812] ? __pfx_sock_alloc_inode+0x10/0x10 [ 350.577634][ T9812] sock_alloc_inode+0x26/0x2c0 [ 350.577649][ T9812] ? __pfx_sock_alloc_inode+0x10/0x10 [ 350.577666][ T9812] alloc_inode+0x68/0x250 [ 350.577677][ T9812] sock_alloc+0x44/0x280 [ 350.577691][ T9812] ? security_socket_create+0x7f/0x250 [ 350.577703][ T9812] __sock_create+0xc2/0x860 [ 350.577715][ T9812] __sys_socket+0x14d/0x260 [ 350.577726][ T9812] ? __pfx___sys_socket+0x10/0x10 [ 350.577741][ T9812] __x64_sys_socket+0x72/0xb0 [ 350.577751][ T9812] ? lockdep_hardirqs_on+0x7d/0x110 [ 350.577767][ T9812] do_syscall_64+0x123/0x790 [ 350.577785][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.577796][ T9812] RIP: 0033:0x7fd0cab9e159 [ 350.577805][ T9812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.577815][ T9812] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 350.577844][ T9812] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 350.577854][ T9812] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 000000000000000a [ 350.577860][ T9812] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 350.577867][ T9812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.577874][ T9812] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 350.577890][ T9812] [ 351.293924][ T852] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 351.475830][ T852] usb 13-1: not running at top speed; connect to a high speed hub [ 351.475848][ T852] usb 13-1: New USB device found, idVendor=1b3d, idProduct=0161, bcdDevice=b0.ff [ 351.477251][ T852] usb 13-1: config index 0 descriptor too short (asked for 9, got 0) [ 351.477268][ T852] usb 13-1: can't read configurations, error -22 [ 351.501728][ T9777] tipc: Cannot configure node identity twice [ 351.507894][ T9812] ip6gre1: entered promiscuous mode [ 351.507912][ T9812] ip6gre1: entered allmulticast mode [ 351.563670][ T9835] ufs: You didn't specify the type of your ufs filesystem [ 351.563670][ T9835] [ 351.563670][ T9835] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 351.563670][ T9835] [ 351.563670][ T9835] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 351.567352][ T9835] ufs: ufstype=old is supported read-only [ 351.570996][ T9835] ufs: ufs_fill_super(): bad magic number [ 351.614550][ T852] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 351.748959][ T9850] jffs2: notice: (9850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 351.766012][ T9850] tipc: Cannot configure node identity twice [ 351.777344][ T852] usb 13-1: not running at top speed; connect to a high speed hub [ 351.777372][ T852] usb 13-1: New USB device found, idVendor=1b3d, idProduct=0161, bcdDevice=b0.ff [ 351.779861][ T852] usb 13-1: config index 0 descriptor too short (asked for 9, got 0) [ 351.779887][ T852] usb 13-1: can't read configurations, error -22 [ 351.780207][ T852] usb usb13-port1: attempt power cycle [ 352.025172][ T9857] syzkaller0: entered promiscuous mode [ 352.025195][ T9857] syzkaller0: entered allmulticast mode [ 352.148846][ T852] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 352.183760][ T852] usb 13-1: not running at top speed; connect to a high speed hub [ 352.183778][ T852] usb 13-1: New USB device found, idVendor=1b3d, idProduct=0161, bcdDevice=b0.ff [ 352.184951][ T852] usb 13-1: config index 0 descriptor too short (asked for 9, got 0) [ 352.184967][ T852] usb 13-1: can't read configurations, error -22 [ 352.320353][ T852] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 352.322582][ T9864] netlink: 'syz.5.1201': attribute type 1 has an invalid length. [ 352.322600][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1201'. [ 352.344245][ T852] usb 13-1: not running at top speed; connect to a high speed hub [ 352.344263][ T852] usb 13-1: New USB device found, idVendor=1b3d, idProduct=0161, bcdDevice=b0.ff [ 352.345538][ T852] usb 13-1: config index 0 descriptor too short (asked for 9, got 0) [ 352.345555][ T852] usb 13-1: can't read configurations, error -22 [ 352.345763][ T852] usb usb13-port1: unable to enumerate USB device [ 352.601871][ T9874] jffs2: notice: (9874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 353.697580][ T9874] tipc: Started in network mode [ 353.697599][ T9874] tipc: Node identity 2000004, cluster identity 4711 [ 353.697610][ T9874] tipc: Node number set to 33554436 [ 353.778708][ T9883] xfrm1: entered allmulticast mode [ 353.945259][ T9898] FAULT_INJECTION: forcing a failure. [ 353.945259][ T9898] name failslab, interval 1, probability 0, space 0, times 0 [ 353.945283][ T9898] CPU: 2 UID: 0 PID: 9898 Comm: syz.5.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.945300][ T9898] Tainted: [L]=SOFTLOCKUP [ 353.945305][ T9898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.945324][ T9898] Call Trace: [ 353.945331][ T9898] [ 353.945336][ T9898] dump_stack_lvl+0x100/0x190 [ 353.945358][ T9898] should_fail_ex.cold+0x5/0xa [ 353.945378][ T9898] ? __pfx_kyber_init_hctx+0x10/0x10 [ 353.945393][ T9898] should_failslab+0xc2/0x120 [ 353.945408][ T9898] __kmalloc_cache_node_noprof+0x94/0x720 [ 353.945423][ T9898] ? kyber_init_hctx+0x82/0xab0 [ 353.945439][ T9898] ? __pfx_kyber_init_hctx+0x10/0x10 [ 353.945451][ T9898] kyber_init_hctx+0x82/0xab0 [ 353.945471][ T9898] ? __pfx_kyber_init_hctx+0x10/0x10 [ 353.945484][ T9898] blk_mq_init_sched+0x39e/0x6c0 [ 353.945501][ T9898] elevator_switch+0x1e3/0x7e0 [ 353.945514][ T9898] elevator_change+0x352/0x530 [ 353.945528][ T9898] elv_iosched_store+0x3be/0x460 [ 353.945540][ T9898] ? __pfx_elv_iosched_store+0x10/0x10 [ 353.945557][ T9898] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 353.945571][ T9898] ? __pfx_elv_iosched_store+0x10/0x10 [ 353.945583][ T9898] queue_attr_store+0x25f/0x2f0 [ 353.945601][ T9898] ? __pfx_queue_attr_store+0x10/0x10 [ 353.945617][ T9898] ? __lock_acquire+0x5c0/0x1f40 [ 353.945638][ T9898] ? lock_acquire+0x1d1/0x380 [ 353.945650][ T9898] ? sysfs_file_kobj+0x21/0x290 [ 353.945707][ T9898] ? find_held_lock+0x2b/0x80 [ 353.945729][ T9898] ? sysfs_file_kobj+0xe4/0x290 [ 353.945743][ T9898] ? sysfs_file_kobj+0xe4/0x290 [ 353.945762][ T9898] ? __pfx_queue_attr_store+0x10/0x10 [ 353.945781][ T9898] sysfs_kf_write+0xf2/0x150 [ 353.945797][ T9898] kernfs_fop_write_iter+0x3e0/0x5f0 [ 353.945811][ T9898] ? __pfx_sysfs_kf_write+0x10/0x10 [ 353.945828][ T9898] vfs_write+0x6af/0x1050 [ 353.945841][ T9898] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 353.945856][ T9898] ? __pfx_vfs_write+0x10/0x10 [ 353.945867][ T9898] ? find_held_lock+0x2b/0x80 [ 353.945896][ T9898] ksys_write+0x12a/0x250 [ 353.945908][ T9898] ? __pfx_ksys_write+0x10/0x10 [ 353.945925][ T9898] do_syscall_64+0x123/0x790 [ 353.945946][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.945959][ T9898] RIP: 0033:0x7f211279e159 [ 353.945970][ T9898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.945981][ T9898] RSP: 002b:00007f2113696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.945992][ T9898] RAX: ffffffffffffffda RBX: 00007f2112a25fa0 RCX: 00007f211279e159 [ 353.946000][ T9898] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 353.946007][ T9898] RBP: 00007f211283506b R08: 0000000000000000 R09: 0000000000000000 [ 353.946014][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.946020][ T9898] R13: 00007f2112a26038 R14: 00007f2112a25fa0 R15: 00007ffc1f580cf8 [ 353.946037][ T9898] [ 353.946065][ T9898] elv: switch to "kyber" failed, falling back to "none" [ 354.036373][ T9903] syzkaller0: entered promiscuous mode [ 354.036389][ T9903] syzkaller0: entered allmulticast mode [ 354.082978][ T6771] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 354.253985][ T6771] usb 12-1: Using ep0 maxpacket: 8 [ 354.254781][ T6771] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.255733][ T6771] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 354.255770][ T6771] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.255788][ T6771] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.255808][ T6771] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.255827][ T6771] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.255860][ T6771] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.309754][ T9913] fuse: Unknown parameter 'ú?^Åž$ Ö' [ 354.352178][ T9913] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 354.499706][ T6771] usb 12-1: usb_control_msg returned -32 [ 354.499731][ T6771] usbtmc 12-1:16.0: can't read capabilities [ 354.538584][ T9919] overlayfs: upper fs does not support file handles, falling back to index=off. [ 354.877197][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 354.877211][ T43] audit: type=1400 audit(1790108360.103:811): avc: denied { name_bind } for pid=9884 comm="syz.7.1210" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 355.007697][ T43] audit: type=1400 audit(1790108360.215:812): avc: denied { write } for pid=9930 comm="syz.8.1224" name="/" dev="9p" ino=73924683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.021727][ T43] audit: type=1400 audit(1790108360.234:813): avc: denied { write } for pid=9930 comm="syz.8.1224" name="/" dev="9p" ino=73924683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.227685][ T9933] FAULT_INJECTION: forcing a failure. [ 355.227685][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 355.227711][ T9933] CPU: 2 UID: 0 PID: 9933 Comm: syz.8.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.227728][ T9933] Tainted: [L]=SOFTLOCKUP [ 355.227733][ T9933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.227740][ T9933] Call Trace: [ 355.227744][ T9933] [ 355.227749][ T9933] dump_stack_lvl+0x100/0x190 [ 355.227771][ T9933] should_fail_ex.cold+0x5/0xa [ 355.227789][ T9933] ? __pfx_kyber_init_hctx+0x10/0x10 [ 355.227804][ T9933] should_failslab+0xc2/0x120 [ 355.227819][ T9933] __kmalloc_cache_node_noprof+0x94/0x720 [ 355.227834][ T9933] ? kyber_init_hctx+0x82/0xab0 [ 355.227852][ T9933] ? __pfx_kyber_init_hctx+0x10/0x10 [ 355.227867][ T9933] kyber_init_hctx+0x82/0xab0 [ 355.227888][ T9933] ? __pfx_kyber_init_hctx+0x10/0x10 [ 355.227903][ T9933] blk_mq_init_sched+0x39e/0x6c0 [ 355.227922][ T9933] elevator_switch+0x1e3/0x7e0 [ 355.227935][ T9933] elevator_change+0x352/0x530 [ 355.227948][ T9933] elv_iosched_store+0x3be/0x460 [ 355.227961][ T9933] ? __pfx_elv_iosched_store+0x10/0x10 [ 355.227977][ T9933] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 355.227992][ T9933] ? __pfx_elv_iosched_store+0x10/0x10 [ 355.228004][ T9933] queue_attr_store+0x25f/0x2f0 [ 355.228021][ T9933] ? __pfx_queue_attr_store+0x10/0x10 [ 355.228037][ T9933] ? __lock_acquire+0x5c0/0x1f40 [ 355.228054][ T9933] ? lock_acquire+0x1d1/0x380 [ 355.228065][ T9933] ? sysfs_file_kobj+0x21/0x290 [ 355.228079][ T9933] ? find_held_lock+0x2b/0x80 [ 355.228094][ T9933] ? sysfs_file_kobj+0xe4/0x290 [ 355.228107][ T9933] ? sysfs_file_kobj+0xe4/0x290 [ 355.228123][ T9933] ? __pfx_queue_attr_store+0x10/0x10 [ 355.228139][ T9933] sysfs_kf_write+0xf2/0x150 [ 355.228154][ T9933] kernfs_fop_write_iter+0x3e0/0x5f0 [ 355.228165][ T9933] ? __pfx_sysfs_kf_write+0x10/0x10 [ 355.228180][ T9933] vfs_write+0x6af/0x1050 [ 355.228192][ T9933] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 355.228206][ T9933] ? __pfx_vfs_write+0x10/0x10 [ 355.228216][ T9933] ? find_held_lock+0x2b/0x80 [ 355.228241][ T9933] ksys_write+0x12a/0x250 [ 355.228252][ T9933] ? __pfx_ksys_write+0x10/0x10 [ 355.228268][ T9933] do_syscall_64+0x123/0x790 [ 355.228286][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.228298][ T9933] RIP: 0033:0x7f0de0b9e159 [ 355.228311][ T9933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.228322][ T9933] RSP: 002b:00007f0de19bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.228335][ T9933] RAX: ffffffffffffffda RBX: 00007f0de0e25fa0 RCX: 00007f0de0b9e159 [ 355.228342][ T9933] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 355.228349][ T9933] RBP: 00007f0de0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 355.228355][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.228368][ T9933] R13: 00007f0de0e26038 R14: 00007f0de0e25fa0 R15: 00007ffc3ad72458 [ 355.228384][ T9933] [ 355.228409][ T9933] elv: switch to "kyber" failed, falling back to "none" [ 355.349910][ T9936] rdma_rxe: rxe_newlink: failed to add lo [ 355.387485][ T9934] usbtmc 12-1:16.0: usb_control_msg returned -32 [ 355.989154][ T9907] syz_tun: entered allmulticast mode [ 356.058837][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.059203][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.073762][ T9938] batman_adv: batadv0: Interface deactivated: dummy0 [ 356.136705][ T9938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.138906][ T9938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.258859][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.261164][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.261689][ T9939] batman_adv: batadv0: Interface activated: dummy0 [ 356.261703][ T9939] net_ratelimit: 11 callbacks suppressed [ 356.261710][ T9939] batadv0: mtu less than device minimum [ 356.262248][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.262772][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.263339][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.263848][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.264384][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.264883][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.265374][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.265881][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.266442][ T9939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.273164][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.294753][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.294857][ T9939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.300641][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.300725][ T9939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.311238][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.333308][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.366363][ T9939] veth1_vlan: left promiscuous mode [ 356.366989][ T9939] veth0_vlan: left promiscuous mode [ 356.368051][ T9939] veth0_vlan: entered promiscuous mode [ 356.369965][ T9939] veth1_vlan: entered promiscuous mode [ 356.375227][ T9939] veth1_macvtap: left promiscuous mode [ 356.376083][ T9939] veth0_macvtap: left promiscuous mode [ 356.377435][ T9939] veth0_macvtap: entered promiscuous mode [ 356.378980][ T9939] veth1_macvtap: entered promiscuous mode [ 356.385547][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.386141][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.386596][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.387140][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.840523][ T9968] FAULT_INJECTION: forcing a failure. [ 356.840523][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 356.840561][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.5.