last executing test programs: 1m14.409467976s ago: executing program 1 (id=1149): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x19, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28940, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 1m14.407834409s ago: executing program 1 (id=1152): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) r1 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010101}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xf23}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa, 0x98, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x1, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x7, 0xd, 0xef, 0xff, 0x4}, 0x253, &(0x7f00000000c0)={0x5, 0xf, 0x253, 0x6, [@generic={0xf8, 0x10, 0xb, "4b293a0046094bcc99c292fa1e38ea9b27730adfa095c640a2bfbc70852a680fa66a7072b10fca78b6f9525e808f1041a5969774c27da40ccc6cf520f59fa1cc5317e31897eafc47cf3eaff2c273a6ff3dc6ae7e2a8d8cc91a4a8cea64bb934fdff453716cdcfdec986de9d2acecd300ee0a8b48927df181aec132e2b7db6b1d27ecd51e46536181cf3941cbcef7d54271ab7f2b1d318eaf6676421444e043953ba92b96d71241f206666e66001bdc2e3097fa4cd7fcb677b58483a897da2e489aa6874b48ce34cd2c2fb5ac43b0e9ec197d37f9c8c9eae392d41cf30412f2b1728003a1ccc347f29908e0ee058b7f1df381369bd1"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xa9, 0x6, 0x1, 0xf07, 0xfff9, [0xc0, 0x0, 0xc000, 0x3fc0, 0xc000, 0x50f02e3d59125f38]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x7, 0xf000, 0xbc5, [0xc000, 0xc000, 0xc0, 0xc000, 0xff0000]}, @generic={0xfb, 0x10, 0xa, "1748fc55b1888e551807fc22f2a30ae19c8d4c80ad809ed2e6bee7a2091d9ce74506be274904da00c3ef4d82b25819c8040000813271b456e1a29d94da69522acacfc75994ecdfec7cf61965785044111aa55872ffe0dfcb38b47621923b98ee3f77372a68e2649c22e1e25ba0010c9a04b1da7e38b1d4c2081473ec1c6fea3ecb380e621bdcb5c10379a7d8f429be410ff2ec083215471412a6dee0d56c74749755e31d77ec5973244f3dc8b2ede4f7caa26ab6ba4d5703a1ec535c01109e3c27fdccb702e41f75141f9f44a8adaa7d2963c14146ad5530e99da20c6c11b5d41871c8394100eda1c2acf18ae040f57cbc1eee8195a6504e"}, @ssp_cap={0x14, 0x10, 0xa, 0xbc, 0x2, 0x6, 0xf, 0x9, [0xc0, 0xc000]}]}, 0x2, [{0xee, &(0x7f0000000540)=@string={0xee, 0x3, "582ac49ff5b50ad117b3abfb49f3e58b0c82ca743406dafbe6b7dbed5098a12bffe8f1f65b398c6b959dbf2fd75d8b6ca7144bf427b6bb542fe939b6941c89f6cf8c89638441fe5da67852069713fc976fb9de1218b7901dad49b5ac804c7b4a535c4221ea9c19f3787bbf4c07f533f9fd4170c3d8bc935e02f7fffbe488c818b473a228c7057c54865a6e9d94dfdba9c021d5db197383d39c7e7d8a931fae756b344890b5e12618f526e0cd4325d5528f332b4dee487fb78948d3ed5fcda279f831e42c96f4c6d3e4d0aafcf1792dbc3359b16c8998b23afd0025921a109ad61012a70febacc7cba07e64ac"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c06}}]}) syz_usb_disconnect(r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 1m13.494797603s ago: executing program 1 (id=1172): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000001c0)={0x4000, 0x8000, 0x8}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) dup(r4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r5, 0x836f3000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x5, 0x8, 0x6}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$KVM_CAP_SYNC_REGS(r3, 0x4068aea3, &(0x7f0000001240)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$CDROMEJECT_SW(r7, 0x530f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x4, 0x4}}}]}, 0x3c}}, 0x24000010) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x11000, &(0x7f0000000400)='workdir') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1m13.231751025s ago: executing program 1 (id=1176): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)=0x0) r2 = epoll_create1(0x0) timer_settime(r1, 0x0, &(0x7f000006b000), 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m13.172468831s ago: executing program 1 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x3, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) pipe2$watch_queue(0x0, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') truncate(&(0x7f0000000040)='./file1\x00', 0x7) 1m13.099402095s ago: executing program 1 (id=1180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5001000010001304000000000c000000fe80000000000000000000000000009d20010000000000000000000000000000000000004e2400000a00002000000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB="ac1e00010000000000000000000000000000001032000000640101020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000ff01000000000000000000020000fbff09ffffffffff00000000000000000800000000000000cc000000000000000500000000000000f600000000000000000000000000df00000000000200010100000000000000f65e001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0x400}, 