last executing test programs: 14.370852782s ago: executing program 3 (id=172): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 14.370449195s ago: executing program 3 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4090, 0xffa, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0}, &(0x7f0000000180)=0x40) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 14.327377785s ago: executing program 3 (id=175): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='efs\x00', 0x483, 0x0) 14.323602614s ago: executing program 3 (id=176): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mmap(&(0x7f0000853000/0x11000)=nil, 0x11000, 0x0, 0x10, r0, 0x7e2a4000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xa4e5703f73239435) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x1000) accept4$rose(r2, 0x0, 0x0, 0x80000) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x3, 0x1, {0xa, 0x4e23, 0x1, @mcast1, 0x40000009}}}, 0x80) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000080)={0x0, 0x905, [0x0, 0xfffffffffffffffc, 0x101, 0x400, 0x5, 0x80000001]}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x149c29da27ce1101) ioctl$TUNSETLINK(r5, 0x400454cd, 0x304) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) 14.148544828s ago: executing program 3 (id=178): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) 14.028364973s ago: executing program 3 (id=179): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) 13.992661486s ago: executing program 32 (id=179): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) 6.401025963s ago: executing program 1 (id=240): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x6}, 0xe) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x1f, 0xd, 0x2, 0x8, 0xb, 0x0, 0x1, 0xa4}) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) chdir(&(0x7f0000000280)='./file0\x00') r5 = open(&(0x7f00000024c0)='./file0\x00', 0x10d442, 0x24) write$binfmt_script(r5, 0x0, 0xffffff3c) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 5.520978737s ago: executing program 1 (id=245): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000002) 5.357751715s ago: executing program 2 (id=247): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES8=r5, @ANYBLOB="b828da404a130ab08f8ff4eaf740f952a2f251b4f5b4a0b0119c0033ed5606530e70d40543866764c1f19812097d958f8ea942158e337029c29b543b1f39235a499680a27c9927586a1219", @ANYRESOCT, @ANYRESOCT=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc038563b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000000c0)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000340)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x80204705, 0x20000000) 4.578754757s ago: executing program 0 (id=250): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$video(0x0, 0x7fffffff, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x8957) vmsplice(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x80000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0xffbb}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) 4.468544927s ago: executing program 1 (id=251): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0205000000000000010000050000000000839a9d"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) 3.751026705s ago: executing program 4 (id=253): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r1, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000005c0)=0x3f) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x5) 3.523134241s ago: executing program 1 (id=254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 3.522943634s ago: executing program 4 (id=255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000006080)=[{{0x0, 0x8d, &(0x7f0000003f00)=[{&(0x7f0000003b00)='@', 0x1}, {&(0x7f0000003b40)="54b030", 0x3}], 0x2, &(0x7f0000002880)=ANY=[], 0x98, 0x4000001}}], 0x1, 0x4004090) 3.440251907s ago: executing program 1 (id=256): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000004000018007000600666f000008000800000000000600010002000000080005"], 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}}, 0x8004) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x107, @vifc_lcl_ifindex=r5, @empty}, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x9, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) 3.439922004s ago: executing program 4 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x19, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.210700961s ago: executing program 2 (id=258): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.20803996s ago: executing program 2 (id=259): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x1}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000002c0)=0x1, 0xfffffffffffffd22) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0x2f, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20002cbd7000fddbde25000000000800020000000000a2ade4955c2c7f3f648f79d76293460dfd4784b1b0c565486c1e92a66809d5b9b5e538"], 0x1c}, 0x1, 0x0, 0x0, 0x24044004}, 0x24008051) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2c0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$kcm(0xa, 0x3, 0x3a) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7b, 0x185be19b92b7e3b) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, 0x0) socket(0x18, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'sit0\x00'}}, 0xfffffffffffffe92) socket$pppoe(0x18, 0x1, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) 3.126352456s ago: executing program 0 (id=260): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x22b4}}, 0x0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r0, 0xa0a, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xffffff00, 0x1}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008110) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3.038951167s ago: executing program 2 (id=261): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x3, 0x5d, {{0xa, 0x4, 0x0, 0x29, 0x28, 0x67, 0x0, 0x65, 0x4, 0x0, @broadcast, @empty, {[@rr={0x7, 0x13, 0x1b, [@loopback, @loopback, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x8000400) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 2.92069331s ago: executing program 2 (id=262): syz_open_dev$vcsn(0x0, 0x1, 0x40a042) syz_emit_ethernet(0x73, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee4fa025cabdd7914a44fe7"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x100000000, 0x4, 0x8, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.599435651s ago: executing program 4 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffd, 0x4000000, 0x1, 0x3, 0xa97, 0x6, 0x0, 0x0, 0x80, 0x400}}, 0x50) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000180), &(0x7f0000000100)=0x4bcdbe89a9f07d0e) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.230477952s ago: executing program 0 (id=264): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r1, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x5) 1.970877865s ago: executing program 0 (id=265): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb704000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='io_uring_queue_async_work\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0xfffffffc, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x40005) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x700, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0xffff, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x33, 0xffff, 0x4}]}}}}}}}, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.820732302s ago: executing program 2 (id=266): r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) r2 = syz_usb_connect$uac1(0x0, 0xaf, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x99, 0xb, 0xff, 0x10, 0x10, 0x7}, 0x24, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0]}) syz_usb_disconnect(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) shutdown(r6, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x68e81) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'veth0\x00', 0x0}) map_shadow_stack(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x5, 0xeea07f4, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffdfd, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) 980.78842ms ago: executing program 1 (id=267): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca357}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_INIT(r2, 0x0, 0x600) (fail_nth: 3) 980.621168ms ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @generic={0x0, 0x2}, @window={0x3, 0x3}, @fastopen={0x22, 0x4, "97d7"}]}}}}}}}}, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 660.922109ms ago: executing program 0 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x300, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 579.095042ms ago: executing program 0 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r2, @local}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x2, {0x1, [{0x1, 0x59}]}}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0xd4, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8}, [@IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}]}, @IFLA_IFALIASn={0x4}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000084) 0s ago: executing program 4 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x19, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 38.143843][ T39] audit: type=1400 audit(1735849060.849:81): avc: denied { rlimitinh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.149776][ T39] audit: type=1400 audit(1735849060.849:82): avc: denied { siginh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.694684][ T39] audit: type=1400 audit(1735849062.419:83): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.701641][ T39] audit: type=1400 audit(1735849062.419:84): avc: denied { append } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.708155][ T39] audit: type=1400 audit(1735849062.419:85): avc: denied { open } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.715046][ T39] audit: type=1400 audit(1735849062.419:86): avc: denied { getattr } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:25905' (ED25519) to the list of known hosts. [ 40.262528][ T39] audit: type=1400 audit(1735849062.989:87): avc: denied { name_bind } for pid=5921 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.935959][ T5923] cgroup: Unknown subsys name 'net' [ 42.081917][ T5923] cgroup: Unknown subsys name 'cpuset' [ 42.085315][ T5923] cgroup: Unknown subsys name 'rlimit' [ 42.253348][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.848888][ T5923] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.264468][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 45.264479][ T39] audit: type=1400 audit(1735849067.989:105): avc: denied { execmem } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.407956][ T39] audit: type=1400 audit(1735849068.129:106): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.414691][ T39] audit: type=1400 audit(1735849068.129:107): avc: denied { read write } for pid=5935 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.422430][ T39] audit: type=1400 audit(1735849068.129:108): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.429556][ T39] audit: type=1400 audit(1735849068.139:109): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[1599]" dev="sockfs" ino=1599 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.461909][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.463505][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.464621][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.467418][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.468858][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.471386][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.472979][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.473399][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.474528][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.474574][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.475529][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.475635][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.475772][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.475974][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.476081][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.477850][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.480619][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.481379][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.483217][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.485218][ T39] audit: type=1400 audit(1735849068.209:110): avc: denied { read } for pid=5936 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.487327][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.489116][ T39] audit: type=1400 audit(1735849068.209:111): avc: denied { open } for pid=5936 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.491287][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.499023][ T39] audit: type=1400 audit(1735849068.209:112): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.499827][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.536072][ T68] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.538569][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.579179][ T39] audit: type=1400 audit(1735849068.299:113): avc: denied { module_request } for pid=5936 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.622172][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 45.661116][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 45.716608][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 45.749014][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.752103][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.754387][ T5936] bridge_slave_0: entered allmulticast mode [ 45.756637][ T5936] bridge_slave_0: entered promiscuous mode [ 45.761961][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.764733][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.767651][ T5936] bridge_slave_1: entered allmulticast mode [ 45.772130][ T5936] bridge_slave_1: entered promiscuous mode [ 45.821461][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.823601][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.825695][ T5939] bridge_slave_0: entered allmulticast mode [ 45.827877][ T5939] bridge_slave_0: entered promiscuous mode [ 45.833496][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.835710][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.837836][ T5939] bridge_slave_1: entered allmulticast mode [ 45.840146][ T5939] bridge_slave_1: entered promiscuous mode [ 45.858233][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.865193][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.922491][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.931096][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.933936][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.936510][ T5944] bridge_slave_0: entered allmulticast mode [ 45.939386][ T5944] bridge_slave_0: entered promiscuous mode [ 45.943174][ T5936] team0: Port device team_slave_0 added [ 45.946252][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.972157][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.974632][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.976821][ T5944] bridge_slave_1: entered allmulticast mode [ 45.979190][ T5944] bridge_slave_1: entered promiscuous mode [ 45.983094][ T5936] team0: Port device team_slave_1 added [ 46.011111][ T5939] team0: Port device