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.840590][ T9968] Tainted: [L]=SOFTLOCKUP [ 356.840597][ T9968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.840610][ T9968] Call Trace: [ 356.840617][ T9968] [ 356.840624][ T9968] dump_stack_lvl+0x100/0x190 [ 356.840648][ T9968] should_fail_ex.cold+0x5/0xa [ 356.840667][ T9968] ? __pfx_kyber_init_hctx+0x10/0x10 [ 356.840681][ T9968] should_failslab+0xc2/0x120 [ 356.840697][ T9968] __kmalloc_cache_node_noprof+0x94/0x720 [ 356.840713][ T9968] ? kyber_init_hctx+0x82/0xab0 [ 356.840729][ T9968] ? __pfx_kyber_init_hctx+0x10/0x10 [ 356.840742][ T9968] kyber_init_hctx+0x82/0xab0 [ 356.840759][ T9968] ? __pfx_kyber_init_hctx+0x10/0x10 [ 356.840772][ T9968] blk_mq_init_sched+0x39e/0x6c0 [ 356.840789][ T9968] elevator_switch+0x1e3/0x7e0 [ 356.840801][ T9968] elevator_change+0x352/0x530 [ 356.840815][ T9968] elv_iosched_store+0x3be/0x460 [ 356.840828][ T9968] ? __pfx_elv_iosched_store+0x10/0x10 [ 356.840845][ T9968] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 356.840858][ T9968] ? __pfx_elv_iosched_store+0x10/0x10 [ 356.840871][ T9968] queue_attr_store+0x25f/0x2f0 [ 356.840888][ T9968] ? __pfx_queue_attr_store+0x10/0x10 [ 356.840905][ T9968] ? __lock_acquire+0x5c0/0x1f40 [ 356.840922][ T9968] ? lock_acquire+0x1d1/0x380 [ 356.840934][ T9968] ? sysfs_file_kobj+0x21/0x290 [ 356.840947][ T9968] ? find_held_lock+0x2b/0x80 [ 356.840963][ T9968] ? sysfs_file_kobj+0xe4/0x290 [ 356.840977][ T9968] ? sysfs_file_kobj+0xe4/0x290 [ 356.840993][ T9968] ? __pfx_queue_attr_store+0x10/0x10 [ 356.841010][ T9968] sysfs_kf_write+0xf2/0x150 [ 356.841024][ T9968] kernfs_fop_write_iter+0x3e0/0x5f0 [ 356.841036][ T9968] ? __pfx_sysfs_kf_write+0x10/0x10 [ 356.841051][ T9968] vfs_write+0x6af/0x1050 [ 356.841063][ T9968] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 356.841076][ T9968] ? __pfx_vfs_write+0x10/0x10 [ 356.841087][ T9968] ? find_held_lock+0x2b/0x80 [ 356.841112][ T9968] ksys_write+0x12a/0x250 [ 356.841124][ T9968] ? __pfx_ksys_write+0x10/0x10 [ 356.841140][ T9968] do_syscall_64+0x123/0x790 [ 356.841159][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.841170][ T9968] RIP: 0033:0x7f211279e159 [ 356.841181][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.841192][ T9968] RSP: 002b:00007f2113696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.841203][ T9968] RAX: ffffffffffffffda RBX: 00007f2112a25fa0 RCX: 00007f211279e159 [ 356.841212][ T9968] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 356.841219][ T9968] RBP: 00007f211283506b R08: 0000000000000000 R09: 0000000000000000 [ 356.841226][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.841233][ T9968] R13: 00007f2112a26038 R14: 00007f2112a25fa0 R15: 00007ffc1f580cf8 [ 356.841248][ T9968] [ 356.841274][ T9968] elv: switch to "kyber" failed, falling back to "none" [ 357.043584][ T2334] usb 12-1: USB disconnect, device number 3 [ 357.070784][ T9982] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1242'. [ 357.100940][ T9980] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 357.100967][ T9980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 357.101291][ T9980] vhci_hcd vhci_hcd.0: Device attached [ 357.102416][ T9985] vhci_hcd: cannot find a urb of seqnum 2147745792 max seqnum 0 [ 357.105207][ T8163] vhci_hcd vhci_hcd.8: stop threads [ 357.105222][ T8163] vhci_hcd vhci_hcd.8: release socket [ 357.105242][ T8163] vhci_hcd vhci_hcd.8: disconnect device [ 357.149580][ T9990] rdma_rxe: rxe_newlink: failed to add lo [ 357.154621][ T9984] FAULT_INJECTION: forcing a failure. [ 357.154621][ T9984] name failslab, interval 1, probability 0, space 0, times 0 [ 357.154645][ T9984] CPU: 1 UID: 0 PID: 9984 Comm: syz.6.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.154662][ T9984] Tainted: [L]=SOFTLOCKUP [ 357.154666][ T9984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.154674][ T9984] Call Trace: [ 357.154678][ T9984] [ 357.154683][ T9984] dump_stack_lvl+0x100/0x190 [ 357.154705][ T9984] should_fail_ex.cold+0x5/0xa [ 357.154722][ T9984] ? __pfx_kyber_init_hctx+0x10/0x10 [ 357.154737][ T9984] should_failslab+0xc2/0x120 [ 357.154754][ T9984] __kmalloc_node_noprof+0xff/0x880 [ 357.154767][ T9984] ? kyber_init_hctx+0x109/0xab0 [ 357.154783][ T9984] ? __pfx_kyber_init_hctx+0x10/0x10 [ 357.154796][ T9984] kyber_init_hctx+0x109/0xab0 [ 357.154813][ T9984] ? __pfx_kyber_init_hctx+0x10/0x10 [ 357.154828][ T9984] blk_mq_init_sched+0x39e/0x6c0 [ 357.154846][ T9984] elevator_switch+0x1e3/0x7e0 [ 357.154858][ T9984] elevator_change+0x352/0x530 [ 357.154872][ T9984] elv_iosched_store+0x3be/0x460 [ 357.154884][ T9984] ? __pfx_elv_iosched_store+0x10/0x10 [ 357.154901][ T9984] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 357.154915][ T9984] ? __pfx_elv_iosched_store+0x10/0x10 [ 357.154928][ T9984] queue_attr_store+0x25f/0x2f0 [ 357.154948][ T9984] ? __pfx_queue_attr_store+0x10/0x10 [ 357.154965][ T9984] ? __lock_acquire+0x5c0/0x1f40 [ 357.154982][ T9984] ? lock_acquire+0x1d1/0x380 [ 357.154993][ T9984] ? sysfs_file_kobj+0x21/0x290 [ 357.155006][ T9984] ? find_held_lock+0x2b/0x80 [ 357.155023][ T9984] ? sysfs_file_kobj+0xe4/0x290 [ 357.155037][ T9984] ? sysfs_file_kobj+0xe4/0x290 [ 357.155054][ T9984] ? __pfx_queue_attr_store+0x10/0x10 [ 357.155072][ T9984] sysfs_kf_write+0xf2/0x150 [ 357.155087][ T9984] kernfs_fop_write_iter+0x3e0/0x5f0 [ 357.155099][ T9984] ? __pfx_sysfs_kf_write+0x10/0x10 [ 357.155114][ T9984] vfs_write+0x6af/0x1050 [ 357.155126][ T9984] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 357.155139][ T9984] ? __pfx_vfs_write+0x10/0x10 [ 357.155149][ T9984] ? find_held_lock+0x2b/0x80 [ 357.155175][ T9984] ksys_write+0x12a/0x250 [ 357.155186][ T9984] ? __pfx_ksys_write+0x10/0x10 [ 357.155202][ T9984] do_syscall_64+0x123/0x790 [ 357.155220][ T9984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.155231][ T9984] RIP: 0033:0x7fd0cab9e159 [ 357.155242][ T9984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.155252][ T9984] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.155263][ T9984] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 357.155270][ T9984] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 357.155277][ T9984] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 357.155283][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.155290][ T9984] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 357.155307][ T9984] [ 357.155337][ T9984] elv: switch to "kyber" failed, falling back to "none" [ 357.224862][ T9995] syzkaller1: entered promiscuous mode [ 357.224883][ T9995] syzkaller1: entered allmulticast mode [ 357.376475][T10011] program syz.5.1253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.378871][T10011] sg_write: data in/out 808464396/120 bytes for SCSI command 0x0-- guessing data in; [ 357.378871][T10011] program syz.5.1253 not setting count and/or reply_len properly [ 357.381688][T10004] overlay: Unknown parameter 'fowner<00000000000000000000' [ 357.548193][T10026] FAULT_INJECTION: forcing a failure. [ 357.548193][T10026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.548224][T10026] CPU: 3 UID: 0 PID: 10026 Comm: syz.5.1257 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.548248][T10026] Tainted: [L]=SOFTLOCKUP [ 357.548255][T10026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.548265][T10026] Call Trace: [ 357.548271][T10026] [ 357.548279][T10026] dump_stack_lvl+0x100/0x190 [ 357.548323][T10026] should_fail_ex.cold+0x5/0xa [ 357.548350][T10026] _copy_from_user+0x2e/0xd0 [ 357.548377][T10026] copy_msghdr_from_user+0x9f/0x4c0 [ 357.548402][T10026] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 357.548426][T10026] ? lock_acquire+0x1d1/0x380 [ 357.548445][T10026] ? get_pid_task+0x2a/0x250 [ 357.548473][T10026] ___sys_sendmsg+0x106/0x1e0 [ 357.548492][T10026] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.548510][T10026] ? get_pid_task+0x106/0x250 [ 357.548544][T10026] ? find_held_lock+0x2b/0x80 [ 357.548585][T10026] __sys_sendmsg+0x160/0x210 [ 357.548609][T10026] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.548646][T10026] do_syscall_64+0x123/0x790 [ 357.548679][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.548698][T10026] RIP: 0033:0x7f211279e159 [ 357.548713][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.548730][T10026] RSP: 002b:00007f2113696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.548749][T10026] RAX: ffffffffffffffda RBX: 00007f2112a25fa0 RCX: 00007f211279e159 [ 357.548761][T10026] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 357.548772][T10026] RBP: 00007f2113696090 R08: 0000000000000000 R09: 0000000000000000 [ 357.548783][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.548793][T10026] R13: 00007f2112a26038 R14: 00007f2112a25fa0 R15: 00007ffc1f580cf8 [ 357.548817][T10026] [ 357.620475][T10030] jffs2: notice: (10030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 357.677080][T10033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 357.718699][T10033] md: invalid raid superblock magic on ram0 [ 357.718719][T10033] md: ram0 does not have a valid v0.0 superblock, not importing! [ 357.718774][T10033] md: md_import_device returned -22 [ 357.719185][T10033] md: md0 stopped. [ 357.721162][T10033] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 357.773579][T10037] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1263'. [ 357.773600][T10037] ip6_vti0: entered promiscuous mode [ 357.773609][T10037] ip6_vti0: entered allmulticast mode [ 357.809696][ T43] audit: type=1400 audit(1790108362.845:814): avc: denied { create } for pid=10034 comm="syz.8.1262" name="#2f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.811578][ T43] audit: type=1400 audit(1790108362.845:815): avc: denied { link } for pid=10034 comm="syz.8.1262" name="#2f" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.815564][ T43] audit: type=1400 audit(1790108362.854:816): avc: denied { rename } for pid=10034 comm="syz.8.1262" name="#30" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.818607][ T43] audit: type=1400 audit(1790108362.854:817): avc: denied { setopt } for pid=10034 comm="syz.8.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 357.995654][ T43] audit: type=1400 audit(1790108363.022:818): avc: denied { read write } for pid=10040 comm="syz.6.1265" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 357.995865][ T43] audit: type=1400 audit(1790108363.022:819): avc: denied { open } for pid=10040 comm="syz.6.1265" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 358.147547][T10058] jffs2: notice: (10058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 358.351619][T10065] FAULT_INJECTION: forcing a failure. [ 358.351619][T10065] name failslab, interval 1, probability 0, space 0, times 0 [ 358.351654][T10065] CPU: 3 UID: 0 PID: 10065 Comm: syz.8.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.351682][T10065] Tainted: [L]=SOFTLOCKUP [ 358.351690][T10065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.351703][T10065] Call Trace: [ 358.351711][T10065] [ 358.351719][T10065] dump_stack_lvl+0x100/0x190 [ 358.351753][T10065] should_fail_ex.cold+0x5/0xa [ 358.351782][T10065] ? __pfx_kyber_init_hctx+0x10/0x10 [ 358.351806][T10065] should_failslab+0xc2/0x120 [ 358.351832][T10065] __kmalloc_cache_node_noprof+0x94/0x720 [ 358.351859][T10065] ? kyber_init_hctx+0x82/0xab0 [ 358.351887][T10065] ? __pfx_kyber_init_hctx+0x10/0x10 [ 358.351909][T10065] kyber_init_hctx+0x82/0xab0 [ 358.351939][T10065] ? __pfx_kyber_init_hctx+0x10/0x10 [ 358.351961][T10065] blk_mq_init_sched+0x39e/0x6c0 [ 358.351992][T10065] elevator_switch+0x1e3/0x7e0 [ 358.352015][T10065] elevator_change+0x352/0x530 [ 358.352039][T10065] elv_iosched_store+0x3be/0x460 [ 358.352062][T10065] ? __pfx_elv_iosched_store+0x10/0x10 [ 358.352089][T10065] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 358.352113][T10065] ? __pfx_elv_iosched_store+0x10/0x10 [ 358.352136][T10065] queue_attr_store+0x25f/0x2f0 [ 358.352166][T10065] ? __pfx_queue_attr_store+0x10/0x10 [ 358.352193][T10065] ? __lock_acquire+0x5c0/0x1f40 [ 358.352223][T10065] ? lock_acquire+0x1d1/0x380 [ 358.352263][T10065] ? sysfs_file_kobj+0x21/0x290 [ 358.352303][T10065] ? find_held_lock+0x2b/0x80 [ 358.352331][T10065] ? sysfs_file_kobj+0xe4/0x290 [ 358.352354][T10065] ? sysfs_file_kobj+0xe4/0x290 [ 358.352388][T10065] ? __pfx_queue_attr_store+0x10/0x10 [ 358.352415][T10065] sysfs_kf_write+0xf2/0x150 [ 358.352442][T10065] kernfs_fop_write_iter+0x3e0/0x5f0 [ 358.352462][T10065] ? __pfx_sysfs_kf_write+0x10/0x10 [ 358.352489][T10065] vfs_write+0x6af/0x1050 [ 358.352511][T10065] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 358.352535][T10065] ? __pfx_vfs_write+0x10/0x10 [ 358.352553][T10065] ? find_held_lock+0x2b/0x80 [ 358.352600][T10065] ksys_write+0x12a/0x250 [ 358.352621][T10065] ? __pfx_ksys_write+0x10/0x10 [ 358.352651][T10065] do_syscall_64+0x123/0x790 [ 358.352684][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.352704][T10065] RIP: 0033:0x7f0de0b9e159 [ 358.352722][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.352740][T10065] RSP: 002b:00007f0de19bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.352760][T10065] RAX: ffffffffffffffda RBX: 00007f0de0e25fa0 RCX: 00007f0de0b9e159 [ 358.352773][T10065] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 358.352786][T10065] RBP: 00007f0de0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 358.352800][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.352812][T10065] R13: 00007f0de0e26038 R14: 00007f0de0e25fa0 R15: 00007ffc3ad72458 [ 358.352841][T10065] [ 358.352960][T10065] elv: switch to "kyber" failed, falling back to "none" [ 358.536780][ T43] audit: type=1400 audit(1790108363.528:820): avc: denied { bind } for pid=10075 comm="syz.6.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 358.591876][T10078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 358.743872][T10086] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 358.744838][T10086] @0ÙD«BÆ?çQ: renamed from bond_slave_1 (while UP) [ 358.747415][ T5739] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 359.252517][T10100] netlink: 'syz.7.1286': attribute type 4 has an invalid length. [ 359.258386][T10100] netlink: 'syz.7.1286': attribute type 4 has an invalid length. [ 359.260964][T10100] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1286'. [ 359.351384][T10109] jffs2: notice: (10109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 359.414246][T10112] syz_tun: entered allmulticast mode [ 359.442179][T10114] atomic_op ffff88805609d9e0 conn xmit_atomic 0000000000000000 [ 359.567765][T10120] MPI: mpi too large (16392 bits) [ 359.593880][T10123] busy [ 359.747743][T10130] geneve2: entered allmulticast mode [ 359.979435][T10138] jffs2: notice: (10138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 359.997375][T10138] tipc: Cannot configure node identity twice [ 360.116881][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1303'. [ 360.143988][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1303'. [ 360.144650][T10144] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1303'. [ 360.292717][T10155] FAULT_INJECTION: forcing a failure. [ 360.292717][T10155] name failslab, interval 1, probability 0, space 0, times 0 [ 360.292742][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.7.