0x4000) 1m13.039904283s ago: executing program 32 (id=1180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5001000010001304000000000c000000fe80000000000000000000000000009d20010000000000000000000000000000000000004e2400000a00002000000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB="ac1e00010000000000000000000000000000001032000000640101020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000ff01000000000000000000020000fbff09ffffffffff00000000000000000800000000000000cc000000000000000500000000000000f600000000000000000000000000df00000000000200010100000000000000f65e001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0x400}, 0x4000) 1.549681364s ago: executing program 3 (id=2148): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf350f0000000800310004e7000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x15, 0x59, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x6}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$TCFLSH(r0, 0x8910, 0x2) 1.548993945s ago: executing program 3 (id=2149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000002060108000000000000000002000003f7729f57a826af26a68bef52a0d6ea9ee2721961c5630e5041f76e23f34936112865eb3f4eb09778bb69edb4be7bde14fac322e8460fa9f2332c"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000fc0)=[{&(0x7f00000002c0)}], 0x1, 0x80000001, 0x80000001) capset(&(0x7f0000000100)={0x20080522}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2010040, &(0x7f0000000000)={[{@name={'name', 0x3d, 'xattr'}}, {@name={'name', 0x3d, 'cpuacct'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44004) 1.459858334s ago: executing program 3 (id=2150): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r0, 0x0, 0x0, 0x2140, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000080)=r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04e13920"], 0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) timer_create(0x2, &(0x7f0000000000)={0x0, 0x21, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x34, &(0x7f0000000040)=0xa, 0x4) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) socket$xdp(0x2c, 0x3, 0x0) 1.459445216s ago: executing program 3 (id=2151): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/153) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r3) keyctl$search(0xa, r3, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002000010025bd7000fcdbdf25021014080313000100080001000000000008000200e00000020803000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.379545923s ago: executing program 3 (id=2152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x25}, 0x80, 0x0}}], 0x1, 0x20044005) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200003, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.379330609s ago: executing program 3 (id=2153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000002c0)="c74424009a000000c744240200300000ff2c240f00d0b909020000b80900000096ba000100010130b9800000c00f3235004000000f300ff8497f0f01cbb98f0800400f320f01f8b99b0800000f323666400f388256cfb9800000c00f3235000400000f30", 0x64}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x810e72f05b28ca0, 0x0, 0x0) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="f2dbe3f4652e660f388203b9800000c00f3235000400000f3066baf80cb89a20ad81ef66bafc0c66b8400066efc4a1f92b6c9008c7442400ef000000c744240200000000ff2c2448b800000000010000000f23c00f21f83502000c000f23f8b9c2090000b8837cc8b3ba52aefc6e0f303e450f01c8", 0x75}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r10, 0x0, 0xaf4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 887.121966ms ago: executing program 2 (id=2159): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x19, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async, rerun: 64) prctl$PR_GET_TSC(0x19, &(0x7f0000000440)) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (rerun: 64) lseek(r2, 0x600000000000, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0xa, 0xf5e10d75) (rerun: 32) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a41000000000900020073797a31000000000900010073797a30000000000800054000000004080005400000000a140000001000010000000000000000000084000a5c146e6132e11dbfc0fb4e30f442506d9563e30af942e106f2af6fde13d9bad3c468231d49c2ed96adee3b03255cd1d98698d2441587b77a2f80adc15c0a1744cc051092cafd95fa1dfde24138d4404d4995517cd55fc80e4edfdc64fd6546b320feeab9838166867bcbea20f36a7077fdd12931fa8cc3ef1deeecdae34e4028171a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) (async, rerun: 