team_slave_0 added [ 46.031378][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.034650][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.037293][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.046345][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.053132][ T5939] team0: Port device team_slave_1 added [ 46.070186][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.073860][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.076425][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.085966][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.090958][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 46.104108][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.106229][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.114165][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.148298][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.151301][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.159231][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.167112][ T5944] team0: Port device team_slave_0 added [ 46.174399][ T5944] team0: Port device team_slave_1 added [ 46.194350][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.196511][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.204119][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.236966][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.239170][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.246610][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.286056][ T5936] hsr_slave_0: entered promiscuous mode [ 46.288346][ T5936] hsr_slave_1: entered promiscuous mode [ 46.293561][ T5939] hsr_slave_0: entered promiscuous mode [ 46.295645][ T5939] hsr_slave_1: entered promiscuous mode [ 46.297638][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.300242][ T5939] Cannot create hsr debugfs directory [ 46.311782][ T5944] hsr_slave_0: entered promiscuous mode [ 46.313900][ T5944] hsr_slave_1: entered promiscuous mode [ 46.315880][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.318159][ T5944] Cannot create hsr debugfs directory [ 46.373380][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.375609][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.377743][ T5935] bridge_slave_0: entered allmulticast mode [ 46.380202][ T5935] bridge_slave_0: entered promiscuous mode [ 46.416212][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.418371][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.421273][ T5935] bridge_slave_1: entered allmulticast mode [ 46.423551][ T5935] bridge_slave_1: entered promiscuous mode [ 46.463245][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.466925][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.540657][ T5935] team0: Port device team_slave_0 added [ 46.545090][ T5935] team0: Port device team_slave_1 added [ 46.571702][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.573758][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.581409][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.589665][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.591758][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.599626][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.628244][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.632502][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.647764][ T5935] hsr_slave_0: entered promiscuous mode [ 46.650935][ T5935] hsr_slave_1: entered promiscuous mode [ 46.653072][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.655465][ T5935] Cannot create hsr debugfs directory [ 46.657370][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.664447][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.721551][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.727924][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.731505][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.736173][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.784885][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.791352][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.796330][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.800663][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.836825][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.840922][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.848393][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.852936][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.893625][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.903915][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.921464][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.933644][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.935898][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.940842][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.945055][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.947304][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.957447][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.960705][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.962792][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.966523][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.971333][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.973444][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.988372][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.996425][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.012697][ T5944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.015830][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.021785][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.023917][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.028564][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.031044][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.035366][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.038613][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.043487][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.045606][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.079816][ T39] audit: type=1400 audit(1735849069.799:114): avc: denied { sys_module } for pid=5944 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.131690][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.155470][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.166626][ T5944] veth0_vlan: entered promiscuous mode [ 47.175559][ T5944] veth1_vlan: entered promiscuous mode [ 47.185011][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.198124][ T5936] veth0_vlan: entered promiscuous mode [ 47.205015][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.208230][ T5936] veth1_vlan: entered promiscuous mode [ 47.216624][ T5944] veth0_macvtap: entered promiscuous mode [ 47.229228][ T5944] veth1_macvtap: entered promiscuous mode [ 47.238667][ T5936] veth0_macvtap: entered promiscuous mode [ 47.248911][ T5935] veth0_vlan: entered promiscuous mode [ 47.254205][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.256850][ T5936] veth1_macvtap: entered promiscuous mode [ 47.262357][ T5935] veth1_vlan: entered promiscuous mode [ 47.267700][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.282413][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.285059][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.287521][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.290736][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.295986][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.299533][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.302958][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.312837][ T5939] veth0_vlan: entered promiscuous mode [ 47.315672][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.318823][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.323241][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.329597][ T5935] veth0_macvtap: entered promiscuous mode [ 47.332646][ T5936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.335285][ T5936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.337757][ T5936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.340492][ T5936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.349363][ T5935] veth1_macvtap: entered promiscuous mode [ 47.352644][ T5939] veth1_vlan: entered promiscuous mode [ 47.364661][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.368269][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.373645][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.376825][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.381281][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.396029][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.399968][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.402910][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.406193][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.410035][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.424557][ T5935] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.427207][ T5935] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.429882][ T5935] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.432460][ T5935] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.437088][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.441587][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.458286][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.461418][ T5939] veth0_macvtap: entered promiscuous mode [ 47.461616][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.473606][ T5939] veth1_macvtap: entered promiscuous mode [ 47.486252][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.488641][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.501786][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.505307][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.508759][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.513334][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.516197][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.520218][ T5292] Bluetooth: hci3: command tx timeout [ 47.520227][ T68] Bluetooth: hci2: command tx timeout [ 47.520795][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.521637][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.528606][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.531530][ T68] Bluetooth: hci1: command tx timeout [ 47.533841][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.535703][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.537134][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.537145][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.537942][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.548132][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.551444][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.554834][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.557792][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.562217][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.571017][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.571013][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.571052][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.582535][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.585051][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.599751][ T68] Bluetooth: hci0: command tx timeout [ 47.607679][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.611280][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.653491][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.656441][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.674535][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.677704][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.842009][ T6027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.844322][ T6027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.850040][ T6027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.853077][ T6027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 48.855358][ T6027] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.858173][ T6027] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.861522][ T6027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 48.863854][ T6027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.866224][ T6027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.869486][ T6027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.871764][ T6027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.875006][ T6027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.942066][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.235981][ T6049] kvm: emulating exchange as write [ 50.188310][ T6054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.190397][ T6054] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.192851][ T6054] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.194715][ T6054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.198269][ T6056] dccp_close: ABORT with 65467 bytes unread [ 50.310338][ T6059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.312532][ T6059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.314577][ T6059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.316585][ T6059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.347335][ T6071] dccp_close: ABORT with 65467 bytes unread [ 50.371303][ T6079] can0: slcan on ptm0. [ 50.377263][ T39] kauditd_printk_skb: 64 callbacks suppressed [ 50.377273][ T39] audit: type=1400 audit(1735849073.095:179): avc: denied { checkpoint_restore } for pid=6077 comm="syz.2.22" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.387388][ T39] audit: type=1400 audit(1735849073.095:180): avc: denied { read write } for pid=6077 comm="syz.2.22" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.397444][ T39] audit: type=1400 audit(1735849073.095:181): avc: denied { open } for pid=6077 comm="syz.2.22" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.406754][ T39] audit: type=1400 audit(1735849073.095:182): avc: denied { ioctl } for pid=6077 comm="syz.2.22" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.425400][ T6076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.429108][ T39] audit: type=1400 audit(1735849073.095:183): avc: denied { search } for pid=5652 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.437168][ T39] audit: type=1400 audit(1735849073.105:184): avc: denied { create } for pid=6081 comm="syz.1.24" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.440554][ T6076] kvm: pic: non byte read [ 50.448169][ T6076] kvm: pic: level sensitive irq not supported [ 50.450266][ T6076] kvm: pic: non byte read [ 50.450658][ T39] audit: type=1400 audit(1735849073.175:185): avc: denied { create } for pid=6087 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.453336][ T6076] kvm: pic: level sensitive irq not supported [ 50.459682][ T39] audit: type=1400 audit(1735849073.175:186): avc: denied { read } for pid=6088 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.460472][ T6076] kvm: pic: non byte read [ 50.461471][ T39] audit: type=1400 audit(1735849073.175:187): avc: denied { map } for pid=6087 comm="syz.3.