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.292760][T10155] Tainted: [L]=SOFTLOCKUP [ 360.292765][T10155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.292772][T10155] Call Trace: [ 360.292777][T10155] [ 360.292782][T10155] dump_stack_lvl+0x100/0x190 [ 360.292804][T10155] should_fail_ex.cold+0x5/0xa [ 360.292820][T10155] ? __pfx_kyber_init_hctx+0x10/0x10 [ 360.292835][T10155] should_failslab+0xc2/0x120 [ 360.292851][T10155] __kmalloc_cache_node_noprof+0x94/0x720 [ 360.292865][T10155] ? kyber_init_hctx+0x82/0xab0 [ 360.292881][T10155] ? __pfx_kyber_init_hctx+0x10/0x10 [ 360.292894][T10155] kyber_init_hctx+0x82/0xab0 [ 360.292911][T10155] ? __pfx_kyber_init_hctx+0x10/0x10 [ 360.292923][T10155] blk_mq_init_sched+0x39e/0x6c0 [ 360.292940][T10155] elevator_switch+0x1e3/0x7e0 [ 360.292953][T10155] elevator_change+0x352/0x530 [ 360.292966][T10155] elv_iosched_store+0x3be/0x460 [ 360.292978][T10155] ? __pfx_elv_iosched_store+0x10/0x10 [ 360.292995][T10155] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 360.293008][T10155] ? __pfx_elv_iosched_store+0x10/0x10 [ 360.293026][T10155] queue_attr_store+0x25f/0x2f0 [ 360.293043][T10155] ? __pfx_queue_attr_store+0x10/0x10 [ 360.293060][T10155] ? __lock_acquire+0x5c0/0x1f40 [ 360.293078][T10155] ? lock_acquire+0x1d1/0x380 [ 360.293091][T10155] ? sysfs_file_kobj+0x21/0x290 [ 360.293106][T10155] ? find_held_lock+0x2b/0x80 [ 360.293136][T10155] ? sysfs_file_kobj+0xe4/0x290 [ 360.293150][T10155] ? sysfs_file_kobj+0xe4/0x290 [ 360.293166][T10155] ? __pfx_queue_attr_store+0x10/0x10 [ 360.293185][T10155] sysfs_kf_write+0xf2/0x150 [ 360.293207][T10155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 360.293222][T10155] ? __pfx_sysfs_kf_write+0x10/0x10 [ 360.293245][T10155] vfs_write+0x6af/0x1050 [ 360.293260][T10155] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 360.293273][T10155] ? __pfx_vfs_write+0x10/0x10 [ 360.293283][T10155] ? find_held_lock+0x2b/0x80 [ 360.293309][T10155] ksys_write+0x12a/0x250 [ 360.293321][T10155] ? __pfx_ksys_write+0x10/0x10 [ 360.293337][T10155] do_syscall_64+0x123/0x790 [ 360.293355][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.293367][T10155] RIP: 0033:0x7f6631b9e159 [ 360.293377][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.293387][T10155] RSP: 002b:00007f66329c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.293400][T10155] RAX: ffffffffffffffda RBX: 00007f6631e25fa0 RCX: 00007f6631b9e159 [ 360.293409][T10155] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000008 [ 360.293416][T10155] RBP: 00007f6631c3506b R08: 0000000000000000 R09: 0000000000000000 [ 360.293423][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.293429][T10155] R13: 00007f6631e26038 R14: 00007f6631e25fa0 R15: 00007ffd00cfca58 [ 360.293445][T10155] [ 360.293512][T10155] elv: switch to "kyber" failed, falling back to "none" [ 360.440311][T10170] syz_tun: entered allmulticast mode [ 360.469962][T10173] Mount JFS Failure: -22 [ 360.469984][T10173] jfs_mount failed w/return code = -22 [ 360.523225][T10178] busy [ 360.523374][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 360.523388][ T43] audit: type=1400 audit(1790108365.390:826): avc: denied { execute } for pid=10180 comm="syz.6.1314" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.806028][ T30] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 360.877866][T10204] xt_hashlimit: size too large, truncated to 1048576 [ 360.908700][ T43] audit: type=1400 audit(1790108365.746:827): avc: denied { map } for pid=10205 comm="syz.5.1318" path="socket:[34278]" dev="sockfs" ino=34278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.921028][ T5807] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.936675][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.943218][T10203] bridge_slave_0 (unregistering): left allmulticast mode [ 360.943233][T10203] bridge_slave_0 (unregistering): left promiscuous mode [ 360.943378][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.946045][T10208] 9p: Bad value for 'wfdno' [ 360.965548][ T30] usb 13-1: Using ep0 maxpacket: 8 [ 360.967305][ T30] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.970119][ T30] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 360.970155][ T30] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.970173][ T30] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.970192][ T30] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.970210][ T30] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.970240][ T30] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.006572][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1319'. [ 361.012605][T10214] 8021q: VLANs not supported on wg1 [ 361.052498][T10216] jffs2: notice: (10216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 361.123150][T10224] tipc: Cannot configure node identity twice [ 361.202483][ T30] usb 13-1: usb_control_msg returned -32 [ 361.202522][ T30] usbtmc 13-1:16.0: can't read capabilities [ 361.343347][T10231] tipc: Enabled bearer , priority 0 [ 361.431728][T10230] tipc: Resetting bearer [ 361.443306][T10230] tipc: Disabling bearer [ 361.580136][T10239] usbtmc 13-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 361.816902][ T30] usb 13-1: USB disconnect, device number 8 [ 362.028305][ T43] audit: type=1400 audit(1790108366.794:828): avc: denied { ioctl } for pid=10241 comm="syz.5.1329" path="socket:[35116]" dev="sockfs" ino=35116 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.085600][ T43] audit: type=1400 audit(1790108366.850:829): avc: denied { read } for pid=10243 comm="syz.5.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 362.553802][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1337'. [ 362.553832][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1337'. [ 362.553844][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1337'. [ 362.588039][T10270] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1339'. [ 362.766724][T10283] xt_limit: Overflow, try lower: 0/0 [ 363.015797][T10291] input: syz1 as /devices/virtual/input/input14 [ 363.080690][ T50] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 363.241079][ T50] usb 12-1: Using ep0 maxpacket: 8 [ 363.241839][ T50] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.245057][ T50] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 363.245083][ T50] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 363.245101][ T50] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.245118][ T50] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.245148][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.275832][T10301] __nla_validate_parse: 1 callbacks suppressed [ 363.275849][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1351'. [ 363.463947][ T50] usb 12-1: GET_CAPABILITIES returned 0 [ 363.464361][ T50] usbtmc 12-1:16.0: can't read capabilities [ 363.555403][T10309] gadgetfs: bound to dummy_udc driver [ 363.591831][T10311] FAULT_INJECTION: forcing a failure. [ 363.591831][T10311] name fail_futex, interval 1, probability 0, space 0, times 0 [ 363.591858][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.6.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.591873][T10311] Tainted: [L]=SOFTLOCKUP [ 363.591877][T10311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.591884][T10311] Call Trace: [ 363.591889][T10311] [ 363.591893][T10311] dump_stack_lvl+0x100/0x190 [ 363.591925][T10311] should_fail_ex.cold+0x5/0xa [ 363.591944][T10311] get_futex_key+0x1d0/0x14f0 [ 363.591962][T10311] ? __pfx_get_futex_key+0x10/0x10 [ 363.591975][T10311] ? kasan_save_free_info+0x3b/0x70 [ 363.591995][T10311] ? kfree+0x22b/0x6d0 [ 363.592010][T10311] ? __x64_sys_mount+0x239/0x310 [ 363.592027][T10311] ? do_syscall_64+0x123/0x790 [ 363.592047][T10311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.592061][T10311] futex_wake+0xf4/0x5e0 [ 363.592073][T10311] ? __pfx_futex_wake+0x10/0x10 [ 363.592090][T10311] do_futex+0x2b2/0x440 [ 363.592105][T10311] ? __pfx_do_futex+0x10/0x10 [ 363.592120][T10311] ? kasan_quarantine_put+0x104/0x240 [ 363.592132][T10311] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.592153][T10311] __x64_sys_futex+0x34f/0x4d0 [ 363.592170][T10311] ? __pfx___x64_sys_futex+0x10/0x10 [ 363.592186][T10311] ? __pfx___x64_sys_mount+0x10/0x10 [ 363.592206][T10311] do_syscall_64+0x123/0x790 [ 363.592223][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.592235][T10311] RIP: 0033:0x7fd0cab9e159 [ 363.592244][T10311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.592255][T10311] RSP: 002b:00007fd0cb9a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 363.592266][T10311] RAX: ffffffffffffffda RBX: 00007fd0cae25fa8 RCX: 00007fd0cab9e159 [ 363.592273][T10311] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0cae25fac [ 363.592280][T10311] RBP: 00007fd0cae25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 363.592287][T10311] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 363.592293][T10311] R13: 00007fd0cae26038 R14: 00007ffdfee3a340 R15: 00007ffdfee3a428 [ 363.592325][T10311] [ 363.686278][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.686373][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.686403][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.686434][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.686462][ C0] usbtmc 12-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 363.690396][ T6768] usb 12-1: USB disconnect, device number 4 [ 363.690834][T10317] jffs2: notice: (10317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 363.804821][T10327] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1360'. [ 363.913493][T10331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 364.038114][T10334] gadgetfs: bound to dummy_udc driver [ 364.691867][T10343] jffs2: notice: (10343) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 364.702323][T10344] input: syz0 as /devices/virtual/input/input15 [ 364.711543][T10343] tipc: Cannot configure node identity twice [ 364.820622][T10351] netlink: 'syz.7.1370': attribute type 1 has an invalid length. [ 364.867984][T10353] busy [ 364.941921][ T43] audit: type=1400 audit(1790108369.526:830): avc: denied { map } for pid=10348 comm="syz.6.1369" path="/dev/video4" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 365.246244][T10367] jffs2: notice: (10367) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 365.300227][ T43] audit: type=1400 audit(1790108369.854:831): avc: denied { read } for pid=10369 comm="syz.8.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.377260][T10377] busy [ 365.779790][ T9213] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:0e8fce7b-f4a4-4c0b-8d6a-acb23061d41b for subsystem testsubsys not allowed [ 365.784057][T10392] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:0e8fce7b-f4a4-4c0b-8d6a-acb23061d41b [ 366.260587][T10406] busy [ 366.546246][T10416] gadgetfs: bound to dummy_udc driver [ 366.789703][T10441] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 367.011272][ T43] audit: type=1400 audit(1790108371.454:832): avc: denied { map } for pid=10452 comm="syz.7.1409" path="/dev/sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 367.011507][ T43] audit: type=1400 audit(1790108371.454:833): avc: denied { execute } for pid=10452 comm="syz.7.1409" path="/dev/sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 367.757923][T10469] binder: 10467:10469 ioctl 7a0 200000000140 returned -22 [ 368.736507][T10472] binder: 10471:10472 ioctl c0306201 200000000040 returned -14 [ 368.748640][T10472] binder: 10471:10472 unknown command 0 [ 368.748679][T10472] binder: 10471:10472 ioctl c0306201 200000000640 returned -22 [ 370.591529][T10480] FAULT_INJECTION: forcing a failure. [ 370.591529][T10480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.591605][T10480] CPU: 3 UID: 0 PID: 10480 Comm: syz.6.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.591645][T10480] Tainted: [L]=SOFTLOCKUP [ 370.591666][T10480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.591693][T10480] Call Trace: [ 370.591746][T10480] [ 370.591801][T10480] dump_stack_lvl+0x100/0x190 [ 370.591936][T10480] should_fail_ex.cold+0x5/0xa [ 370.591994][T10480] ? prepare_alloc_pages+0x16d/0x5b0 [ 370.592194][T10480] should_fail_alloc_page+0xeb/0x140 [ 370.592354][T10480] prepare_alloc_pages+0x1f0/0x5b0 [ 370.592458][T10480] ? __pfx_check_buffer+0x10/0x10 [ 370.592587][T10480] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 370.592931][T10480] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 370.593278][T10480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.593343][T10480] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 370.593545][T10480] ? rb_commit+0x129/0x9d0 [ 370.594001][T10480] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 370.594185][T10480] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 370.594388][T10480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.594523][T10480] ? policy_nodemask+0xed/0x4f0 [ 370.594686][T10480] alloc_pages_mpol+0x201/0x550 [ 370.594884][T10480] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.594957][T10480] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 370.595246][T10480] alloc_pages_noprof+0x1a/0x160 [ 370.595377][T10480] __pud_alloc+0x3b/0x690 [ 370.595559][T10480] __handle_mm_fault+0x1078/0x2f60 [ 370.595838][T10480] ? __pfx___handle_mm_fault+0x10/0x10 [ 370.595902][T10480] ? __pfx_mt_find+0x10/0x10 [ 370.596601][T10480] handle_mm_fault+0x363/0xa20 [ 370.596896][T10480] __get_user_pages+0x8ae/0x2c30 [ 370.597348][T10480] ? __pfx___get_user_pages+0x10/0x10 [ 370.597417][T10480] ? lock_acquire+0x1d1/0x380 [ 370.597469][T10480] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 370.597816][T10480] get_user_pages_remote+0x3d2/0xb10 [ 370.597993][T10480] ? __pfx_get_user_pages_remote+0x10/0x10 [ 370.598313][T10480] get_arg_page+0xf4/0x310 [ 370.598383][T10480] ? __pfx_get_arg_page+0x10/0x10 [ 370.598416][T10480] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 370.598497][T10480] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 370.598611][T10480] copy_string_kernel+0x17d/0x3f0 [ 370.598678][T10480] ? alloc_bprm+0x596/0x9e0 [ 370.598827][T10480] do_execveat_common.isra.0+0x2e6/0x580 [ 370.598938][T10480] __x64_sys_execve+0x93/0xd0 [ 370.599046][T10480] do_syscall_64+0x123/0x790 [ 370.599144][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.599171][T10480] RIP: 0033:0x7fd0cab9e159 [ 370.599214][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.599231][T10480] RSP: 002b:00007fd0cb984028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 370.599254][T10480] RAX: ffffffffffffffda RBX: 00007fd0cae26090 RCX: 00007fd0cab9e159 [ 370.599267][T10480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 370.599280][T10480] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 370.599292][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.599305][T10480] R13: 00007fd0cae26128 R14: 00007fd0cae26090 R15: 00007ffdfee3a428 [ 370.599655][T10480] [ 370.618843][T10478] bridge1: entered allmulticast mode [ 372.411957][T10498] FAULT_INJECTION: forcing a failure. [ 372.411957][T10498] name fail_futex, interval 1, probability 0, space 0, times 0 [ 372.412006][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.6.