32) r6 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) epoll_pwait(r2, &(0x7f00000003c0)=[{}, {}], 0x2, 0xd, &(0x7f0000000400)={[0x7]}, 0x8) (async, rerun: 64) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000004c0)={0x0, "fde105a32573e60c30c34964a621b16932f66fdbdc2fbbe2f87d93db3ba08b26", 0x1000, 0x401, 0x9, 0x1, 0x1}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x1}}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) sendmmsg$inet6(r8, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="140000000000000029008034000000dfff5b3600000000009cb5575739bbd0ef67ce1e14a3e99838edbb6820f1c2a61c607385cad623cec4dedc997cee495593afb9451f6aeacbdc6de0f386983975eae7fedaac0d6f988d38f17a9df7dbf3ceb6a17d8cf2f1bdc33217f92e7e2d63daad3b1f8f0d82eb99047798efc809d123fd4ee2ef4635d1728231a5dd62bca1d1e9338a26501d35f5ecde9fb09ff05795689796aa746e484d6e4e5d8ff1a1da920c08f79b3bb8ab2f04ebee71d78c58ebe97b87a0c76b425d36ff917857a6da64dd8ebf5336db4ba4f1c5b4af3200e8a21331fad4267b6161a7168b54343ac3e4711c4d56c1bbbc"], 0x18}}], 0x1, 0x24000804) (async) getsockname$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 879.191244ms ago: executing program 2 (id=2161): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x30ba82, 0x246) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000040)=""/59, 0x3b}], 0x2, &(0x7f0000000200)=""/213, 0xd5}, 0x20000) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 809.713784ms ago: executing program 4 (id=2162): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76697289696ab26e6f78617474722c00"]) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x430, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x2, 0x18, [0xfffffff8, 0x8, 0x6, 0x4, 0x6, 0x3, 0x0, 0x7, 0x3, 0x8, 0x8, 0x0, 0x16000000, 0x80000001, 0x0, 0x5, 0x1, 0x200, 0x2, 0x7, 0x4, 0x400, 0x6e, 0x4, 0x6, 0xde9c, 0x6, 0x6, 0x146, 0x7fff, 0xc, 0x9, 0xf3, 0x1ea8, 0x8, 0x401, 0x10000, 0x7ff, 0x4, 0x984, 0x80000, 0xbf41, 0x8, 0xfffffffb, 0xffffffbc, 0x81, 0x6, 0x0, 0x0, 0x1, 0x40, 0x8, 0x6, 0x7fffffff, 0xb, 0xffff, 0x7, 0x40, 0x9b, 0x5, 0x3, 0x5, 0x1, 0x2], [0x5, 0x3000000, 0x5, 0x200, 0x2, 0x7, 0x8, 0x8, 0x1, 0xff, 0x5, 0x9, 0x0, 0x6, 0x400, 0x2, 0x5, 0x2, 0x8, 0xffff, 0x5, 0x8, 0x6, 0x8, 0xd8b4, 0x4, 0x8, 0x296, 0xfffff000, 0x5, 0x3, 0x10, 0xa071, 0x7, 0x1, 0x7f, 0xfffffffd, 0x90, 0x9, 0x8, 0x4, 0x3ffc0000, 0x4, 0x5, 0x9, 0xfffffffc, 0x7, 0x8, 0xa452, 0xb8, 0x7, 0x9, 0x9, 0x4e5c, 0xec, 0x9, 0x47, 0xc5, 0xff, 0x10, 0x9000000, 0x6, 0x80000001, 0x7], [0x4, 0x5, 0x9, 0x7, 0x40, 0x1, 0x4, 0x10000, 0x9, 0xd, 0xf693, 0x4, 0x8, 0x0, 0x80000000, 0x2, 0xe, 0x2dc, 0x7f1f, 0x9, 0x6, 0x5, 0x9, 0x1179, 0x48c0, 0xe64, 0x9, 0x0, 0x2, 0x5, 0x8001, 0x2d5, 0x0, 0x100, 0x4, 0x200, 0xe5, 0xffffffff, 0x7f, 0x5, 0x5, 0x401, 0x7, 0x8, 0x7fffffff, 0x150e, 0xe1, 0x0, 0x2, 0x10, 0x1, 0x3b, 0x3, 0x80000001, 0xfff, 0x401, 0x9, 0x80000000, 0xe, 0x0, 0x7, 0x2, 0x0, 0x1], [0x3, 0x7, 0x9, 0xd, 0x1, 0xa, 0x8, 0x3, 0xf4, 0x3, 0xffff, 0x400, 0xc3, 0x1, 0x9, 0x7, 0x1, 0x5, 0x2, 0xff, 0x1, 0xfff, 0x4, 0x1, 0xc3, 0x0, 0x9, 0x7fff, 0x0, 0xffffffff, 0xfff, 0x8, 0x7, 0x8, 0x5, 0x7fffffff, 0x3, 0x5, 0x6, 0xc5, 0x6, 0x4, 0xdc, 0x988, 0x1, 0x400, 0x1000, 0x0, 0x4b1, 0x6, 0x5, 0x5, 0x9, 0x3, 0xfb, 0x1, 0xd, 0xbfd8, 0x5, 0x80000000, 0x80000000, 0x8, 0x63, 0x8], 0xd, ['trans=virtio,']}, ["", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x40000}, 0x840) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 809.390486ms ago: executing program 2 (id=2163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x9, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0xfc0, 0x67, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010104, @broadcast}, "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"}}, 0xfce) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@datasec={0x2, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x2}, {0x4, 0x7f, 0x8}, {0x2, 0x6}], "a77818"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c9"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x5c, 0x0, 0x1}, 0x28) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x0, 0x2, 0x9}) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000540)={r4}) 807.151079ms ago: executing program 4 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1, 0x300, 0x4) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012580)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800018c00000100fb893d84515d3ae230000800000008000500", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x4e20, @loopback}}}, 