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.461490][ T39] audit: type=1400 audit(1735849073.175:188): avc: denied { open } for pid=6088 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.619061][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.748675][ T6102] xt_hashlimit: size too large, truncated to 1048576 [ 50.799136][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 50.805230][ T58] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 50.807882][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.810312][ T58] usb 7-1: Product: syz [ 50.810715][ T6106] vlan2: entered allmulticast mode [ 50.811502][ T58] usb 7-1: Manufacturer: syz [ 50.813280][ T6106] bond0: entered allmulticast mode [ 50.814300][ T58] usb 7-1: SerialNumber: syz [ 50.815810][ T6106] bond_slave_0: entered allmulticast mode [ 50.819250][ T6106] bond_slave_1: entered allmulticast mode [ 50.821113][ T58] usb 7-1: config 0 descriptor?? [ 50.826005][ T58] usb 7-1: MBOX3: Invalid descriptor size=18. [ 50.826131][ T6106] bond0: left allmulticast mode [ 50.832814][ T6106] bond_slave_0: left allmulticast mode [ 50.835640][ T6106] bond_slave_1: left allmulticast mode [ 50.978340][ T6121] FAULT_INJECTION: forcing a failure. [ 50.978340][ T6121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.983021][ T6121] CPU: 3 UID: 0 PID: 6121 Comm: syz.0.34 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 50.986202][ T6121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.989404][ T6121] Call Trace: [ 50.990448][ T6121] [ 50.991556][ T6121] dump_stack_lvl+0x16c/0x1f0 [ 50.993396][ T6121] should_fail_ex+0x497/0x5b0 [ 50.994999][ T6121] _copy_from_user+0x2e/0xd0 [ 50.996811][ T6121] copy_msghdr_from_user+0x99/0x160 [ 50.998696][ T6121] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 51.000442][ T6121] ? __lock_acquire+0xcc5/0x3c40 [ 51.001915][ T6121] ___sys_sendmsg+0xff/0x1e0 [ 51.003320][ T6121] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.004833][ T6121] ? trace_lock_acquire+0x14e/0x1f0 [ 51.006410][ T6121] __sys_sendmmsg+0x201/0x420 [ 51.007837][ T6121] ? __pfx___sys_sendmmsg+0x10/0x10 [ 51.009370][ T6121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 51.011163][ T6121] ? fput+0x67/0x440 [ 51.012348][ T6121] ? ksys_write+0x1ba/0x250 [ 51.013699][ T6121] ? __pfx_ksys_write+0x10/0x10 [ 51.015160][ T6121] __x64_sys_sendmmsg+0x9c/0x100 [ 51.016648][ T6121] ? lockdep_hardirqs_on+0x7c/0x110 [ 51.018215][ T6121] do_syscall_64+0xcd/0x250 [ 51.019583][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.021328][ T6121] RIP: 0033:0x7fbc73385d29 [ 51.022670][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.028375][ T6121] RSP: 002b:00007fbc74104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.030846][ T6121] RAX: ffffffffffffffda RBX: 00007fbc73575fa0 RCX: 00007fbc73385d29 [ 51.033196][ T6121] RDX: 0000000000000001 RSI: 0000000020006080 RDI: 0000000000000004 [ 51.034657][ T1493] usb 7-1: USB disconnect, device number 2 [ 51.035505][ T6121] RBP: 00007fbc74104090 R08: 0000000000000000 R09: 0000000000000000 [ 51.035514][ T6121] R10: 0000000004004090 R11: 0000000000000246 R12: 0000000000000001 [ 51.035520][ T6121] R13: 0000000000000000 R14: 00007fbc73575fa0 R15: 00007ffcb1297178 [ 51.035532][ T6121] [ 51.120938][ T6125] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.130282][ T6077] can0 (unregistered): slcan off ptm0. [ 51.584140][ T6149] pimreg: entered allmulticast mode [ 51.587385][ T6148] pimreg: left allmulticast mode [ 51.692688][ T6154] lo: entered allmulticast mode [ 51.697904][ T6154] pimreg: entered allmulticast mode [ 51.701511][ T6156] lo: entered allmulticast mode [ 51.706233][ T6156] pimreg: entered allmulticast mode [ 51.708613][ T6154] lo: left allmulticast mode [ 51.711270][ T6153] pimreg: left allmulticast mode [ 51.720778][ T6156] lo: left allmulticast mode [ 51.722624][ T6155] pimreg: left allmulticast mode [ 52.319611][ T5949] Bluetooth: hci2: command 0x040f tx timeout [ 52.319671][ T5946] Bluetooth: hci1: command 0x040f tx timeout [ 52.319682][ T5942] Bluetooth: hci0: command 0x040f tx timeout [ 52.321964][ T5292] Bluetooth: hci3: command 0x040f tx timeout [ 52.355839][ T6176] FAULT_INJECTION: forcing a failure. [ 52.355839][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.359762][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.1.49 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 52.362765][ T6176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.365886][ T6176] Call Trace: [ 52.366884][ T6176] [ 52.367751][ T6176] dump_stack_lvl+0x16c/0x1f0 [ 52.369154][ T6176] should_fail_ex+0x497/0x5b0 [ 52.370531][ T6176] _copy_to_iter+0x2a1/0x1560 [ 52.371888][ T6176] ? trace_lock_acquire+0x14e/0x1f0 [ 52.373419][ T6176] ? __pfx__copy_to_iter+0x10/0x10 [ 52.374985][ T6176] ? __virt_addr_valid+0x1a4/0x590 [ 52.376496][ T6176] ? __virt_addr_valid+0x5e/0x590 [ 52.377969][ T6176] ? __phys_addr_symbol+0x30/0x80 [ 52.379465][ T6176] ? __check_object_size+0x488/0x710 [ 52.381011][ T6176] udp_recvmsg+0xbf6/0x1380 [ 52.382350][ T6176] ? __pfx_udp_recvmsg+0x10/0x10 [ 52.383791][ T6176] ? __pfx_sock_has_perm+0x10/0x10 [ 52.385785][ T6176] ? __fget_files+0x1fc/0x3a0 [ 52.387722][ T6176] ? __pfx_lock_release+0x10/0x10 [ 52.389803][ T6176] ? __pfx_udp_recvmsg+0x10/0x10 [ 52.391840][ T6176] inet_recvmsg+0x43e/0x6a0 [ 52.393644][ T6176] ? lock_acquire+0x2f/0xb0 [ 52.395089][ T6176] ? __pfx_inet_recvmsg+0x10/0x10 [ 52.396560][ T6176] sock_recvmsg+0x1b2/0x250 [ 52.397910][ T6176] __sys_recvfrom+0x204/0x310 [ 52.399317][ T6176] ? __pfx___sys_recvfrom+0x10/0x10 [ 52.400866][ T6176] ? ksys_write+0x1ba/0x250 [ 52.402192][ T6176] ? __pfx_ksys_write+0x10/0x10 [ 52.403646][ T6176] __x64_sys_recvfrom+0xe0/0x1c0 [ 52.405441][ T6176] ? do_syscall_64+0x91/0x250 [ 52.406835][ T6176] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.408382][ T6176] do_syscall_64+0xcd/0x250 [ 52.409697][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.411412][ T6176] RIP: 0033:0x7fcfda985d29 [ 52.412725][ T6176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.418391][ T6176] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 52.420765][ T6176] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 52.423040][ T6176] RDX: 000000000000000a RSI: 0000000020000100 RDI: 0000000000000003 [ 52.425673][ T6176] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 52.428747][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.431881][ T6176] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 52.434588][ T6176] [ 52.505681][ T6180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.51'. [ 52.704150][ T6186] hsr0: entered allmulticast mode [ 52.706146][ T6186] hsr_slave_0: entered allmulticast mode [ 52.708361][ T6186] hsr_slave_1: entered allmulticast mode [ 52.711866][ T6186] hsr_slave_0: left promiscuous mode [ 52.714259][ T6186] hsr_slave_1: left promiscuous mode [ 52.726696][ T6186] hsr0 (unregistering): left allmulticast mode [ 52.881801][ T6190] FAULT_INJECTION: forcing a failure. [ 52.881801][ T6190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.885948][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.2.55 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 52.889121][ T6190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.892369][ T6190] Call Trace: [ 52.893397][ T6190] [ 52.894264][ T6190] dump_stack_lvl+0x16c/0x1f0 [ 52.895693][ T6190] should_fail_ex+0x497/0x5b0 [ 52.897052][ T6190] _copy_from_user+0x2e/0xd0 [ 52.898484][ T6190] ip_mroute_setsockopt+0xf96/0x1440 [ 52.900123][ T6190] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 52.901807][ T6190] ? avc_has_perm_noaudit+0x119/0x3a0 [ 52.903513][ T6190] ? trace_lock_acquire+0x14e/0x1f0 [ 52.905043][ T6190] ? avc_has_perm_noaudit+0x143/0x3a0 [ 52.905766][ T6192] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 52.906572][ T6190] do_ip_setsockopt+0x2e8/0x3680 [ 52.909795][ T6190] ? __pfx_avc_has_perm+0x10/0x10 [ 52.911276][ T6190] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 52.912837][ T6190] ? hlock_class+0x4e/0x130 [ 52.914242][ T6190] ? sock_has_perm+0x25a/0x2f0 [ 52.915614][ T6190] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 52.917517][ T6190] ip_setsockopt+0x59/0xf0 [ 52.918862][ T6190] raw_setsockopt+0xb8/0x290 [ 52.920266][ T6190] ? __pfx_raw_setsockopt+0x10/0x10 [ 52.921821][ T6190] ? selinux_socket_setsockopt+0x6a/0x80 [ 52.923514][ T6190] ? sock_common_setsockopt+0x2e/0xf0 [ 52.925075][ T6190] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 52.926813][ T6190] do_sock_setsockopt+0x222/0x480 [ 52.928273][ T6190] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 52.930040][ T6190] ? lock_acquire+0x2f/0xb0 [ 52.931401][ T6190] __sys_setsockopt+0x1a0/0x230 [ 52.932847][ T6190] __x64_sys_setsockopt+0xbd/0x160 [ 52.934307][ T6190] ? do_syscall_64+0x91/0x250 [ 52.935702][ T6190] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.937209][ T6190] do_syscall_64+0xcd/0x250 [ 52.938529][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.940259][ T6190] RIP: 0033:0x7f2650785d29 [ 52.941569][ T6190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.947144][ T6190] RSP: 002b:00007f26515e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.949532][ T6190] RAX: ffffffffffffffda RBX: 00007f2650975fa0 RCX: 00007f2650785d29 [ 52.951821][ T6190] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000005 [ 52.954080][ T6190] RBP: 00007f26515e1090 R08: 0000000000000010 R09: 0000000000000000 [ 52.956439][ T6190] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 52.958746][ T6190] R13: 0000000000000000 R14: 00007f2650975fa0 R15: 00007ffe95e3d248 [ 52.961227][ T6190] [ 52.965776][ T6190] hsr_slave_0: left promiscuous mode [ 52.968067][ T6190] hsr_slave_1: left promiscuous mode [ 52.982228][ T6192] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.052608][ T6197] hsr_slave_0: left promiscuous mode [ 53.054655][ T6197] hsr_slave_1: left promiscuous mode [ 53.214914][ T6208] FAULT_INJECTION: forcing a failure. [ 53.214914][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.219099][ T6208] CPU: 2 UID: 0 PID: 6208 Comm: syz.3.61 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 53.222173][ T6208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.225290][ T6208] Call Trace: [ 53.226286][ T6208] [ 53.227155][ T6208] dump_stack_lvl+0x16c/0x1f0 [ 53.228583][ T6208] should_fail_ex+0x497/0x5b0 [ 53.230005][ T6208] _copy_to_user+0x32/0xd0 [ 53.231326][ T6208] simple_read_from_buffer+0xd0/0x160 [ 53.232899][ T6208] proc_fail_nth_read+0x198/0x270 [ 53.234411][ T6208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.236045][ T6208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.237699][ T6208] vfs_read+0x1df/0xbe0 [ 53.238936][ T6208] ? __fget_files+0x1fc/0x3a0 [ 53.240369][ T6208] ? __pfx___mutex_lock+0x10/0x10 [ 53.241890][ T6208] ? __pfx_vfs_read+0x10/0x10 [ 53.243321][ T6208] ? __fget_files+0x206/0x3a0 [ 53.244735][ T6208] ksys_read+0x12b/0x250 [ 53.246008][ T6208] ? __pfx_ksys_read+0x10/0x10 [ 53.247438][ T6208] do_syscall_64+0xcd/0x250 [ 53.248786][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.250519][ T6208] RIP: 0033:0x7f49abd8473c [ 53.251916][ T6208] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.257543][ T6208] RSP: 002b:00007f49acbfa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.260086][ T6208] RAX: ffffffffffffffda RBX: 00007f49abf75fa0 RCX: 00007f49abd8473c [ 53.262442][ T6208] RDX: 000000000000000f RSI: 00007f49acbfa0a0 RDI: 0000000000000003 [ 53.264813][ T6208] RBP: 00007f49acbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 53.267171][ T6208] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 53.269526][ T6208] R13: 0000000000000000 R14: 00007f49abf75fa0 R15: 00007ffc81f24e48 [ 53.271904][ T6208] [ 53.413842][ T6219] FAULT_INJECTION: forcing a failure. [ 53.413842][ T6219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.418038][ T6219] CPU: 2 UID: 0 PID: 6219 Comm: syz.1.63 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 53.421501][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.425026][ T6219] Call Trace: [ 53.426134][ T6219] [ 53.427153][ T6219] dump_stack_lvl+0x16c/0x1f0 [ 53.428747][ T6219] should_fail_ex+0x497/0x5b0 [ 53.430306][ T6219] _copy_to_user+0x32/0xd0 [ 53.431859][ T6219] simple_read_from_buffer+0xd0/0x160 [ 53.433612][ T6219] proc_fail_nth_read+0x198/0x270 [ 53.435324][ T6219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.437149][ T6219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 53.438958][ T6219] vfs_read+0x1df/0xbe0 [ 53.440363][ T6219] ? __fget_files+0x1fc/0x3a0 [ 53.441947][ T6219] ? __pfx___mutex_lock+0x10/0x10 [ 53.443624][ T6219] ? __pfx_vfs_read+0x10/0x10 [ 53.445203][ T6219] ? __fget_files+0x206/0x3a0 [ 53.446826][ T6219] ksys_read+0x12b/0x250 [ 53.448254][ T6219] ? __pfx_ksys_read+0x10/0x10 [ 53.449867][ T6219] do_syscall_64+0xcd/0x250 [ 53.451368][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.453326][ T6219] RIP: 0033:0x7fcfda98473c [ 53.454814][ T6219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.461131][ T6219] RSP: 002b:00007fcfdb856030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.463846][ T6219] RAX: ffffffffffffffda RBX: 00007fcfdab76080 RCX: 00007fcfda98473c [ 53.464671][ T6212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.466451][ T6219] RDX: 000000000000000f RSI: 00007fcfdb8560a0 RDI: 0000000000000004 [ 53.466473][ T6219] RBP: 00007fcfdb856090 R08: 0000000000000000 R09: 0000000000000000 [ 53.466482][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.468439][ T6212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.470870][ T6219] R13: 0000000000000000 R14: 00007fcfdab76080 R15: 00007ffd428996c8 [ 53.470891][ T6219] [ 53.483890][ T6212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.484719][ T6220] batadv0: entered promiscuous mode [ 53.485950][ T6212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.489636][ T6220] team0: entered promiscuous mode [ 53.493767][ T6220] team_slave_0: entered promiscuous mode [ 53.496735][ T6220] team_slave_1: entered promiscuous mode [ 53.502886][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.506076][ T6220] Cannot create hsr debugfs directory [ 53.507800][ T6220] hsr0: entered promiscuous mode [ 53.509612][ T6220] hsr0: entered allmulticast mode [ 53.511513][ T6220] batadv0: entered allmulticast mode [ 53.513753][ T6220] team0: entered allmulticast mode [ 53.515900][ T6220] team_slave_0: entered allmulticast mode [ 53.518338][ T6220] team_slave_1: entered allmulticast mode [ 53.525156][ T6222] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.528188][ T6222] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.535721][ T6222] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.539207][ T6227] FAULT_INJECTION: forcing a failure. [ 53.539207][ T6227] name failslab, interval 1, probability 0, space 0, times 1 [ 53.539301][ T6227] CPU: 1 UID: 0 PID: 6227 Comm: syz.2.67 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 53.544642][ T6222] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 53.546453][ T6227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.546463][ T6227] Call Trace: [ 53.546467][ T6227] [ 53.546472][ T6227] dump_stack_lvl+0x16c/0x1f0 [ 53.546491][ T6227] should_fail_ex+0x497/0x5b0 [ 53.546511][ T6227] ? fs_reclaim_acquire+0xae/0x150 [ 53.553122][ T6222] geneve2: entered promiscuous mode [ 53.554085][ T6227] should_failslab+0xc2/0x120 [ 53.554103][ T6227] __kmalloc_noprof+0xcb/0x510 [ 53.554115][ T6227] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 53.554129][ T6227] tomoyo_realpath_from_path+0xb9/0x720 [ 53.555343][ T6222] geneve2: entered allmulticast mode [ 53.556706][ T6227] ? tomoyo_path_number_perm+0x235/0x590 [ 53.556720][ T6227] ? tomoyo_path_number_perm+0x235/0x590 [ 53.556732][ T6227] tomoyo_path_number_perm+0x248/0x590 [ 53.556741][ T6227] ? tomoyo_path_number_perm+0x235/0x590 [ 53.556753][ T6227] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 53.579913][ T6227] ? __pfx_lock_release+0x10/0x10 [ 53.582031][ T6227] ? trace_lock_acquire+0x14e/0x1f0 [ 53.584218][ T6227] ? lock_acquire+0x2f/0xb0 [ 53.585697][ T6227] ? __fget_files+0x40/0x3a0 [ 53.587133][ T6227] ? __fget_files+0x206/0x3a0 [ 53.588574][ T6227] security_file_ioctl+0x9b/0x240 [ 53.590146][ T6227] __x64_sys_ioctl+0xb7/0x200 [ 53.591576][ T6227] do_syscall_64+0xcd/0x250 [ 53.592956][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.594782][ T6227] RIP: 0033:0x7f2650785d29 [ 53.596122][ T6227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.601827][ T6227] RSP: 002b:00007f26515e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.604264][ T6227] RAX: ffffffffffffffda RBX: 00007f2650975fa0 RCX: 00007f2650785d29 [ 53.606755][ T6227] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 53.609066][ T6227] RBP: 00007f26515e1090 R08: 0000000000000000 R09: 0000000000000000 [ 53.611362][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.613639][ T6227] R13: 0000000000000000 R14: 00007f2650975fa0 R15: 00007ffe95e3d248 [ 53.615995][ T6227] [ 53.621515][ T6227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.659432][ T6236] dccp_close: ABORT with 65467 bytes unread [ 53.727418][ T6244] lo: entered allmulticast mode [ 53.755628][ T6244] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.74' resets device [ 53.765323][ T6244] pimreg: entered allmulticast mode [ 53.770368][ T6244] lo: left allmulticast mode [ 53.774883][ T6243] pimreg: left allmulticast mode [ 53.881172][ T6251] FAULT_INJECTION: forcing a failure. [ 53.881172][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.885920][ T6251] CPU: 3 UID: 0 PID: 6251 Comm: syz.0.79 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 53.889480][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.893172][ T6251] Call Trace: [ 53.894228][ T6251] [ 53.895142][ T6251] dump_stack_lvl+0x16c/0x1f0 [ 53.896537][ T6251] should_fail_ex+0x497/0x5b0 [ 53.897940][ T6251] _copy_from_iter+0x2a1/0x1560 [ 53.899603][ T6251] ? __pfx__copy_from_iter+0x10/0x10 [ 53.901681][ T6251] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 53.903789][ T6251] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 53.906105][ T6251] ? __pfx_lock_release+0x10/0x10 [ 53.908143][ T6251] ? trace_lock_acquire+0x14e/0x1f0 [ 53.910250][ T6251] ? __pfx_lock_release+0x10/0x10 [ 53.912327][ T6251] copy_page_from_iter+0xa5/0x120 [ 53.914424][ T6251] tun_build_skb.constprop.0+0x294/0x1120 [ 53.916770][ T6251] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 53.919347][ T6251] ? __pfx___lock_acquire+0x10/0x10 [ 53.921457][ T6251] ? register_lock_class+0xb1/0x1240 [ 53.923675][ T6251] ? __lock_acquire+0xcc5/0x3c40 [ 53.925785][ T6251] tun_get_user+0x870/0x3e50 [ 53.927780][ T6251] ? find_held_lock+0x2d/0x110 [ 53.929884][ T6251] ? __pfx_tun_get_user+0x10/0x10 [ 53.931957][ T6251] ? find_held_lock+0x2d/0x110 [ 53.933864][ T6251] ? __pfx_lock_release+0x10/0x10 [ 53.935984][ T6251] tun_chr_write_iter+0xdc/0x210 [ 53.938137][ T6251] vfs_write+0x5ae/0x1150 [ 53.939996][ T6251] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 53.942303][ T6251] ? __pfx_vfs_write+0x10/0x10 [ 53.944363][ T6251] ? __fget_files+0x40/0x3a0 [ 53.946316][ T6251] ksys_write+0x12b/0x250 [ 53.948075][ T6251] ? __pfx_ksys_write+0x10/0x10 [ 53.950086][ T6251] do_syscall_64+0xcd/0x250 [ 53.951906][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.954109][ T6251] RIP: 0033:0x7fbc733847df [ 53.955549][ T6251] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 53.961465][ T6251] RSP: 002b:00007fbc74104000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 53.964836][ T6251] RAX: ffffffffffffffda RBX: 00007fbc73575fa0 RCX: 00007fbc733847df [ 53.968113][ T6251] RDX: 000000000000006e RSI: 0000000020001fc0 RDI: 00000000000000c8 [ 53.971316][ T6251] RBP: 00007fbc74104090 R08: 0000000000000000 R09: 0000000000000000 [ 53.974496][ T6251] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 53.977781][ T6251] R13: 0000000000000001 R14: 00007fbc73575fa0 R15: 00007ffcb1297178 [ 53.980936][ T6251] [ 54.084948][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 54.096158][ T6260] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 54.103764][ T6260] syzkaller0: entered promiscuous mode [ 54.105972][ T6260] syzkaller0: entered allmulticast mode [ 54.153624][ T6264] FAULT_INJECTION: forcing a failure. [ 54.153624][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 54.158541][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.1.82 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 54.162477][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.166560][ T6264] Call Trace: [ 54.167814][ T6264] [ 54.168956][ T6264] dump_stack_lvl+0x16c/0x1f0 [ 54.170710][ T6264] should_fail_ex+0x497/0x5b0 [ 54.172130][ T6264] ? fs_reclaim_acquire+0xae/0x150 [ 54.173674][ T6264] should_failslab+0xc2/0x120 [ 54.175119][ T6264] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 54.176698][ T6264] ? getname_flags.part.0+0x4c/0x550 [ 54.178262][ T6264] getname_flags.part.0+0x4c/0x550 [ 54.179786][ T6264] getname_flags+0x93/0xf0 [ 54.181081][ T6264] user_path_at+0x24/0x60 [ 54.182339][ T6264] bpf_obj_get_user+0xaf/0x490 [ 54.183753][ T6264] ? __pfx_bpf_obj_get_user+0x10/0x10 [ 54.185361][ T6264] ? selinux_bpf+0xee/0x130 [ 54.186715][ T6264] __sys_bpf+0x2130/0x49c0 [ 54.188069][ T6264] ? __pfx_lock_release+0x10/0x10 [ 54.189559][ T6264] ? __pfx___sys_bpf+0x10/0x10 [ 54.190950][ T6264] ? vfs_write+0x306/0x1150 [ 54.192231][ T6264] ? __mutex_unlock_slowpath+0x164/0x690 [ 54.193820][ T6264] ? fput+0x67/0x440 [ 54.194974][ T6264] ? ksys_write+0x1ba/0x250 [ 54.196377][ T6264] ? __pfx_ksys_write+0x10/0x10 [ 54.197866][ T6264] __x64_sys_bpf+0x78/0xc0 [ 54.199251][ T6264] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.200774][ T6264] do_syscall_64+0xcd/0x250 [ 54.202114][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.203887][ T6264] RIP: 0033:0x7fcfda985d29 [ 54.205241][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.210865][ T6264] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.213292][ T6264] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 54.215617][ T6264] RDX: 0000000000000018 RSI: 00000000200000c0 RDI: 0000000000000007 [ 54.217943][ T6264] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 54.220227][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.222446][ T6264] R13: 0000000000000001 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 54.224737][ T6264] [ 54.463497][ T6285] o2cb: This node has not been configured. [ 54.465575][ T6285] o2cb: Cluster check failed. Fix errors before retrying. [ 54.467701][ T6285] (syz.0.85,6285,0):user_dlm_register:674 ERROR: status = -22 [ 54.469943][ T6285] (syz.0.85,6285,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 54.716479][ T6293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.776807][ T6294] Zero length message leads to an empty skb [ 54.780960][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 55.023329][ T6274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.84'. [ 55.029877][ T6292] netlink: 45 bytes leftover after parsing attributes in process `syz.3.88'. [ 55.038820][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.041759][ T6293] bond0: (slave bond1): Enslaving as an active interface with an up link [ 55.079431][ T6304] binder: 6302:6304 ioctl 5316 20000000 returned -22 [ 55.085441][ T5292] Bluetooth: hci3: unexpected event for opcode 0x041b [ 55.123960][ T6313] syz.1.94: attempt to access beyond end of device [ 55.123960][ T6313] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 55.128272][ T6313] efs: cannot read volume header [ 55.444506][ T5292] Bluetooth: hci0: command 0x040f tx timeout [ 55.450724][ T6335] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 55.452691][ T6335] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 55.494948][ T1470] IPVS: starting estimator thread 0... [ 55.496546][ T39] kauditd_printk_skb: 90 callbacks suppressed [ 55.496556][ T39] audit: type=1400 audit(1735849078.215:279): avc: denied { sys_module } for pid=6347 comm="syz.1.102" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.519127][ T5292] Bluetooth: hci2: command 0x040f tx timeout [ 55.521054][ T5292] Bluetooth: hci1: command 0x040f tx timeout [ 55.523464][ T6335] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 55.525519][ T6335] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 55.575206][ T39] audit: type=1400 audit(1735849078.295:280): avc: denied { setopt } for pid=6362 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.592563][ T6351] IPVS: using max 39 ests per chain, 93600 per kthread [ 55.605568][ T39] audit: type=1400 audit(1735849078.325:281): avc: denied { unlink } for pid=6365 comm="syz.2.105" name="#1" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 55.620073][ T39] audit: type=1400 audit(1735849078.325:282): avc: denied { mount } for pid=6365 comm="syz.2.105" name="/" dev="overlay" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.641560][ T6371] mkiss: ax0: crc mode is auto. [ 55.665203][ T6375] mkiss: ax0: crc mode is auto. [ 55.716642][ T6380] FAULT_INJECTION: forcing a failure. [ 55.716642][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.721348][ T6380] CPU: 3 UID: 0 PID: 6380 Comm: syz.1.108 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 55.725022][ T6380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.728102][ T6380] Call Trace: [ 55.729081][ T6380] [ 55.730002][ T6380] dump_stack_lvl+0x16c/0x1f0 [ 55.731433][ T6380] should_fail_ex+0x497/0x5b0 [ 55.732846][ T6380] _copy_from_user+0x2e/0xd0 [ 55.734281][ T6380] memdup_user+0x71/0xd0 [ 55.735612][ T6380] strndup_user+0x78/0xe0 [ 55.736900][ T6380] __x64_sys_mount+0x138/0x320 [ 55.738362][ T6380] ? __pfx___x64_sys_mount+0x10/0x10 [ 55.739962][ T6380] do_syscall_64+0xcd/0x250 [ 55.741340][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.743123][ T6380] RIP: 0033:0x7fcfda985d29 [ 55.744513][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.750265][ T6380] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.752792][ T6380] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 55.755195][ T6380] RDX: 0000000020000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 55.757589][ T6380] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 55.759930][ T6380] R10: 0000000000000483 R11: 0000000000000246 R12: 0000000000000001 [ 55.762267][ T6380] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 55.764692][ T6380] [ 55.810276][ T39] audit: type=1400 audit(1735849078.535:283): avc: denied { write } for pid=6388 comm="syz.1.110" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.811956][ T6389] tipc: Started in network mode [ 55.819719][ T6389] tipc: Node identity 7f000001, cluster identity 4711 [ 55.823029][ T6389] tipc: Enabled bearer , priority 10 [ 55.831685][ T6389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.835336][ T39] audit: type=1400 audit(1735849078.545:284): avc: denied { mount } for pid=6388 comm="syz.1.110" name="/" dev="ramfs" ino=13352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.861713][ T39] audit: type=1400 audit(1735849078.585:285): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.900086][ T6394] FAULT_INJECTION: forcing a failure. [ 55.900086][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 55.904497][ T6394] CPU: 3 UID: 0 PID: 6394 Comm: syz.1.111 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 55.907582][ T6394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.910734][ T6394] Call Trace: [ 55.911736][ T6394] [ 55.912631][ T6394] dump_stack_lvl+0x16c/0x1f0 [ 55.914032][ T6394] should_fail_ex+0x497/0x5b0 [ 55.915519][ T6394] ? fs_reclaim_acquire+0xae/0x150 [ 55.917025][ T6394] should_failslab+0xc2/0x120 [ 55.918422][ T6394] __kmalloc_noprof+0xcb/0x510 [ 55.919865][ T6394] ? rcu_is_watching+0x12/0xc0 [ 55.921298][ T6394] tomoyo_encode2+0x100/0x3e0 [ 55.922717][ T6394] tomoyo_encode+0x29/0x50 [ 55.924058][ T6394] tomoyo_realpath_from_path+0x19d/0x720 [ 55.925785][ T6394] ? tomoyo_path_number_perm+0x235/0x590 [ 55.927472][ T6394] tomoyo_path_number_perm+0x248/0x590 [ 55.929045][ T6394] ? tomoyo_path_number_perm+0x235/0x590 [ 55.930719][ T6394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 55.932496][ T6394] ? __pfx_lock_release+0x10/0x10 [ 55.933994][ T6394] ? trace_lock_acquire+0x14e/0x1f0 [ 55.935600][ T6394] ? lock_acquire+0x2f/0xb0 [ 55.936912][ T6394] ? __fget_files+0x40/0x3a0 [ 55.938249][ T6394] ? __fget_files+0x206/0x3a0 [ 55.939657][ T6394] security_file_ioctl+0x9b/0x240 [ 55.941130][ T6394] __x64_sys_ioctl+0xb7/0x200 [ 55.942605][ T6394] do_syscall_64+0xcd/0x250 [ 55.943952][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.945744][ T6394] RIP: 0033:0x7fcfda985d29 [ 55.947058][ T6394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.952580][ T6394] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.955301][ T6394] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 55.957919][ T6394] RDX: 0000000000000000 RSI: 00000000000089e3 RDI: 0000000000000004 [ 55.960220][ T6394] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 55.962557][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.964851][ T6394] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 55.967152][ T6394] [ 55.974025][ T6394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.045764][ T39] audit: type=1400 audit(1735849078.765:286): avc: denied { write } for pid=6397 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.051602][ T39] audit: type=1400 audit(1735849078.765:287): avc: denied { create } for pid=6397 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.080987][ T6407] FAULT_INJECTION: forcing a failure. [ 56.080987][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 56.084715][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.1.115 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 56.087816][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.091433][ T6407] Call Trace: [ 56.092505][ T6407] [ 56.093359][ T6407] dump_stack_lvl+0x16c/0x1f0 [ 56.094706][ T6407] should_fail_ex+0x497/0x5b0 [ 56.096113][ T6407] ? fs_reclaim_acquire+0xae/0x150 [ 56.097646][ T6407] should_failslab+0xc2/0x120 [ 56.099043][ T6407] __kmalloc_noprof+0xcb/0x510 [ 56.100551][ T6407] ? d_absolute_path+0x137/0x1b0 [ 56.102094][ T6407] ? rcu_is_watching+0x12/0xc0 [ 56.103536][ T6407] tomoyo_encode2+0x100/0x3e0 [ 56.104959][ T6407] tomoyo_encode+0x29/0x50 [ 56.106292][ T6407] tomoyo_realpath_from_path+0x19d/0x720 [ 56.108013][ T6407] tomoyo_path_number_perm+0x248/0x590 [ 56.109640][ T6407] ? tomoyo_path_number_perm+0x235/0x590 [ 56.111316][ T6407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.113055][ T6407] ? __pfx_lock_release+0x10/0x10 [ 56.114501][ T6407] ? trace_lock_acquire+0x14e/0x1f0 [ 56.116019][ T6407] ? lock_acquire+0x2f/0xb0 [ 56.117344][ T6407] ? __fget_files+0x40/0x3a0 [ 56.118705][ T6407] ? __fget_files+0x206/0x3a0 [ 56.120102][ T6407] security_file_ioctl+0x9b/0x240 [ 56.121557][ T6407] __x64_sys_ioctl+0xb7/0x200 [ 56.122936][ T6407] do_syscall_64+0xcd/0x250 [ 56.124322][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.126056][ T6407] RIP: 0033:0x7fcfda985d29 [ 56.127376][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.132986][ T6407] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.135437][ T6407] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 56.137735][ T6407] RDX: 0000000000000000 RSI: 0000000080045520 RDI: 0000000000000003 [ 56.140114][ T6407] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 56.142441][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.144765][ T6407] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 56.147140][ T6407] [ 56.148160][ C0] vkms_vblank_simulate: vblank timer overrun [ 56.159123][ T6407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.166972][ T6335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.174741][ T6335] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 56.177460][ T6335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.179978][ T6335] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 56.193687][ T39] audit: type=1400 audit(1735849078.915:288): avc: denied { getopt } for pid=6414 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.221171][ T6417] can0: slcan on ptm0. [ 56.224848][ T6417] FAULT_INJECTION: forcing a failure. [ 56.224848][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 56.228522][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.0.118 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 56.231589][ T6417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.234654][ T6417] Call Trace: [ 56.235642][ T6417] [ 56.236515][ T6417] dump_stack_lvl+0x16c/0x1f0 [ 56.237965][ T6417] should_fail_ex+0x497/0x5b0 [ 56.239414][ T6417] ? fs_reclaim_acquire+0xae/0x150 [ 56.240944][ T6417] should_failslab+0xc2/0x120 [ 56.242363][ T6417] __kmalloc_noprof+0xcb/0x510 [ 56.243818][ T6417] ? d_absolute_path+0x137/0x1b0 [ 56.245317][ T6417] ? rcu_is_watching+0x12/0xc0 [ 56.246764][ T6417] tomoyo_encode2+0x100/0x3e0 [ 56.248189][ T6417] tomoyo_encode+0x29/0x50 [ 56.249536][ T6417] tomoyo_realpath_from_path+0x19d/0x720 [ 56.251234][ T6417] tomoyo_path_number_perm+0x248/0x590 [ 56.252835][ T6417] ? tomoyo_path_number_perm+0x235/0x590 [ 56.254527][ T6417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.256339][ T6417] ? __pfx_lock_release+0x10/0x10 [ 56.257874][ T6417] ? trace_lock_acquire+0x14e/0x1f0 [ 56.259424][ T6417] ? lock_acquire+0x2f/0xb0 [ 56.260800][ T6417] ? __fget_files+0x40/0x3a0 [ 56.262177][ T6417] ? __fget_files+0x206/0x3a0 [ 56.263630][ T6417] security_file_ioctl+0x9b/0x240 [ 56.265117][ T6417] __x64_sys_ioctl+0xb7/0x200 [ 56.266477][ T6417] do_syscall_64+0xcd/0x250 [ 56.267824][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.269571][ T6417] RIP: 0033:0x7fbc73385d29 [ 56.270886][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.276440][ T6417] RSP: 002b:00007fbc74104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.278834][ T6417] RAX: ffffffffffffffda RBX: 00007fbc73575fa0 RCX: 00007fbc73385d29 [ 56.281151][ T6417] RDX: 0000000000000000 RSI: 0000000000004b65 RDI: 0000000000000003 [ 56.283480][ T6417] RBP: 00007fbc74104090 R08: 0000000000000000 R09: 0000000000000000 [ 56.285747][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.288062][ T6417] R13: 0000000000000000 R14: 00007fbc73575fa0 R15: 00007ffcb1297178 [ 56.290413][ T6417] [ 56.291427][ C0] vkms_vblank_simulate: vblank timer overrun [ 56.294148][ T6417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.375515][ T6424] lo: entered allmulticast mode [ 56.385841][ T6424] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.120' resets device [ 56.389812][ T6416] can0 (unregistered): slcan off ptm0. [ 56.423179][ T6433] FAULT_INJECTION: forcing a failure. [ 56.423179][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 56.428639][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.1.122 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 56.432892][ T6433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.437094][ T6433] Call Trace: [ 56.438273][ T6433] [ 56.439145][ T6433] dump_stack_lvl+0x16c/0x1f0 [ 56.440733][ T6433] should_fail_ex+0x497/0x5b0 [ 56.442619][ T6433] ? fs_reclaim_acquire+0xae/0x150 [ 56.444710][ T6433] should_failslab+0xc2/0x120 [ 56.446597][ T6433] __kmalloc_cache_noprof+0x68/0x410 [ 56.448713][ T6433] ? bpf_cgroup_atype_find+0x93/0x290 [ 56.450816][ T6433] __cgroup_bpf_attach+0xf1b/0x17e0 [ 56.452950][ T6433] ? __pfx___cgroup_bpf_attach+0x10/0x10 [ 56.455217][ T6433] cgroup_bpf_prog_attach+0x10d/0x360 [ 56.457250][ T6433] __sys_bpf+0x376c/0x49c0 [ 56.459008][ T6433] ? __pfx_lock_release+0x10/0x10 [ 56.461042][ T6433] ? __pfx___sys_bpf+0x10/0x10 [ 56.462940][ T6433] ? vfs_write+0x306/0x1150 [ 56.464453][ T6433] ? __mutex_unlock_slowpath+0x164/0x690 [ 56.466611][ T6433] ? fput+0x67/0x440 [ 56.468237][ T6433] ? ksys_write+0x1ba/0x250 [ 56.470056][ T6433] ? __pfx_ksys_write+0x10/0x10 [ 56.471901][ T6433] __x64_sys_bpf+0x78/0xc0 [ 56.473707][ T6433] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.475821][ T6433] do_syscall_64+0xcd/0x250 [ 56.477661][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.480043][ T6433] RIP: 0033:0x7fcfda985d29 [ 56.481823][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.489788][ T6433] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.493221][ T6433] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 56.496420][ T6433] RDX: 0000000000000020 RSI: 00000000200002c0 RDI: 0000000000000008 [ 56.499720][ T6433] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 56.503176][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.506732][ T6433] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 56.509961][ T6433] [ 56.511342][ C0] vkms_vblank_simulate: vblank timer overrun [ 56.630742][ T6443] FAULT_INJECTION: forcing a failure. [ 56.630742][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 56.634513][ T6443] CPU: 2 UID: 0 PID: 6443 Comm: syz.3.126 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 56.637681][ T6443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.641007][ T6443] Call Trace: [ 56.642008][ T6443] [ 56.642902][ T6443] dump_stack_lvl+0x16c/0x1f0 [ 56.643698][ T6444] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 56.644376][ T6443] should_fail_ex+0x497/0x5b0 [ 56.648246][ T6443] ? fs_reclaim_acquire+0xae/0x150 [ 56.649810][ T6443] should_failslab+0xc2/0x120 [ 56.651269][ T6443] __kmalloc_noprof+0xcb/0x510 [ 56.652710][ T6443] ? __import_iovec+0x1f2/0x6d0 [ 56.654400][ T6443] sock_kmalloc+0x111/0x170 [ 56.656026][ T6443] ____sys_sendmsg+0x876/0xc90 [ 56.657873][ T6443] ? copy_msghdr_from_user+0x10b/0x160 [ 56.659478][ T6443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.661040][ T6443] ? __lock_acquire+0xcc5/0x3c40 [ 56.662547][ T6443] ___sys_sendmsg+0x135/0x1e0 [ 56.663975][ T6443] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.665625][ T6443] ? trace_lock_acquire+0x14e/0x1f0 [ 56.667200][ T6443] __sys_sendmmsg+0x201/0x420 [ 56.668631][ T6443] ? __pfx___sys_sendmmsg+0x10/0x10 [ 56.670333][ T6443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.672101][ T6443] ? fput+0x67/0x440 [ 56.673260][ T6443] ? ksys_write+0x1ba/0x250 [ 56.674594][ T6443] ? __pfx_ksys_write+0x10/0x10 [ 56.676152][ T6443] __x64_sys_sendmmsg+0x9c/0x100 [ 56.677637][ T6443] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.679207][ T6443] do_syscall_64+0xcd/0x250 [ 56.680788][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.682532][ T6443] RIP: 0033:0x7f49abd85d29 [ 56.683852][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.689520][ T6443] RSP: 002b:00007f49acbfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.691988][ T6443] RAX: ffffffffffffffda RBX: 00007f49abf75fa0 RCX: 00007f49abd85d29 [ 56.694278][ T6443] RDX: 0000000000000001 RSI: 0000000020006080 RDI: 0000000000000004 [ 56.696660][ T6443] RBP: 00007f49acbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 56.698959][ T6443] R10: 0000000004004090 R11: 0000000000000246 R12: 0000000000000001 [ 56.701324][ T6443] R13: 0000000000000000 R14: 00007f49abf75fa0 R15: 00007ffc81f24e48 [ 56.703601][ T6443] [ 56.706063][ T6446] FAULT_INJECTION: forcing a failure. [ 56.706063][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.711906][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.0.128 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 56.715184][ T6446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.718330][ T6446] Call Trace: [ 56.719333][ T6446] [ 56.720210][ T6446] dump_stack_lvl+0x16c/0x1f0 [ 56.721635][ T6446] should_fail_ex+0x497/0x5b0 [ 56.723094][ T6446] _copy_to_user+0x32/0xd0 [ 56.724438][ T6446] simple_read_from_buffer+0xd0/0x160 [ 56.726036][ T6446] proc_fail_nth_read+0x198/0x270 [ 56.727523][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.729133][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.730756][ T6446] vfs_read+0x1df/0xbe0 [ 56.732011][ T6446] ? __fget_files+0x1fc/0x3a0 [ 56.733457][ T6446] ? __pfx___mutex_lock+0x10/0x10 [ 56.734967][ T6446] ? __pfx_vfs_read+0x10/0x10 [ 56.736395][ T6446] ? __fget_files+0x206/0x3a0 [ 56.737803][ T6446] ksys_read+0x12b/0x250 [ 56.739292][ T6446] ? __pfx_ksys_read+0x10/0x10 [ 56.740844][ T6446] do_syscall_64+0xcd/0x250 [ 56.742220][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.744378][ T6446] RIP: 0033:0x7fbc7338473c [ 56.745896][ T6446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.751456][ T6446] RSP: 002b:00007fbc74104030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.754298][ T6446] RAX: ffffffffffffffda RBX: 00007fbc73575fa0 RCX: 00007fbc7338473c [ 56.756635][ T6446] RDX: 000000000000000f RSI: 00007fbc741040a0 RDI: 0000000000000005 [ 56.759192][ T6446] RBP: 00007fbc74104090 R08: 0000000000000000 R09: 0000000000000000 [ 56.760296][ T6450] block device autoloading is deprecated and will be removed. [ 56.761454][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.761463][ T6446] R13: 0000000000000000 R14: 00007fbc73575fa0 R15: 00007ffcb1297178 [ 56.761477][ T6446] [ 56.761576][ C0] vkms_vblank_simulate: vblank timer overrun [ 56.852331][ T64] tipc: Node number set to 2130706433 [ 56.891750][ T6467] lo: entered allmulticast mode [ 56.895609][ T6467] pimreg: entered allmulticast mode [ 56.897378][ T6465] tipc: Started in network mode [ 56.898886][ T6465] tipc: Node identity 0a9bec315b9, cluster identity 4711 [ 56.901571][ T6465] tipc: Enabled bearer , priority 0 [ 56.903565][ T6467] lo: left allmulticast mode [ 56.904677][ T6465] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 56.905275][ T6466] pimreg: left allmulticast mode [ 56.908347][ T6465] VFS: Can't find a romfs filesystem on dev nullb0. [ 56.908347][ T6465] [ 56.924389][ T6464] tipc: Resetting bearer [ 56.949254][ T6470] FAULT_INJECTION: forcing a failure. [ 56.949254][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.954485][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.1.137 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 56.958699][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.963052][ T6470] Call Trace: [ 56.964418][ T6470] [ 56.965691][ T6470] dump_stack_lvl+0x16c/0x1f0 [ 56.967624][ T6470] should_fail_ex+0x497/0x5b0 [ 56.969570][ T6470] _copy_to_user+0x32/0xd0 [ 56.971409][ T6470] simple_read_from_buffer+0xd0/0x160 [ 56.973621][ T6470] proc_fail_nth_read+0x198/0x270 [ 56.975726][ T6470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.978004][ T6470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.980473][ T6470] vfs_read+0x1df/0xbe0 [ 56.982174][ T6470] ? __fget_files+0x1fc/0x3a0 [ 56.984070][ T6470] ? __pfx___mutex_lock+0x10/0x10 [ 56.986077][ T6470] ? __pfx_vfs_read+0x10/0x10 [ 56.988017][ T6470] ? __fget_files+0x206/0x3a0 [ 56.989926][ T6470] ksys_read+0x12b/0x250 [ 56.991681][ T6470] ? __pfx_ksys_read+0x10/0x10 [ 56.993635][ T6470] do_syscall_64+0xcd/0x250 [ 56.995550][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.998019][ T6470] RIP: 0033:0x7fcfda98473c [ 56.999922][ T6470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.007629][ T6470] RSP: 002b:00007fcfdb877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.010948][ T6470] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda98473c [ 57.014132][ T6470] RDX: 000000000000000f RSI: 00007fcfdb8770a0 RDI: 0000000000000005 [ 57.017371][ T6470] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 57.020549][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.023699][ T6470] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 57.026972][ T6470] [ 57.028407][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.037296][ T6473] FAULT_INJECTION: forcing a failure. [ 57.037296][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 57.044173][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.3.138 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 57.048553][ T6473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.052987][ T6473] Call Trace: [ 57.054391][ T6473] [ 57.055668][ T6473] dump_stack_lvl+0x16c/0x1f0 [ 57.057062][ T6473] should_fail_ex+0x497/0x5b0 [ 57.058433][ T6473] ? fs_reclaim_acquire+0xae/0x150 [ 57.060026][ T6473] should_failslab+0xc2/0x120 [ 57.062614][ T6473] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 57.064811][ T6473] ? __alloc_skb+0x2b1/0x380 [ 57.066186][ T6473] __alloc_skb+0x2b1/0x380 [ 57.067520][ T6473] ? __pfx___alloc_skb+0x10/0x10 [ 57.068962][ T6473] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 57.071355][ T6473] netlink_alloc_large_skb+0x69/0x130 [ 57.073013][ T6473] netlink_sendmsg+0x689/0xd70 [ 57.074518][ T6473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.076106][ T6473] ____sys_sendmsg+0xaaf/0xc90 [ 57.077523][ T6473] ? copy_msghdr_from_user+0x10b/0x160 [ 57.079205][ T6473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.080800][ T6473] ___sys_sendmsg+0x135/0x1e0 [ 57.082291][ T6473] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.083811][ T6473] ? __pfx_lock_release+0x10/0x10 [ 57.085227][ T6473] ? trace_lock_acquire+0x14e/0x1f0 [ 57.086762][ T6473] ? __fget_files+0x206/0x3a0 [ 57.088150][ T6473] __sys_sendmsg+0x16e/0x220 [ 57.089492][ T6473] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.090983][ T6473] do_syscall_64+0xcd/0x250 [ 57.092431][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.094175][ T6473] RIP: 0033:0x7f49abd85d29 [ 57.095518][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.101716][ T6473] RSP: 002b:00007f49acbd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.104904][ T6473] RAX: ffffffffffffffda RBX: 00007f49abf76080 RCX: 00007f49abd85d29 [ 57.108061][ T6473] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 57.111229][ T6473] RBP: 00007f49acbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 57.114317][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.117393][ T6473] R13: 0000000000000001 R14: 00007f49abf76080 R15: 00007ffc81f24e48 [ 57.120488][ T6473] [ 57.121863][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.313359][ T6479] kvm: kvm [6478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3d7000088c4 [ 57.316767][ T6479] kvm: kvm [6478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3d8000080c4 [ 57.340020][ T6479] kvm: kvm [6478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x550000031fc [ 57.362163][ T6479] kvm: kvm [6478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6e0000031fc [ 57.365235][ T6479] kvm: kvm [6478]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x6e5000039fc [ 57.909214][ T64] tipc: Node number set to 1359735857 [ 57.931175][ T6464] tipc: Disabling bearer [ 57.983434][ T6487] batadv0: left promiscuous mode [ 57.985577][ T6487] team0: left promiscuous mode [ 57.987036][ T6487] team_slave_0: left promiscuous mode [ 57.988857][ T6487] team_slave_1: left promiscuous mode [ 58.134606][ T6496] FAULT_INJECTION: forcing a failure. [ 58.134606][ T6496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.138685][ T6496] CPU: 2 UID: 0 PID: 6496 Comm: syz.2.145 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 58.142635][ T6496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.146344][ T6496] Call Trace: [ 58.147348][ T6496] [ 58.148402][ T6496] dump_stack_lvl+0x16c/0x1f0 [ 58.150069][ T6496] should_fail_ex+0x497/0x5b0 [ 58.151690][ T6496] _copy_to_user+0x32/0xd0 [ 58.153156][ T6496] simple_read_from_buffer+0xd0/0x160 [ 58.154987][ T6496] proc_fail_nth_read+0x198/0x270 [ 58.156775][ T6496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.158762][ T6496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.160664][ T6496] vfs_read+0x1df/0xbe0 [ 58.162194][ T6496] ? __fget_files+0x1fc/0x3a0 [ 58.163769][ T6496] ? __pfx___mutex_lock+0x10/0x10 [ 58.165592][ T6496] ? __pfx_vfs_read+0x10/0x10 [ 58.167224][ T6496] ? __fget_files+0x206/0x3a0 [ 58.168957][ T6496] ksys_read+0x12b/0x250 [ 58.170341][ T6496] ? __pfx_ksys_read+0x10/0x10 [ 58.171813][ T6496] do_syscall_64+0xcd/0x250 [ 58.173381][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.175313][ T6496] RIP: 0033:0x7f265078473c [ 58.176654][ T6496] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.183659][ T6496] RSP: 002b:00007f26515e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.185859][ T6496] RAX: ffffffffffffffda RBX: 00007f2650975fa0 RCX: 00007f265078473c [ 58.188249][ T6496] RDX: 000000000000000f RSI: 00007f26515e10a0 RDI: 0000000000000006 [ 58.191131][ T6496] RBP: 00007f26515e1090 R08: 0000000000000000 R09: 0000000000000000 [ 58.193781][ T6496] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 58.196592][ T6496] R13: 0000000000000000 R14: 00007f2650975fa0 R15: 00007ffe95e3d248 [ 58.199063][ T6496] [ 58.213744][ T6493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.146'. [ 58.448302][ T6507] ======================================================= [ 58.448302][ T6507] WARNING: The mand mount option has been deprecated and [ 58.448302][ T6507] and is ignored by this kernel. Remove the mand [ 58.448302][ T6507] option from the mount to silence this warning. [ 58.448302][ T6507] ======================================================= [ 58.460149][ T6507] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 58.475704][ T6507] syzkaller1: entered allmulticast mode [ 58.499858][ T6509] netlink: 186444 bytes leftover after parsing attributes in process `syz.3.150'. [ 58.506989][ T6509] netlink: zone id is out of range [ 58.509481][ T6509] netlink: zone id is out of range [ 58.511757][ T6509] netlink: zone id is out of range [ 58.513973][ T6509] netlink: zone id is out of range [ 58.515777][ T6509] netlink: zone id is out of range [ 58.517393][ T6509] netlink: get zone limit has 8 unknown bytes [ 58.520676][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.150'. [ 58.592944][ T6517] FAULT_INJECTION: forcing a failure. [ 58.592944][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 58.596870][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.0.153 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 58.600003][ T6517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.603155][ T6517] Call Trace: [ 58.604167][ T6517] [ 58.605072][ T6517] dump_stack_lvl+0x16c/0x1f0 [ 58.606520][ T6517] should_fail_ex+0x497/0x5b0 [ 58.607958][ T6517] ? fs_reclaim_acquire+0xae/0x150 [ 58.609567][ T6517] should_failslab+0xc2/0x120 [ 58.610991][ T6517] __kmalloc_noprof+0xcb/0x510 [ 58.612467][ T6517] ? rcu_is_watching+0x12/0xc0 [ 58.613933][ T6517] tomoyo_encode2+0x100/0x3e0 [ 58.615360][ T6517] tomoyo_encode+0x29/0x50 [ 58.616705][ T6517] tomoyo_realpath_from_path+0x19d/0x720 [ 58.618379][ T6517] ? tomoyo_path_number_perm+0x235/0x590 [ 58.620064][ T6517] tomoyo_path_number_perm+0x248/0x590 [ 58.621701][ T6517] ? tomoyo_path_number_perm+0x235/0x590 [ 58.623367][ T6517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.625309][ T6517] ? __pfx_lock_release+0x10/0x10 [ 58.626875][ T6517] ? trace_lock_acquire+0x14e/0x1f0 [ 58.628435][ T6517] ? lock_acquire+0x2f/0xb0 [ 58.629750][ T6517] ? __fget_files+0x40/0x3a0 [ 58.631148][ T6517] ? __fget_files+0x206/0x3a0 [ 58.632534][ T6517] security_file_ioctl+0x9b/0x240 [ 58.634001][ T6517] __x64_sys_ioctl+0xb7/0x200 [ 58.635428][ T6517] do_syscall_64+0xcd/0x250 [ 58.636802][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.638529][ T6517] RIP: 0033:0x7fbc73385d29 [ 58.639863][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.645519][ T6517] RSP: 002b:00007fbc74104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.647973][ T6517] RAX: ffffffffffffffda RBX: 00007fbc73575fa0 RCX: 00007fbc73385d29 [ 58.650256][ T6517] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 58.652590][ T6517] RBP: 00007fbc74104090 R08: 0000000000000000 R09: 0000000000000000 [ 58.654869][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.657240][ T6517] R13: 0000000000000000 R14: 00007fbc73575fa0 R15: 00007ffcb1297178 [ 58.659584][ T6517] [ 58.660564][ C0] vkms_vblank_simulate: vblank timer overrun [ 58.664976][ T6517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.763790][ T6528] lo: entered allmulticast mode [ 58.768896][ T6528] pimreg: entered allmulticast mode [ 58.771693][ T6528] lo: left allmulticast mode [ 58.773574][ T6528] FAULT_INJECTION: forcing a failure. [ 58.773574][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 58.778605][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.2.156 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 58.781984][ T6528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.785456][ T6528] Call Trace: [ 58.786658][ T6528] [ 58.787838][ T6528] dump_stack_lvl+0x16c/0x1f0 [ 58.789732][ T6528] should_fail_ex+0x497/0x5b0 [ 58.791884][ T6528] ? fs_reclaim_acquire+0xae/0x150 [ 58.793987][ T6528] should_failslab+0xc2/0x120 [ 58.795930][ T6528] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 58.798322][ T6528] ? find_held_lock+0x2d/0x110 [ 58.800264][ T6528] ? __alloc_skb+0x2b1/0x380 [ 58.802110][ T6528] __alloc_skb+0x2b1/0x380 [ 58.803927][ T6528] ? __pfx___alloc_skb+0x10/0x10 [ 58.805921][ T6528] ? __pfx_mark_held_locks+0x10/0x10 [ 58.807598][ T6528] ? __local_bh_enable_ip+0xa4/0x120 [ 58.809139][ T6528] inet_netconf_notify_devconf+0x8b/0x1f0 [ 58.810763][ T6528] vif_delete+0x48c/0x8e0 [ 58.812045][ T6528] ? __pfx_vif_delete+0x10/0x10 [ 58.813827][ T6528] ? ip_mroute_setsockopt+0x121/0x1440 [ 58.815434][ T6528] ? rcu_is_watching+0x12/0xc0 [ 58.816826][ T6528] mroute_clean_tables+0x18b/0xb30 [ 58.818293][ T6528] ? __pfx_mroute_clean_tables+0x10/0x10 [ 58.819939][ T6528] ? lock_acquire+0x2f/0xb0 [ 58.821269][ T6528] ? __might_fault+0xe3/0x190 [ 58.822644][ T6528] ? __might_fault+0xe3/0x190 [ 58.824048][ T6528] ip_mroute_setsockopt+0x9f0/0x1440 [ 58.825635][ T6528] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 58.827365][ T6528] ? avc_has_perm_noaudit+0x119/0x3a0 [ 58.828981][ T6528] ? trace_lock_acquire+0x14e/0x1f0 [ 58.830549][ T6528] ? avc_has_perm_noaudit+0x143/0x3a0 [ 58.832200][ T6528] do_ip_setsockopt+0x2e8/0x3680 [ 58.833691][ T6528] ? __pfx_avc_has_perm+0x10/0x10 [ 58.835244][ T6528] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 58.836850][ T6528] ? hlock_class+0x4e/0x130 [ 58.838256][ T6528] ? sock_has_perm+0x25a/0x2f0 [ 58.839697][ T6528] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 58.841612][ T6528] ip_setsockopt+0x59/0xf0 [ 58.842962][ T6528] raw_setsockopt+0xb8/0x290 [ 58.844465][ T6528] ? __pfx_raw_setsockopt+0x10/0x10 [ 58.845992][ T6528] ? selinux_socket_setsockopt+0x6a/0x80 [ 58.847637][ T6528] ? sock_common_setsockopt+0x2e/0xf0 [ 58.849215][ T6528] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 58.850918][ T6528] do_sock_setsockopt+0x222/0x480 [ 58.852384][ T6528] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 58.854015][ T6528] ? lock_acquire+0x2f/0xb0 [ 58.855395][ T6528] __sys_setsockopt+0x1a0/0x230 [ 58.856830][ T6528] __x64_sys_setsockopt+0xbd/0x160 [ 58.858362][ T6528] ? do_syscall_64+0x91/0x250 [ 58.859753][ T6528] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.861292][ T6528] do_syscall_64+0xcd/0x250 [ 58.862653][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.864427][ T6528] RIP: 0033:0x7f2650785d29 [ 58.865856][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.871615][ T6528] RSP: 002b:00007f26515e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.874035][ T6528] RAX: ffffffffffffffda RBX: 00007f2650975fa0 RCX: 00007f2650785d29 [ 58.876404][ T6528] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.878788][ T6528] RBP: 00007f26515e1090 R08: 0000000000000004 R09: 0000000000000000 [ 58.881117][ T6528] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000000001 [ 58.883455][ T6528] R13: 0000000000000000 R14: 00007f2650975fa0 R15: 00007ffe95e3d248 [ 58.885819][ T6528] [ 58.892619][ T6527] pimreg: left allmulticast mode [ 58.905973][ T6519] kvm: kvm [6518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5e6000055e5 [ 58.909835][ T6519] kvm: kvm [6518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5e700005de5 [ 58.931276][ T6519] kvm_intel: kvm [6518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x74d00005de5 [ 59.155341][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.160'. [ 59.158930][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 59.161742][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.160'. [ 59.164293][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.160'. [ 59.187706][ T6541] FAULT_INJECTION: forcing a failure. [ 59.187706][ T6541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.191695][ T6541] CPU: 3 UID: 0 PID: 6541 Comm: syz.1.161 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 59.194828][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.198074][ T6541] Call Trace: [ 59.199070][ T6541] [ 59.199941][ T6541] dump_stack_lvl+0x16c/0x1f0 [ 59.201325][ T6541] should_fail_ex+0x497/0x5b0 [ 59.202734][ T6541] strncpy_from_user+0x3b/0x2d0 [ 59.204193][ T6541] getname_flags.part.0+0x8f/0x550 [ 59.205753][ T6541] getname_flags+0x93/0xf0 [ 59.207077][ T6541] user_path_at+0x24/0x60 [ 59.208362][ T6541] bpf_obj_get_user+0xaf/0x490 [ 59.209772][ T6541] ? __pfx_bpf_obj_get_user+0x10/0x10 [ 59.211345][ T6541] ? selinux_bpf+0xee/0x130 [ 59.212705][ T6541] __sys_bpf+0x2130/0x49c0 [ 59.214030][ T6541] ? __pfx_lock_release+0x10/0x10 [ 59.215582][ T6541] ? __pfx___sys_bpf+0x10/0x10 [ 59.217011][ T6541] ? vfs_write+0x306/0x1150 [ 59.218379][ T6541] ? __mutex_unlock_slowpath+0x164/0x690 [ 59.220117][ T6541] ? fput+0x67/0x440 [ 59.221283][ T6541] ? ksys_write+0x1ba/0x250 [ 59.222648][ T6541] ? __pfx_ksys_write+0x10/0x10 [ 59.224202][ T6541] __x64_sys_bpf+0x78/0xc0 [ 59.225562][ T6541] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.227138][ T6541] do_syscall_64+0xcd/0x250 [ 59.228654][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.230439][ T6541] RIP: 0033:0x7fcfda985d29 [ 59.231787][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.237458][ T6541] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.239857][ T6541] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 59.242125][ T6541] RDX: 0000000000000018 RSI: 00000000200000c0 RDI: 0000000000000007 [ 59.244495][ T6541] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 59.246831][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.249178][ T6541] R13: 0000000000000001 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 59.251436][ T6541] [ 59.371393][ T6547] 9pnet_virtio: no channels available for device syz [ 59.596049][ T6561] binder: 6559:6561 ioctl c0306201 20000300 returned -22 [ 59.666594][ T6583] syz.3.175: attempt to access beyond end of device [ 59.666594][ T6583] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 59.671122][ T6583] efs: cannot read volume header [ 59.720119][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 59.724364][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'. [ 59.727240][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 59.733201][ T6586] ubi1: attaching mtd0 [ 59.734547][ T6586] ubi1 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 59.755520][ T6586] tap0: tun_chr_ioctl cmd 1074025677 [ 59.757624][ T6586] tap0: linktype set to 772 [ 59.967803][ T1228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.040158][ T1228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.099875][ T1228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.125042][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.128748][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.132321][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.135252][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.137865][ T5292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.141274][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.147837][ T68] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.150848][ T68] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.153777][ T68] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.157670][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.160930][ T68] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.163180][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.171397][ T1228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.228840][ T6593] chnl_net:caif_netlink_parms(): no params data found [ 60.278149][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.280671][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.283419][ T6593] bridge_slave_0: entered allmulticast mode [ 60.285747][ T6593] bridge_slave_0: entered promiscuous mode [ 60.289244][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.291437][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.293577][ T6593] bridge_slave_1: entered allmulticast mode [ 60.295804][ T6593] bridge_slave_1: entered promiscuous mode [ 60.316487][ T6593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.326014][ T6593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.351097][ T6593] team0: Port device team_slave_0 added [ 60.359103][ T6593] team0: Port device team_slave_1 added [ 60.385404][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.387637][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.395585][ T6593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.413373][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.415776][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.423978][ T6593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.433505][ T1228] bridge_slave_1: left allmulticast mode [ 60.435421][ T1228] bridge_slave_1: left promiscuous mode [ 60.437808][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.445164][ T1228] bridge_slave_0: left allmulticast mode [ 60.446868][ T1228] bridge_slave_0: left promiscuous mode [ 60.449656][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.517373][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 60.517384][ T39] audit: type=1400 audit(1735849083.235:313): avc: denied { create } for pid=6608 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.525886][ T39] audit: type=1400 audit(1735849083.245:314): avc: denied { setopt } for pid=6608 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.532624][ T39] audit: type=1400 audit(1735849083.245:315): avc: denied { write } for pid=6608 