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.412031][T10498] Tainted: [L]=SOFTLOCKUP [ 372.412045][T10498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.412054][T10498] Call Trace: [ 372.412084][T10498] [ 372.412098][T10498] dump_stack_lvl+0x100/0x190 [ 372.412184][T10498] should_fail_ex.cold+0x5/0xa [ 372.412317][T10498] get_futex_key+0x1d0/0x14f0 [ 372.412439][T10498] ? __pfx_get_futex_key+0x10/0x10 [ 372.412562][T10498] ? trace_event_buffer_commit+0x20a/0xa80 [ 372.412708][T10498] futex_wait_setup+0x91/0x540 [ 372.412915][T10498] __futex_wait+0x19f/0x300 [ 372.412996][T10498] ? __pfx___futex_wait+0x10/0x10 [ 372.413029][T10498] ? futex_hash+0x311/0x400 [ 372.413160][T10498] ? __pfx_futex_wake_mark+0x10/0x10 [ 372.413282][T10498] ? __pfx_futex_hash+0x10/0x10 [ 372.413528][T10498] futex_wait+0xe6/0x370 [ 372.413588][T10498] ? __pfx_futex_wait+0x10/0x10 [ 372.413805][T10498] ? putname+0xb1/0x110 [ 372.413830][T10498] ? kmem_cache_free+0x127/0x6c0 [ 372.413974][T10498] do_futex+0x265/0x440 [ 372.414102][T10498] ? __pfx_do_futex+0x10/0x10 [ 372.414123][T10498] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.414182][T10498] ? __fget_files+0x215/0x3d0 [ 372.414338][T10498] __x64_sys_futex+0x34f/0x4d0 [ 372.414463][T10498] ? __x64_sys_openat+0x12d/0x210 [ 372.414503][T10498] ? __pfx___x64_sys_futex+0x10/0x10 [ 372.414753][T10498] do_syscall_64+0x123/0x790 [ 372.414833][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.414869][T10498] RIP: 0033:0x7fd0cab9e159 [ 372.414924][T10498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.414942][T10498] RSP: 002b:00007fd0cb9a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 372.414969][T10498] RAX: ffffffffffffffda RBX: 00007fd0cae25fa8 RCX: 00007fd0cab9e159 [ 372.414984][T10498] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0cae25fa8 [ 372.414999][T10498] RBP: 00007fd0cae25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 372.415014][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.415028][T10498] R13: 00007fd0cae26038 R14: 00007ffdfee3a340 R15: 00007ffdfee3a428 [ 372.415292][T10498] [ 373.863673][T10507] batman_adv: batadv0: Interface deactivated: dummy0 [ 373.863771][T10507] batman_adv: batadv0: Removing interface: dummy0 [ 374.199510][T10512] CIFS: Attempting to mount //127.0.0.1/share [ 374.365883][T10512] CIFS: VFS: Error connecting to socket. Aborting operation. [ 374.366769][T10512] CIFS: VFS: cifs_mount failed w/return code = -104 [ 374.533428][T10510] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 374.533486][T10510] block device autoloading is deprecated and will be removed. [ 375.427650][ T43] audit: type=1400 audit(1790108379.333:834): avc: denied { create } for pid=10516 comm="syz.7.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 375.915233][ T6771] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 376.077496][ T6771] usb 11-1: Using ep0 maxpacket: 16 [ 376.083681][ T6771] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 376.101561][ T6771] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.101789][ T6771] usb 11-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.101807][ T6771] usb 11-1: config 0 interface 0 has no altsetting 0 [ 376.140114][ T6771] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.140150][ T6771] usb 11-1: Product: syz [ 376.140176][ T6771] usb 11-1: Manufacturer: syz [ 376.140201][ T6771] usb 11-1: SerialNumber: syz [ 376.323282][ T6771] usb 11-1: config 0 descriptor?? [ 376.403929][T10527] binder: 10523:10527 ioctl 7a0 200000000140 returned -22 [ 377.421120][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.507468][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.750621][ T6771] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 377.751328][ T6771] imon 11-1:0.0: unable to initialize intf0, err -19 [ 377.751345][ T6771] imon:imon_probe: failed to initialize context! [ 377.751359][ T6771] imon 11-1:0.0: unable to register, err -19 [ 377.854051][ T6771] usb 11-1: USB disconnect, device number 2 [ 380.021411][T10549] FAULT_INJECTION: forcing a failure. [ 380.021411][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 380.021455][T10549] CPU: 3 UID: 0 PID: 10549 Comm: syz.8.1439 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.021479][T10549] Tainted: [L]=SOFTLOCKUP [ 380.021491][T10549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 380.021506][T10549] Call Trace: [ 380.021536][T10549] [ 380.021554][T10549] dump_stack_lvl+0x100/0x190 [ 380.021617][T10549] should_fail_ex.cold+0x5/0xa [ 380.021735][T10549] should_failslab+0xc2/0x120 [ 380.021819][T10549] __kmalloc_noprof+0xfc/0x840 [ 380.021888][T10549] ? lsm_blob_alloc+0x68/0x90 [ 380.022052][T10549] lsm_blob_alloc+0x68/0x90 [ 380.022137][T10549] security_prepare_creds+0x2d/0x290 [ 380.022246][T10549] prepare_creds+0x5d6/0x950 [ 380.022327][T10549] join_session_keyring+0x17/0x350 [ 380.022415][T10549] lookup_user_key+0xbf9/0x1300 [ 380.022540][T10549] ? __pfx_lookup_user_key+0x10/0x10 [ 380.022617][T10549] ? __might_fault+0xc5/0x140 [ 380.022742][T10549] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 380.022865][T10549] ? _copy_from_user+0x59/0xd0 [ 380.022935][T10549] ? memdup_user+0x82/0xe0 [ 380.023080][T10549] __do_sys_add_key+0x2a6/0x460 [ 380.023145][T10549] ? __pfx___do_sys_add_key+0x10/0x10 [ 380.023430][T10549] do_syscall_64+0x123/0x790 [ 380.023512][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.023569][T10549] RIP: 0033:0x7f0de0b9e159 [ 380.023628][T10549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.023647][T10549] RSP: 002b:00007f0de19bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 380.023675][T10549] RAX: ffffffffffffffda RBX: 00007f0de0e25fa0 RCX: 00007f0de0b9e159 [ 380.023690][T10549] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000040 [ 380.023705][T10549] RBP: 00007f0de0c3506b R08: fffffffffffffffd R09: 0000000000000000 [ 380.023719][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.023733][T10549] R13: 00007f0de0e26038 R14: 00007f0de0e25fa0 R15: 00007ffc3ad72458 [ 380.024019][T10549] [ 382.223734][T10562] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 386.178679][T10599] FAULT_INJECTION: forcing a failure. [ 386.178679][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 386.178742][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.6.1459 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.178781][T10599] Tainted: [L]=SOFTLOCKUP [ 386.178799][T10599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.178822][T10599] Call Trace: [ 386.178865][T10599] [ 386.178910][T10599] dump_stack_lvl+0x100/0x190 [ 386.179151][T10599] should_fail_ex.cold+0x5/0xa [ 386.179292][T10599] should_failslab+0xc2/0x120 [ 386.179401][T10599] __kmalloc_noprof+0xfc/0x840 [ 386.179546][T10599] ? iter_file_splice_write+0x1d8/0x10b0 [ 386.179767][T10599] iter_file_splice_write+0x1d8/0x10b0 [ 386.180021][T10599] ? trace_event_buffer_commit+0x20a/0xa80 [ 386.180379][T10599] ? __pfx_iter_file_splice_write+0x10/0x10 [ 386.180446][T10599] ? __lock_acquire+0x5c0/0x1f40 [ 386.181167][T10599] ? __pfx_iter_file_splice_write+0x10/0x10 [ 386.181299][T10599] direct_splice_actor+0x192/0x690 [ 386.181531][T10599] splice_direct_to_actor+0x345/0xa30 [ 386.181708][T10599] ? __pfx_direct_splice_actor+0x10/0x10 [ 386.181899][T10599] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 386.182133][T10599] ? lock_acquire+0x1d1/0x380 [ 386.182298][T10599] do_splice_direct+0x174/0x240 [ 386.182434][T10599] ? __pfx_do_splice_direct+0x10/0x10 [ 386.182491][T10599] ? avc_policy_seqno+0x9/0x20 [ 386.182640][T10599] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 386.182862][T10599] ? rw_verify_area+0xce/0x6d0 [ 386.183067][T10599] do_sendfile+0xadc/0xe20 [ 386.183341][T10599] ? __pfx_do_sendfile+0x10/0x10 [ 386.183761][T10599] __x64_sys_sendfile64+0x154/0x220 [ 386.183861][T10599] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 386.184228][T10599] do_syscall_64+0x123/0x790 [ 386.184387][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.184470][T10599] RIP: 0033:0x7fd0cab9e159 [ 386.184571][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.184602][T10599] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.184649][T10599] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 386.184675][T10599] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 386.184701][T10599] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 386.184726][T10599] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 386.184753][T10599] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 386.185220][T10599] [ 387.213238][ T5744] Bluetooth: hci3: command 0x0406 tx timeout [ 389.990581][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 390.069109][T10622] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1711943680.1936154988), cmd(4) [ 393.239039][T10637] xt_hashlimit: size too large, truncated to 1048576 [ 394.793724][T10644] macvtap1: entered promiscuous mode [ 394.793744][T10644] vlan0: entered promiscuous mode [ 394.799212][T10644] macvtap1: entered allmulticast mode [ 394.799229][T10644] vlan0: entered allmulticast mode [ 394.799241][T10644] veth0_vlan: entered allmulticast mode [ 398.380884][T10672] lo: entered promiscuous mode [ 398.397651][T10672] tunl0: entered promiscuous mode [ 398.416097][T10672] gre0: entered promiscuous mode [ 398.455751][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.456233][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.491907][T10672] gretap0: entered promiscuous mode [ 398.558026][T10672] erspan0: entered promiscuous mode [ 398.619055][ T43] audit: type=1400 audit(1790108401.035:835): avc: denied { write } for pid=10673 comm="syz.7.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 398.639550][ T43] audit: type=1400 audit(1790108401.044:836): avc: denied { read } for pid=10673 comm="syz.7.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 398.671706][T10672] ip_vti0: entered promiscuous mode [ 398.716174][T10672] ip6_vti0: entered promiscuous mode [ 398.823986][T10672] sit0: entered promiscuous mode [ 399.062526][T10672] ip6tnl0: entered promiscuous mode [ 399.159686][T10672] ip6gre0: entered promiscuous mode [ 399.305953][T10672] syz_tun: entered promiscuous mode [ 399.428755][T10672] ip6gretap0: entered promiscuous mode [ 399.499331][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.505599][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.524067][T10672] bridge0: entered promiscuous mode [ 399.549784][T10681] md: invalid raid superblock magic on ram1 [ 399.549803][T10681] md: ram1 does not have a valid v0.0 superblock, not importing! [ 399.550304][T10681] md: md_import_device returned -22 [ 399.591858][T10672] vcan0: entered promiscuous mode [ 399.614553][T10672] bond0: entered promiscuous mode [ 399.614585][T10672] bond_slave_0: entered promiscuous mode [ 399.627313][T10672] bond_slave_1: entered promiscuous mode [ 399.709285][T10672] team0: entered promiscuous mode [ 399.709323][T10672] team_slave_0: entered promiscuous mode [ 399.719288][T10672] team_slave_1: entered promiscuous mode [ 399.778677][T10672] batman_adv: batadv0: Interface deactivated: dummy0 [ 399.778825][T10672] dummy0: entered promiscuous mode [ 399.819883][T10672] batman_adv: batadv0: Removing interface: dummy0 [ 399.859648][T10672] nlmon0: entered promiscuous mode [ 399.900871][T10672] batadv0: entered promiscuous mode [ 399.965652][T10672] vxcan0: entered promiscuous mode [ 399.986054][T10672] vxcan1: entered promiscuous mode [ 400.020844][T10672] veth0: entered promiscuous mode [ 400.072043][T10672] veth1: entered promiscuous mode [ 400.148207][T10672] wg0: entered promiscuous mode [ 400.177281][T10672] wg1: entered promiscuous mode [ 400.209801][T10672] wg2: entered promiscuous mode [ 400.242070][T10672] veth0_to_bridge: entered promiscuous mode [ 400.342626][T10672] bridge_slave_0: left allmulticast mode [ 400.344767][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.517764][T10672] veth1_to_bridge: entered promiscuous mode [ 400.628407][T10672] bridge_slave_1: left allmulticast mode [ 400.629787][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.807547][T10672] veth0_to_bond: entered promiscuous mode [ 400.933672][T10672] bond0: (slave bond_slave_0): Releasing backup interface [ 400.994382][T10672] veth1_to_bond: entered promiscuous mode [ 401.139026][T10672] bond0: (slave bond_slave_1): Releasing backup interface [ 401.196992][T10672] veth0_to_team: entered promiscuous mode [ 401.415289][T10672] team0: Port device team_slave_0 removed [ 401.428975][T10672] veth1_to_team: entered promiscuous mode [ 401.619914][ T43] audit: type=1400 audit(1790108403.842:837): avc: denied { mount } for pid=10694 comm="syz.5.1495" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 401.658723][T10672] team0: Port device team_slave_1 removed [ 401.679658][T10672] veth0_to_batadv: entered promiscuous mode [ 401.747272][T10672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.747416][T10672] batadv_slave_0: entered promiscuous mode [ 401.802968][T10672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.843886][T10672] veth1_to_batadv: entered promiscuous mode [ 401.901124][T10672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.901340][T10672] batadv_slave_1: entered promiscuous mode [ 401.934347][ T43] audit: type=1400 audit(1790108404.132:838): avc: denied { unmount } for pid=8923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 401.954160][T10672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.994618][T10672] xfrm0: entered promiscuous mode [ 402.057418][T10672] veth0_to_hsr: entered promiscuous mode [ 402.126148][T10672] net_ratelimit: 50 callbacks suppressed [ 402.126168][T10672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.902336][ T43] audit: type=1400 audit(1790108408.764:839): avc: denied { read } for pid=10727 comm="syz.6.1507" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.227630][ T5807] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.235970][ T5807] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.651137][ T8163] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.070648][ T5807] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.176601][ T5779] bridge_slave_1: left allmulticast mode [ 408.176638][ T5779] bridge_slave_1: left promiscuous mode [ 408.187867][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.198403][ T43] audit: type=1400 audit(1790108410.000:840): avc: denied { mount } for pid=10733 comm="syz.8.1511" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 408.222168][ T43] audit: type=1400 audit(1790108410.018:841): avc: denied { watch watch_reads } for pid=10733 comm="syz.8.1511" path="/144/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 408.304686][ T5779] bridge_slave_0: left allmulticast mode [ 408.304715][ T5779] bridge_slave_0: left promiscuous mode [ 408.306008][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.928700][ T43] audit: type=1400 audit(1790108410.683:842): avc: denied { unmount } for pid=8886 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 409.415713][ T43] audit: type=1400 audit(1790108411.132:843): avc: denied { write } for pid=10739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.211251][ T43] audit: type=1400 audit(1790108412.807:844): avc: denied { write } for pid=10750 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.117635][ T43] audit: type=1400 audit(1790108414.604:845): avc: denied { module_load } for pid=10757 comm="syz.8.