0x88) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x9}, 0x94) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000200)) (async) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 739.730042ms ago: executing program 4 (id=2165): lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@sr0, r0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2102, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)) socket(0x2, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2e, 0x2020, 0x0, @void, @void, @value=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 636.536071ms ago: executing program 4 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 636.120667ms ago: executing program 4 (id=2167): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x7fffffffeb418842, 0x4}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_clone(0x11, 0x0, 0x90, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ext2\x00', 0x20004, &(0x7f0000000240)='\x00') syz_fuse_handle_req(r1, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0xe, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0xfff, 0x8, 0xa000, 0x8001, r6, r7, 0x5, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 589.20024ms ago: executing program 0 (id=2168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$FUSE_INIT(r4, &(0x7f0000003100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x24152, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x20, 0x1}}, 0x50) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) tee(r3, r1, 0x8, 0x4) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={r7, 0x9, 0x14c2, 0xa, 0x8, 0x200009e}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r7, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x18, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 588.583907ms ago: executing program 2 (id=2169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4010001}, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x40810) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x105, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x100}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 528.917289ms ago: executing program 2 (id=2170): syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 528.585283ms ago: executing program 2 (id=2171): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpgid(0xffffffffffffffff) ptrace$poke(0x4, r0, &(0x7f0000000000), 0xf6) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0xa1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 469.880212ms ago: executing program 0 (id=2172): socket$inet(0x2, 0x1, 0x5) (async) r0 = socket$inet(0x2, 0x1, 0x5) sendto$inet(r0, &(0x7f0000000080)="de7d755dfd044a385468b66966bc3b70f2efc31002055954d1bdf7f7246397576c0815a9122b70f440691b618c67787bb7701a0f7f323bfa583e513601fd9c033bbd03deafeb855d6fdd70a3631c52cf1010be739b9ac1e5022b6240f99d030d6025d8a768791e6bb7e975a5a474e71b29ad61195f0f9879ec", 0x79, 0x4000000, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000080)="de7d755dfd044a385468b66966bc3b70f2efc31002055954d1bdf7f7246397576c0815a9122b70f440691b618c67787bb7701a0f7f323bfa583e513601fd9c033bbd03deafeb855d6fdd70a3631c52cf1010be739b9ac1e5022b6240f99d030d6025d8a768791e6bb7e975a5a474e71b29ad61195f0f9879ec", 0x79, 0x4000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) syz_clone(0x88800, &(0x7f0000000100)="bf0e2379cdce0dec56d339347b1d7b", 0xf, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="6fd4b943d09fef2f1d57d9c2e831aa22a8bb5c9cfefeb2fb6f267d6ccd090f5724f418a762c3ee7f840785206c36daa3ff7c6f6b92ae3e577e09b8ed866407098888cb1b7ad0b78ef9b4d63a8f17611121e983d69970a4029ec1c5d10d89c2bd50a459c5c8b42083677f814df24db7617e777534258f5d09b2b057c74f0204f6602d8c03e2ff9304b6568a0c1a1f18f8574835c2d24e2c6511099319db4a10e00d0675ccfeef6477bbf9fdb6135138b34ee897d7687d1c78ec4cecf67bd438d599cee2d82bd415bf1d37bc6915e7cd") (async) syz_clone(0x88800, &(0x7f0000000100)="bf0e2379cdce0dec56d339347b1d7b", 0xf, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="6fd4b943d09fef2f1d57d9c2e831aa22a8bb5c9cfefeb2fb6f267d6ccd090f5724f418a762c3ee7f840785206c36daa3ff7c6f6b92ae3e577e09b8ed866407098888cb1b7ad0b78ef9b4d63a8f17611121e983d69970a4029ec1c5d10d89c2bd50a459c5c8b42083677f814df24db7617e777534258f5d09b2b057c74f0204f6602d8c03e2ff9304b6568a0c1a1f18f8574835c2d24e2c6511099319db4a10e00d0675ccfeef6477bbf9fdb6135138b34ee897d7687d1c78ec4cecf67bd438d599cee2d82bd415bf1d37bc6915e7cd") 