last executing test programs: 10.061115772s ago: executing program 1 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x209, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) listen(r3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r6, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x4004743a, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x4000000000001f0, 0x0) 8.770260594s ago: executing program 1 (id=480): inotify_init1(0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400", @ANYRES32=r3, @ANYBLOB="08001f00", @ANYRES32=r4], 0x44}}, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r6 = open(0x0, 0x0, 0x0) ptrace$getregset(0x420d, r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r7, &(0x7f00000010c0)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000002500)="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", 0x563}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f00000009c0)}, {0x0}, {&(0x7f00000007c0)="a8d23b904fdfbafa4d2f919b6fcde32e0615904e10027553d97e7772e746933880a5312d2d29a247db6692445fd91a0e631a2fbf127d6a8ed479cb68a2832d2fa7ddb896c5009ea29bd68d72b2c5f857366453caa3d65eea860bbded", 0x5c}, {&(0x7f0000000ac0)}, {0x0}], 0x7, &(0x7f0000000280)=ANY=[], 0x78, 0x48080}}, {{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="240000000100000001b68d9e4467eb6491d0eaee4476d3000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0c0000000100000001000000"], 0x30, 0x20008000}}], 0x3, 0x0) unshare(0x22020400) socket$inet6(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r8, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0xd8) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r10, &(0x7f0000000340)=ANY=[], 0x6) recvmmsg(r10, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 8.298307901s ago: executing program 0 (id=481): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000040), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000380)=[r3], &(0x7f0000000340), 0x0, 0x1f}) 8.233441669s ago: executing program 0 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltaction={0x44, 0x31, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) iopl(0xd8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioperm(0x0, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) sendmsg$xdp(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x17, 0x1, 0x0, "9f76fe92f6d87e3a99080debac1874d47ee2318d4526f2148e84c532d56b46f0"}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 7.621976746s ago: executing program 3 (id=484): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f00001fb000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ad"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.239587934s ago: executing program 3 (id=485): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) epoll_create1(0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 6.330140103s ago: executing program 2 (id=487): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_int(r6, 0x29, 0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x30}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.738167939s ago: executing program 0 (id=488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x209, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) listen(r3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r6, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x4004743a, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x4000000000001f0, 0x0) 4.371419159s ago: executing program 1 (id=489): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x644}, 0x48) r0 = fanotify_init(0x0, 0x0) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x301}, 0x14}}, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200"/50, 0x32}, {&(0x7f0000000400)="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", 0x1ad}, {&(0x7f0000000200)="a9e47d63d965685b48214fff756364b93155b267f07697b50eede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b405e7d2131969e18ef64e32a99866f84dbb149a7d7e000000", 0x49}, {&(0x7f0000000280)="7a91b4d61f79d8c0233425fbf6310b5937afa6e6b57f54dde84b7f5ddfee1b344d4594d4378c35e87ef39b9dff73b8fb40589c5d83f66d85d39ef509af66118f8aa72e7ace1a5734d5fdb07497f0872b16dec383ec29c0537d5cd9531d1a896e1041da7abb35b27f651138454f81aa0caf2e43d4f99a766293d784944fcb22a8976968e97b3d02ad0ad05902197c8f2575d9b26ce59a73cbe7f2ce37abfe4e6c16c5b76aadd6b86af449d052453bee03a932ba8d7e02d0ce52bf04f9931ea40d78bc3cf2f68bdd2084dad4b93206f89d4e1d6f0b9556f73e3c07d45d35df26ed0d4691baf23cd272f59e9e", 0xffffffffffffff22}, {&(0x7f0000000780)="b65620885f68382eb040aa60bd9ab302dac735f6e6c14ae21675e5bdcf0090c360f6da8d1925584ab237407ef31f66efd51691037860c211b2856e09443f06a82e8169a13a80d4b9193aee7b1b5e155d9644e23340b9d7615e9c98c3c75cf30fe986b6f6b34ab405ddc291aeab44160168f78408f4f1e1978eb564dbea786ae2294dfc362a9b7ab0182dae1dbdca65903feeab4a9f192ab8dccf313c77363b2519a76bdcc18eb65a196b4fa99353dece63e33a72191c7ea8e7852e4782f8ee10c552a7c54bd3a13cb9212e196e39ad51195cd8b1bb55c3fb53896b92738aba", 0xdf}, {&(0x7f0000000880)="38b6448ab864b02492265f98a9994c88f51c243fca101ffe6e5578eed4e3524010704379ba988afd20ae822cd66a446f88753ac758aec6664f9747abdfad76ada2ba74a0cf38b73052802f36b92fdd01abea8d3fc2d2db670d5ff7ccdf8a24fb12873483baf9c1596c2389991ceff3addf488f56b522feae0e25085047945132e2e1a7f8b517bafaf91cb934e1c7aedf90665cc4d93eac0b3d60c90278ebfe186b1bf97c1cf77652385005abcbe73f03a11a51b40a8af1f3a76a526f49caa27733fbcc4a26dae720a42ad7ee99cefd9e3cbaa7e3364ec38254cae69600e89ebde654eea941f3829af113e1f6c4d503", 0xef}, {&(0x7f0000000000)='\x00', 0x1}], 0x7) 4.333136221s ago: executing program 1 (id=490): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x34}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x1, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x49, 0x0, 0x0, 0x4]}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYBLOB="44a1ec281adc013eb1b997e1936d13c404381acb7dbd359149a69e3e488d784883dd42f9407f0c74dc0fef26f41a651aac31a44202f9d5f90020b6bf5a246208d237d269b2", @ANYRES32=0x0], 0xc8) write$binfmt_script(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x8, 0x1}, {0x6a, 0x2}, @ramp={0x4, 0x9, {0x2, 0x3, 0x40, 0x400}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000002c0)={0x8c7e48a20dfaae5c, 0x0, 0x0}) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) splice(r2, 0x0, r3, 0x0, 0x39000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3e000000bf94dc82ec919719462a76acba654a2577c4b8f4e1ad0bfd8e1e96d0f9f423909eb5c028cc91729edbd3600c109353a5280611d232fe00808212cde6c2b70e73a4ba5c0ae08e5a55b1", @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050033000300000008000300", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) 3.97026389s ago: executing program 0 (id=491): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008900f2f453135e211efb4530d47557732c00000c000000b7000000000000001862000006000000000000000d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000101000007010000f8ffffffb702000008000000b7030000feffffff850000000600000018450000fcffff91000000000000b7020000000000008500000085000000b70000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000015c0)=0x81, 0x12) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_usbip_server_init(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e040000000c0902120001000100000904000000ef"], 0x0) r3 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0xfffffffffffffef0) listen(r2, 0x0) fchdir(0xffffffffffffffff) syz_usbip_server_init(0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100010086380000000000e700"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xffffffff, 0x32315559, 0x8, 0xffffffff}}) creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200), 0xa) setxattr$security_ima(&(0x7f0000000240)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f00000000c0)=ANY=[], 0x2, 0x4) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="04ef00"], 0x3) 3.020013585s ago: executing program 3 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18}, 0x18}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001000)={0x24, r7, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x24}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8}]}, 0x2c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.946669409s ago: executing program 2 (id=493): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f00001fb000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ad"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.700182793s ago: executing program 2 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x4, 0x4000, @prog_id}, 0x20) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aa000008002341a667839f1bdc4500003800000000000190780a010101ac1414aa030590780310060045000000000000000089000006000000e0000002"], 0x0) write(r2, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) 2.567965559s ago: executing program 2 (id=495): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', r5, 0x7, 0x80, 0x0, 0x3f, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x68, 0x0, 0x81, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x8, 0x69, 0x0, 0x4, [0x0]}, @lsrr={0x83, 0x17, 0x9d, [@private=0xa010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @local]}, @generic={0x1c, 0x3, "d8"}, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x3, [{@multicast1, 0x5}]}, @rr={0x7, 0x27, 0x5c, [@loopback, @remote, @multicast2, @remote, @local, @empty, @empty, @private=0xa010101, @rand_addr=0x64010101]}]}}}}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_io_uring_setup(0x336d, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x0, 0x0) r8 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440), &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x20000000, r9) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)={0x10000, 0x3000, 0x1, 0x3f, 0x7f}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000001c0), 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r12, 0x0, 0x0, 0x4}, 0x20) sendto$inet6(r11, &(0x7f0000000180)='\x00', 0x1, 0x40008d0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x15c}}, 0x4080) 2.239412334s ago: executing program 2 (id=496): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c, 0x0}, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x800, 0x9, 0x1ff, 0x3, 0x2}, &(0x7f00000001c0)=0x14) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000140)="670d04752946552db0a4aae96a99d78aef9444def36cd4f5cb657902e4167b688054aed1b8f3e395127b324530fcadbea8d2a1754e1afaf07186c2725ac1e982bad0d51c640c70bb576bdc4eea0beaa1818bf0be2aca88fc33ffeb245919817f4398b47c6514988f1766c530a2601ba09732473d1158cfaa4964437a69178bf533c2b77ad3e47c563e", 0x89, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}]}, &(0x7f0000000300)=0xc) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000100)='\x00', &(0x7f0000000180)='\x00'], 0x0) 2.053548234s ago: executing program 3 (id=497): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000002e000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=within_size']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000000000bb810000850000006d00000085000000d000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='hrtimer_start\x00', r7}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x8208200) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c0002800600084000000000050007000000"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)={0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}) 2.016657708s ago: executing program 2 (id=498): inotify_init1(0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400", @ANYRES32=r3, @ANYBLOB="08001f00", @ANYRES32=r4], 0x44}}, 0x0) r5 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r6 = open(0x0, 0x0, 0x0) ptrace$getregset(0x420d, r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r7, &(0x7f00000010c0)=[{{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000002500)="ea3d51216ae8cedd1aeeec828eff07fa885c200fe416533f9fd5c0bc261b7242cccdc65bbc3164400692d2692f89d466c4a165e4c71ab1286db85b183170dae6be2122ed54fc3a4477cb3468af8ee67459e29cee1e1a5f6506af6e4fc8ba042ad330abfa9834aedd42b1337217d0c3706c73808045cd137a40d235f3841d5512284f020feb5f2493f181c234f3f753a703a7c1c7ce9f613195941b9b35d8fd233c1b3d015848c39d195073bd3979ed95a247d20c68b68caae164f17eb864f49f45f0d06f810c4617e7d7e650d544b49cedebbce087a42d86a452e387a0b1ae61eea47cc0491df9e1393c304861702bcd807cf51a51fac64e9efe2628169b4fc7020def70dc5da548668ecbb86be90be1d4fc7e8495dcfa888423f83218b2d35b52ae0e1af5daa7b655affda6e00faba1a97349cd04fd79536137210682c9cfb8e25da0256b2956fdbc5f7b40cbc8754c81d50a91ea2f36d9216f19a4877d81aa032a3c51572d2699bee85b3b50e45321b2a0f49a7bb95c0b8664c206ab8851a521e910a4ef26c63fae2fbf3eae71ebd7258c10cc13526b0fccfcb060b7d19270323aa62ddf5ab59e84250a2457e8ab1c19719dbefbb3ddabaa7c09b2a4f8e1d2086ec87dd3117321610a2e543170c2ccd7927c1902a4f118d203db3b9cfdaebf0425d817f6c87644d865d0fd91c5ab265fc453b323c56ffcaffbc634b58aad13bbb3d4fb69dfbe5bee4c3cfc9aa8283994835faee115dc84e0951f9972bca483445a6f6c1aafff6e19902466a032d9c7846f8f49d24549f585069c45758c042638cb4d24dd3402858dda53edf76d4fa3c9f4c4f646fb23444a6a6dec26e0426089d3f6757ab90d50c70ef1a8a38f780906243a2068ab6cc66e7fa58157c2271fef79fcb1cce0f9629e59cef29080ef154687ced8bea14e33f70948f0ae8957aaf8487a64c94d96e3da016460ee9e45ec52ce29c5473ebfbb4ef275d2df5b127e4dc56b36f3a9901f5dddef208267694d4588ee0d4be68cb4f497fdb3728682ea1bdaa168792638e3999437ce33efa5b267c6eca7b657f90cd8f40006d58fe8e7419cc5abfce763894d22b900ada21f505b8ec03cb1f689a0bfdfcaf5618e486e2a64f3e0ba282dc35cc6e5f5de2759916f003bf6114735a4c0fc18c4184f94c86c0030d867cb268231b54ffeb6a15984a32ee59f1ea383a184b3036988473551b1b865a054eb4489d31622d9d632c1175c08588b5274419274c0400a5a76eacab7153f30fb1061c1756c2585910264d193394600ae46335a9ac05f50bb5f38d273e6ad3902159e0b93734914b924d5d97f03da6594ff27b853f4a5ecdd6f4849178f2081f26dd77ea4a92dc5b7327dc51f4260e7ef50b5168420e49ba9d30d8a37552cde3411253ae4b3d5ac245e5ea8772ba7b5bae43605df49f5ef9fc65fd7ec0df3cc016cf57d32e31857ee81ac0258de5bc15fda930e0656d45ef88e7527be230b934e2518ebaaee34fb65235b1f00a67ef585ac40ffc7370281f38ce75eb7471731be888c0d0a90faa989c475f38cc0b4539ed7c8d67ef8e9048864b5153877294f7eddff71edc0b09e12b181cad5106746b6306f241ff2af95967ab60572cb74723b52e35a229827e13d343e6f3a465f11754405e7c812b29b1296299c9ce05d2334b1cbc135eead57be0a0302c638ddf335265ae975015f70f4fc855fad7579551ea250efc6449d487b56784f6d51af882c5f3346fd492b8487de526c3e1cf32cc7e9b254705312741b98e95312052eeb7f82451d432ca484357c0956f1f190700351c8110644a9e38de4b3b2a616d33a0ac128446fa7b5f7b20000f9c8c4154e6beffaf0ecf57657c561dcbab0ac31577adada0c82a8a1a682e80d76faa20ef71cbd90da94fe053671983e4e24a3eece89b89465020a96cf3972abb790526b", 0x563}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f00000009c0)}, {0x0}, {&(0x7f00000007c0)="a8d23b904fdfbafa4d2f919b6fcde32e0615904e10027553d97e7772e746933880a5312d2d29a247db6692445fd91a0e631a2fbf127d6a8ed479cb68a2832d2fa7ddb896c5009ea29bd68d72b2c5f857366453caa3d65eea860bbded", 0x5c}, {&(0x7f0000000ac0)}, {0x0}], 0x7, &(0x7f0000000280)=ANY=[], 0x78, 0x48080}}, {{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="240000000100000001b68d9e4467eb6491d0eaee4476d3000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0c0000000100000001000000"], 0x30, 0x20008000}}], 0x3, 0x0) unshare(0x22020400) socket$inet6(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r8, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0xd8) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r10, &(0x7f0000000340)=ANY=[], 0x6) recvmmsg(r10, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 1.253480971s ago: executing program 1 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x209, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) listen(r3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r6, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20044015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x4004743a, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x4000000000001f0, 0x0) 1.238117282s ago: executing program 0 (id=500): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x8000000000000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x0) madvise(&(0x7f0000bdb000/0x2000)=nil, 0x2000, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x2c09, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@mss, @sack_perm, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.03980016s ago: executing program 0 (id=501): syz_open_dev$loop(&(0x7f0000000080), 0x7f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x1000, &(0x7f0000000040), 0x4, r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x32) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102399, 0x18fff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) r4 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r5 = socket$inet6(0xa, 0x2, 0x3a) syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x9c0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0xb0}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x9, 0x0, 0x11) r6 = dup(r5) bind$unix(r6, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r7, r7}, &(0x7f00000000c0)=""/28, 0x1c, &(0x7f00000001c0)={&(0x7f0000000140)={'poly1305\x00'}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000000)={0x3}) 359.296105ms ago: executing program 3 (id=502): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000, &(0x7f00001fb000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ad"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 48.582879ms ago: executing program 1 (id=503): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000003010000000000000002000020d3"]) (fail_nth: 37) 0s ago: executing program 3 (id=504): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup2(r1, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_int(r7, 0x29, 0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0xb0}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39576' (ED25519) to the list of known hosts. [ 50.787176][ T5314] cgroup: Unknown subsys name 'net' [ 51.161648][ T5314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.849361][ T5314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.249234][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.253392][ T5356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.259379][ T5363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.262596][ T5363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.266820][ T5357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.271470][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.271904][ T5363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.278594][ T5363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.281621][ T5363] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.283851][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.284615][ T5363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.291514][ T5363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.296102][ T5363] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.296548][ T5366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.298737][ T5363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.302396][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.307935][ T5366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.309366][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.311851][ T5366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.314817][ T5356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.318308][ T5366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.324017][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.325015][ T5363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.327421][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.766100][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 59.795833][ T5353] chnl_net:caif_netlink_parms(): no params data found [ 59.920512][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 59.960915][ T5361] chnl_net:caif_netlink_parms(): no params data found [ 60.054847][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.057419][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.060008][ T5353] bridge_slave_0: entered allmulticast mode [ 60.063929][ T5353] bridge_slave_0: entered promiscuous mode [ 60.068975][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.071391][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.074604][ T5348] bridge_slave_0: entered allmulticast mode [ 60.078400][ T5348] bridge_slave_0: entered promiscuous mode [ 60.131912][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.134553][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.137222][ T5353] bridge_slave_1: entered allmulticast mode [ 60.139937][ T5353] bridge_slave_1: entered promiscuous mode [ 60.143278][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.146497][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.149420][ T5348] bridge_slave_1: entered allmulticast mode [ 60.153227][ T5348] bridge_slave_1: entered promiscuous mode [ 60.281324][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.326600][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.329227][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.332056][ T5347] bridge_slave_0: entered allmulticast mode [ 60.337521][ T5347] bridge_slave_0: entered promiscuous mode [ 60.343886][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.349506][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.358709][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.361378][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.363882][ T5347] bridge_slave_1: entered allmulticast mode [ 60.367823][ T5347] bridge_slave_1: entered promiscuous mode [ 60.375346][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.594908][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.597813][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.600684][ T5361] bridge_slave_0: entered allmulticast mode [ 60.604550][ T5361] bridge_slave_0: entered promiscuous mode [ 60.609447][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.612588][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.615786][ T5361] bridge_slave_1: entered allmulticast mode [ 60.619213][ T5361] bridge_slave_1: entered promiscuous mode [ 60.629878][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.637318][ T5353] team0: Port device team_slave_0 added [ 60.642564][ T5348] team0: Port device team_slave_0 added [ 60.672546][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.678821][ T5353] team0: Port device team_slave_1 added [ 60.687321][ T5348] team0: Port device team_slave_1 added [ 60.820605][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.831994][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.857385][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.860515][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.871798][ T5353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.968574][ T5347] team0: Port device team_slave_0 added [ 60.972119][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.975255][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.983987][ T5353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.988807][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.991776][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.002676][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.009063][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.011848][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.022702][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.032459][ T5361] team0: Port device team_slave_0 added [ 61.037265][ T5347] team0: Port device team_slave_1 added [ 61.072560][ T5361] team0: Port device team_slave_1 added [ 61.156306][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.159247][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.169781][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.176118][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.178971][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.189541][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.198797][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.201519][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.210929][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.302641][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.305298][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.314330][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.322418][ T5348] hsr_slave_0: entered promiscuous mode [ 61.327418][ T5348] hsr_slave_1: entered promiscuous mode [ 61.349609][ T5353] hsr_slave_0: entered promiscuous mode [ 61.352382][ T5353] hsr_slave_1: entered promiscuous mode [ 61.358131][ T5353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.361470][ T5353] Cannot create hsr debugfs directory [ 61.384615][ T5360] Bluetooth: hci3: command tx timeout [ 61.386820][ T5360] Bluetooth: hci2: command tx timeout [ 61.386925][ T4778] Bluetooth: hci0: command tx timeout [ 61.388812][ T5360] Bluetooth: hci1: command tx timeout [ 61.524494][ T5347] hsr_slave_0: entered promiscuous mode [ 61.527208][ T5347] hsr_slave_1: entered promiscuous mode [ 61.530390][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.533556][ T5347] Cannot create hsr debugfs directory [ 61.568430][ T5361] hsr_slave_0: entered promiscuous mode [ 61.571812][ T5361] hsr_slave_1: entered promiscuous mode [ 61.576291][ T5361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.579066][ T5361] Cannot create hsr debugfs directory [ 62.056248][ T5348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.063070][ T5348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.080266][ T5348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.090370][ T5348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.112210][ T5353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.121060][ T5353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.129097][ T5353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.134944][ T5353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.181245][ T5361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.190075][ T5361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.202167][ T5361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.214208][ T5361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.263511][ T5347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.272163][ T5347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.279983][ T5347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.303979][ T5347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.410025][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.471301][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.483710][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.498084][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.501930][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.516944][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.538676][ T5353] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.543435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.546772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.568999][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.571915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.579852][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.610395][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.613556][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.637071][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.640200][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.657182][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.671399][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.674470][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.721036][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.742490][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.745558][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.753040][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.756111][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.905573][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.958212][ T5353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.964369][ T5348] veth0_vlan: entered promiscuous mode [ 62.985399][ T5348] veth1_vlan: entered promiscuous mode [ 63.018828][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.036522][ T5353] veth0_vlan: entered promiscuous mode [ 63.075103][ T5353] veth1_vlan: entered promiscuous mode [ 63.082208][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.088039][ T5348] veth0_macvtap: entered promiscuous mode [ 63.099860][ T5348] veth1_macvtap: entered promiscuous mode [ 63.145814][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.152681][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.162761][ T5348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.167799][ T5348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.171402][ T5348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.177924][ T5348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.194234][ T5361] veth0_vlan: entered promiscuous mode [ 63.202891][ T5353] veth0_macvtap: entered promiscuous mode [ 63.219190][ T5361] veth1_vlan: entered promiscuous mode [ 63.223201][ T5353] veth1_macvtap: entered promiscuous mode [ 63.281901][ T5347] veth0_vlan: entered promiscuous mode [ 63.294857][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.299643][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.305983][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.327402][ T5347] veth1_vlan: entered promiscuous mode [ 63.340631][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.341244][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.347048][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.348785][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.357988][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.361839][ T5361] veth0_macvtap: entered promiscuous mode [ 63.394652][ T5361] veth1_macvtap: entered promiscuous mode [ 63.409525][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.411846][ T5353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.413145][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.418169][ T5353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.423955][ T5353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.427711][ T5353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.463947][ T5360] Bluetooth: hci0: command tx timeout [ 63.463974][ T4778] Bluetooth: hci3: command tx timeout [ 63.468620][ T66] Bluetooth: hci2: command tx timeout [ 63.476555][ T4778] Bluetooth: hci1: command tx timeout [ 63.490929][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.495710][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.499693][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.504610][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.510230][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.514464][ T5347] veth0_macvtap: entered promiscuous mode [ 63.528073][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.532631][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.537291][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.541646][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.547677][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.550496][ T5347] veth1_macvtap: entered promiscuous mode [ 63.578396][ T5361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.581584][ T5361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.585061][ T5361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.588831][ T5361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.623098][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.629763][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.634001][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.638439][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.642454][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.647537][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.651846][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.656272][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.662218][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.683212][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.688074][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.692076][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.695296][ T5412] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 63.696714][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.703488][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.708633][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.714666][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.738442][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.741867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.750964][ T5347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.755679][ T5347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.759967][ T5347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.763947][ T5347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.781193][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.785857][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.840914][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.853706][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.871348][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.895539][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.935458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.938560][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.984417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.095016][ T5423] binder: 5413:5423 ioctl 4018620d 0 returned -22 [ 64.267890][ T5418] 9pnet_fd: Insufficient options for proto=fd [ 64.781139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.462459][ T5431] overlayfs: failed to resolve './file1': -2 [ 65.543930][ T4778] Bluetooth: hci1: command tx timeout [ 65.544081][ T66] Bluetooth: hci3: command tx timeout [ 65.545362][ T5360] Bluetooth: hci2: command tx timeout [ 65.545415][ T5366] Bluetooth: hci0: command tx timeout [ 65.781185][ T5435] 9pnet_fd: Insufficient options for proto=fd [ 66.258101][ T5432] netlink: 'syz.3.5': attribute type 4 has an invalid length. [ 66.262989][ T5432] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.5'. [ 66.333880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.369015][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 66.985784][ T5443] binder: 5438:5443 ioctl 4018620d 0 returned -22 [ 67.033780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 67.442075][ T5446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.625244][ T66] Bluetooth: hci1: command tx timeout [ 67.625747][ T5366] Bluetooth: hci2: command tx timeout [ 67.629914][ T4778] Bluetooth: hci3: command tx timeout [ 67.633769][ T5366] Bluetooth: hci0: command tx timeout [ 67.903825][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.010021][ T5450] 9pnet_fd: Insufficient options for proto=fd [ 68.024111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.057454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.099005][ T8] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 68.274549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.291455][ T8] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 68.295341][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.315240][ T8] usb 5-1: config 0 descriptor?? [ 68.354874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.942899][ T5452] overlayfs: missing 'lowerdir' [ 69.242741][ T5454] netlink: 'syz.3.11': attribute type 4 has an invalid length. [ 69.250489][ T5454] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.11'. [ 69.250704][ T5461] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 69.256605][ T5461] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.259930][ T5461] vhci_hcd vhci_hcd.0: Device attached [ 69.292483][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 69.444868][ T5467] vhci_hcd: connection closed [ 69.446382][ T8] usb 5-1: string descriptor 0 read error: -71 [ 69.448858][ T99] vhci_hcd: stop threads [ 69.453764][ T99] vhci_hcd: release socket [ 69.458921][ T99] vhci_hcd: disconnect device [ 69.464247][ T1417] vhci_hcd: vhci_device speed not set [ 69.473370][ T8] usb 5-1: USB disconnect, device number 2 [ 69.579194][ T5466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 69.582414][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 69.586815][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.591119][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.594567][ T5466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.208018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.215275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 70.226293][ T5479] overlayfs: failed to resolve './file1': -2 [ 70.885123][ T5481] netlink: 'syz.0.16': attribute type 4 has an invalid length. [ 70.888461][ T5481] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.16'. [ 71.621496][ T5485] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 71.625057][ T5485] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.17'. [ 71.716980][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.719979][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.974071][ T5487] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.398880][ T5491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19'. [ 72.402178][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 72.414182][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.428173][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.431350][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.456512][ T5494] 9pnet_fd: Insufficient options for proto=fd [ 73.082482][ T5496] binder: 5495:5496 ioctl 4018620d 0 returned -22 [ 73.493113][ T5511] 9pnet_fd: Insufficient options for proto=fd [ 74.096673][ T5514] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.433736][ T1417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.669393][ T1417] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 74.706960][ T5517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.26'. [ 74.710994][ T5517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 74.718834][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.724404][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.727676][ T5517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.731566][ T1417] usb 6-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 74.735606][ T1417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.745537][ T1417] usb 6-1: config 0 descriptor?? [ 74.942797][ T5521] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 74.946696][ T5521] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.27'. [ 75.101022][ T5515] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 75.103840][ T5515] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.113409][ T5515] vhci_hcd vhci_hcd.0: Device attached [ 75.147613][ T5524] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use) [ 75.196940][ T5526] vhci_hcd: connection closed [ 75.197419][ T99] vhci_hcd: stop threads [ 75.200528][ T99] vhci_hcd: release socket [ 75.202196][ T99] vhci_hcd: disconnect device [ 75.206449][ T1417] usb 6-1: string descriptor 0 read error: -71 [ 75.222444][ T1417] usb 6-1: USB disconnect, device number 2 [ 75.642220][ T5531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'. [ 76.443808][ T5537] Bluetooth: MGMT ver 1.23 [ 76.876877][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 77.149678][ T5547] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.276508][ T5548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 77.503754][ T5410] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.518824][ T5552] ======================================================= [ 77.518824][ T5552] WARNING: The mand mount option has been deprecated and [ 77.518824][ T5552] and is ignored by this kernel. Remove the mand [ 77.518824][ T5552] option from the mount to silence this warning. [ 77.518824][ T5552] ======================================================= [ 77.705039][ T5410] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 77.822907][ T5410] usb 6-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 77.846173][ T5410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.860821][ T5410] usb 6-1: config 0 descriptor?? [ 78.264211][ T5556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 78.369249][ T5557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'. [ 78.427222][ T5560] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 78.429996][ T5560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.440610][ T5560] vhci_hcd vhci_hcd.0: Device attached [ 78.481225][ T5564] overlayfs: failed to resolve './file1': -2 [ 78.513864][ T5366] Bluetooth: hci0: command 0x0401 tx timeout [ 78.516640][ T4778] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 78.578426][ T5561] vhci_hcd: connection closed [ 78.579265][ T1103] vhci_hcd: stop threads [ 78.583245][ T5410] usb 6-1: string descriptor 0 read error: -71 [ 78.583420][ T1103] vhci_hcd: release socket [ 78.591644][ T1103] vhci_hcd: disconnect device [ 78.616314][ T5410] usb 6-1: USB disconnect, device number 3 [ 78.695174][ T8] vhci_hcd: vhci_device speed not set [ 79.316693][ T5566] netlink: 'syz.3.38': attribute type 4 has an invalid length. [ 79.319918][ T5566] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.38'. [ 79.467407][ T5572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.478730][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.481824][ T5572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.541112][ T5576] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.823776][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.952107][ T5579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'. [ 80.004391][ T30] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 80.027777][ T30] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 80.034381][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.044490][ T30] usb 5-1: config 0 descriptor?? [ 80.270310][ T5583] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 80.282440][ T5583] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.44'. [ 80.286356][ T5583] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 80.307718][ T5581] overlayfs: failed to resolve './file1': -2 [ 80.411957][ T5575] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 80.414582][ T5575] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.429812][ T5575] vhci_hcd vhci_hcd.0: Device attached [ 80.476465][ T1078] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 80.480431][ T1078] sr 2:0:0:0: [sr0] tag#3 Sense Key : Illegal Request [current] [ 80.485825][ T1078] sr 2:0:0:0: [sr0] tag#3 Add. Sense: Invalid command operation code [ 80.489580][ T1078] sr 2:0:0:0: [sr0] tag#3 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 80.493340][ T1078] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 80.498666][ T1078] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 80.502380][ T1078] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 80.506755][ T5588] vhci_hcd: connection closed [ 80.507516][ T64] vhci_hcd: stop threads [ 80.507645][ T30] usb 5-1: string descriptor 0 read error: -71 [ 80.509614][ T64] vhci_hcd: release socket [ 80.509631][ T64] vhci_hcd: disconnect device [ 80.523761][ T30] usb 5-1: USB disconnect, device number 3 [ 80.557955][ T5587] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 80.561097][ T5587] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.43'. [ 80.808705][ T5594] overlayfs: failed to resolve './file1': -2 [ 81.054190][ T5595] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 81.057390][ T5595] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.45'. [ 81.200781][ T5597] netlink: 44 bytes leftover after parsing attributes in process `syz.0.46'. [ 81.204178][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.206755][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.209182][ T5597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.243951][ T5600] overlayfs: missing 'lowerdir' [ 81.473534][ T5605] overlayfs: failed to resolve './file1': -2 [ 81.604161][ T5606] netlink: 'syz.0.49': attribute type 4 has an invalid length. [ 81.628328][ T5601] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 81.949572][ T58] cfg80211: failed to load regulatory.db [ 82.085069][ T5612] __nla_validate_parse: 3 callbacks suppressed [ 82.085080][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.50'. [ 82.636710][ T5614] netlink: 44 bytes leftover after parsing attributes in process `syz.2.51'. [ 82.642309][ T5614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 82.647244][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.650934][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.654245][ T5614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.125803][ T5621] syz.3.53[5621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.125990][ T5621] syz.3.53[5621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.306164][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 83.330226][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 84.741267][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.745635][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.048224][ T5647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.58'. [ 85.288862][ T5646] kvm: kvm [5645]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xbb1414ac00af [ 85.527530][ T5652] process 'syz.2.60' launched './file0' with NULL argv: empty string added [ 86.736833][ T5667] syz.3.65[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.736975][ T5667] syz.3.65[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.793675][ T5665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'. [ 86.946480][ T5664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.63'. [ 87.028073][ T5671] netlink: 44 bytes leftover after parsing attributes in process `syz.1.66'. [ 87.032065][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 87.037252][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.422405][ T5682] netlink: 44 bytes leftover after parsing attributes in process `syz.1.69'. [ 88.427678][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 88.431453][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.462679][ T5680] 9pnet_fd: Insufficient options for proto=fd [ 88.812936][ T5687] overlayfs: missing 'lowerdir' [ 89.221953][ T5689] 9pnet_fd: Insufficient options for proto=fd [ 89.392033][ T5688] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 89.395526][ T5688] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.71'. [ 89.586998][ T5696] binder: 5691:5696 ioctl 4018620d 0 returned -22 [ 90.146970][ T5701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.74'. [ 90.150497][ T5701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 90.155140][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.672279][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.676150][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.883504][ T5711] overlayfs: failed to resolve './file1': -2 [ 91.042460][ T5712] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 91.045917][ T5712] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.77'. [ 91.767775][ T5717] overlayfs: failed to resolve './file1': -2 [ 91.976038][ T5718] netlink: 'syz.1.78': attribute type 4 has an invalid length. [ 91.979122][ T5718] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.78'. [ 92.141281][ T5720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.79'. [ 92.147057][ T5720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'. [ 92.150711][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.154515][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.157588][ T5720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.421088][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 93.716519][ T5738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.843330][ T5735] __nla_validate_parse: 1 callbacks suppressed [ 93.843347][ T5735] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 93.854048][ T5735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 93.858008][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.861342][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.864622][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.023967][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 94.224887][ T30] usb 7-1: too many configurations: 12, using maximum allowed: 8 [ 94.285949][ T30] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 94.292305][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.304344][ T30] usb 7-1: config 0 descriptor?? [ 94.402523][ T5749] overlayfs: missing 'lowerdir' [ 94.437652][ T5745] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 94.443679][ T5745] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.87'. [ 94.701929][ T5738] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 94.704893][ T5738] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.711385][ T5738] vhci_hcd vhci_hcd.0: Device attached [ 94.721171][ T5750] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 94.724482][ T5750] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.88'. [ 94.804950][ T5753] vhci_hcd: connection closed [ 94.805915][ T5639] vhci_hcd: stop threads [ 94.809906][ T5639] vhci_hcd: release socket [ 94.811877][ T5639] vhci_hcd: disconnect device [ 94.825679][ T30] usb 7-1: string descriptor 0 read error: -71 [ 94.846688][ T30] usb 7-1: USB disconnect, device number 2 [ 95.709928][ T5760] 9pnet_fd: Insufficient options for proto=fd [ 96.103782][ T5366] Bluetooth: hci0: command 0x0401 tx timeout [ 96.103835][ T4778] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 96.560966][ T5769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 96.838393][ T5778] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.225001][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 97.495666][ T10] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 97.551144][ T10] usb 6-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 97.563727][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.577784][ T10] usb 6-1: config 0 descriptor?? [ 97.980631][ T5783] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 97.983004][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.988666][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 98.183921][ T5410] vhci_hcd: vhci_device speed not set [ 98.234839][ T5790] syz.2.95[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.234983][ T5790] syz.2.95[5790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.253968][ T5410] usb 15-2: new full-speed USB device number 3 using vhci_hcd [ 98.364782][ T5795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.683748][ T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 98.876023][ T30] usb 8-1: too many configurations: 12, using maximum allowed: 8 [ 98.909897][ T30] usb 8-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 98.914223][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.931202][ T30] usb 8-1: config 0 descriptor?? [ 99.214779][ T5784] vhci_hcd: connection reset by peer [ 99.217418][ T1099] vhci_hcd: stop threads [ 99.222819][ T1099] vhci_hcd: release socket [ 99.224407][ T10] usb 6-1: string descriptor 0 read error: -71 [ 99.228969][ T1099] vhci_hcd: disconnect device [ 99.254269][ T10] usb 6-1: USB disconnect, device number 4 [ 99.340257][ T5795] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 99.343105][ T5795] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.360970][ T5795] vhci_hcd vhci_hcd.0: Device attached [ 99.443992][ T5799] vhci_hcd: connection closed [ 99.444620][ T1101] vhci_hcd: stop threads [ 99.445117][ T30] usb 8-1: string descriptor 0 read error: -71 [ 99.447533][ T1101] vhci_hcd: release socket [ 99.452158][ T1101] vhci_hcd: disconnect device [ 99.452511][ T30] usb 8-1: USB disconnect, device number 2 [ 100.050437][ T5807] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 100.415001][ T5811] overlayfs: missing 'lowerdir' [ 100.440124][ T5814] overlayfs: missing 'lowerdir' [ 100.721993][ T5815] netlink: 'syz.3.103': attribute