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 413.122461][T10758] Invalid ELF header type: 2 != 1 [ 413.333505][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.470015][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.514486][ T5779] bond0 (unregistering): Released all slaves [ 413.780653][ T5779] bond2 (unregistering): Released all slaves [ 414.209591][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 414.712429][ T5779] tipc: Left network mode [ 416.327049][T10784] FAULT_INJECTION: forcing a failure. [ 416.327049][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 416.327096][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.5.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.327120][T10784] Tainted: [L]=SOFTLOCKUP [ 416.327134][T10784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.327148][T10784] Call Trace: [ 416.327159][T10784] [ 416.327172][T10784] dump_stack_lvl+0x100/0x190 [ 416.327256][T10784] should_fail_ex.cold+0x5/0xa [ 416.327392][T10784] should_failslab+0xc2/0x120 [ 416.327470][T10784] __kvmalloc_node_noprof+0x113/0x9b0 [ 416.327531][T10784] ? io_alloc_cache_init+0x38/0x170 [ 416.327687][T10784] io_alloc_cache_init+0x38/0x170 [ 416.327774][T10784] io_rsrc_cache_init+0x40/0x50 [ 416.327819][T10784] io_uring_setup.cold+0x4c0/0x1cde [ 416.327920][T10784] ? lock_acquire+0x1d1/0x380 [ 416.327968][T10784] ? avc_has_perm_noaudit+0x56/0x470 [ 416.328036][T10784] ? __pfx_io_uring_setup+0x10/0x10 [ 416.328073][T10784] ? find_held_lock+0x2b/0x80 [ 416.328122][T10784] ? avc_has_perm_noaudit+0x11e/0x470 [ 416.328150][T10784] ? avc_has_perm_noaudit+0x11e/0x470 [ 416.328505][T10784] ? xfd_validate_state+0x129/0x190 [ 416.328706][T10784] __x64_sys_io_uring_setup+0xc2/0x170 [ 416.328761][T10784] do_syscall_64+0x123/0x790 [ 416.328882][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.328925][T10784] RIP: 0033:0x7f211279e159 [ 416.328985][T10784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.328997][T10784] RSP: 002b:00007f2113695fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 416.329014][T10784] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f211279e159 [ 416.329024][T10784] RDX: 00002000000002c0 RSI: 0000200000000200 RDI: 000000000000055e [ 416.329034][T10784] RBP: 00007f211283506b R08: 0000000000000000 R09: 0000000000000000 [ 416.329043][T10784] R10: 0000200000000300 R11: 0000000000000206 R12: 00002000000002c0 [ 416.329054][T10784] R13: 0000200000000300 R14: 0000200000000280 R15: 00007ffc1f580cf8 [ 416.329328][T10784] [ 416.340546][T10785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.399207][T10786] team0: Mode changed to "activebackup" [ 416.481665][ T43] audit: type=1400 audit(1790108417.748:846): avc: denied { write } for pid=10775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.049196][T10789] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1529'. [ 417.061708][ T5744] Bluetooth: hci4: command 0x0406 tx timeout [ 417.993208][T10797] zero sized request [ 418.024238][ T43] audit: type=1400 audit(1790108419.198:847): avc: denied { write } for pid=10792 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.500410][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 420.103878][ T43] audit: type=1400 audit(1790108421.136:848): avc: denied { setopt } for pid=10811 comm="syz.6.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.447950][T10813] team0 (unregistering): Port device team_slave_0 removed [ 420.695364][T10813] team0 (unregistering): Port device team_slave_1 removed [ 420.874235][ T43] audit: type=1400 audit(1790108421.856:849): avc: denied { execute } for pid=10815 comm="syz.5.1539" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 421.250740][ T43] audit: type=1400 audit(1790108422.212:850): avc: denied { write } for pid=10814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.830002][ T5779] hsr_slave_0: left promiscuous mode [ 421.877507][ T5779] hsr_slave_1: left promiscuous mode [ 421.908156][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.959712][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.688009][ T43] audit: type=1400 audit(1790108423.559:851): avc: denied { write } for pid=10828 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.707099][ T43] audit: type=1326 audit(1790108424.514:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10841 comm="syz.5.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211279e159 code=0x7ffc0000 [ 423.709324][ T43] audit: type=1326 audit(1790108424.514:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10841 comm="syz.5.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211279e159 code=0x7ffc0000 [ 423.723798][ T43] audit: type=1326 audit(1790108424.523:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10841 comm="syz.5.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211279e159 code=0x7ffc0000 [ 423.724227][ T43] audit: type=1326 audit(1790108424.523:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10841 comm="syz.5.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211279e159 code=0x7ffc0000 [ 423.728247][ T43] audit: type=1326 audit(1790108424.523:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10841 comm="syz.5.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f211279e159 code=0x7ffc0000 [ 423.730828][ T43] audit: type=1326 audit(1790108424.533:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10841 comm="syz.5.1547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211279e159 code=0x7ffc0000 [ 426.080920][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 426.251988][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 428.093864][T10834] erspan0: entered promiscuous mode [ 428.096671][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1545'. [ 428.096748][T10839] erspan0: left promiscuous mode [ 428.145799][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 429.064937][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 429.064955][ T43] audit: type=1800 audit(1790108429.530:862): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1557" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0 [ 429.401829][ T43] audit: type=1326 audit(1790108429.838:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.5.1559" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f211279e159 code=0x0 [ 429.483387][ T43] audit: type=1400 audit(1790108429.913:864): avc: denied { execute } for pid=10873 comm="syz.6.1558" path="/file1" dev="ramfs" ino=38960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 430.127821][ T43] audit: type=1800 audit(1790108430.503:865): pid=10875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1558" name="file1" dev="ramfs" ino=38960 res=0 errno=0 [ 430.450008][ T43] audit: type=1400 audit(1790108430.830:866): avc: denied { write } for pid=10879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.089837][ T43] audit: type=1400 audit(1790108432.356:867): avc: denied { write } for pid=10896 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.122031][ T43] audit: type=1400 audit(1790108433.329:868): avc: denied { search } for pid=10906 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.144330][ T43] audit: type=1400 audit(1790108433.348:869): avc: denied { read write } for pid=10906 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 433.148764][ T43] audit: type=1400 audit(1790108433.348:870): avc: denied { open } for pid=10906 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 433.177367][ T43] audit: type=1400 audit(1790108433.357:871): avc: denied { lock } for pid=10906 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 433.186047][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 syzkaller syzkaller login: [ 434.460154][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 434.460175][ T43] audit: type=1400 audit(1790108434.574:876): avc: denied { getopt } for pid=10920 comm="syz.6.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.505507][ T43] audit: type=1400 audit(1790108434.620:877): avc: denied { connect } for pid=10920 comm="syz.6.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.239901][ T43] audit: type=1400 audit(1790108435.304:878): avc: denied { mount } for pid=10929 comm="syz.5.1576" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 435.379722][T10931] FAULT_INJECTION: forcing a failure. [ 435.379722][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 435.379765][T10931] CPU: 2 UID: 0 PID: 10931 Comm: syz.5.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.379792][T10931] Tainted: [L]=SOFTLOCKUP [ 435.379802][T10931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.379816][T10931] Call Trace: [ 435.379833][T10931] [ 435.379848][T10931] dump_stack_lvl+0x100/0x190 [ 435.379932][T10931] should_fail_ex.cold+0x5/0xa [ 435.380073][T10931] should_failslab+0xc2/0x120 [ 435.380120][T10931] kmem_cache_alloc_noprof+0x92/0x6a0 [ 435.380172][T10931] ? alloc_empty_file+0x5b/0x1c0 [ 435.380346][T10931] alloc_empty_file+0x5b/0x1c0 [ 435.380432][T10931] alloc_file_pseudo+0x183/0x290 [ 435.380498][T10931] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 435.380710][T10931] ioctx_alloc+0x5d6/0x21a0 [ 435.380884][T10931] ? __might_fault+0xc5/0x140 [ 435.380977][T10931] ? find_held_lock+0x2b/0x80 [ 435.381022][T10931] ? __pfx_ioctx_alloc+0x10/0x10 [ 435.381232][T10931] __x64_sys_io_setup+0xc9/0x220 [ 435.381321][T10931] do_syscall_64+0x123/0x790 [ 435.381432][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.381472][T10931] RIP: 0033:0x7f211279e159 [ 435.381533][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.381551][T10931] RSP: 002b:00007f2113696028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 435.381578][T10931] RAX: ffffffffffffffda RBX: 00007f2112a25fa0 RCX: 00007f211279e159 [ 435.381593][T10931] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff [ 435.381608][T10931] RBP: 00007f211283506b R08: 0000000000000000 R09: 0000000000000000 [ 435.381623][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.381638][T10931] R13: 00007f2112a26038 R14: 00007f2112a25fa0 R15: 00007ffc1f580cf8 [ 435.381900][T10931] [ 436.930409][ T43] audit: type=1400 audit(1790108436.885:879): avc: denied { bind } for pid=10947 comm="syz.8.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 436.947068][ T43] audit: type=1400 audit(1790108436.904:880): avc: denied { write } for pid=10947 comm="syz.8.1579" path="socket:[39036]" dev="sockfs" ino=39036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 436.960309][T10948] Bluetooth: ISO socket layer initialized [ 438.003496][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.011446][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.778595][T10963] ubi0: attaching mtd0 [ 438.810511][T10963] ubi0: scanning is finished [ 438.810841][T10963] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 438.934426][T10956] slcan: can't register candev [ 439.120744][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.150759][T10963] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 439.199165][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.023158][T10952] xfrm1: left allmulticast mode [ 441.136598][ T8163] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.136749][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.136830][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.852038][T10976] FAULT_INJECTION: forcing a failure. [ 441.852038][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 441.852104][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.852143][T10976] Tainted: [L]=SOFTLOCKUP [ 441.852180][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.852204][T10976] Call Trace: [ 441.852245][T10976] [ 441.852289][T10976] dump_stack_lvl+0x100/0x190 [ 441.852498][T10976] should_fail_ex.cold+0x5/0xa [ 441.852641][T10976] should_failslab+0xc2/0x120 [ 441.852752][T10976] __kmalloc_cache_noprof+0x91/0x6d0 [ 441.852913][T10976] ? alloc_fs_context+0x57/0xf40 [ 441.853147][T10976] alloc_fs_context+0x57/0xf40 [ 441.853443][T10976] mq_init_ns+0x16e/0x820 [ 441.853630][T10976] copy_ipcs+0x3dd/0x7e0 [ 441.853791][T10976] create_new_namespaces+0x20a/0xac0 [ 441.853905][T10976] ? security_capable+0x80/0x260 [ 441.854195][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 441.854326][T10976] ksys_unshare+0x4a2/0xa70 [ 441.854460][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 441.854888][T10976] __x64_sys_unshare+0x31/0x40 [ 441.854987][T10976] do_syscall_64+0x123/0x790 [ 441.855210][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.855248][T10976] RIP: 0033:0x7fd0cab9e159 [ 441.855308][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.855335][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 441.855371][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 441.855392][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 441.855412][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 441.855433][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.855454][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 441.855952][T10976] [ 441.907087][T10976] FAULT_INJECTION: forcing a failure. [ 441.907087][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 441.907152][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.907187][T10976] Tainted: [L]=SOFTLOCKUP [ 441.907208][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.907231][T10976] Call Trace: [ 441.907277][T10976] [ 441.907324][T10976] dump_stack_lvl+0x100/0x190 [ 441.907423][T10976] should_fail_ex.cold+0x5/0xa [ 441.907599][T10976] should_failslab+0xc2/0x120 [ 441.907723][T10976] __kmalloc_cache_noprof+0x91/0x6d0 [ 441.907836][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 441.907876][T10976] ? mqueue_init_fs_context+0x4b/0x690 [ 441.908083][T10976] mqueue_init_fs_context+0x4b/0x690 [ 441.908297][T10976] alloc_fs_context+0x60c/0xf40 [ 441.908479][T10976] mq_init_ns+0x16e/0x820 [ 441.908660][T10976] copy_ipcs+0x3dd/0x7e0 [ 441.908827][T10976] create_new_namespaces+0x20a/0xac0 [ 441.908898][T10976] ? security_capable+0x80/0x260 [ 441.909117][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 441.909272][T10976] ksys_unshare+0x4a2/0xa70 [ 441.909348][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 441.909736][T10976] __x64_sys_unshare+0x31/0x40 [ 441.909796][T10976] do_syscall_64+0x123/0x790 [ 441.909993][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.910060][T10976] RIP: 0033:0x7fd0cab9e159 [ 441.910162][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.910193][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 441.910243][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 441.910260][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 441.910275][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 441.910292][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.910307][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 441.910757][T10976] [ 441.991575][T10976] FAULT_INJECTION: forcing a failure. [ 441.991575][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 441.991627][T10976] CPU: 3 