409.852679ms ago: executing program 0 (id=2173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 409.600065ms ago: executing program 0 (id=2174): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0xc, 0x9, 0x2, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xf7fffffc, 0x80]}}) 349.756739ms ago: executing program 0 (id=2175): mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 349.389386ms ago: executing program 0 (id=2176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x239) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x374, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x114}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x4, 0x35}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x3, 0x2, 0x8, 0xff, 0x7f}, 0x57, &(0x7f0000000100)={0x5, 0xf, 0x57, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x6, 0xee0f, 0x9, [0xc00f, 0xff0180, 0xff000f, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x34, 0x443c}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x5, 0x2, 0x3ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x3, 0xf9, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "30a9267969675aab21b159a2499be8d8"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x37daf9172b6a2d39}}, {0x15, &(0x7f0000000200)=@string={0x15, 0x3, "aa50605070d95e0cf7e6ec62d751927a6dd42d"}}, {0x8b, &(0x7f0000000240)=@string={0x8b, 0x3, "3c9ea3d78664e6533deac4bd75e19952ff3332cdb8fa0debf78516530f24eaecd0fcaa4efb82744dbe453e839e022383a8eff43d7b767b65237f45b409913f0679c51149bba774869c611068901e1e3ed52fec9a3d3bf9550f6a4f0ab2ff9dab07db63a824adb92f0ccf80775efbd01073c5cccaf0f7ecf4a79dbd9dbad69ed2f67909c46dee7f6c95"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c10}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f00000004c0)={0x20, 0x30, 0x101, {0x101, 0x10, "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"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "4d460480"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0xc87}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x40, 0x31, 0xe9, "007ca6f67fbfeae2e0fdc5b25e7a7fa25316f29c0b05c416158a4bab764f92549dd57f4cb1849cdd2707116d34b49405784335eaabd0d17726964611fb7f1e42e91762e0e618c9685e5e6f5cfe16d33fb58a354634890549548e1aa90f09008021e3b6ff7c0290c970d514c9f0e497a699a39d385a8eaec9ca0e0bfc06637ff4e4f9f8b0ddec26d0fce509cdc937dbdcbdc52832dbf12f27e2d28c36608ac33395bbed13c1c92f314485712a4bd2e9a209a57a3aa8954bb3cb49e4bdcf21135a4cc478b9a722e65ee62cb547e0707164c63ca8b4dda262c8072b161a28b527944507637c633855a61b"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x47}, &(0x7f00000007c0)={0x20, 0x1, 0x10, "b1cf383eb534f905c12ba81b61ebe31e"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x80}}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) (async, rerun: 64) r0 = socket(0x2b, 0x3, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) close(0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) (rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdb) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): :34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110808kB inactive_anon:0kB active_file:68820kB inactive_file:162372kB unevictable:3536kB writepending:444kB present:2080628kB managed:1264296kB mlocked:0kB bounce:0kB free_pcp:57096kB local_pcp:13580kB free_cma:0kB [ 125.042618][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 125.044284][T10298] Node 1 Normal free:1609100kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:204kB unevictable:3536kB writepending:80kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:12412kB local_pcp:1368kB free_cma:0kB [ 125.054336][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 125.055947][T10298] Node 0 DMA: 2*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (U) 2*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 2*4096kB (M) = 15184kB [ 125.063471][T10298] Node 0 DMA32: 5*4kB (UME) 74*8kB (E) 27*16kB (E) 81*32kB (E) 58*64kB (ME) 40*128kB (ME) 24*256kB (UME) 9*512kB (UME) 9*1024kB (UME) 7*2048kB (UM) 1*4096kB (M) = 50868kB [ 125.069228][T10298] Node 1 Normal: 5*4kB (UME) 7*8kB (ME) 8*16kB (ME) 56*32kB (UME) 37*64kB (UME) 11*128kB (UME) 3*256kB (UE) 4*512kB (UM) 1*1024kB (E) 1*2048kB (M) 390*4096kB (UM) = 1609100kB [ 125.075133][T10298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.078329][T10298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.080024][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.081484][T10298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.088277][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.091161][T10298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.095109][T10298] 