type 4 has an invalid length. [ 100.731847][ T5815] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.103'. [ 100.960240][ T5821] 9pnet_fd: Insufficient options for proto=fd [ 101.057714][ T5816] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 101.066252][ T5816] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.101'. [ 101.905215][ T5829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 101.994802][ T5830] binder: 5823:5830 ioctl 4018620d 0 returned -22 [ 102.862312][ T5833] overlayfs: failed to resolve './file1': -2 [ 103.172355][ T5834] netlink: 'syz.2.107': attribute type 4 has an invalid length. [ 103.176029][ T5834] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.107'. [ 103.223969][ T5836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.108'. [ 103.228724][ T5836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 103.232941][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.387097][ T5410] vhci_hcd: vhci_device speed not set [ 103.404688][ T5840] overlayfs: missing 'lowerdir' [ 103.420787][ T5838] overlayfs: failed to resolve './file1': -2 [ 103.928384][ T5845] overlayfs: failed to resolve './file1': -2 [ 104.042038][ T5842] netlink: 'syz.3.109': attribute type 4 has an invalid length. [ 104.046436][ T5842] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.109'. [ 104.123989][ T5846] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 104.126652][ T5846] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.111'. [ 104.223857][ T5841] netlink: 'syz.0.110': attribute type 4 has an invalid length. [ 104.227063][ T5841] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.110'. [ 104.296678][ T5849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 105.434182][ T5859] overlayfs: missing 'lowerdir' [ 105.525050][ T5862] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 106.070437][ T5863] netlink: 'syz.0.115': attribute type 4 has an invalid length. [ 106.077513][ T5863] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.115'. [ 107.473488][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 108.192549][ T5880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'. [ 108.600854][ T5882] overlayfs: failed to resolve './file1': -2 [ 108.804379][ T5883] netlink: 'syz.0.120': attribute type 4 has an invalid length. [ 108.808606][ T5883] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.120'. [ 109.504139][ T5885] overlayfs: missing 'lowerdir' [ 109.658662][ T5887] overlayfs: failed to resolve './file1': -2 [ 109.792353][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.123'. [ 109.796484][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.123'. [ 109.800331][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.093939][ T5897] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 110.122442][ T5897] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.124'. [ 110.126691][ T5897] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 110.140780][ T5890] netlink: 'syz.2.121': attribute type 4 has an invalid length. [ 110.145476][ T5890] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.121'. [ 110.150969][ T5892] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 110.153856][ T5892] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.122'. [ 110.286429][ T5899] 9pnet: Could not find request transport: fd0x000000000000000d [ 111.837060][ T5915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.003289][ T5916] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 112.007051][ T5916] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.130'. [ 112.113841][ T5793] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 112.296677][ T5793] usb 7-1: too many configurations: 12, using maximum allowed: 8 [ 112.512293][ T5793] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 112.526766][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.549282][ T5793] usb 7-1: config 0 descriptor?? [ 112.928265][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.131'. [ 113.135145][ T5923] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.184749][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 113.189877][ T5923] Zero length message leads to an empty skb [ 113.460472][ T5915] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 113.462686][ T5915] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.468661][ T5915] vhci_hcd vhci_hcd.0: Device attached [ 113.558051][ T5930] vhci_hcd: connection closed [ 113.558420][ T1150] vhci_hcd: stop threads [ 113.562420][ T1150] vhci_hcd: release socket [ 113.565360][ T5793] usb 7-1: string descriptor 0 read error: -71 [ 113.573871][ T1150] vhci_hcd: disconnect device [ 113.578090][ T5793] usb 7-1: USB disconnect, device number 3 [ 113.578424][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.134'. [ 113.786256][ T5935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.093791][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 114.294558][ T25] usb 8-1: too many configurations: 12, using maximum allowed: 8 [ 114.309657][ T25] usb 8-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 114.321363][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.330505][ T25] usb 8-1: config 0 descriptor?? [ 114.490783][ T5942] 9pnet: Could not find request transport: fd0x000000000000000d [ 114.677751][ T5946] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 114.680398][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.684702][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 114.778436][ T5941] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 114.781902][ T5941] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.137'. [ 114.893839][ T56] vhci_hcd: vhci_device speed not set [ 114.963724][ T56] usb 19-2: new full-speed USB device number 2 using vhci_hcd [ 115.333986][ T5953] overlayfs: failed to resolve './file1': -2 [ 116.004727][ T5956] netlink: 'syz.1.138': attribute type 4 has an invalid length. [ 116.008024][ T5956] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.138'. [ 116.126427][ T5957] netlink: 'syz.0.146': attribute type 4 has an invalid length. [ 116.130733][ T5957] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.146'. [ 116.910722][ T5948] vhci_hcd: connection reset by peer [ 116.925134][ T25] usb 8-1: string descriptor 0 read error: -71 [ 116.925439][ T1099] vhci_hcd: stop threads [ 116.929643][ T1099] vhci_hcd: release socket [ 116.934166][ T25] usb 8-1: USB disconnect, device number 3 [ 116.945789][ T1099] vhci_hcd: disconnect device [ 116.975331][ T5966] 9pnet_fd: Insufficient options for proto=fd [ 117.163456][ T5971] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.182841][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 117.322990][ T5973] overlayfs: failed to resolve './file1': -2 [ 117.331558][ T5975] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.449232][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.151'. [ 117.555584][ T5976] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 117.558815][ T5976] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.142'. [ 117.738801][ T5981] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.749831][ T5980] overlayfs: failed to resolve './file1': -2 [ 117.786768][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 118.064383][ T5984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.144'. [ 118.067432][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 118.070593][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.077038][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.079637][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.112435][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 118.162920][ T5982] netlink: 'syz.2.143': attribute type 4 has an invalid length. [ 118.177155][ T5982] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.143'. [ 118.792493][ T5993] 9pnet: Could not find request transport: fd0x000000000000000d [ 119.538488][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.3.148'. [ 119.542365][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 119.546443][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.685844][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.694673][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.698113][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.716360][ T6006] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.822169][ T6008] overlayfs: failed to resolve './file1': -2 [ 120.023758][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.116813][ T56] vhci_hcd: vhci_device speed not set [ 120.181160][ T6015] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.214607][ T58] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 120.269000][ T58] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 120.273000][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.288839][ T58] usb 5-1: config 0 descriptor?? [ 120.309332][ T6009] netlink: 'syz.3.152': attribute type 4 has an invalid length. [ 120.313506][ T6017] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 120.320439][ T6018] 9pnet_fd: Insufficient options for proto=fd [ 120.322713][ T6017] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 120.682987][ T6020] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 120.685565][ T6020] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 120.689153][ T6020] vhci_hcd vhci_hcd.0: Device attached [ 120.893740][ T25] vhci_hcd: vhci_device speed not set [ 120.963844][ T25] usb 13-2: new full-speed USB device number 3 using vhci_hcd [ 121.415610][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.273417][ T58] usb 5-1: string descriptor 0 read error: -71 [ 122.273755][ T6021] vhci_hcd: connection reset by peer [ 122.301402][ T1103] vhci_hcd: stop threads [ 122.303149][ T58] usb 5-1: USB disconnect, device number 4 [ 122.303179][ T1103] vhci_hcd: release socket [ 122.335496][ T1103] vhci_hcd: disconnect device [ 122.432708][ T6040] __nla_validate_parse: 10 callbacks suppressed [ 122.432720][ T6040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.160'. [ 122.438730][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.160'. [ 122.442226][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.197272][ T6048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.163'. [ 123.201055][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 123.205181][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.208417][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.211030][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.286049][ T6053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.164'. [ 123.289969][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 123.298401][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.526539][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 123.862226][ T6061] 9pnet_fd: Insufficient options for proto=fd [ 124.941583][ T6066] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.037748][ T6068] overlayfs: failed to resolve './file1': -2 [ 125.273804][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.455335][ T58] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 125.487115][ T58] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 125.491090][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.514464][ T58] usb 5-1: config 0 descriptor?? [ 125.534335][ T6069] netlink: 'syz.3.169': attribute type 4 has an invalid length. [ 125.537842][ T6069] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.169'. [ 125.939733][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 125.942558][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.954830][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 127.917586][ T6077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.170'. [ 127.923989][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 127.927664][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.930935][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.933763][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.262246][ T6073] vhci_hcd: connection reset by peer [ 128.262430][ T58] usb 5-1: string descriptor 0 read error: -71 [ 128.273863][ T1101] vhci_hcd: stop threads [ 128.275696][ T1101] vhci_hcd: release socket [ 128.284442][ T58] usb 5-1: USB disconnect, device number 5 [ 128.294543][ T1101] vhci_hcd: disconnect device [ 128.373867][ T25] vhci_hcd: vhci_device speed not set [ 129.455278][ T6107] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x7 [ 129.461208][ T6107] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.179'. [ 129.465246][ T6107] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 129.791292][ T6109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.180'. [ 129.796766][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 129.800705][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.805255][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.808483][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.596120][ T6117] 9pnet_fd: Insufficient options for proto=fd [ 130.606240][ T6115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.182'. [ 130.610473][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 130.618207][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.621550][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.624697][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.819551][ T6119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.183'. [ 130.837030][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 130.841092][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.921997][ T6125] input: syz0 as /devices/virtual/input/input5 [ 131.263338][ T6137] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 131.296123][ T6137] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.190'. [ 131.299999][ T6137] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 131.428146][ T6134] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 132.308046][ T6148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 132.623735][ T5351] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 132.836491][ T5351] usb 6-1: too many configurations: 12, using maximum allowed: 8 [ 132.914080][ T5351] usb 6-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 132.918180][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.924242][ T5351] usb 6-1: config 0 descriptor?? [ 133.041829][ T6150] overlayfs: missing 'lowerdir' [ 133.147216][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.150225][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.667281][ T6155] __nla_validate_parse: 1 callbacks suppressed [ 133.667296][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.0.196'. [ 133.670035][ T6151] netlink: 'syz.3.194': attribute type 4 has an invalid length. [ 133.670429][ T6155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.196'. [ 133.675762][ T6151] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.194'. [ 133.684790][ T6158] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 133.687059][ T6158] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.691550][ T6158] vhci_hcd vhci_hcd.0: Device attached [ 133.763912][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.771563][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.774647][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.884256][ T5793] vhci_hcd: vhci_device speed not set [ 133.963871][ T5793] usb 15-2: new full-speed USB device number 4 using vhci_hcd [ 134.080116][ T6164] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 134.085157][ T6164] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.197'. [ 134.089328][ T6164] openvswitch: netlink: Flow key attr not present in new flow. [ 134.305644][ T6166] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.393566][ T6160] vhci_hcd: connection reset by peer [ 134.398037][ T5351] usb 6-1: string descriptor 0 read error: -71 [ 134.398220][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.198'. [ 134.398376][ T13] vhci_hcd: stop threads [ 134.398387][ T13] vhci_hcd: release socket [ 134.399102][ T13] vhci_hcd: disconnect device [ 134.407376][ T5351] usb 6-1: USB disconnect, device number 5 [ 134.629351][ T6173] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 134.638030][ T6173] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.201'. [ 134.641239][ T6173] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 134.966823][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.970721][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.143703][ T6183] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 135.147432][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.205'. [ 135.151343][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.357434][ T6188] 9pnet_fd: Insufficient options for proto=fd [ 136.541621][ T6207] FAULT_INJECTION: forcing a failure. [ 136.541621][ T6207] name failslab, interval 1, probability 0, space 0, times 1 [ 136.546565][ T6207] CPU: 3 UID: 0 PID: 6207 Comm: syz.1.209 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 136.550280][ T6207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.554792][ T6207] Call Trace: [ 136.556050][ T6207] [ 136.557067][ T6207] dump_stack_lvl+0x16c/0x1f0 [ 136.558704][ T6207] should_fail_ex+0x497/0x5b0 [ 136.560352][ T6207] ? fs_reclaim_acquire+0xae/0x160 [ 136.562404][ T6207] should_failslab+0xc2/0x120 [ 136.564438][ T6207] __kmalloc_noprof+0xcb/0x410 [ 136.566488][ T6207] ? __pfx_lock_acquire+0x10/0x10 [ 136.568643][ T6207] tomoyo_realpath_from_path+0xbf/0x710 [ 136.570562][ T6207] ? tomoyo_profile+0x47/0x60 [ 136.572405][ T6207] tomoyo_path_number_perm+0x245/0x5b0 [ 136.574267][ T6207] ? tomoyo_path_number_perm+0x232/0x5b0 [ 136.576219][ T6207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 136.578352][ T6207] ? __pfx_lock_release+0x10/0x10 [ 136.580129][ T6207] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.582238][ T6207] ? __fget_files+0x256/0x400 [ 136.583897][ T6207] security_file_ioctl_compat+0x75/0xc0 [ 136.585804][ T6207] __do_compat_sys_ioctl+0x5d/0x330 [ 136.587588][ T6207] __do_fast_syscall_32+0x73/0x120 [ 136.589355][ T6207] do_fast_syscall_32+0x32/0x80 [ 136.591078][ T6207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.593634][ T6207] RIP: 0023:0xf7fd5579 [ 136.595044][ T6207] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.601750][ T6207] RSP: 002b:00000000f572456c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 136.605369][ T6207] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000af01 [ 136.608246][ T6207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.611506][ T6207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.614774][ T6207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.617360][ T6207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.620629][ T6207] [ 136.622500][ T6207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.002165][ T39] audit: type=1800 audit(1725454260.751:2): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.208" name="/newroot/49/bus" dev="tmpfs" ino=321 res=0 errno=0 [ 137.010793][ T6212] overlayfs: missing 'lowerdir' [ 137.065429][ T6215] fuse: Bad value for 'fd' [ 137.419522][ T6217] netlink: 'syz.1.211': attribute type 4 has an invalid length. [ 137.423120][ T6217] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.211'. [ 137.551529][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.214'. [ 137.555789][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.873125][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.873986][ T6233] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 137.877262][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.423953][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 138.615255][ T30] usb 7-1: too many configurations: 12, using maximum allowed: 8 [ 138.672609][ T30] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 138.676917][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.696553][ T30] usb 7-1: config 0 descriptor?? [ 138.979033][ T6244] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 138.982126][ T6244] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 138.986342][ T6244] vhci_hcd vhci_hcd.0: Device attached [ 139.074269][ T5793] vhci_hcd: vhci_device speed not set [ 139.203985][ T25] vhci_hcd: vhci_device speed not set [ 139.296861][ T25] usb 17-2: new full-speed USB device number 2 using vhci_hcd [ 139.866262][ T39] audit: type=1800 audit(1725454263.621:3): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.219" name="/newroot/51/bus" dev="tmpfs" ino=332 res=0 errno=0 [ 140.806958][ T6246] vhci_hcd: connection reset by peer [ 140.810224][ T30] usb 7-1: string descriptor 0 read error: -71 [ 140.813199][ T11] vhci_hcd: stop threads [ 140.813213][ T11] vhci_hcd: release socket [ 140.813287][ T11] vhci_hcd: disconnect device [ 140.817306][ T30] usb 7-1: USB disconnect, device number 4 [ 140.876559][ T6266] __nla_validate_parse: 2 callbacks suppressed [ 140.876569][ T6266] netlink: 44 bytes leftover after parsing attributes in process `syz.3.223'. [ 140.882385][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 140.888792][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.975614][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 140.987682][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 141.004003][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 141.030453][ T6274] netlink: 'syz.1.224': attribute type 4 has an invalid length. [ 141.034184][ T6274] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.224'. [ 141.343200][ T57] vcan0 speed is unknown, defaulting to 1000 [ 141.345877][ T6275] infiniband syz1: set active [ 141.347754][ T6275] infiniband syz1: added vcan0 [ 141.602661][ T6275] RDS/IB: syz1: added [ 141.616685][ T6275] smc: adding ib device syz1 with port count 1 [ 141.620428][ T6275] smc: ib device syz1 port 1 has pnetid [ 141.624746][ T30] vcan0 speed is unknown, defaulting to 1000 [ 141.647191][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 142.335531][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 142.542595][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 142.772701][ T6275] vcan0 speed is unknown, defaulting to 1000 [ 143.603481][ T6302] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 143.651177][ T6303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 143.953824][ T5410] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 144.003704][ T5351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.157084][ T5410] usb 7-1: too many configurations: 12, using maximum allowed: 8 [ 144.178368][ T6310] FAULT_INJECTION: forcing a failure. [ 144.178368][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 144.183075][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.1.236 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 144.186664][ T6310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.190881][ T6310] Call Trace: [ 144.192290][ T6310] [ 144.193539][ T6310] dump_stack_lvl+0x16c/0x1f0 [ 144.195514][ T6310] should_fail_ex+0x497/0x5b0 [ 144.197508][ T6310] ? fs_reclaim_acquire+0xae/0x160 [ 144.199641][ T6310] should_failslab+0xc2/0x120 [ 144.201262][ T6310] __kmalloc_noprof+0xcb/0x410 [ 144.202999][ T6310] ? find_held_lock+0x2d/0x110 [ 144.204641][ T6310] bpf_test_init.isra.0+0xa5/0x150 [ 144.206367][ T6310] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 144.208637][ T6310] bpf_prog_test_run_skb+0x250/0x2140 [ 144.210919][ T6310] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 144.213530][ T6310] ? fput+0x32/0x390 [ 144.215306][ T6310] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 144.217922][ T6310] __sys_bpf+0x1af6/0x55e0 [ 144.219480][ T6310] ? __pfx___sys_bpf+0x10/0x10 [ 144.221205][ T6310] ? ksys_write+0x12f/0x260 [ 144.222778][ T6310] ? find_held_lock+0x2d/0x110 [ 144.224418][ T6310] ? ksys_write+0x21c/0x260 [ 144.226274][ T6310] ? __pfx_lock_release+0x10/0x10 [ 144.228482][ T6310] ? vfs_write+0x14d/0x1140 [ 144.230467][ T6310] ? __mutex_unlock_slowpath+0x164/0x650 [ 144.232962][ T6310] ? fput+0x32/0x390 [ 144.234674][ T6310] ? ksys_write+0x1ab/0x260 [ 144.234690][ T5351] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 144.236705][ T6310] ? __pfx_ksys_write+0x10/0x10 [ 144.242230][ T6310] __ia32_sys_bpf+0x76/0xe0 [ 144.244262][ T6310] __do_fast_syscall_32+0x73/0x120 [ 144.246517][ T6310] do_fast_syscall_32+0x32/0x80 [ 144.248698][ T6310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.251484][ T6310] RIP: 0023:0xf7fd5579 [ 144.253313][ T6310] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.261775][ T6310] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 144.262676][ T5351] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 144.265422][ T6310] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200002c0 [ 144.265442][ T6310] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 144.265454][ T6310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.265465][ T6310] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.265476][ T6310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.265502][ T6310] [ 144.292407][ T5410] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 144.296601][ T5410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.299074][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.308984][ T5410] usb 7-1: config 0 descriptor?? [ 144.319737][ T5351] usb 5-1: config 0 descriptor?? [ 144.433835][ T25] vhci_hcd: vhci_device speed not set [ 144.638819][ T6303] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 144.641070][ T6303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.646890][ T6303] vhci_hcd vhci_hcd.0: Device attached [ 144.828935][ T6323] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 144.831807][ T6323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.835708][ T6323] vhci_hcd vhci_hcd.0: Device attached [ 144.964378][ T25] vhci_hcd: vhci_device speed not set [ 145.033850][ T25] usb 17-2: device descriptor read/64, error -110 [ 145.093813][ T58] vhci_hcd: vhci_device speed not set [ 145.185208][ T58] usb 13-2: new full-speed USB device number 4 using vhci_hcd [ 145.234281][ T25] vhci_hcd: vhci_device speed not set [ 145.325610][ T25] usb 17-2: new full-speed USB device number 3 using vhci_hcd [ 145.671066][ T6327] overlayfs: failed to resolve './file1': -2 [ 146.020995][ T6328] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 146.034789][ T6328] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.238'. [ 146.233059][ T6318] vhci_hcd: connection reset by peer [ 146.239546][ T5410] usb 7-1: string descriptor 0 read error: -71 [ 146.248793][ T5410] usb 7-1: USB disconnect, device number 5 [ 146.252137][ T64] vhci_hcd: stop threads [ 146.254472][ T64] vhci_hcd: release socket [ 146.257368][ T64] vhci_hcd: disconnect device [ 146.349623][ T6324] vhci_hcd: connection reset by peer [ 146.353515][ T5351] usb 5-1: string descriptor 0 read error: -71 [ 146.358842][ T1150] vhci_hcd: stop threads [ 146.360746][ T1150] vhci_hcd: release socket [ 146.362965][ T5351] usb 5-1: USB disconnect, device number 6 [ 146.363761][ T1150] vhci_hcd: disconnect device [ 146.533044][ T6332] trusted_key: syz.3.239 sent an empty control message without MSG_MORE. [ 146.537425][ T6332] FAULT_INJECTION: forcing a failure. [ 146.537425][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.541933][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.3.239 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 146.545659][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.549557][ T6332] Call Trace: [ 146.551033][ T6332] [ 146.552347][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 146.554304][ T6332] should_fail_ex+0x497/0x5b0 [ 146.556136][ T6332] _copy_from_user+0x30/0xf0 [ 146.558141][ T6332] get_compat_msghdr+0xa8/0x170 [ 146.560191][ T6332] ? __pfx_get_compat_msghdr+0x10/0x10 [ 146.562586][ T6332] ? kfree+0x245/0x3b0 [ 146.564393][ T6332] ? find_held_lock+0x2d/0x110 [ 146.566450][ T6332] ___sys_sendmsg+0x1b0/0x1e0 [ 146.568210][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.570373][ T6332] ? handle_mm_fault+0x52d/0xa60 [ 146.572107][ T6332] ? __pfx___might_resched+0x10/0x10 [ 146.574116][ T6332] ? __sys_sendmmsg+0x2bd/0x450 [ 146.576124][ T6332] __sys_sendmmsg+0x2a5/0x450 [ 146.578128][ T6332] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.580223][ T6332] ? fput+0x32/0x390 [ 146.581691][ T6332] ? ksys_write+0x1ab/0x260 [ 146.583443][ T6332] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 146.585766][ T6332] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 146.588644][ T6332] __do_fast_syscall_32+0x73/0x120 [ 146.590832][ T6332] do_fast_syscall_32+0x32/0x80 [ 146.592952][ T6332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.595695][ T6332] RIP: 0023:0xf7fe8579 [ 146.597225][ T6332] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.605250][ T6332] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 146.608563][ T6332] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020003dc0 [ 146.611968][ T6332] RDX: 0000000000000299 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.615271][ T6332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.618701][ T6332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.622170][ T6332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.625408][ T6332] [ 147.022569][ T6336] overlayfs: missing 'lowerdir' [ 147.139789][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'. [ 147.307576][ T6344] netlink: 'syz.2.240': attribute type 4 has an invalid length. [ 147.310404][ T6344] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.240'. [ 147.916233][ T6352] netlink: 'syz.1.243': attribute type 23 has an invalid length. [ 148.107448][ T4778] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 148.111252][ T4778] Bluetooth: hci2: Injecting HCI hardware error event [ 148.115739][ T4778] Bluetooth: hci2: hardware error 0x00 [ 148.412541][ T6362] syz.0.246: attempt to access beyond end of device [ 148.412541][ T6362] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 149.189043][ T6364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.247'. [ 149.193161][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'. [ 149.199943][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.417898][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 150.131597][ T6381] 9pnet_fd: Insufficient options for proto=fd [ 150.187710][ T6381] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 150.223792][ T4778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 150.316183][ T6384] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.254'. [ 150.345183][ T58] vhci_hcd: vhci_device speed not set [ 150.351758][ T6384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.443885][ T25] vhci_hcd: vhci_device speed not set [ 150.633215][ T4778] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 150.831338][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 150.878942][ T6394] overlayfs: missing 'lowerdir' [ 151.016224][ T6395] netlink: 'syz.2.257': attribute type 4 has an invalid length. [ 151.019642][ T6395] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.257'. [ 151.229217][ T6388] block nbd1: NBD_DISCONNECT [ 151.232725][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.3.258'. [ 151.241678][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 151.253129][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.582490][ T6404] overlayfs: failed to resolve './file1': -2 [ 151.782679][ T6407] syz.3.259: attempt to access beyond end of device [ 151.782679][ T6407] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 152.173989][ T6408] netlink: 'syz.0.267': attribute type 4 has an invalid length. [ 152.180633][ T6408] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.267'. [ 153.189256][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 153.423504][ T6418] netlink: 'syz.3.262': attribute type 4 has an invalid length. [ 153.437285][ T6418] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.262'. [ 154.038192][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.142029][ T6439] mkiss: ax0: crc mode is auto. [ 154.556245][ T6441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.268'. [ 154.560116][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 154.563597][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.767336][ T6448] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 155.117761][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.201572][ T6454] mkiss: ax0: crc mode is auto. [ 155.735254][ T6470] can0: slcan on ttyprintk. [ 155.834028][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 156.184655][ T6470] netlink: 'syz.1.276': attribute type 21 has an invalid length. [ 156.535484][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.278'. [ 156.539306][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 156.544927][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.683221][ T6498] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x7 [ 156.775768][ T6467] can0 (unregistered): slcan off ttyprintk. [ 157.265775][ T6502] netlink: 'syz.2.280': attribute type 4 has an invalid length. [ 157.271379][ T6502] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.280'. [ 157.893875][ T6518] netlink: 44 bytes leftover after parsing attributes in process `syz.1.284'. [ 157.900245][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 157.913174][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.962858][ T6524] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 158.008373][ T6523] vcan0 speed is unknown, defaulting to 1000 [ 158.437375][ T6537] mmap: syz.1.289 (6537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.444311][ T6543] overlayfs: failed to resolve './file1': -2 [ 159.560301][ T6545] overlayfs: failed to resolve './file1': -2 [ 160.029148][ T6547] netlink: 'syz.1.293': attribute type 4 has an invalid length. [ 160.054409][ T6547] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.293'. [ 160.909006][ T6546] netlink: 'syz.2.292': attribute type 4 has an invalid length. [ 160.913806][ T6546] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.292'. [ 160.968431][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 161.144372][ T6562] syzkaller0: entered promiscuous mode [ 161.157147][ T6562] syzkaller0: entered allmulticast mode [ 161.583738][ T5349] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 161.777686][ T5349] usb 8-1: Using ep0 maxpacket: 8 [ 161.787293][ T5349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.798950][ T5349] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.802121][ T5349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.817372][ T5349] usb 8-1: config 0 descriptor?? [ 162.048284][ T6567] overlayfs: failed to resolve './file1': -2 [ 162.049983][ T5349] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 162.336185][ T6571] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 