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.991661][T10976] Tainted: [L]=SOFTLOCKUP [ 441.991674][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.991689][T10976] Call Trace: [ 441.991708][T10976] [ 441.991729][T10976] dump_stack_lvl+0x100/0x190 [ 441.991843][T10976] should_fail_ex.cold+0x5/0xa [ 441.991945][T10976] should_failslab+0xc2/0x120 [ 441.992029][T10976] __kmalloc_cache_noprof+0x91/0x6d0 [ 441.992145][T10976] ? sget_fc+0x1ba/0x1f20 [ 441.992386][T10976] sget_fc+0x1ba/0x1f20 [ 441.992666][T10976] ? __pfx_set_anon_super_fc+0x10/0x10 [ 441.992780][T10976] ? __pfx_sget_fc+0x10/0x10 [ 441.992834][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 441.992895][T10976] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 441.992931][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 441.993032][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 441.993106][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 441.993340][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 441.993385][T10976] get_tree_nodev+0x28/0x190 [ 441.993519][T10976] mqueue_get_tree+0xf1/0x130 [ 441.993646][T10976] vfs_get_tree+0x92/0x320 [ 441.993786][T10976] fc_mount_longterm+0x1a/0x270 [ 441.993852][T10976] mq_init_ns+0x482/0x820 [ 441.993953][T10976] copy_ipcs+0x3dd/0x7e0 [ 441.994088][T10976] create_new_namespaces+0x20a/0xac0 [ 441.994164][T10976] ? security_capable+0x80/0x260 [ 441.994318][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 441.994494][T10976] ksys_unshare+0x4a2/0xa70 [ 441.994643][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 441.995002][T10976] __x64_sys_unshare+0x31/0x40 [ 441.995081][T10976] do_syscall_64+0x123/0x790 [ 441.995197][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.995249][T10976] RIP: 0033:0x7fd0cab9e159 [ 441.995329][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.995358][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 441.995401][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 441.995427][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 441.995448][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 441.995479][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.995504][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 441.995942][T10976] [ 442.076411][T10976] FAULT_INJECTION: forcing a failure. [ 442.076411][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 442.076461][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.076497][T10976] Tainted: [L]=SOFTLOCKUP [ 442.076511][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.076530][T10976] Call Trace: [ 442.076560][T10976] [ 442.076592][T10976] dump_stack_lvl+0x100/0x190 [ 442.076773][T10976] should_fail_ex.cold+0x5/0xa [ 442.076934][T10976] should_failslab+0xc2/0x120 [ 442.077008][T10976] __kmalloc_noprof+0xfc/0x840 [ 442.077130][T10976] ? lsm_blob_alloc+0x68/0x90 [ 442.077388][T10976] lsm_blob_alloc+0x68/0x90 [ 442.077469][T10976] security_sb_alloc+0x25/0x240 [ 442.077549][T10976] sget_fc+0x3ca/0x1f20 [ 442.077889][T10976] ? __pfx_set_anon_super_fc+0x10/0x10 [ 442.077987][T10976] ? __pfx_sget_fc+0x10/0x10 [ 442.078034][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 442.078144][T10976] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 442.078194][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.078345][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 442.078419][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.078552][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 442.078622][T10976] get_tree_nodev+0x28/0x190 [ 442.078790][T10976] mqueue_get_tree+0xf1/0x130 [ 442.078908][T10976] vfs_get_tree+0x92/0x320 [ 442.078998][T10976] fc_mount_longterm+0x1a/0x270 [ 442.079137][T10976] mq_init_ns+0x482/0x820 [ 442.079347][T10976] copy_ipcs+0x3dd/0x7e0 [ 442.079461][T10976] create_new_namespaces+0x20a/0xac0 [ 442.079541][T10976] ? security_capable+0x80/0x260 [ 442.079790][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 442.079901][T10976] ksys_unshare+0x4a2/0xa70 [ 442.079991][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 442.080390][T10976] __x64_sys_unshare+0x31/0x40 [ 442.080460][T10976] do_syscall_64+0x123/0x790 [ 442.080648][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.080716][T10976] RIP: 0033:0x7fd0cab9e159 [ 442.080798][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.080820][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.080849][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 442.080864][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 442.080882][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 442.080897][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.080915][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 442.081356][T10976] [ 442.383895][T10976] FAULT_INJECTION: forcing a failure. [ 442.383895][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 442.383947][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.383980][T10976] Tainted: [L]=SOFTLOCKUP [ 442.383994][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.384012][T10976] Call Trace: [ 442.384039][T10976] [ 442.384069][T10976] dump_stack_lvl+0x100/0x190 [ 442.384266][T10976] should_fail_ex.cold+0x5/0xa [ 442.384512][T10976] should_failslab+0xc2/0x120 [ 442.384579][T10976] __kmalloc_noprof+0xfc/0x840 [ 442.384685][T10976] ? __list_lru_init+0xd9/0x4b0 [ 442.384996][T10976] __list_lru_init+0xd9/0x4b0 [ 442.385121][T10976] sget_fc+0xac6/0x1f20 [ 442.385471][T10976] ? __pfx_set_anon_super_fc+0x10/0x10 [ 442.385554][T10976] ? __pfx_sget_fc+0x10/0x10 [ 442.385586][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 442.385680][T10976] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 442.385729][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.385877][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 442.385999][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.386219][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 442.386280][T10976] get_tree_nodev+0x28/0x190 [ 442.386433][T10976] mqueue_get_tree+0xf1/0x130 [ 442.386584][T10976] vfs_get_tree+0x92/0x320 [ 442.386761][T10976] fc_mount_longterm+0x1a/0x270 [ 442.386855][T10976] mq_init_ns+0x482/0x820 [ 442.387034][T10976] copy_ipcs+0x3dd/0x7e0 [ 442.387260][T10976] create_new_namespaces+0x20a/0xac0 [ 442.387320][T10976] ? security_capable+0x80/0x260 [ 442.387541][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 442.387767][T10976] ksys_unshare+0x4a2/0xa70 [ 442.387852][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 442.388309][T10976] __x64_sys_unshare+0x31/0x40 [ 442.388366][T10976] do_syscall_64+0x123/0x790 [ 442.388530][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.388599][T10976] RIP: 0033:0x7fd0cab9e159 [ 442.388704][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.388737][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.388785][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 442.388812][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 442.388838][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 442.388864][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.388891][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 442.389374][T10976] [ 442.557841][T10976] FAULT_INJECTION: forcing a failure. [ 442.557841][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 442.557878][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.557899][T10976] Tainted: [L]=SOFTLOCKUP [ 442.557908][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.557948][T10976] Call Trace: [ 442.557983][T10976] [ 442.558008][T10976] dump_stack_lvl+0x100/0x190 [ 442.558134][T10976] should_fail_ex.cold+0x5/0xa [ 442.558230][T10976] should_failslab+0xc2/0x120 [ 442.558281][T10976] __kmalloc_noprof+0xfc/0x840 [ 442.558351][T10976] ? __list_lru_init+0xd9/0x4b0 [ 442.558498][T10976] __list_lru_init+0xd9/0x4b0 [ 442.558583][T10976] sget_fc+0xa76/0x1f20 [ 442.558767][T10976] ? __pfx_set_anon_super_fc+0x10/0x10 [ 442.558810][T10976] ? __pfx_sget_fc+0x10/0x10 [ 442.558834][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 442.558895][T10976] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 442.558926][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.559042][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 442.559109][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.559194][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 442.559240][T10976] get_tree_nodev+0x28/0x190 [ 442.559349][T10976] mqueue_get_tree+0xf1/0x130 [ 442.559428][T10976] vfs_get_tree+0x92/0x320 [ 442.559483][T10976] fc_mount_longterm+0x1a/0x270 [ 442.559555][T10976] mq_init_ns+0x482/0x820 [ 442.559680][T10976] copy_ipcs+0x3dd/0x7e0 [ 442.559755][T10976] create_new_namespaces+0x20a/0xac0 [ 442.559803][T10976] ? security_capable+0x80/0x260 [ 442.559958][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 442.560033][T10976] ksys_unshare+0x4a2/0xa70 [ 442.560088][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 442.560348][T10976] __x64_sys_unshare+0x31/0x40 [ 442.560388][T10976] do_syscall_64+0x123/0x790 [ 442.560505][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.560550][T10976] RIP: 0033:0x7fd0cab9e159 [ 442.560609][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.560624][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.560641][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 442.560651][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 442.560661][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 442.560670][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.560680][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 442.560941][T10976] [ 442.680594][T10976] FAULT_INJECTION: forcing a failure. [ 442.680594][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 442.680644][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.680669][T10976] Tainted: [L]=SOFTLOCKUP [ 442.680683][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.680699][T10976] Call Trace: [ 442.680730][T10976] [ 442.680760][T10976] dump_stack_lvl+0x100/0x190 [ 442.680855][T10976] should_fail_ex.cold+0x5/0xa [ 442.680996][T10976] should_failslab+0xc2/0x120 [ 442.681079][T10976] __kmalloc_noprof+0xfc/0x840 [ 442.681195][T10976] ? __list_lru_init+0xd9/0x4b0 [ 442.681313][T10976] __list_lru_init+0xd9/0x4b0 [ 442.681471][T10976] sget_fc+0xa76/0x1f20 [ 442.681646][T10976] ? __pfx_set_anon_super_fc+0x10/0x10 [ 442.681711][T10976] ? __pfx_sget_fc+0x10/0x10 [ 442.681744][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 442.681831][T10976] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 442.681871][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.681968][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 442.682019][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.682151][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 442.682215][T10976] get_tree_nodev+0x28/0x190 [ 442.682320][T10976] mqueue_get_tree+0xf1/0x130 [ 442.682377][T10976] vfs_get_tree+0x92/0x320 [ 442.682463][T10976] fc_mount_longterm+0x1a/0x270 [ 442.682570][T10976] mq_init_ns+0x482/0x820 [ 442.682666][T10976] copy_ipcs+0x3dd/0x7e0 [ 442.682758][T10976] create_new_namespaces+0x20a/0xac0 [ 442.682830][T10976] ? security_capable+0x80/0x260 [ 442.682978][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 442.683058][T10976] ksys_unshare+0x4a2/0xa70 [ 442.683153][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 442.683421][T10976] __x64_sys_unshare+0x31/0x40 [ 442.683480][T10976] do_syscall_64+0x123/0x790 [ 442.683618][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.683644][T10976] RIP: 0033:0x7fd0cab9e159 [ 442.683684][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.683701][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.683725][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 442.683739][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 442.683751][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 442.683764][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.683776][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 442.684039][T10976] [ 442.880285][T10976] FAULT_INJECTION: forcing a failure. [ 442.880285][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 442.880331][T10976] CPU: 2 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.880354][T10976] Tainted: [L]=SOFTLOCKUP [ 442.880366][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.880381][T10976] Call Trace: [ 442.880408][T10976] [ 442.880439][T10976] dump_stack_lvl+0x100/0x190 [ 442.880517][T10976] should_fail_ex.cold+0x5/0xa [ 442.880623][T10976] should_failslab+0xc2/0x120 [ 442.880694][T10976] __kmalloc_cache_noprof+0x91/0x6d0 [ 442.880789][T10976] ? sget_fc+0xb15/0x1f20 [ 442.880884][T10976] sget_fc+0xb15/0x1f20 [ 442.881074][T10976] ? __pfx_set_anon_super_fc+0x10/0x10 [ 442.881127][T10976] ? __pfx_sget_fc+0x10/0x10 [ 442.881154][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 442.881236][T10976] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 442.881271][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.881372][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 442.881432][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 442.881510][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 442.881552][T10976] get_tree_nodev+0x28/0x190 [ 442.881654][T10976] mqueue_get_tree+0xf1/0x130 [ 442.881743][T10976] vfs_get_tree+0x92/0x320 [ 442.881795][T10976] fc_mount_longterm+0x1a/0x270 [ 442.881865][T10976] mq_init_ns+0x482/0x820 [ 442.882018][T10976] copy_ipcs+0x3dd/0x7e0 [ 442.882115][T10976] create_new_namespaces+0x20a/0xac0 [ 442.882166][T10976] ? security_capable+0x80/0x260 [ 442.882324][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 442.882406][T10976] ksys_unshare+0x4a2/0xa70 [ 442.882459][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 442.882697][T10976] __x64_sys_unshare+0x31/0x40 [ 442.882738][T10976] do_syscall_64+0x123/0x790 [ 442.882855][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.882898][T10976] RIP: 0033:0x7fd0cab9e159 [ 442.882967][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.882980][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.882996][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 442.883006][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 442.883016][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 442.883025][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.883034][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 442.883301][T10976] [ 443.120565][T10976] FAULT_INJECTION: forcing a failure. [ 443.120565][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 443.120628][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.120662][T10976] Tainted: [L]=SOFTLOCKUP [ 443.120677][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.120696][T10976] Call Trace: [ 443.120737][T10976] [ 443.120781][T10976] dump_stack_lvl+0x100/0x190 [ 443.121044][T10976] should_fail_ex.cold+0x5/0xa [ 443.121188][T10976] should_failslab+0xc2/0x120 [ 443.121313][T10976] __kmalloc_cache_noprof+0x91/0x6d0 [ 443.121415][T10976] ? ct_init_net+0xf6/0x500 [ 443.121505][T10976] ? ct_init_net+0x135/0x500 [ 443.121723][T10976] ct_init_net+0x135/0x500 [ 443.121868][T10976] ? __pfx_ct_init_net+0x10/0x10 [ 443.121945][T10976] ops_init+0x1e2/0x5f0 [ 443.122184][T10976] setup_net+0x118/0x3a0 [ 443.122284][T10976] ? __pfx_setup_net+0x10/0x10 [ 443.122673][T10976] copy_net_ns+0x345/0x7a0 [ 443.122824][T10976] create_new_namespaces+0x3ea/0xac0 [ 443.123172][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 443.123284][T10976] ksys_unshare+0x4a2/0xa70 [ 443.123397][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 443.123813][T10976] __x64_sys_unshare+0x31/0x40 [ 443.123900][T10976] do_syscall_64+0x123/0x790 [ 443.124139][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.124202][T10976] RIP: 0033:0x7fd0cab9e159 [ 443.124256][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.124281][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 443.124314][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 443.124334][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 443.124353][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 443.124372][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.124391][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 443.124855][T10976] [ 443.439314][T10976] FAULT_INJECTION: forcing a failure. [ 443.439314][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 443.439353][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.6.