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.683736][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.689571][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.693338][ T1228] bond0 (unregistering): (slave bond1): Releasing backup interface [ 60.696009][ T1228] bond0 (unregistering): Released all slaves [ 60.752269][ T1228] bond1 (unregistering): Released all slaves [ 60.811313][ T6593] hsr_slave_0: entered promiscuous mode [ 60.814165][ T6593] hsr_slave_1: entered promiscuous mode [ 60.817485][ T6593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.821347][ T6593] Cannot create hsr debugfs directory [ 60.825174][ T39] audit: type=1400 audit(1735849083.545:316): avc: denied { read } for pid=6615 comm="syz.1.186" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.833515][ T39] audit: type=1400 audit(1735849083.555:317): avc: denied { open } for pid=6615 comm="syz.1.186" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.849666][ T39] audit: type=1400 audit(1735849083.575:318): avc: denied { ioctl } for pid=6615 comm="syz.1.186" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 61.126324][ T6630] FAULT_INJECTION: forcing a failure. [ 61.126324][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.131258][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.2.192 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 61.134382][ T6630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.137582][ T6630] Call Trace: [ 61.138566][ T6630] [ 61.139563][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 61.140995][ T6630] should_fail_ex+0x497/0x5b0 [ 61.142407][ T6630] _copy_to_user+0x32/0xd0 [ 61.143675][ T6630] simple_read_from_buffer+0xd0/0x160 [ 61.145232][ T6630] proc_fail_nth_read+0x198/0x270 [ 61.146670][ T6630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.148602][ T6630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.150561][ T6630] vfs_read+0x1df/0xbe0 [ 61.152001][ T6630] ? __fget_files+0x1fc/0x3a0 [ 61.153361][ T6630] ? __pfx___mutex_lock+0x10/0x10 [ 61.154823][ T6630] ? __pfx_vfs_read+0x10/0x10 [ 61.156208][ T6630] ? __fget_files+0x206/0x3a0 [ 61.157610][ T6630] ksys_read+0x12b/0x250 [ 61.158888][ T6630] ? __pfx_ksys_read+0x10/0x10 [ 61.160537][ T6630] do_syscall_64+0xcd/0x250 [ 61.162264][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.164350][ T6630] RIP: 0033:0x7f265078473c [ 61.165982][ T6630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.172552][ T6630] RSP: 002b:00007f26515e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.175001][ T6630] RAX: ffffffffffffffda RBX: 00007f2650975fa0 RCX: 00007f265078473c [ 61.177315][ T6630] RDX: 000000000000000f RSI: 00007f26515e10a0 RDI: 0000000000000003 [ 61.179607][ T6630] RBP: 00007f26515e1090 R08: 0000000000000000 R09: 0000000000000000 [ 61.181925][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.184211][ T6630] R13: 0000000000000000 R14: 00007f2650975fa0 R15: 00007ffe95e3d248 [ 61.186465][ T6630] [ 61.244152][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.246440][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.249931][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.252317][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.268016][ T6636] syz.2.195: attempt to access beyond end of device [ 61.268016][ T6636] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 61.270310][ T1228] veth1_macvtap: left promiscuous mode [ 61.274110][ T6636] efs: cannot read volume header [ 61.275783][ T1228] veth0_macvtap: left promiscuous mode [ 61.280882][ T1228] veth1_vlan: left promiscuous mode [ 61.283721][ T1228] veth0_vlan: left promiscuous mode [ 61.346602][ T6642] tmpfs: Bad value for 'mpol' [ 61.352571][ T39] audit: type=1400 audit(1735849084.075:319): avc: denied { read } for pid=6641 comm="syz.1.198" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.368786][ T39] audit: type=1400 audit(1735849084.085:320): avc: denied { open } for pid=6641 comm="syz.1.198" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.378128][ T39] audit: type=1400 audit(1735849084.085:321): avc: denied { ioctl } for pid=6641 comm="syz.1.198" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 61.387483][ T39] audit: type=1400 audit(1735849084.085:322): avc: denied { ioctl } for pid=6641 comm="syz.1.198" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14180 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.420331][ T6644] fuse: Bad value for 'fd' [ 61.805102][ T1228] team_slave_1 (unregistering): left allmulticast mode [ 61.810509][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 61.870391][ T1228] team_slave_0 (unregistering): left allmulticast mode [ 61.872961][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 62.239207][ T5292] Bluetooth: hci0: command tx timeout [ 62.352039][ T6593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.361499][ T6593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.364797][ T6593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.368945][ T6593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.427749][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.439772][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.445362][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.447423][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.454367][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.457073][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.621592][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.714395][ T6593] veth0_vlan: entered promiscuous mode [ 62.722001][ T6593] veth1_vlan: entered promiscuous mode [ 62.732231][ T6593] veth0_macvtap: entered promiscuous mode [ 62.736902][ T6593] veth1_macvtap: entered promiscuous mode [ 62.742929][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.745968][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.748827][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.752744][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.755676][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.758739][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.762217][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.767809][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.771401][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.775304][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.778392][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.781668][ T6593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.784731][ T6593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.788158][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.792742][ T6593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.795508][ T6593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.798838][ T6593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.802484][ T6593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.311277][ T6640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.313665][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.316986][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.349690][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.352808][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.387515][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.391867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.403978][ T6675] __nla_validate_parse: 2 callbacks suppressed [ 64.403988][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 64.489289][ T5292] Bluetooth: hci0: command 0x040f tx timeout [ 64.638099][ T6692] hsr_slave_0: left promiscuous mode [ 64.640614][ T6692] hsr_slave_1: left promiscuous mode [ 64.713602][ T6686] kvm: kvm [6685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2de00007bf2 [ 64.738212][ T6686] kvm: kvm [6685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x46e0000205c [ 64.743462][ T6686] kvm: kvm [6685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x46f0000285c [ 64.773004][ T6686] kvm_intel: kvm [6685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5d500004de7 [ 64.809530][ T6702] FAULT_INJECTION: forcing a failure. [ 64.809530][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.829402][ T6702] CPU: 1 UID: 0 PID: 6702 Comm: syz.1.212 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 64.832595][ T6702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.836197][ T6702] Call Trace: [ 64.837219][ T6702] [ 64.838124][ T6702] dump_stack_lvl+0x16c/0x1f0 [ 64.839604][ T6702] should_fail_ex+0x497/0x5b0 [ 64.841056][ T6702] _copy_to_user+0x32/0xd0 [ 64.842420][ T6702] simple_read_from_buffer+0xd0/0x160 [ 64.844048][ T6702] proc_fail_nth_read+0x198/0x270 [ 64.845955][ T6702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.848105][ T6702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.850209][ T6702] vfs_read+0x1df/0xbe0 [ 64.851537][ T6702] ? __fget_files+0x1fc/0x3a0 [ 64.853037][ T6702] ? __pfx___mutex_lock+0x10/0x10 [ 64.854531][ T6702] ? __pfx_vfs_read+0x10/0x10 [ 64.856275][ T6702] ? __fget_files+0x206/0x3a0 [ 64.857763][ T6702] ksys_read+0x12b/0x250 [ 64.859282][ T6702] ? __pfx_ksys_read+0x10/0x10 [ 64.860948][ T6702] do_syscall_64+0xcd/0x250 [ 64.862289][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.864478][ T6702] RIP: 0033:0x7fcfda98473c [ 64.866266][ T6702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.874255][ T6702] RSP: 002b:00007fcfdb877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.877701][ T6702] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda98473c [ 64.881001][ T6702] RDX: 000000000000000f RSI: 00007fcfdb8770a0 RDI: 0000000000000003 [ 64.884213][ T6702] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 64.887496][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.890743][ T6702] R13: 0000000000000001 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 64.893987][ T6702] [ 65.107787][ T6727] lo: entered allmulticast mode [ 65.124233][ T6727] pimreg: entered allmulticast mode [ 65.128620][ T6727] lo: left allmulticast mode [ 65.132044][ T6726] pimreg: left allmulticast mode [ 65.282858][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.286708][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.289812][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.292650][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.295410][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.298155][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.301200][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.303917][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.306646][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 65.396096][ T6734] /dev/sg0: Can't lookup blockdev [ 65.483564][ T1331] hid (null): invalid report_size 48347 [ 65.488509][ T1331] hid-generic 0209:0007:0007.0002: invalid report_size 48347 [ 65.491459][ T1331] hid-generic 0209:0007:0007.0002: item 0 2 1 7 parsing failed [ 65.493906][ T1331] hid-generic 0209:0007:0007.0002: probe with driver hid-generic failed with error -22 [ 65.579120][ T1493] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.736215][ T1493] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.743803][ T1493] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.747898][ T1493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.759131][ T6742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 65.765152][ T1493] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.793906][ T6764] syzkaller0: entered promiscuous mode [ 65.796320][ T6764] syzkaller0: entered allmulticast mode [ 65.799909][ T1228] syzkaller0: tun_net_xmit 48 [ 65.963145][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 65.963156][ T39] audit: type=1400 audit(1735849088.685:337): avc: denied { ioctl } for pid=6735 comm="syz.0.224" path="socket:[12164]" dev="sockfs" ino=12164 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 66.093194][ T6775] kvm: kvm [6774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3df0000b2c3 [ 66.096329][ T6775] kvm: kvm [6774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3e00000bac3 [ 66.113676][ T6775] kvm: kvm [6774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x55800001be7 [ 66.133741][ T6775] kvm: kvm [6774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6e80000ffd8 [ 66.136916][ T6775] kvm: kvm [6774]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x6ed0000f7d8 [ 66.559049][ T5292] Bluetooth: hci0: command 0x040f tx timeout [ 67.367312][ T6783] FAULT_INJECTION: forcing a failure. [ 67.367312][ T6783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.371207][ T6783] CPU: 0 UID: 0 PID: 6783 Comm: syz.1.238 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 67.374190][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.377288][ T6783] Call Trace: [ 67.378241][ T6783] [ 67.379113][ T6783] dump_stack_lvl+0x16c/0x1f0 [ 67.380469][ T6783] should_fail_ex+0x497/0x5b0 [ 67.381809][ T6783] _copy_from_user+0x2e/0xd0 [ 67.383328][ T6783] memdup_user+0x71/0xd0 [ 67.384718][ T6783] strndup_user+0x78/0xe0 [ 67.386283][ T6783] __x64_sys_mount+0x181/0x320 [ 67.388232][ T6783] ? __pfx___x64_sys_mount+0x10/0x10 [ 67.390338][ T6783] do_syscall_64+0xcd/0x250 [ 67.392178][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.394561][ T6783] RIP: 0033:0x7fcfda985d29 [ 67.396354][ T6783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.403658][ T6783] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.406883][ T6783] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 67.409964][ T6783] RDX: 0000000020000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 67.413007][ T6783] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 67.416189][ T6783] R10: 0000000000000483 R11: 0000000000000246 R12: 0000000000000001 [ 67.419366][ T6783] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 67.422491][ T6783] [ 67.656252][ T39] audit: type=1400 audit(1735849090.375:338): avc: denied { ioctl } for pid=6786 comm="syz.1.240" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.425783][ T39] audit: type=1400 audit(1735849091.145:339): avc: denied { execstack } for pid=6795 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.511410][ T39] audit: type=1400 audit(1735849091.225:340): avc: denied { create } for pid=6800 comm="syz.2.244" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.525105][ T6801] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.528419][ T6801] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.534635][ T6801] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.538087][ T6801] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.549296][ T6801] geneve2: entered promiscuous mode [ 68.551248][ T6801] geneve2: entered allmulticast mode [ 68.554719][ T39] audit: type=1400 audit(1735849091.275:341): avc: denied { create } for pid=6800 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 68.574702][ T39] audit: type=1400 audit(1735849091.295:342): avc: denied { read write } for pid=6800 comm="syz.2.244" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.593828][ T39] audit: type=1400 audit(1735849091.295:343): avc: denied { open } for pid=6800 comm="syz.2.244" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.639694][ T5292] Bluetooth: hci0: command 0x040f tx timeout [ 68.643849][ T39] audit: type=1400 audit(1735849091.365:344): avc: denied { execute } for pid=6805 comm="syz.2.247" path="/54/pids.current" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.646274][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.691007][ T6798] kvm: kvm [6797]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3d700008feb [ 68.694359][ T6798] kvm: kvm [6797]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3d8000087eb [ 68.747108][ T6798] kvm_intel: kvm [6797]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8470000723e [ 68.913965][ T9] usb 5-1: USB disconnect, device number 2 [ 69.052505][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.055832][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.059611][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.062859][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.066192][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.073182][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.076299][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.080277][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.083466][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.086601][ T6812] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 69.205885][ T6813] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.221065][ T39] audit: type=1400 audit(1735849091.945:345): avc: denied { name_bind } for pid=6810 comm="syz.0.249" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 70.551208][ T6835] __nla_validate_parse: 24 callbacks suppressed [ 70.551225][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'. [ 70.560635][ T6835] pimreg: entered allmulticast mode [ 70.563023][ T6835] lo: left allmulticast mode [ 70.567821][ T6834] pimreg: left allmulticast mode [ 70.719174][ T5292] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.721779][ T5292] Bluetooth: hci0: command 0x040f tx timeout [ 70.837030][ T39] audit: type=1400 audit(1735849093.555:346): avc: denied { create } for pid=6840 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.286520][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.288538][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.395186][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 71.395197][ T39] audit: type=1400 audit(1735849094.115:349): avc: denied { create } for pid=6856 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.404639][ T39] audit: type=1400 audit(1735849094.115:350): avc: denied { getopt } for pid=6856 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.664116][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.809771][ T68] Bluetooth: hci0: command 0x040f tx timeout [ 72.812424][ T6865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.814288][ T6865] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 72.942558][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 73.037937][ T9] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 73.044329][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.092979][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.095734][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.098087][ T9] usb 7-1: Product: syz [ 73.103081][ T9] usb 7-1: Manufacturer: syz [ 73.105459][ T6871] FAULT_INJECTION: forcing a failure. [ 73.105459][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 73.105495][ T6871] CPU: 1 UID: 0 PID: 6871 Comm: syz.1.267 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 73.105507][ T6871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.105513][ T6871] Call Trace: [ 73.105517][ T6871] [ 73.105521][ T6871] dump_stack_lvl+0x16c/0x1f0 [ 73.105555][ T6871] should_fail_ex+0x497/0x5b0 [ 73.105574][ T6871] ? fs_reclaim_acquire+0xae/0x150 [ 73.105585][ T6871] should_failslab+0xc2/0x120 [ 73.105598][ T6871] __kmalloc_noprof+0xcb/0x510 [ 73.105609][ T6871] ? kasan_save_track+0x14/0x30 [ 73.105628][ T6871] fuse_direct_io+0x5b3/0x2580 [ 73.105643][ T6871] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.105661][ T6871] ? __pfx_fuse_direct_io+0x10/0x10 [ 73.105672][ T6871] ? __pfx_generic_write_checks+0x10/0x10 [ 73.105691][ T6871] fuse_direct_write_iter+0x64f/0x830 [ 73.105704][ T6871] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 73.105721][ T6871] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.105732][ T6871] ? rcu_is_watching+0x12/0xc0 [ 73.105745][ T6871] ? trace_lock_acquire+0x14e/0x1f0 [ 73.105762][ T6871] fuse_file_write_iter+0x66e/0x8c0 [ 73.105775][ T6871] vfs_write+0x5ae/0x1150 [ 73.105785][ T6871] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 73.105798][ T6871] ? __pfx_vfs_write+0x10/0x10 [ 73.105808][ T6871] ? __fget_files+0x40/0x3a0 [ 73.105825][ T6871] ksys_write+0x207/0x250 [ 73.105835][ T6871] ? __pfx_ksys_write+0x10/0x10 [ 73.105852][ T6871] do_syscall_64+0xcd/0x250 [ 73.105873][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.105893][ T6871] RIP: 0033:0x7fcfda985d29 [ 73.105907][ T6871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.105921][ T6871] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.105939][ T6871] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 73.105951][ T6871] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000005 [ 73.105961][ T6871] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 73.105972][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.105982][ T6871] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 73.106003][ T6871] [ 73.319080][ T9] usb 7-1: SerialNumber: syz [ 73.913573][ T6868] sp0: Synchronizing with TNC [ 73.951212][ T39] audit: type=1400 audit(1735849096.675:351): avc: denied { name_bind } for pid=6867 comm="syz.2.266" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.659773][ T6871] ------------[ cut here ]------------ [ 76.661784][ T6871] kernel BUG at lib/iov_iter.c:626! [ 76.693451][ T6871] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 76.696338][ T6871] CPU: 1 UID: 0 PID: 6871 Comm: syz.1.267 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 76.699538][ T6871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.702709][ T6871] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 76.704477][ T6871] Code: 89 e6 48 c7 c7 a0 b6 d0 8e e8 99 e3 31 00 e9 b1 fd ff ff e8 df da 5e fd eb 95 e8 08 db 5e fd e9 46 fb ff ff e8 ae 2e fc fc 90 <0f> 0b 48 8b 3c 24 e8 f2 da 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 76.710270][ T6871] RSP: 0018:ffffc900041a7958 EFLAGS: 00010293 [ 76.712143][ T6871] RAX: 0000000000000000 RBX: 0000000000000600 RCX: ffffffff849de360 [ 76.714522][ T6871] RDX: ffff888022fb2440 RSI: ffffffff849de772 RDI: 0000000000000001 [ 76.716924][ T6871] RBP: ffffc900041a7d98 R08: 0000000000000001 R09: 0000000000000000 [ 76.719297][ T6871] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 [ 76.721573][ T6871] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888032db5e00 [ 76.723872][ T6871] FS: 00007fcfdb8776c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 76.726542][ T6871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.728539][ T6871] CR2: 000056284a205908 CR3: 0000000055f80000 CR4: 0000000000352ef0 [ 76.730943][ T6871] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.733281][ T6871] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 76.735683][ T6871] Call Trace: [ 76.736696][ T6871] [ 76.737606][ T6871] ? die+0x31/0x80 [ 76.738772][ T6871] ? do_trap+0x232/0x430 [ 76.740111][ T6871] ? iov_iter_revert+0x533/0x5a0 [ 76.741613][ T6871] ? iov_iter_revert+0x533/0x5a0 [ 76.743151][ T6871] ? do_error_trap+0xf4/0x230 [ 76.744576][ T6871] ? iov_iter_revert+0x533/0x5a0 [ 76.746046][ T6871] ? handle_invalid_op+0x34/0x40 [ 76.747584][ T6871] ? iov_iter_revert+0x533/0x5a0 [ 76.749155][ T6871] ? exc_invalid_op+0x2e/0x50 [ 76.750597][ T6871] ? asm_exc_invalid_op+0x1a/0x20 [ 76.752195][ T6871] ? iov_iter_revert+0x120/0x5a0 [ 76.753946][ T6871] ? iov_iter_revert+0x532/0x5a0 [ 76.755489][ T6871] ? iov_iter_revert+0x533/0x5a0 [ 76.756972][ T6871] ? iov_iter_revert+0x532/0x5a0 [ 76.758506][ T6871] fuse_direct_io+0xf0e/0x2580 [ 76.759991][ T6871] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.761642][ T6871] ? __pfx_fuse_direct_io+0x10/0x10 [ 76.763286][ T6871] ? __pfx_generic_write_checks+0x10/0x10 [ 76.765633][ T6871] fuse_direct_write_iter+0x64f/0x830 [ 76.767684][ T6871] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 76.769471][ T6871] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.771185][ T6871] ? rcu_is_watching+0x12/0xc0 [ 76.772611][ T6871] ? trace_lock_acquire+0x14e/0x1f0 [ 76.774221][ T6871] fuse_file_write_iter+0x66e/0x8c0 [ 76.775810][ T6871] vfs_write+0x5ae/0x1150 [ 76.777089][ T6871] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 76.778832][ T6871] ? __pfx_vfs_write+0x10/0x10 [ 76.780337][ T6871] ? __fget_files+0x40/0x3a0 [ 76.781752][ T6871] ksys_write+0x207/0x250 [ 76.783151][ T6871] ? __pfx_ksys_write+0x10/0x10 [ 76.785148][ T6871] do_syscall_64+0xcd/0x250 [ 76.787002][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.788856][ T6871] RIP: 0033:0x7fcfda985d29 [ 76.790242][ T6871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.796031][ T6871] RSP: 002b:00007fcfdb877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.798517][ T6871] RAX: ffffffffffffffda RBX: 00007fcfdab75fa0 RCX: 00007fcfda985d29 [ 76.800902][ T6871] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000005 [ 76.803270][ T6871] RBP: 00007fcfdb877090 R08: 0000000000000000 R09: 0000000000000000 [ 76.805707][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.808093][ T6871] R13: 0000000000000000 R14: 00007fcfdab75fa0 R15: 00007ffd428996c8 [ 76.810509][ T6871] [ 76.811463][ T6871] Modules linked in: [ 76.812888][ T6871] ---[ end trace 0000000000000000 ]--- [ 76.969952][ T6871] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 76.977219][ T6871] Code: 89 e6 48 c7 c7 a0 b6 d0 8e e8 99 e3 31 00 e9 b1 fd ff ff e8 df da 5e fd eb 95 e8 08 db 5e fd e9 46 fb ff ff e8 ae 2e fc fc 90 <0f> 0b 48 8b 3c 24 e8 f2 da 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 76.991127][ T6871] RSP: 0018:ffffc900041a7958 EFLAGS: 00010293 [ 76.993046][ T6871] RAX: 0000000000000000 RBX: 0000000000000600 RCX: ffffffff849de360 [ 76.995469][ T6871] RDX: ffff888022fb2440 RSI: ffffffff849de772 RDI: 0000000000000001 [ 76.997860][ T6871] RBP: ffffc900041a7d98 R08: 0000000000000001 R09: 0000000000000000 [ 77.002220][ T6871] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 [ 77.004629][ T6871] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888032db5e00 [ 77.007027][ T6871] FS: 00007fcfdb8776c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 77.010887][ T6871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.012858][ T6871] CR2: 0000001b2e920220 CR3: 0000000055f80000 CR4: 0000000000352ef0 [ 77.015220][ T6871] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.017586][ T6871] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 77.021137][ T6871] Kernel panic - not syncing: Fatal exception [ 77.023512][ T6871] Kernel Offset: disabled [ 77.024819][ T6871] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:18:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88805f285e00 RCX=ffffffff890b562d RDX=ffff88801d680000 RSI=ffffffff890b6820 RDI=0000000000000005 RBP=ffff88805f285e10 RSP=ffffc90000136f08 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=0000000000000001 R13=0000000000000036 R14=0000000000000003 R15=ffff88804bbe2000 RIP=ffffffff817f9dd0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcfdb855f98 CR3=0000000055f80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c9abacf9560832d 22b2442954214fc8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8e0eeafa92e4a25 03199eda41c2e59c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c08b22855317769 662fe543f4404f56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a178cfc6c78aae97 7c4953c33715472e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001140 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92b6ded80141614c 000000000000002d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 036b12129524ac38 002d952473000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92bc1f240000002d 000000000000002d ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d9524b8bdc27a79 1a7a797300000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a385365e504348 f298cf35e597f673 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c45c331b614ebc4 e9a04dabd4fc00d8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfdab4b488 00007fcfdab4b480 00007fcfdab4b478 00007fcfdab4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfdb6ad100 00007fcfdab4b440 00007fcfdab4b458 00007fcfdab4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfdab4b498 00007fcfdab4b490 00007fcfdab4b488 00007fcfdab4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=ffffffff96e31c98 RCX=ffffffff8175f13c RDX=000000000000096b RSI=0000000000000782 RDI=0000000000000000 RBP=ffffffff942d0020 RSP=ffffc900041b72d8 R8 =ffffffff938020d2 R9 =00000000000203af R10=ffffffff96e3341f R11=0000000000000001 R12=ffffffff96c22f28 R13=00000000000203a8 R14=00000000000203a9 R15=dffffc0000000000 RIP=ffffffff8175ef9d RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f26515e16c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2650977060 CR3=000000002a018000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2650802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2650802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2650802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2650802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2650802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2650802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f265094b488 00007f265094b480 00007f265094b478 00007f265094b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26514ad100 00007f265094b440 00007f265094b458 00007f265094b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f265094b498 00007f265094b490 00007f265094b488 00007f265094b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a736568ff1f19366 9c669ec7e111cbb4 441d37a81dc65f01 c134732cc5ed7951 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd57a7edd482a459 585e8629f7d4971b 2dc6ca31cef47689 1f1f710a794b1372 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d1332bc662dfd89 d733065a1597a617 200a1b7b8ebacc20 e812e249b8b59a0a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f72855e005aa8c6 9d57523bec67d2b5 1b1da736568ff1f1 93669c669ec7e111 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cbb4441d37a81dc6 5f01c134732cc5ed 7951b887a66409e1 e0159ee3a638d774 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8175d19e RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96e51cc0 RBP=0000000000000002 RSP=ffffc900033b7938 R8 =0000000000000000 R9 =fffffbfff2dca398 R10=ffffffff96e51cc7 R11=0000000000000001 R12=0000000000000000 R13=ffff888023bc4880 R14=0000000000000000 R15=ffff888023bc5388 RIP=ffffffff81fcbb20 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558bd79500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2ec1fffc CR3=000000004800a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676173752e424d32 2e626c7465677568 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff89b07419 RDX=0000000000000001 RSI=ffffffff89b07426 RDI=0000000000000001 RBP=1ffff920000dbe13 RSP=ffffc900006defa8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000002 R12=0000607e92047028 R13=dffffc0000000000 R14=ffff888032524b20 R15=00000000000000ff RIP=ffffffff817f9dd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd8c968ff8 CR3=000000004800a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676173752e424d32 2e626c7465677568 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbef602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000