162.343732][ T6571] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.299'. [ 162.878800][ T6576] overlayfs: failed to resolve './file1': -2 [ 163.034431][ T5349] usb 8-1: USB disconnect, device number 4 [ 163.041195][ T5349] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 163.343080][ T6581] netlink: 'syz.1.300': attribute type 4 has an invalid length. [ 163.347738][ T6581] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.300'. [ 163.913927][ T6585] hid-generic 0003:0627:0001.0001: pid 6585 passed too short report [ 163.982456][ T5951] kernel write not supported for file 227/task/230/clear_refs (pid: 5951 comm: kworker/2:4) [ 165.168406][ T6607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.563836][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.755033][ T25] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 165.799858][ T25] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 165.803278][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.811746][ T25] usb 5-1: config 0 descriptor?? [ 166.184392][ T6621] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 166.187217][ T6621] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.192415][ T6621] vhci_hcd vhci_hcd.0: Device attached [ 166.404149][ T4443] vhci_hcd: vhci_device speed not set [ 166.473854][ T4443] usb 13-2: new full-speed USB device number 5 using vhci_hcd [ 166.941561][ T6628] overlayfs: failed to resolve './file1': -2 [ 167.149225][ T6635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 167.298864][ T6631] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 167.302079][ T6631] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.312'. [ 168.680861][ T6622] vhci_hcd: connection reset by peer [ 168.686794][ T1212] vhci_hcd: stop threads [ 168.686933][ T25] usb 5-1: string descriptor 0 read error: -71 [ 168.688720][ T1212] vhci_hcd: release socket [ 168.706040][ T1212] vhci_hcd: disconnect device [ 168.709957][ T25] usb 5-1: USB disconnect, device number 7 [ 168.897510][ T6650] overlayfs: missing 'lowerdir' [ 169.795657][ T6653] netlink: 'syz.0.319': attribute type 4 has an invalid length. [ 169.799167][ T6653] netlink: 126052 bytes leftover after parsing attributes in process `syz.0.319'. [ 170.225812][ T6667] sp0: Synchronizing with TNC [ 170.635026][ T6672] FAULT_INJECTION: forcing a failure. [ 170.635026][ T6672] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 170.641187][ T6672] CPU: 3 UID: 0 PID: 6672 Comm: syz.3.327 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 170.645652][ T6672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.650271][ T6672] Call Trace: [ 170.651784][ T6672] [ 170.653119][ T6672] dump_stack_lvl+0x16c/0x1f0 [ 170.655215][ T6672] should_fail_ex+0x497/0x5b0 [ 170.657137][ T6672] ? fs_reclaim_acquire+0xae/0x160 [ 170.659140][ T6672] should_fail_alloc_page+0xe7/0x130 [ 170.661218][ T6672] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 170.663367][ T6672] __alloc_pages_noprof+0x194/0x2460 [ 170.665209][ T6672] ? __pfx_mark_lock+0x10/0x10 [ 170.666989][ T6672] ? __pfx___lock_acquire+0x10/0x10 [ 170.669204][ T6672] ? hlock_class+0x4e/0x130 [ 170.671127][ T6672] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 170.673398][ T6672] ? __lock_acquire+0xbdd/0x3cb0 [ 170.675416][ T6672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.677958][ T6672] ? policy_nodemask+0xea/0x4e0 [ 170.679975][ T6672] alloc_pages_mpol_noprof+0x275/0x610 [ 170.681800][ T6672] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 170.684276][ T6672] ? find_held_lock+0x2d/0x110 [ 170.686297][ T6672] folio_alloc_mpol_noprof+0x36/0xd0 [ 170.688226][ T6672] shmem_alloc_folio+0x135/0x160 [ 170.690128][ T6672] shmem_alloc_and_add_folio+0x19c/0xce0 [ 170.692500][ T6672] ? filemap_get_entry+0x1b2/0x3c0 [ 170.694600][ T6672] ? __pfx_filemap_get_entry+0x10/0x10 [ 170.696672][ T6672] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 170.698798][ T6672] ? xas_find+0x2fd/0x870 [ 170.700285][ T6672] ? find_held_lock+0x2d/0x110 [ 170.701942][ T6672] ? __shmem_is_huge+0x213/0x300 [ 170.703773][ T6672] shmem_get_folio_gfp+0xa62/0x15e0 [ 170.706040][ T6672] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 170.708236][ T6672] ? filemap_map_pages+0xeb6/0x1440 [ 170.709993][ T6672] shmem_fault+0x205/0xaf0 [ 170.711490][ T6672] ? __pfx_shmem_fault+0x10/0x10 [ 170.713614][ T6672] ? __handle_mm_fault+0x3a0f/0x5400 [ 170.715811][ T6672] ? __pfx_lock_release+0x10/0x10 [ 170.717855][ T6672] __do_fault+0x10a/0x490 [ 170.719313][ T6672] __handle_mm_fault+0x3ac8/0x5400 [ 170.721080][ T6672] ? __pfx_mt_find+0x10/0x10 [ 170.722763][ T6672] ? __pfx___handle_mm_fault+0x10/0x10 [ 170.724638][ T6672] ? find_vma+0xc0/0x140 [ 170.726229][ T6672] ? __pfx_find_vma+0x10/0x10 [ 170.727947][ T6672] handle_mm_fault+0x498/0xa60 [ 170.729548][ T6672] ? spurious_kernel_fault+0x361/0x3c0 [ 170.731449][ T6672] do_user_addr_fault+0x7a3/0x13f0 [ 170.733249][ T6672] exc_page_fault+0x5c/0xc0 [ 170.734778][ T6672] asm_exc_page_fault+0x26/0x30 [ 170.736775][ T6672] RIP: 0010:_copy_from_user+0xc1/0xf0 [ 170.738537][ T6672] Code: 89 df e8 f2 77 0a fd 4d 85 f6 75 9e e8 38 76 0a fd 0f ae e8 89 ee 4c 89 ef e8 0b 15 69 fd 0f 01 cb 48 89 e9 4c 89 ef 48 89 de a4 0f 1f 00 48 89 cb 0f 01 ca e9 73 ff ff ff e8 0a 76 0a fd 48 [ 170.745147][ T6672] RSP: 0018:ffffc9002772fd80 EFLAGS: 00050246 [ 170.747794][ T6672] RAX: 0000000000000001 RBX: 0000000020000000 RCX: 0000000000000008 [ 170.750487][ T6672] RDX: fffff52004ee5fbe RSI: 0000000020000000 RDI: ffffc9002772fde8 [ 170.753539][ T6672] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52004ee5fbd [ 170.756587][ T6672] R10: ffffc9002772fdef R11: 0000000000000000 R12: 0000000020000008 [ 170.759868][ T6672] R13: ffffc9002772fde8 R14: 0000000000000000 R15: 0000000000000001 [ 170.763113][ T6672] vt_compat_ioctl+0x27e/0x4e0 [ 170.764958][ T6672] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 170.766986][ T6672] ? __fget_files+0x256/0x400 [ 170.768632][ T6672] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 170.770386][ T6672] tty_compat_ioctl+0x300/0x4f0 [ 170.772079][ T6672] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 170.773865][ T6672] __do_compat_sys_ioctl+0x2c3/0x330 [ 170.775644][ T6672] __do_fast_syscall_32+0x73/0x120 [ 170.777379][ T6672] do_fast_syscall_32+0x32/0x80 [ 170.779019][ T6672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.781140][ T6672] RIP: 0023:0xf7fe8579 [ 170.782787][ T6672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 170.789729][ T6672] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 170.792947][ T6672] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004b66 [ 170.796390][ T6672] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.799141][ T6672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.802044][ T6672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 170.805336][ T6672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.808785][ T6672] [ 171.027830][ T6666] [U] è [ 171.173703][ T5391] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.364009][ T5391] usb 6-1: Using ep0 maxpacket: 8 [ 171.367016][ T6684] CUSE: info not properly terminated [ 171.403788][ T5391] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 171.407530][ T5391] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.411822][ T5391] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.426213][ T5391] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.435020][ T5391] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.444002][ T5391] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.449289][ T5391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.623851][ T4443] vhci_hcd: vhci_device speed not set [ 171.713518][ T5391] usb 6-1: usb_control_msg returned -32 [ 171.716021][ T5391] usbtmc 6-1:16.0: can't read capabilities [ 172.886206][ T6712] syzkaller1: entered promiscuous mode [ 172.888300][ T6712] syzkaller1: entered allmulticast mode [ 173.097656][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 173.306374][ T5410] usb 6-1: USB disconnect, device number 6 [ 173.362967][ T6726] CUSE: info not properly terminated [ 173.776119][ T6733] vcan0 speed is unknown, defaulting to 1000 [ 173.794549][ T6735] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 174.258343][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 174.327354][ T6744] No control pipe specified [ 174.766917][ T5793] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 174.953770][ T5793] usb 6-1: Using ep0 maxpacket: 8 [ 174.966321][ T5793] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 174.975113][ T5793] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.990159][ T5793] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.002559][ T5793] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.021866][ T5793] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.043674][ T5793] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.048263][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.530376][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 175.559493][ T58] usb 6-1: USB disconnect, device number 7 [ 176.303833][ T6760] FAULT_INJECTION: forcing a failure. [ 176.303833][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.310363][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.1.354 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 176.314900][ T6760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.319499][ T6760] Call Trace: [ 176.320954][ T6760] [ 176.322214][ T6760] dump_stack_lvl+0x16c/0x1f0 [ 176.324251][ T6760] should_fail_ex+0x497/0x5b0 [ 176.326290][ T6760] _copy_to_user+0x30/0xc0 [ 176.328245][ T6760] simple_read_from_buffer+0xd0/0x160 [ 176.330574][ T6760] proc_fail_nth_read+0x19e/0x280 [ 176.332762][ T6760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.335120][ T6760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.337551][ T6760] vfs_read+0x1d4/0xbd0 [ 176.339370][ T6760] ? __fdget_pos+0xeb/0x180 [ 176.341350][ T6760] ? __pfx_vfs_read+0x10/0x10 [ 176.343375][ T6760] ? __pfx___mutex_lock+0x10/0x10 [ 176.345572][ T6760] ? __fget_files+0x256/0x400 [ 176.347647][ T6760] ksys_read+0x12f/0x260 [ 176.349501][ T6760] ? __pfx_ksys_read+0x10/0x10 [ 176.351588][ T6760] __do_fast_syscall_32+0x73/0x120 [ 176.353801][ T6760] do_fast_syscall_32+0x32/0x80 [ 176.355923][ T6760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.358650][ T6760] RIP: 0023:0xf7fd5579 [ 176.360438][ T6760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.368518][ T6760] RSP: 002b:00000000f57665a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 176.372115][ T6760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5766620 [ 176.375485][ T6760] RDX: 000000000000000f RSI: 00000000f745fff4 RDI: 0000000000000000 [ 176.378885][ T6760] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 176.382251][ T6760] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 176.385639][ T6760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.389045][ T6760] [ 176.830169][ T6766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.203885][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.387551][ T25] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 177.435317][ T25] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 177.439427][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.448140][ T25] usb 5-1: config 0 descriptor?? [ 177.587459][ T39] audit: type=1326 audit(1725454301.341:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.3.360" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x0 [ 177.827947][ T6783] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 177.830907][ T6783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.842477][ T6783] vhci_hcd vhci_hcd.0: Device attached [ 178.053844][ T56] vhci_hcd: vhci_device speed not set [ 178.126757][ T56] usb 13-2: new full-speed USB device number 6 using vhci_hcd [ 178.506323][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.2.362'. [ 178.513324][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 178.522788][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.577578][ T6791] overlayfs: missing 'lowerdir' [ 179.593241][ T6798] sctp: [Deprecated]: syz.3.366 (pid 6798) Use of int in max_burst socket option deprecated. [ 179.593241][ T6798] Use struct sctp_assoc_value instead [ 179.676331][ T6802] FAULT_INJECTION: forcing a failure. [ 179.676331][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.681456][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.3.368 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 179.685718][ T6802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.689519][ T6802] Call Trace: [ 179.690766][ T6802] [ 179.691841][ T6802] dump_stack_lvl+0x16c/0x1f0 [ 179.693816][ T6802] should_fail_ex+0x497/0x5b0 [ 179.695654][ T6802] _copy_from_user+0x30/0xf0 [ 179.697404][ T6802] get_compat_msghdr+0xa8/0x170 [ 179.699577][ T6802] ? __pfx_get_compat_msghdr+0x10/0x10 [ 179.701520][ T6802] ? __pfx___lock_acquire+0x10/0x10 [ 179.703256][ T6802] ___sys_sendmsg+0x1b0/0x1e0 [ 179.704854][ T6802] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.706615][ T6802] ? ksys_write+0x21c/0x260 [ 179.708266][ T6802] ? __fget_light+0x173/0x210 [ 179.709838][ T6802] __sys_sendmsg+0x117/0x1f0 [ 179.711386][ T6802] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.713575][ T6802] __do_fast_syscall_32+0x73/0x120 [ 179.715837][ T6802] do_fast_syscall_32+0x32/0x80 [ 179.717960][ T6802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.720704][ T6802] RIP: 0023:0xf7fe8579 [ 179.722544][ T6802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.730507][ T6802] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 179.733813][ T6802] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0 [ 179.737182][ T6802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.740284][ T6802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.743707][ T6802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.747052][ T6802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.750416][ T6802] [ 179.965271][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.370'. [ 180.057336][ T6785] vhci_hcd: connection reset by peer [ 180.061738][ T25] usb 5-1: string descriptor 0 read error: -71 [ 180.069372][ T1150] vhci_hcd: stop threads [ 180.070874][ T1150] vhci_hcd: release socket [ 180.081078][ T1150] vhci_hcd: disconnect device [ 180.097620][ T25] usb 5-1: USB disconnect, device number 8 [ 180.448953][ T6818] vcan0 speed is unknown, defaulting to 1000 [ 180.660325][ T6827] macsec1: entered promiscuous mode [ 180.662658][ T6827] macsec1: entered allmulticast mode [ 181.393944][ T6840] FAULT_INJECTION: forcing a failure. [ 181.393944][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 181.399797][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.0.380 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 181.404430][ T6840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.409077][ T6840] Call Trace: [ 181.410489][ T6840] [ 181.411741][ T6840] dump_stack_lvl+0x16c/0x1f0 [ 181.413589][ T6840] should_fail_ex+0x497/0x5b0 [ 181.415501][ T6840] ? fs_reclaim_acquire+0xae/0x160 [ 181.417516][ T6840] should_failslab+0xc2/0x120 [ 181.419342][ T6840] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 181.421567][ T6840] ? alloc_inode+0xba/0x230 [ 181.423327][ T6840] alloc_inode+0xba/0x230 [ 181.425030][ T6840] create_pipe_files+0x4c/0x7e0 [ 181.426942][ T6840] do_pipe2+0xb0/0x1d0 [ 181.428558][ T6840] ? __pfx_do_pipe2+0x10/0x10 [ 181.430405][ T6840] ? __pfx_ksys_write+0x10/0x10 [ 181.432280][ T6840] __ia32_sys_pipe+0x32/0x50 [ 181.434012][ T6840] __do_fast_syscall_32+0x73/0x120 [ 181.436006][ T6840] do_fast_syscall_32+0x32/0x80 [ 181.437899][ T6840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.440240][ T6840] RIP: 0023:0xf7f25579 [ 181.441834][ T6840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.449182][ T6840] RSP: 002b:00000000f56b656c EFLAGS: 00000296 ORIG_RAX: 000000000000002a [ 181.452314][ T6840] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000000000 [ 181.455363][ T6840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.458414][ T6840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.461397][ T6840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 181.464440][ T6840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.467504][ T6840] [ 181.551535][ T6843] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 181.614381][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 182.117882][ T6855] overlayfs: failed to resolve './file2': -2 [ 182.278339][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'. [ 183.324156][ T56] vhci_hcd: vhci_device speed not set [ 183.980825][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'. [ 183.990713][ T6877] overlayfs: failed to resolve './file1': -2 [ 183.992628][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 184.020368][ T5391] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.033117][ T5391] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 184.093997][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 184.097883][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.107822][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.111286][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.229018][ T6887] netlink: 'syz.0.390': attribute type 4 has an invalid length. [ 184.231986][ T6887] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.390'. [ 184.706778][ T6898] overlayfs: missing 'lowerdir' [ 184.852259][ T6899] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 184.857986][ T6899] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.398'. [ 186.343198][ T6921] vcan0 speed is unknown, defaulting to 1000 [ 186.423808][ T5363] Bluetooth: hci0: command 0x0401 tx timeout [ 186.423841][ T5360] Bluetooth: hci3: command 0x0406 tx timeout [ 186.425960][ T5356] Bluetooth: hci1: command 0x0406 tx timeout [ 187.288385][ T6939] overlayfs: missing 'lowerdir' [ 187.333218][ T6939] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 187.336106][ T6939] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.411'. [ 187.616919][ T6941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.412'. [ 187.620803][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 187.627529][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.684604][ T6944] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 188.347763][ T6956] syz.3.416: attempt to access beyond end of device [ 188.347763][ T6956] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 188.366454][ T6956] SQUASHFS error: Failed to read block 0x0: -5 [ 188.368816][ T6956] unable to read squashfs_super_block [ 188.657997][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 188.663348][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 189.774270][ T6978] vcan0 speed is unknown, defaulting to 1000 [ 190.042870][ T6976] binder: 6975:6976 ioctl c0306201 20002040 returned -14 [ 190.549435][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 190.740782][ T6993] tmpfs: Unknown parameter 'õ€óPaÛ¿ m' [ 190.956382][ T7001] netlink: zone id is out of range [ 190.960059][ T7001] netlink: zone id is out of range [ 190.962310][ T7001] netlink: zone id is out of range [ 190.969198][ T7001] netlink: zone id is out of range [ 190.971536][ T7001] netlink: zone id is out of range [ 190.979092][ T7001] netlink: zone id is out of range [ 190.984262][ T7001] netlink: zone id is out of range [ 190.986086][ T7001] netlink: zone id is out of range [ 190.990221][ T7001] netlink: set zone limit has 4 unknown bytes [ 191.427516][ T1103] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.581233][ T7009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.432'. [ 191.584388][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 191.588260][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.793526][ T7013] GUP no longer grows the stack in syz.3.434 (7013): 20004000-2000a000 (20002000) [ 191.797942][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.3.434 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 191.802615][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.807402][ T7013] Call Trace: [ 191.809045][ T7013] [ 191.810429][ T7013] dump_stack_lvl+0x16c/0x1f0 [ 191.812643][ T7013] gup_vma_lookup+0x1d2/0x220 [ 191.814818][ T7013] __get_user_pages+0x261/0x15c0 [ 191.816758][ T7013] ? __pfx___get_user_pages+0x10/0x10 [ 191.819149][ T7013] ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10 [ 191.822349][ T7013] get_user_pages_remote+0x25e/0xb30 [ 191.823160][ T7011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.433'. [ 191.824787][ T7013] ? __pfx_get_user_pages_remote+0x10/0x10 [ 191.824904][ T7013] __access_remote_vm+0x3f0/0x920 [ 191.827985][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 191.830513][ T7013] ? __pfx___access_remote_vm+0x10/0x10 [ 191.832698][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.835708][ T7013] proc_pid_cmdline_read+0x4fa/0x8d0 [ 191.835730][ T7013] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 191.835747][ T7013] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 191.835760][ T7013] vfs_readv+0x6cb/0x8a0 [ 191.850420][ T7013] ? __pfx_vfs_readv+0x10/0x10 [ 191.852640][ T7013] ? find_held_lock+0x2d/0x110 [ 191.854875][ T7013] ? __pfx_lock_release+0x10/0x10 [ 191.856943][ T7013] ? do_preadv+0x1b2/0x260 [ 191.858706][ T7013] do_preadv+0x1b2/0x260 [ 191.860486][ T7013] ? __pfx_do_preadv+0x10/0x10 [ 191.862371][ T7013] __do_fast_syscall_32+0x73/0x120 [ 191.864684][ T7013] do_fast_syscall_32+0x32/0x80 [ 191.866793][ T7013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.869626][ T7013] RIP: 0023:0xf7fe8579 [ 191.871286][ T7013] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 191.879193][ T7013] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 191.882634][ T7013] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 191.885800][ T7013] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000000 [ 191.889115][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.892363][ T7013] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 191.895710][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.898952][ T7013] [ 191.900257][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.203855][ T1291] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 192.393694][ T1291] usb 8-1: Using ep0 maxpacket: 8 [ 192.397861][ T1291] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.402508][ T1291] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.406016][ T1291] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.409187][ T1291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.426509][ T1291] usb 8-1: config 0 descriptor?? [ 192.663268][ T1291] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.860381][ T7013] iowarrior 8-1:0.0: Error -90 while submitting URB [ 192.870322][ T1291] usb 8-1: USB disconnect, device number 5 [ 192.877953][ T1291] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 192.913803][ T5366] Bluetooth: hci3: command 0x0406 tx timeout [ 193.464874][ T4778] Bluetooth: hci4: command 0x1003 tx timeout [ 193.468814][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.745843][ T7034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.441'. [ 193.757251][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.441'. [ 193.765592][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.861394][ T7043] overlayfs: failed to resolve './file1': -2 [ 193.999253][ T7046] overlayfs: failed to resolve './file1': -2 [ 194.073916][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'. [ 194.591710][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.595253][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.903787][ T4443] IPVS: starting estimator thread 0... [ 195.996873][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 196.023864][ T7067] IPVS: using max 22 ests per chain, 52800 per kthread [ 196.146125][ T7074] 9pnet_fd: Insufficient options for proto=fd [ 196.192565][ T7072] netlink: 88 bytes leftover after parsing attributes in process `syz.2.451'. [ 196.427810][ T7080] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.203679][ T5793] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 197.239134][ T7088] overlayfs: failed to resolve './file1': -2 [ 197.385545][ T5793] usb 7-1: too many configurations: 12, using maximum allowed: 8 [ 197.408657][ T7089] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 197.410556][ T5793] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 197.412041][ T7089] netlink: 126052 bytes leftover after parsing attributes in process `syz.3.456'. [ 197.424703][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.451130][ T5793] usb 7-1: config 0 descriptor?? [ 197.619474][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 197.737049][ T7096] FAULT_INJECTION: forcing a failure. [ 197.737049][ T7096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.742304][ T7096] CPU: 3 UID: 0 PID: 7096 Comm: syz.0.459 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 197.746747][ T7096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.751331][ T7096] Call Trace: [ 197.752850][ T7096] [ 197.754119][ T7096] dump_stack_lvl+0x16c/0x1f0 [ 197.756128][ T7096] should_fail_ex+0x497/0x5b0 [ 197.758204][ T7096] _copy_from_user+0x30/0xf0 [ 197.760205][ T7096] kstrtouint_from_user+0xd7/0x1c0 [ 197.762403][ T7096] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 197.764842][ T7096] ? __pfx_lock_acquire+0x10/0x10 [ 197.766982][ T7096] proc_fail_nth_write+0x84/0x260 [ 197.769138][ T7096] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.771528][ T7096] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.773907][ T7096] vfs_write+0x29a/0x1140 [ 197.775791][ T7096] ? __fdget_pos+0xeb/0x180 [ 197.777775][ T7096] ? __pfx_vfs_write+0x10/0x10 [ 197.779841][ T7096] ? __pfx___mutex_lock+0x10/0x10 [ 197.782031][ T7096] ? __fget_files+0x256/0x400 [ 197.784049][ T7096] ksys_write+0x12f/0x260 [ 197.785925][ T7096] ? __pfx_ksys_write+0x10/0x10 [ 197.788093][ T7096] __do_fast_syscall_32+0x73/0x120 [ 197.790373][ T7096] do_fast_syscall_32+0x32/0x80 [ 197.792533][ T7096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.795410][ T7096] RIP: 0023:0xf7f25579 [ 197.797207][ T7096] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 197.805179][ T7096] RSP: 002b:00000000f56b65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 197.808167][ T7096] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f56b6620 [ 197.811695][ T7096] RDX: 0000000000000001 RSI: 00000000f73afff4 RDI: 0000000000000000 [ 197.815181][ T7096] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 197.818761][ T7096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 197.822267][ T7096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.825749][ T7096] [ 197.929475][ T7098] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 197.932218][ T7098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.938120][ T7098] vhci_hcd vhci_hcd.0: Device attached [ 198.163836][ T58] vhci_hcd: vhci_device speed not set [ 198.243781][ T58] usb 17-2: new full-speed USB device number 4 using vhci_hcd [ 198.797539][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 199.006664][ T7120] ./file0: Can't lookup blockdev [ 199.022594][ T7118] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 199.028473][ T7118] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 199.060665][ T7120] pim6reg1: entered promiscuous mode [ 199.064227][ T7120] pim6reg1: entered allmulticast mode [ 199.300797][ T7103] vhci_hcd: connection reset by peer [ 199.303157][ T5793] usb 7-1: string descriptor 0 read error: -71 [ 199.307397][ T1212] vhci_hcd: stop threads [ 199.309483][ T1212] vhci_hcd: release socket [ 199.311844][ T5793] usb 7-1: USB disconnect, device number 6 [ 199.317305][ T1212] vhci_hcd: disconnect device [ 199.639087][ T7122] block nbd3: shutting down sockets [ 199.941814][ T7135] FAULT_INJECTION: forcing a failure. [ 199.941814][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 199.949748][ T7135] CPU: 3 UID: 0 PID: 7135 Comm: syz.0.469 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 199.953509][ T7135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.957073][ T7135] Call Trace: [ 199.958194][ T7135] [ 199.959390][ T7135] dump_stack_lvl+0x16c/0x1f0 [ 199.961377][ T7135] should_fail_ex+0x497/0x5b0 [ 199.963467][ T7135] ? fs_reclaim_acquire+0xae/0x160 [ 199.965746][ T7135] should_failslab+0xc2/0x120 [ 199.967852][ T7135] __kmalloc_cache_noprof+0x6b/0x310 [ 199.969871][ T7135] ? alloc_fs_context+0x57/0x9c0 [ 199.971517][ T7135] alloc_fs_context+0x57/0x9c0 [ 199.973123][ T7135] path_mount+0xbfb/0x1f10 [ 199.974621][ T7135] ? __pfx_path_mount+0x10/0x10 [ 199.976282][ T7135] ? putname+0x12e/0x170 [ 199.977729][ T7135] ? putname+0x12e/0x170 [ 199.979157][ T7135] __ia32_sys_mount+0x292/0x310 [ 199.981177][ T7135] ? __pfx___ia32_sys_mount+0x10/0x10 [ 199.983548][ T7135] __do_fast_syscall_32+0x73/0x120 [ 199.985825][ T7135] do_fast_syscall_32+0x32/0x80 [ 199.987990][ T7135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.990685][ T7135] RIP: 0023:0xf7f25579 [ 199.992431][ T7135] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 200.000333][ T7135] RSP: 002b:00000000f569556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 200.003952][ T7135] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000020000100 [ 200.007377][ T7135] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.010812][ T7135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.014263][ T7135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 200.017476][ T7135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.020616][ T7135] [ 200.077008][ T7135] pim6reg1: entered promiscuous mode [ 200.079005][ T7135] pim6reg1: entered allmulticast mode [ 200.745356][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 201.419360][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 201.867917][ T7155] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.081282][ T7157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.477'. [ 202.085629][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'. [ 202.089521][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.530860][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.480'. [ 203.413791][ T58] vhci_hcd: vhci_device speed not set [ 203.885062][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 204.784121][ T7188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.486'. [ 204.792850][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 204.815181][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.746227][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 207.486041][ T7204] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.763955][ T5349] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.976975][ T5349] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 208.112803][ T5349] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 208.119403][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.136450][ T5349] usb 5-1: config 0 descriptor?? [ 208.532740][ T7213] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 208.534779][ T7213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.541249][ T7213] vhci_hcd vhci_hcd.0: Device attached [ 208.606475][ T7217] netlink: 6 bytes leftover after parsing attributes in process `syz.2.494'. [ 208.763847][ T1291] vhci_hcd: vhci_device speed not set [ 208.834029][ T1291] usb 13-2: new full-speed USB device number 7 using vhci_hcd [ 208.847339][ T7219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.495'. [ 208.851513][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 208.856205][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.324056][ T7229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.498'. [ 209.426284][ T7228] tmpfs: Bad value for 'huge' [ 209.482245][ T5349] usb 5-1: string descriptor 0 read error: -71 [ 209.482291][ T7214] vhci_hcd: connection reset by peer [ 209.482456][ T1212] vhci_hcd: stop threads [ 209.491658][ T1212] vhci_hcd: release socket [ 209.493742][ T1212] vhci_hcd: disconnect device [ 209.499802][ T5349] usb 5-1: USB disconnect, device number 9 [ 209.711701][ T5793] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 209.899693][ T5793] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.904581][ T5793] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24879, setting to 1024 [ 209.909388][ T5793] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 209.913579][ T5793] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.917745][ T5793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.925672][ T7228] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.937550][ T5793] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.190738][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 210.248302][ T5793] usb 8-1: USB disconnect, device number 6 [ 211.323287][ T7251] syz.3.504[7251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.323379][ T7251] syz.3.504[7251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.343726][ T7252] FAULT_INJECTION: forcing a failure. [ 211.343726][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.343806][ T7252] [ 211.343809][ T7252] ====================================================== [ 211.343813][ T7252] WARNING: possible circular locking dependency detected [ 211.343818][ T7252] 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 Not tainted [ 211.343825][ T7252] ------------------------------------------------------ [ 211.343828][ T7252] syz.1.503/7252 is trying to acquire lock: [ 211.343834][ T7252] ffffffff8dda75d8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x12/0x70 [ 211.343870][ T7252] [ 211.343870][ T7252] but task is already holding lock: [ 211.343873][ T7252] ffff88802b63edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 211.343902][ T7252] [ 211.343902][ T7252] which lock already depends on the new lock. [ 211.343902][ T7252] [ 211.343905][ T7252] [ 211.343905][ T7252] the existing dependency chain (in reverse order) is: [ 211.343908][ T7252] [ 211.343908][ T7252] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 211.343922][ T7252] _raw_spin_lock_nested+0x31/0x40 [ 211.343936][ T7252] raw_spin_rq_lock_nested+0x29/0x130 [ 211.343952][ T7252] task_fork_fair+0x73/0x250 [ 211.343967][ T7252] sched_cgroup_fork+0x3cf/0x510 [ 211.343981][ T7252] copy_process+0x4710/0x6f50 [ 211.343997][ T7252] kernel_clone+0xfd/0x960 [ 211.344005][ T7252] user_mode_thread+0xb4/0xf0 [ 211.344014][ T7252] rest_init+0x23/0x2b0 [ 211.344020][ T7252] start_kernel+0x3df/0x4c0 [ 211.344032][ T7252] x86_64_start_reservations+0x18/0x30 [ 211.344044][ T7252] x86_64_start_kernel+0xb2/0xc0 [ 211.344054][ T7252] common_startup_64+0x13e/0x148 [ 211.344062][ T7252] [ 211.344062][ T7252] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 211.344072][ T7252] _raw_spin_lock_irqsave+0x3a/0x60 [ 211.344082][ T7252] try_to_wake_up+0x9a/0x13e0 [ 211.344092][ T7252] up+0x79/0xb0 [ 211.344102][ T7252] console_unlock+0x23e/0x290 [ 211.344114][ T7252] vga_remove_vgacon+0x90/0xd0 [ 211.344124][ T7252] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 211.344138][ T7252] bochs_pci_probe+0x101/0x1150 [ 211.344151][ T7252] local_pci_probe+0xde/0x1b0 [ 211.344162][ T7252] pci_device_probe+0x29d/0x7b0 [ 211.344173][ T7252] really_probe+0x23e/0xa90 [ 211.344181][ T7252] __driver_probe_device+0x1de/0x440 [ 211.344188][ T7252] driver_probe_device+0x4c/0x1b0 [ 211.344196][ T7252] __driver_attach+0x283/0x580 [ 211.344209][ T7252] bus_for_each_dev+0x13c/0x1d0 [ 211.344225][ T7252] bus_add_driver+0x2e9/0x690 [ 211.344238][ T7252] driver_register+0x15c/0x4b0 [ 211.344246][ T7252] bochs_pci_driver_init+0x67/0x80 [ 211.344257][ T7252] do_one_initcall+0x128/0x630 [ 211.344274][ T7252] kernel_init_freeable+0x660/0xc50 [ 211.344289][ T7252] kernel_init+0x1c/0x2b0 [ 211.344299][ T7252] ret_from_fork+0x45/0x80 [ 211.344317][ T7252] ret_from_fork_asm+0x1a/0x30 [ 211.344334][ T7252] [ 211.344334][ T7252] -> #0 ((console_sem).lock){-...