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.439375][T10976] Tainted: [L]=SOFTLOCKUP [ 443.439385][T10976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.439397][T10976] Call Trace: [ 443.439418][T10976] [ 443.439439][T10976] dump_stack_lvl+0x100/0x190 [ 443.439563][T10976] should_fail_ex.cold+0x5/0xa [ 443.439702][T10976] should_failslab+0xc2/0x120 [ 443.439754][T10976] kmem_cache_alloc_noprof+0x92/0x6a0 [ 443.439790][T10976] ? __pfx_map_id_range_down+0x10/0x10 [ 443.439846][T10976] ? security_inode_alloc+0x3b/0x2c0 [ 443.440010][T10976] security_inode_alloc+0x3b/0x2c0 [ 443.440071][T10976] inode_init_always_gfp+0xc6f/0xfb0 [ 443.440258][T10976] alloc_inode+0x8e/0x250 [ 443.440347][T10976] new_inode+0x22/0x1c0 [ 443.440367][T10976] ? refcount_dec_not_one+0x136/0x1c0 [ 443.440440][T10976] mqueue_get_inode+0x2e/0xe00 [ 443.440504][T10976] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 443.440556][T10976] ? __kasan_kmalloc+0xaa/0xb0 [ 443.440670][T10976] ? __pfx_mqueue_fill_super+0x10/0x10 [ 443.440711][T10976] mqueue_fill_super+0x145/0x250 [ 443.440762][T10976] get_tree_nodev+0xdd/0x190 [ 443.440848][T10976] mqueue_get_tree+0xf1/0x130 [ 443.440936][T10976] vfs_get_tree+0x92/0x320 [ 443.441035][T10976] fc_mount_longterm+0x1a/0x270 [ 443.441095][T10976] mq_init_ns+0x482/0x820 [ 443.441196][T10976] copy_ipcs+0x3dd/0x7e0 [ 443.441324][T10976] create_new_namespaces+0x20a/0xac0 [ 443.441371][T10976] ? security_capable+0x80/0x260 [ 443.441555][T10976] unshare_nsproxy_namespaces+0xf2/0x220 [ 443.441747][T10976] ksys_unshare+0x4a2/0xa70 [ 443.441824][T10976] ? __pfx_ksys_unshare+0x10/0x10 [ 443.442247][T10976] __x64_sys_unshare+0x31/0x40 [ 443.442279][T10976] do_syscall_64+0x123/0x790 [ 443.442397][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.442455][T10976] RIP: 0033:0x7fd0cab9e159 [ 443.442547][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.442580][T10976] RSP: 002b:00007fd0cb9a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 443.442623][T10976] RAX: ffffffffffffffda RBX: 00007fd0cae25fa0 RCX: 00007fd0cab9e159 [ 443.442647][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 443.442671][T10976] RBP: 00007fd0cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 443.442694][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.442718][T10976] R13: 00007fd0cae26038 R14: 00007fd0cae25fa0 R15: 00007ffdfee3a428 [ 443.443141][T10976] [ 443.623132][ T43] audit: type=1400 audit(1790108443.146:881): avc: denied { setopt } for pid=10986 comm="syz.7.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.625063][T10981] wg2 speed is unknown, defaulting to 1000 [ 443.690011][T10992] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 443.712486][T10992] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 443.938873][ T5739] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 443.954872][ T5739] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 444.569867][T10998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 447.096904][T11025] netlink: ct_mark mask cannot be 0 [ 447.097044][T11025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.204566][ T43] audit: type=1400 audit(1790108446.505:882): avc: denied { write } for pid=11017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.300505][ T2334] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 447.587474][ T2334] usb 12-1: not running at top speed; connect to a high speed hub [ 447.587590][ T2334] usb 12-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 447.608529][ T2334] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 447.608655][ T2334] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.798687][ T2334] cyberjack 12-1:1.0: required endpoints missing [ 448.226987][ T43] audit: type=1400 audit(1790108447.460:883): avc: denied { mount } for pid=11030 comm="syz.5.1606" name="/" dev="configfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 448.334228][ T43] audit: type=1400 audit(1790108447.544:884): avc: denied { write } for pid=11030 comm="syz.5.1606" name="target" dev="configfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 448.639628][ T43] audit: type=1400 audit(1790108447.843:885): avc: denied { write } for pid=11031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.936702][ T43] audit: type=1400 audit(1790108448.124:886): avc: denied { unmount } for pid=8923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 449.779198][T10985] wg2 speed is unknown, defaulting to 1000 [ 450.015322][ T43] audit: type=1400 audit(1790108449.135:887): avc: denied { map } for pid=11044 comm="syz.8.1610" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 451.111235][T11049] netlink: 'syz.8.1612': attribute type 63 has an invalid length. [ 451.245282][T11049] lo: left promiscuous mode [ 451.628915][ T43] audit: type=1400 audit(1790108450.651:888): avc: denied { write } for pid=11050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.008386][T11052] ceph: No mds server is up or the cluster is laggy [ 452.877777][T11065] netlink: 'syz.8.1614': attribute type 1 has an invalid length. [ 452.901337][T11065] netlink: 'syz.8.1614': attribute type 1 has an invalid length. [ 453.038720][ T43] audit: type=1400 audit(1790108451.970:889): avc: denied { write } for pid=11063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.120048][ T43] audit: type=1400 audit(1790108452.036:890): avc: denied { ioctl } for pid=11066 comm="syz.5.1615" path="socket:[39140]" dev="sockfs" ino=39140 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.333298][ T50] usb 12-1: USB disconnect, device number 5 [ 455.065018][T11077] netlink: 'syz.7.1619': attribute type 1 has an invalid length. [ 455.065047][T11077] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1619'. [ 455.103933][ T43] audit: type=1400 audit(1790108453.898:891): avc: denied { write } for pid=11074 comm="syz.5.1618" name="functions" dev="configfs" ino=17577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 455.106064][T11075] file system registered [ 455.488747][ T43] audit: type=1400 audit(1790108454.253:892): avc: denied { mount } for pid=11074 comm="syz.5.1618" name="/" dev="functionfs" ino=40100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 455.526067][ C0] net_ratelimit: 39 callbacks suppressed [ 455.673822][ T43] audit: type=1400 audit(1790108454.413:893): avc: denied { append } for pid=11082 comm="syz.7.1621" name="uprobe_events" dev="tracefs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 455.960107][ T43] audit: type=1400 audit(1790108454.693:894): avc: denied { write } for pid=11078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.124305][ T43] audit: type=1400 audit(1790108454.824:895): avc: denied { unmount } for pid=8923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 456.211597][ T8923] ffs_data_put(): freeing [ 457.037895][ T43] audit: type=1400 audit(1790108455.704:896): avc: denied { write } for pid=11092 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.905314][T11103] bridge0: port 1(syz_tun) entered blocking state [ 457.910168][T11103] bridge0: port 1(syz_tun) entered disabled state [ 457.911301][T11103] syz_tun: entered allmulticast mode [ 457.987371][T11097] md/raid1:md0: active with 1 out of 2 mirrors [ 458.049397][T11097] md0: detected capacity change from 0 to 2048 [ 459.422450][ T43] audit: type=1400 audit(1790108457.941:897): avc: denied { write } for pid=11109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.565133][ T58] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 459.718754][ T58] usb 10-1: device descriptor read/64, error -71 [ 460.057585][ T58] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 460.227706][ T58] usb 10-1: device descriptor read/64, error -71 [ 460.282271][T11123] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1633'. [ 460.305208][T11123] FAULT_INJECTION: forcing a failure. [ 460.305208][T11123] name failslab, interval 1, probability 0, space 0, times 0 [ 460.305243][T11123] CPU: 0 UID: 0 PID: 11123 Comm: syz.7.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.305264][T11123] Tainted: [L]=SOFTLOCKUP [ 460.305274][T11123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 460.305285][T11123] Call Trace: [ 460.305305][T11123] [ 460.305327][T11123] dump_stack_lvl+0x100/0x190 [ 460.305449][T11123] should_fail_ex.cold+0x5/0xa [ 460.305550][T11123] should_failslab+0xc2/0x120 [ 460.305600][T11123] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 460.305635][T11123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 460.305692][T11123] ? alloc_pwq+0x3ff/0xdd0 [ 460.305863][T11123] alloc_pwq+0x3ff/0xdd0 [ 460.306068][T11123] apply_wqattrs_prepare+0x3aa/0xbb0 [ 460.306274][T11123] apply_workqueue_attrs_locked+0x64/0xe0 [ 460.306364][T11123] __alloc_workqueue+0x9a7/0x1950 [ 460.306560][T11123] alloc_workqueue_noprof+0xc7/0x130 [ 460.306635][T11123] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 460.306942][T11123] ieee802154_register_hw+0x1cf/0xa60 [ 460.306995][T11123] ? __pfx_ieee802154_register_hw+0x10/0x10 [ 460.307056][T11123] ? slab_debug_trace_open+0x80/0x1e0 [ 460.307141][T11123] ? lockdep_init_map_type+0x5c/0x250 [ 460.307278][T11123] hwsim_add_one+0x6c7/0x13b0 [ 460.307411][T11123] ? __pfx_hwsim_add_one+0x10/0x10 [ 460.307497][T11123] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 460.307540][T11123] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 460.307648][T11123] genl_family_rcv_msg_doit+0x214/0x300 [ 460.307766][T11123] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 460.307959][T11123] ? bpf_lsm_capable+0x9/0x10 [ 460.307995][T11123] ? security_capable+0x80/0x260 [ 460.308109][T11123] ? ns_capable+0xd2/0xf0 [ 460.308194][T11123] genl_rcv_msg+0x560/0x800 [ 460.308317][T11123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.308384][T11123] ? __lock_acquire+0x5c0/0x1f40 [ 460.308443][T11123] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 460.308648][T11123] netlink_rcv_skb+0x159/0x420 [ 460.308730][T11123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.308782][T11123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.309034][T11123] ? netlink_deliver_tap+0x1ae/0xcc0 [ 460.309165][T11123] genl_rcv+0x28/0x40 [ 460.309224][T11123] netlink_unicast+0x585/0x850 [ 460.309341][T11123] ? __pfx_netlink_unicast+0x10/0x10 [ 460.309567][T11123] netlink_sendmsg+0x8b0/0xda0 [ 460.309678][T11123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.309813][T11123] ? selinux_socket_sendmsg+0x198/0x2f0 [ 460.309949][T11123] ____sys_sendmsg+0xa4d/0xbe0 [ 460.309990][T11123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.310109][T11123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.310237][T11123] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 460.310427][T11123] ___sys_sendmsg+0x190/0x1e0 [ 460.310498][T11123] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.310542][T11123] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 460.310800][T11123] ? find_held_lock+0x2b/0x80 [ 460.311174][T11123] __sys_sendmsg+0x160/0x210 [ 460.311265][T11123] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.311581][T11123] do_syscall_64+0x123/0x790 [ 460.311696][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.311740][T11123] RIP: 0033:0x7f6631b9e159 [ 460.311807][T11123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.311827][T11123] RSP: 002b:00007f66329c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.311857][T11123] RAX: ffffffffffffffda RBX: 00007f6631e25fa0 RCX: 00007f6631b9e159 [ 460.311875][T11123] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 460.311885][T11123] RBP: 00007f6631c3506b R08: 0000000000000000 R09: 0000000000000000 [ 460.311894][T11123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.311903][T11123] R13: 00007f6631e26038 R14: 00007f6631e25fa0 R15: 00007ffd00cfca58 [ 460.312165][T11123] [ 460.359984][ T58] usb usb10-port1: attempt power cycle [ 460.685770][ T43] audit: type=1400 audit(1790108459.120:898): avc: denied { write } for pid=11124 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.772911][ T58] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 460.808847][ T58] usb 10-1: device descriptor read/8, error -71 [ 460.911687][ C3] net_ratelimit: 53 callbacks suppressed [ 461.072009][ T58] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 461.127025][ T58] usb 10-1: device descriptor read/8, error -71 [ 461.262019][ T58] usb usb10-port1: unable to enumerate USB device [ 461.290401][T11127] syz_tun: Device is already in use. [ 461.887598][T11131] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 461.887631][T11131] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 462.098001][T11131] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 462.098024][T11131] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 462.182173][T11131] ================================================================== [ 462.182210][T11131] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 462.182257][T11131] Write of size 8 at addr ffff88805619e8c0 by task syz.7.1635/11131 [ 462.182278][T11131] [ 462.182300][T11131] CPU: 2 UID: 0 PID: 11131 Comm: syz.7.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.182333][T11131] Tainted: [L]=SOFTLOCKUP [ 462.182346][T11131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.182364][T11131] Call Trace: [ 462.182390][T11131] [ 462.182418][T11131] dump_stack_lvl+0x100/0x190 [ 462.182578][T11131] print_report+0x13d/0x4b0 [ 462.182791][T11131] ? __virt_addr_valid+0x239/0x430 [ 462.182926][T11131] ? gadgetfs_bind+0x82e/0x890 [ 462.182976][T11131] kasan_report+0xdf/0x1c0 [ 462.183178][T11131] ? gadgetfs_bind+0x82e/0x890 [ 462.183472][T11131] gadgetfs_bind+0x82e/0x890 [ 462.183661][T11131] ? kernfs_create_link+0x1bd/0x240 [ 462.183920][T11131] gadget_bind_driver+0x28c/0xbf0 [ 462.183981][T11131] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 462.184113][T11131] ? __pfx_gadget_bind_driver+0x10/0x10 [ 462.184268][T11131] really_probe+0x241/0xa60 [ 462.184474][T11131] __driver_probe_device+0x210/0x460 [ 462.184526][T11131] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 462.184695][T11131] driver_probe_device+0x4a/0x140 [ 462.184848][T11131] __driver_attach+0x21f/0x5b0 ** replaying previous printk message ** [ 462.184848][T11131] __driver_attach+0x21f/0x5b0 [ 462.184970][T11131] ? __pfx___driver_attach+0x10/0x10 [ 462.185018][T11131] bus_for_each_dev+0x13e/0x1d0 [ 462.185111][T11131] ? __pfx_bus_for_each_dev+0x10/0x10 [ 462.185155][T11131] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 462.185524][T11131] bus_add_driver+0x305/0x5b0 [ 462.185685][T11131] driver_register+0x1e2/0x360 [ 462.185928][T11131] usb_gadget_register_driver_owner+0x132/0x210 [ 462.186051][T11131] dev_config+0xdce/0x1610 [ 462.186174][T11131] ? ksys_write+0x50/0x250 [ 462.186263][T11131] ? __pfx_dev_config+0x10/0x10 [ 462.186599][T11131] vfs_write+0x2aa/0x1050 [ 462.186728][T11131] ? __pfx_dev_config+0x10/0x10 [ 462.186802][T11131] ? lock_acquire+0x1d1/0x380 [ 462.186888][T11131] ? __fget_files+0x34/0x3d0 [ 462.187012][T11131] ? __pfx_vfs_write+0x10/0x10 [ 462.187061][T11131] ? find_held_lock+0x2b/0x80 [ 462.187136][T11131] ? __fget_files+0x215/0x3d0 [ 462.187373][T11131] ? __fget_files+0x21f/0x3d0 [ 462.187697][T11131] ksys_write+0x12a/0x250 [ 462.187798][T11131] ? __pfx_ksys_write+0x10/0x10 [ 462.188142][T11131] do_syscall_64+0x123/0x790 [ 462.188327][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.188398][T11131] RIP: 0033:0x7f6631b9e159 [ 462.188513][T11131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.188547][T11131] RSP: 002b:00007f66329c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.188597][T11131] RAX: ffffffffffffffda RBX: 00007f6631e25fa0 RCX: 00007f6631b9e159 [ 462.188621][T11131] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 462.188636][T11131] RBP: 00007f6631c3506b R08: 0000000000000000 R09: 0000000000000000 [ 462.188652][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.188668][T11131] R13: 00007f6631e26038 R14: 00007f6631e25fa0 R15: 00007ffd00cfca58 [ 462.188861][T10985] kobject: 'rx-0' (ffff88803c9e0450): kobject_uevent_env [ 462.189132][T11131] [ 462.189146][T11131] [ 462.189156][T11131] Allocated by task 8882: [ 462.189170][T11131] kasan_save_stack+0x30/0x50 [ 462.189209][T11131] kasan_save_track+0x14/0x30 [ 462.189248][T11131] __kasan_kmalloc+0xaa/0xb0 [ 462.189290][T11131] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 462.189341][T11131] gadgetfs_fill_super+0x1da/0x430 [ 462.189395][T11131] get_tree_single+0xe2/0x190 [ 462.189442][T11131] vfs_get_tree+0x92/0x320 [ 462.189493][T10985] kobject: 'rx-0' (ffff88803c9e0450): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 462.189499][T11131] path_mount+0x7d0/0x24c0 [ 462.189558][T11131] __x64_sys_mount+0x293/0x310 [ 462.189620][T11131] do_syscall_64+0x123/0x790 [ 462.189676][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.189730][T11131] [ 462.189748][T11131] Freed by task 11131: [ 462.189769][T11131] kasan_save_stack+0x30/0x50 [ 462.189849][T11131] kasan_save_track+0x14/0x30 [ 462.189890][T11131] kasan_save_free_info+0x3b/0x70 [ 462.189930][T11131] __kasan_slab_free+0x5f/0x80 [ 462.189967][T11131] kfree+0x22b/0x6d0 [ 462.190011][T11131] put_dev+0xb4/0xd0 [ 462.190056][T11131] gadgetfs_bind+0x6bc/0x890 [ 462.190112][T11131] gadget_bind_driver+0x28c/0xbf0 [ 462.190158][T11131] really_probe+0x241/0xa60 [ 462.190208][T11131] __driver_probe_device+0x210/0x460 [ 462.190260][T11131] driver_probe_device+0x4a/0x140 [ 462.190315][T11131] __driver_attach+0x21f/0x5b0 [ 462.190372][T11131] bus_for_each_dev+0x13e/0x1d0 [ 462.190427][T11131] bus_add_driver+0x305/0x5b0 [ 462.190486][T11131] driver_register+0x1e2/0x360 [ 462.190553][T11131] usb_gadget_register_driver_owner+0x132/0x210 [ 462.190619][T11131] dev_config+0xdce/0x1610 [ 462.190665][T11131] vfs_write+0x2aa/0x1050 [ 462.190695][T11131] ksys_write+0x12a/0x250 [ 462.190727][T11131] do_syscall_64+0x123/0x790 [ 462.190771][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.190810][T11131] [ 462.190822][T11131] The buggy address belongs to the object at ffff88805619e800 [ 462.190822][T11131] which belongs to the cache kmalloc-1k of size 1024 [ 462.190846][T11131] The buggy address is located 192 bytes inside of [ 462.190846][T11131] freed 1024-byte region [ffff88805619e800, ffff88805619ec00) [ 462.190872][T11131] [ 462.190893][T11131] The buggy address belongs to the physical page: [ 462.190911][T11131] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056199800 pfn:0x56198 [ 462.190937][T11131] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 462.190962][T11131] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 462.190989][T11131] page_type: f5(slab) [ 462.191016][T11131] raw: 00fff00000000240 ffff88801c042dc0 ffffea000075a810 ffffea0000b84410 [ 462.191043][T11131] raw: ffff888056199800 000000000010000d 00000000f5000000 0000000000000000 [ 462.191071][T11131] head: 00fff00000000240 ffff88801c042dc0 ffffea000075a810 ffffea0000b84410 [ 462.191104][T11131] head: ffff888056199800 000000000010000d 00000000f5000000 0000000000000000 [ 462.191132][T11131] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 462.191160][T11131] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 462.191183][T11131] page dumped because: kasan: bad access detected [ 462.191210][T11131] page_owner tracks the page as allocated [ 462.191228][T11131] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5779, tgid 5779 (kworker/u32:2), ts 39962472434 [ 462.191270][T11131] post_alloc_hook+0xfd/0x120 [ 462.191336][T11131] get_page_from_freelist+0x110d/0x35d0 [ 462.191394][T11131] __alloc_frozen_pages_noprof+0x2eb/0x3300 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.191455][T11131] new_slab+0xa9/0x6e0 [ 462.191516][T11131] refill_objects+0xe3/0x410 [ 462.191556][T11131] __pcs_replace_empty_main+0x35e/0x650 [ 462.191597][T11131] __kmalloc_noprof+0x67c/0x840 [ 462.191632][T11131] ___neigh_create+0x1532/0x2940 [ 462.191678][T11131] ip6_finish_output2+0x1052/0x1d50 [ 462.191721][T11131] __ip6_finish_output+0x357/0xdf0 [ 462.191767][T11131] ip6_output+0x2aa/0xa60 [ 462.191814][T11131] ndisc_send_skb+0xa85/0x1bf0 [ 462.191866][T11131] ndisc_send_ns+0xc6/0x140 [ 462.191921][T11131] addrconf_dad_work+0xca1/0x1360 [ 462.191975][T11131] process_one_work+0xac7/0x1b10 [ 462.192035][T11131] worker_thread+0x5ef/0xe50 [ 462.192092][T11131] page_owner free stack trace missing [ 462.192114][T11131] [ 462.192130][T11131] Memory state around the buggy address: [ 462.192149][T11131] ffff88805619e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 462.192172][T11131] ffff88805619e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.192196][T11131] >ffff88805619e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.192217][T11131] ^ [ 462.192238][T11131] ffff88805619e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.192262][T11131] ffff88805619e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.192283][T11131] ================================================================== [ 462.204331][T10985] kobject: 'tx-0' (ffff88805e27c020): kobject_add_internal: parent: 'queues', set: 'queues' [ 462.208092][T10981] kernfs 224: removing [ 462.208730][T10981] kernfs 225: removing [ 462.209444][T10981] kernfs 226: removing [ 462.210110][T10981] kernfs 227: removing [ 462.234735][T10981] kernfs 228: removing [ 462.235388][T10981] kernfs 229: removing [ 462.236077][T10981] kernfs 230: removing [ 462.236927][T10981] kernfs 231: removing [ 462.239345][T11131] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 462.517802][T11131] CPU: 2 UID: 0 PID: 11131 Comm: syz.7.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.521941][T11131] Tainted: [L]=SOFTLOCKUP [ 462.523638][T11131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.527791][T11131] Call Trace: [ 462.529226][T11131] [ 462.530439][T11131] dump_stack_lvl+0x100/0x190 [ 462.532291][T11131] vpanic+0x553/0x970 [ 462.534093][T11131] ? __pfx_vpanic+0x10/0x10 [ 462.536072][T11131] ? mark_held_locks+0x40/0x70 [ 462.538251][T11131] ? gadgetfs_bind+0x82e/0x890 [ 462.540291][T11131] panic+0xd1/0xe0 [ 462.541969][T11131] ? __pfx_panic+0x10/0x10 [ 462.543741][T11131] ? gadgetfs_bind+0x82e/0x890 [ 462.545705][T11131] ? preempt_schedule_common+0x3c/0xb0 [ 462.548297][T11131] check_panic_on_warn.cold+0x19/0x34 [ 462.550607][T11131] end_report.part.0+0x3a/0x90 [ 462.552650][T11131] kasan_report.cold+0xe/0x18 [ 462.554710][T11131] ? gadgetfs_bind+0x82e/0x890 [ 462.556700][T11131] gadgetfs_bind+0x82e/0x890 [ 462.558796][T11131] ? kernfs_create_link+0x1bd/0x240 [ 462.561037][T11131] gadget_bind_driver+0x28c/0xbf0 [ 462.563016][T11131] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 462.565362][T11131] ? __pfx_gadget_bind_driver+0x10/0x10 [ 462.567651][T11131] really_probe+0x241/0xa60 [ 462.569771][T11131] __driver_probe_device+0x210/0x460 [ 462.571959][T11131] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 462.574194][T11131] driver_probe_device+0x4a/0x140 [ 462.576339][T11131] __driver_attach+0x21f/0x5b0 [ 462.578494][T11131] ? __pfx___driver_attach+0x10/0x10 [ 462.580601][T11131] bus_for_each_dev+0x13e/0x1d0 [ 462.582490][T11131] ? __pfx_bus_for_each_dev+0x10/0x10 [ 462.584724][T11131] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 462.588072][T11131] bus_add_driver+0x305/0x5b0 [ 462.589932][T11131] driver_register+0x1e2/0x360 [ 462.592076][T11131] usb_gadget_register_driver_owner+0x132/0x210 [ 462.594829][T11131] dev_config+0xdce/0x1610 [ 462.596587][T11131] ? ksys_write+0x50/0x250 [ 462.598387][T11131] ? __pfx_dev_config+0x10/0x10 [ 462.600737][T11131] vfs_write+0x2aa/0x1050 [ 462.602645][T11131] ? __pfx_dev_config+0x10/0x10 [ 462.604744][T11131] ? lock_acquire+0x1d1/0x380 [ 462.606598][T11131] ? __fget_files+0x34/0x3d0 [ 462.608102][T11131] ? __pfx_vfs_write+0x10/0x10 [ 462.609618][T11131] ? find_held_lock+0x2b/0x80 [ 462.611143][T11131] ? __fget_files+0x215/0x3d0 [ 462.612740][T11131] ? __fget_files+0x21f/0x3d0 [ 462.614434][T11131] ksys_write+0x12a/0x250 [ 462.615835][T11131] ? __pfx_ksys_write+0x10/0x10 [ 462.617539][T11131] do_syscall_64+0x123/0x790 [ 462.619110][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.620949][T11131] RIP: 0033:0x7f6631b9e159 [ 462.622421][T11131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.628369][T11131] RSP: 002b:00007f66329c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.630978][T11131] RAX: ffffffffffffffda RBX: 00007f6631e25fa0 RCX: 00007f6631b9e159 [ 462.633432][T11131] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 462.635926][T11131] RBP: 00007f6631c3506b R08: 0000000000000000 R09: 0000000000000000 [ 462.638392][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.640844][T11131] R13: 00007f6631e26038 R14: 00007f6631e25fa0 R15: 00007ffd00cfca58 [ 462.643551][T11131] [ 462.645273][T11131] Kernel Offset: disabled [ 462.646667][T11131] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:21:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b125c5 RDI=ffffffff9bc71ea0 RBP=ffffffff9bc71e60 RSP=ffffc900001379e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666657 R12=0000000000000000 R13=0000000000000020 R14=000000000000000e R15=ffffc90000137da8 RIP=ffffffff85b125ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561a166b9300 CR3=000000003664f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000800 Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb13cc45b 00007ffdb13cc45b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb13cc960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb13cc960 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75735f746e657665 75203a766e655f74 6e657665755f7463 656a626f6b203a29 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2938207972742820 676e697972746572 202c73646e6f6365 7320352072657466 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61206574656c706d 6f6320746f6e2064 696420293025302f 33303030323a5d31 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a5b2820323320 7265657020726f66 20656b616873646e 6148203a30677720 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a64726175676572 6977205d32432020 20205b5d31303232 31302e3236342020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38313d6f6e692022 7366706d74223d76 6564202265746174 732d6b6f6f68223d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff8880660ba824 RCX=0000000000000104 RDX=ffff8880263ecb00 RSI=ffffffff8bf69c00 RDI=ffffffff8c623580 RBP=ffffffff8ee82860 RSP=ffffc900006b02f0 R8 =0000000000000000 R9 =1ffff11003ad00d5 R10=0000000000000000 R11=000000000000d3c2 R12=ffff88801c0ab800 R13=0000000000000000 R14=ffffc900006b03f8 R15=ffffc900006b0400 RIP=ffffffff8bd18940 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd0c8df66c0 ffffffff 00c00000 GS =0000 ffff8880d5c53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6239803d6e CR3=0000000059722000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559485909600 0000559485909600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc500dbdb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572757373657270 6d76205d37373835 54205b5d32353838 39302e3236342020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2938207972742820 676e697972746572 202c73646e6f6365 7320352072657466 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61206574656c706d 6f6320746f6e2064 696420293025302f 33303030323a5d31 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a5b2820323320 7265657020726f66 20656b616873646e 6148203a30677720 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a64726175676572 6977205d32432020 20205b5d31303232 31302e3236342020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff820eaab0 RDX=0000000000000103 RSI=000000000000001c RDI=ffff88802b380000 RBP=ffffffff8bf67ba0 RSP=ffffc90000658400 R8 =0000000000000001 R9 =000000000000001c R10=000000000000000b R11=000000000000b0a9 R12=000000000000000b R13=0000000000000005 R14=0000000000000001 R15=ffff888066282010 RIP=ffffffff820c1db4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f66329c96c0 ffffffff 00c00000 GS =0000 ffff8880d5d53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fe1eff8 CR3=000000003bd29000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 357a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1f5811e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1f5811e6 00007ffc1f5811ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f211283564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f211283568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21128357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2112835680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000004 RBX=ffff88806636aa8c RCX=0000000000000004 RDX=ffff88803487cb00 RSI=ffffffff820eacce RDI=ffff88803487cb00 RBP=0000000000000a7c RSP=ffffc9000598f068 R8 =0000000000000004 R9 =000000000000002c R10=0000000000000254 R11=ffff88807ffd7900 R12=0000000000000cd0 R13=000000000000002c R14=0000006b9df83cf5 R15=ffff88806636a010 RIP=ffffffff820c22d0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdaaa84d000 CR3=000000002aa8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000