}-{2:2}: [ 211.344349][ T7252] __lock_acquire+0x24ed/0x3cb0 [ 211.344365][ T7252] lock_acquire+0x1b1/0x560 [ 211.344381][ T7252] _raw_spin_lock_irqsave+0x3a/0x60 [ 211.344396][ T7252] down_trylock+0x12/0x70 [ 211.344413][ T7252] __down_trylock_console_sem+0x40/0x140 [ 211.344431][ T7252] vprintk_emit+0x3d3/0x600 [ 211.344442][ T7252] vprintk+0x7f/0xa0 [ 211.344454][ T7252] _printk+0xc8/0x100 [ 211.344469][ T7252] should_fail_ex+0x46c/0x5b0 [ 211.344483][ T7252] copy_to_user_nofault+0x9f/0x1a0 [ 211.344499][ T7252] bpf_probe_write_user+0xaf/0xf0 [ 211.344517][ T7252] bpf_prog_6303d92f98284ad8+0x43/0x47 [ 211.344528][ T7252] bpf_trace_run4+0x245/0x5a0 [ 211.344545][ T7252] __traceiter_sched_switch+0x6c/0xc0 [ 211.344565][ T7252] __schedule+0x17cf/0x5490 [ 211.344581][ T7252] schedule+0xe7/0x350 [ 211.344595][ T7252] schedule_preempt_disabled+0x13/0x30 [ 211.344612][ T7252] rwsem_down_write_slowpath+0x539/0x12a0 [ 211.344634][ T7252] down_write+0x1d8/0x200 [ 211.344653][ T7252] kernfs_remove_by_name_ns+0x87/0x130 [ 211.344670][ T7252] device_remove_class_symlinks+0x116/0x1c0 [ 211.344691][ T7252] device_del+0x281/0x9f0 [ 211.344711][ T7252] device_unregister+0x1d/0xc0 [ 211.344733][ T7252] wakeup_source_unregister.part.0+0x4f/0x150 [ 211.344757][ T7252] device_wakeup_enable+0x27f/0x310 [ 211.344779][ T7252] device_set_wakeup_enable+0xfd/0x120 [ 211.344802][ T7252] usb_hcd_submit_urb+0xef5/0x2110 [ 211.344821][ T7252] usb_submit_urb+0x87c/0x1730 [ 211.344841][ T7252] proc_do_submiturb+0x1640/0x3b30 [ 211.344862][ T7252] usbdev_ioctl+0xad1/0x3fa0 [ 211.344881][ T7252] compat_ptr_ioctl+0x71/0xb0 [ 211.344896][ T7252] __do_compat_sys_ioctl+0x2c3/0x330 [ 211.344912][ T7252] __do_fast_syscall_32+0x73/0x120 [ 211.344933][ T7252] do_fast_syscall_32+0x32/0x80 [ 211.344954][ T7252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.344972][ T7252] [ 211.344972][ T7252] other info that might help us debug this: [ 211.344972][ T7252] [ 211.344976][ T7252] Chain exists of: [ 211.344976][ T7252] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 211.344976][ T7252] [ 211.344994][ T7252] Possible unsafe locking scenario: [ 211.344994][ T7252] [ 211.344998][ T7252] CPU0 CPU1 [ 211.345001][ T7252] ---- ---- [ 211.345004][ T7252] lock(&rq->__lock); [ 211.345011][ T7252] lock(&p->pi_lock); [ 211.345020][ T7252] lock(&rq->__lock); [ 211.345028][ T7252] lock((console_sem).lock); [ 211.345036][ T7252] [ 211.345036][ T7252] *** DEADLOCK *** [ 211.345036][ T7252] [ 211.345039][ T7252] 4 locks held by syz.1.503/7252: [ 211.345048][ T7252] #0: ffff888022ac4190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x1b5/0x3fa0 [ 211.345084][ T7252] #1: ffff88801ceb0148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x87/0x130 [ 211.345119][ T7252] #2: ffff88802b63edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 211.345158][ T7252] #3: ffffffff8ddb94a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 211.345192][ T7252] [ 211.345192][ T7252] stack backtrace: [ 211.345197][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.1.503 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 211.345214][ T7252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.345223][ T7252] Call Trace: [ 211.345230][ T7252] [ 211.345236][ T7252] dump_stack_lvl+0x116/0x1f0 [ 211.345253][ T7252] check_noncircular+0x31a/0x400 [ 211.345276][ T7252] ? __pfx_check_noncircular+0x10/0x10 [ 211.345295][ T7252] ? __pfx__prb_read_valid+0x10/0x10 [ 211.345313][ T7252] ? __pfx_format_decode+0x10/0x10 [ 211.345336][ T7252] ? lockdep_lock+0xc6/0x200 [ 211.345352][ T7252] ? __pfx_lockdep_lock+0x10/0x10 [ 211.345367][ T7252] ? vsnprintf+0x40f/0x1870 [ 211.345392][ T7252] __lock_acquire+0x24ed/0x3cb0 [ 211.345418][ T7252] ? __pfx___lock_acquire+0x10/0x10 [ 211.345441][ T7252] ? vprintk_store+0x222/0xbb0 [ 211.345467][ T7252] lock_acquire+0x1b1/0x560 [ 211.345487][ T7252] ? down_trylock+0x12/0x70 [ 211.345516][ T7252] ? __pfx_lock_acquire+0x10/0x10 [ 211.345540][ T7252] ? mark_lock+0xb5/0xc60 [ 211.345560][ T7252] ? vprintk+0x7f/0xa0 [ 211.345575][ T7252] _raw_spin_lock_irqsave+0x3a/0x60 [ 211.345594][ T7252] ? down_trylock+0x12/0x70 [ 211.345616][ T7252] down_trylock+0x12/0x70 [ 211.345640][ T7252] __down_trylock_console_sem+0x40/0x140 [ 211.345664][ T7252] vprintk_emit+0x3d3/0x600 [ 211.345681][ T7252] vprintk+0x7f/0xa0 [ 211.345697][ T7252] _printk+0xc8/0x100 [ 211.345717][ T7252] ? __pfx__printk+0x10/0x10 [ 211.345737][ T7252] ? ___ratelimit+0x24c/0x580 [ 211.345754][ T7252] ? __pfx____ratelimit+0x10/0x10 [ 211.345770][ T7252] should_fail_ex+0x46c/0x5b0 [ 211.345790][ T7252] copy_to_user_nofault+0x9f/0x1a0 [ 211.345812][ T7252] bpf_probe_write_user+0xaf/0xf0 [ 211.345829][ T7252] bpf_prog_6303d92f98284ad8+0x43/0x47 [ 211.345843][ T7252] bpf_trace_run4+0x245/0x5a0 [ 211.345863][ T7252] ? __pfx_bpf_trace_run4+0x10/0x10 [ 211.345885][ T7252] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 211.345910][ T7252] __traceiter_sched_switch+0x6c/0xc0 [ 211.345934][ T7252] __schedule+0x17cf/0x5490 [ 211.345953][ T7252] ? __pfx___lock_acquire+0x10/0x10 [ 211.345974][ T7252] ? hlock_class+0x4e/0x130 [ 211.345990][ T7252] ? mark_lock+0xb5/0xc60 [ 211.346014][ T7252] ? __pfx___schedule+0x10/0x10 [ 211.346034][ T7252] ? schedule+0x298/0x350 [ 211.346052][ T7252] ? __pfx_lock_release+0x10/0x10 [ 211.346069][ T7252] ? rwsem_down_write_slowpath+0x48a/0x12a0 [ 211.346094][ T7252] schedule+0xe7/0x350 [ 211.346112][ T7252] schedule_preempt_disabled+0x13/0x30 [ 211.346130][ T7252] rwsem_down_write_slowpath+0x539/0x12a0 [ 211.346155][ T7252] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 211.346180][ T7252] ? __pfx_lock_acquire+0x10/0x10 [ 211.346203][ T7252] ? __pfx___might_resched+0x10/0x10 [ 211.346226][ T7252] down_write+0x1d8/0x200 [ 211.346248][ T7252] ? __pfx_down_write+0x10/0x10 [ 211.346271][ T7252] ? up_write+0x1b2/0x520 [ 211.346294][ T7252] kernfs_remove_by_name_ns+0x87/0x130 [ 211.346311][ T7252] device_remove_class_symlinks+0x116/0x1c0 [ 211.346333][ T7252] device_del+0x281/0x9f0 [ 211.346357][ T7252] ? __pfx_device_del+0x10/0x10 [ 211.346381][ T7252] ? __timer_delete_sync+0x108/0x1b0 [ 211.346401][ T7252] device_unregister+0x1d/0xc0 [ 211.346424][ T7252] wakeup_source_unregister.part.0+0x4f/0x150 [ 211.346448][ T7252] device_wakeup_enable+0x27f/0x310 [ 211.346471][ T7252] device_set_wakeup_enable+0xfd/0x120 [ 211.346495][ T7252] usb_hcd_submit_urb+0xef5/0x2110 [ 211.346522][ T7252] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 211.346542][ T7252] ? lock_acquire+0x1b1/0x560 [ 211.346560][ T7252] ? find_held_lock+0x2d/0x110 [ 211.346574][ T7252] ? proc_do_submiturb+0x15b7/0x3b30 [ 211.346595][ T7252] usb_submit_urb+0x87c/0x1730 [ 211.346616][ T7252] ? _raw_spin_unlock_irqrestore+0x10/0x80 [ 211.346636][ T7252] proc_do_submiturb+0x1640/0x3b30 [ 211.346663][ T7252] usbdev_ioctl+0xad1/0x3fa0 [ 211.346682][ T7252] ? tomoyo_path_number_perm+0x190/0x5b0 [ 211.346706][ T7252] ? __pfx_usbdev_ioctl+0x10/0x10 [ 211.346726][ T7252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.346748][ T7252] ? do_vfs_ioctl+0x515/0x1a90 [ 211.346764][ T7252] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.346779][ T7252] ? __pfx_lock_release+0x10/0x10 [ 211.346806][ T7252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.346831][ T7252] ? __fget_files+0x256/0x400 [ 211.346849][ T7252] ? __pfx_usbdev_ioctl+0x10/0x10 [ 211.346868][ T7252] compat_ptr_ioctl+0x71/0xb0 [ 211.346884][ T7252] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 211.346898][ T7252] __do_compat_sys_ioctl+0x2c3/0x330 [ 211.346915][ T7252] __do_fast_syscall_32+0x73/0x120 [ 211.346936][ T7252] do_fast_syscall_32+0x32/0x80 [ 211.346957][ T7252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.346976][ T7252] RIP: 0023:0xf7fd5579 [ 211.346988][ T7252] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.347001][ T7252] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 211.347015][ T7252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 211.347025][ T7252] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.347034][ T7252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.347043][ T7252] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.347052][ T7252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.347068][ T7252] [ 211.825602][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.1.503 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 211.829235][ T7252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.833758][ T7252] Call Trace: [ 211.835181][ T7252] [ 211.836485][ T7252] dump_stack_lvl+0x116/0x1f0 [ 211.838341][ T7252] should_fail_ex+0x497/0x5b0 [ 211.840266][ T7252] copy_to_user_nofault+0x9f/0x1a0 [ 211.842433][ T7252] bpf_probe_write_user+0xaf/0xf0 [ 211.844629][ T7252] bpf_prog_6303d92f98284ad8+0x43/0x47 [ 211.846991][ T7252] bpf_trace_run4+0x245/0x5a0 [ 211.848939][ T7252] ? __pfx_bpf_trace_run4+0x10/0x10 [ 211.851216][ T7252] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 211.854051][ T7252] __traceiter_sched_switch+0x6c/0xc0 [ 211.856314][ T7252] __schedule+0x17cf/0x5490 [ 211.858241][ T7252] ? __pfx___lock_acquire+0x10/0x10 [ 211.859963][ T7252] ? hlock_class+0x4e/0x130 [ 211.861418][ T7252] ? mark_lock+0xb5/0xc60 [ 211.863299][ T7252] ? __pfx___schedule+0x10/0x10 [ 211.865466][ T7252] ? schedule+0x298/0x350 [ 211.867404][ T7252] ? __pfx_lock_release+0x10/0x10 [ 211.869506][ T7252] ? rwsem_down_write_slowpath+0x48a/0x12a0 [ 211.871720][ T7252] schedule+0xe7/0x350 [ 211.873581][ T7252] schedule_preempt_disabled+0x13/0x30 [ 211.876007][ T7252] rwsem_down_write_slowpath+0x539/0x12a0 [ 211.878540][ T7252] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 211.880854][ T7252] ? __pfx_lock_acquire+0x10/0x10 [ 211.882884][ T7252] ? __pfx___might_resched+0x10/0x10 [ 211.885073][ T7252] down_write+0x1d8/0x200 [ 211.886852][ T7252] ? __pfx_down_write+0x10/0x10 [ 211.888638][ T7252] ? up_write+0x1b2/0x520 [ 211.890218][ T7252] kernfs_remove_by_name_ns+0x87/0x130 [ 211.892614][ T7252] device_remove_class_symlinks+0x116/0x1c0 [ 211.895235][ T7252] device_del+0x281/0x9f0 [ 211.897179][ T7252] ? __pfx_device_del+0x10/0x10 [ 211.899330][ T7252] ? __timer_delete_sync+0x108/0x1b0 [ 211.901575][ T7252] device_unregister+0x1d/0xc0 [ 211.903319][ T7252] wakeup_source_unregister.part.0+0x4f/0x150 [ 211.905461][ T7252] device_wakeup_enable+0x27f/0x310 [ 211.907565][ T7252] device_set_wakeup_enable+0xfd/0x120 [ 211.909863][ T7252] usb_hcd_submit_urb+0xef5/0x2110 [ 211.911980][ T7252] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 211.914259][ T7252] ? lock_acquire+0x1b1/0x560 [ 211.916345][ T7252] ? find_held_lock+0x2d/0x110 [ 211.918476][ T7252] ? proc_do_submiturb+0x15b7/0x3b30 [ 211.920806][ T7252] usb_submit_urb+0x87c/0x1730 [ 211.922931][ T7252] ? _raw_spin_unlock_irqrestore+0x10/0x80 [ 211.925484][ T7252] proc_do_submiturb+0x1640/0x3b30 [ 211.927700][ T7252] usbdev_ioctl+0xad1/0x3fa0 [ 211.929717][ T7252] ? tomoyo_path_number_perm+0x190/0x5b0 [ 211.932076][ T7252] ? __pfx_usbdev_ioctl+0x10/0x10 [ 211.934199][ T7252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.936633][ T7252] ? do_vfs_ioctl+0x515/0x1a90 [ 211.938640][ T7252] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.940788][ T7252] ? __pfx_lock_release+0x10/0x10 [ 211.942871][ T7252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.945417][ T7252] ? __fget_files+0x256/0x400 [ 211.947471][ T7252] ? __pfx_usbdev_ioctl+0x10/0x10 [ 211.949645][ T7252] compat_ptr_ioctl+0x71/0xb0 [ 211.951662][ T7252] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 211.953932][ T7252] __do_compat_sys_ioctl+0x2c3/0x330 [ 211.956215][ T7252] __do_fast_syscall_32+0x73/0x120 [ 211.958402][ T7252] do_fast_syscall_32+0x32/0x80 [ 211.960504][ T7252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.963178][ T7252] RIP: 0023:0xf7fd5579 [ 211.964820][ T7252] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.972287][ T7252] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 211.975679][ T7252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 211.978548][ T7252] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.981147][ T7252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.984229][ T7252] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 211.987532][ T7252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.990907][ T7252] [ 213.944009][ T1291] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 12:52:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813be4ae RDX=ffff88802163c880 RSI=ffffffff813be4cb RDI=0000000000000000 RBP=ffff88802b63edc0 RSP=ffffc90022d7f740 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=ffffffff8b4f5900 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fc80 R15=ffffed10056c7db8 RIP=ffffffff813be4cc RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7401020 CR3=0000000065cc0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc1325 RDI=ffffffff9a514600 RBP=ffffffff9a5145c0 RSP=ffffc90023e3edb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e31312e36 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84fc12c0 R15=0000000000000000 RIP=ffffffff84fc134f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffffffff CR3=000000006b1ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000016800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813be4ae RDX=ffff888025df8000 RSI=ffffffff813be4cb RDI=0000000000000000 RBP=ffff88802574d280 RSP=ffffc900042cf4f0 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b83fc80 R15=ffffed1004ae9a50 RIP=ffffffff813be4cc RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0605dcd280 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7461c2c CR3=000000004700e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=8000000000000082 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee28ff4d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ff0000ff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 175349432a5e444f 5c4f5f0504040519 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 694645585e444549 05194e584b49054e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f00534b4e494c56 454400454d414e56 4544005845444e49 464900524f4e494d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002e1 0000000000000000 33706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68636163627c2a64 76787c2a64767c2a 72737c2a64737c2a 656d766e7c00312d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645d9684930 00005645d96844b0 00005645d96774a0 00005645d9684530 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645d968adb0 00005645d9686f00 00005645d9697b20 00005645d9697aa0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=1ffff92004d28ee8 RCX=1ffff110056e7dc0 RDX=ffffed1004ae9916 RSI=ffffffff8bb07da0 RDI=ffff88802b73ee00 RBP=ffff88802574c880 RSP=ffffc90026947718 R8 =0000000000000000 R9 =ffffed1004ae9996 R10=ffff88802574ccb7 R11=0000000000000000 R12=0000000000000007 R13=ffff88802574c894 R14=ffff88802574d280 R15=ffff88802574c8b4 RIP=ffffffff815d602c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0605dcd280 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005645d96ec8a8 CR3=00000000257fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005645d9688a90 00005645d9693680 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee28ff6d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee28fecf0 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f966af206b305e8a 73732533ce462c55 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f30706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f30706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003375 70632f302f716d2f 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a15dc5318432df9 00000005645d968e 00000000000002c1 0000000000302e37 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000000 00000033326c6c69 6b66722fe83ac61c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffbd 00007f47fdfdeff7 ba75ffedfbfcffff 5c007f47ffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 32156f0018432d6f 00004e4053354526 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 0000560018432d6f 00004e4053354526 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000