76621 total pagecache pages [ 125.095144][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.097211][T10298] 0 pages in swap cache [ 125.101434][T10298] Free swap = 124996kB [ 125.103190][T10298] Total swap = 124996kB [ 125.105018][T10298] 1048443 pages RAM [ 125.106765][T10298] 0 pages HighMem/MovableOnly [ 125.108800][T10298] 283040 pages reserved [ 125.110625][T10298] 0 pages cma reserved [ 125.402385][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.779361][T10308] 9pnet_fd: Insufficient options for proto=fd [ 125.813871][ T5954] Bluetooth: hci3: command tx timeout [ 126.099708][ T7411] lo (unregistering): left allmulticast mode [ 126.106808][T10248] hsr_slave_0: entered promiscuous mode [ 126.109166][T10248] hsr_slave_1: entered promiscuous mode [ 126.111191][T10248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.113530][T10248] Cannot create hsr debugfs directory [ 126.191097][T10314] overlayfs: failed to get inode (-116) [ 126.194579][T10314] overlayfs: failed to get inode (-116) [ 126.218615][T10314] overlayfs: failed to get inode (-116) [ 126.304073][T10248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.308210][T10248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.312467][T10248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.316645][T10248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.351499][T10328] __nla_validate_parse: 10 callbacks suppressed [ 126.351510][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 126.361184][T10248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.373173][T10248] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.381741][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.384294][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.397674][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.400151][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.400797][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.404036][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.406949][ T40] kauditd_printk_skb: 228 callbacks suppressed [ 126.406962][ T40] audit: type=1400 audit(1753540543.624:9909): avc: denied { create } for pid=10331 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.410074][T10332] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 126.411275][ T40] audit: type=1400 audit(1753540543.624:9910): avc: denied { setopt } for pid=10331 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.429941][ T40] audit: type=1400 audit(1753540543.624:9911): avc: denied { bind } for pid=10331 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.438978][ T40] audit: type=1400 audit(1753540543.634:9912): avc: denied { write } for pid=10331 comm="syz.0.1197" name="usbtmc0" dev="devtmpfs" ino=2913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.441484][ T9] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 126.450424][ T40] audit: type=1400 audit(1753540543.644:9913): avc: denied { read } for pid=10331 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.460545][ T40] audit: type=1400 audit(1753540543.663:9914): avc: denied { read } for pid=5663 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 126.471560][ T40] audit: type=1400 audit(1753540543.693:9915): avc: denied { write } for pid=10331 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.484955][ T40] audit: type=1400 audit(1753540543.712:9916): avc: denied { read } for pid=10331 comm="syz.0.1197" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.486565][T10332] input: syz0 as /devices/virtual/input/input19 [ 126.493096][ T40] audit: type=1400 audit(1753540543.712:9917): avc: denied { open } for pid=10331 comm="syz.0.1197" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.503873][ T40] audit: type=1400 audit(1753540543.712:9918): avc: denied { read write } for pid=10331 comm="syz.0.1197" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.534421][T10332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10332 comm=syz.0.1197 [ 126.534445][ T7411] IPVS: stop unused estimator thread 0... [ 126.540021][T10332] netlink: 'syz.0.1197': attribute type 3 has an invalid length. [ 126.547526][T10332] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 126.551380][T10332] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1197'. [ 126.556084][T10332] NCSI netlink: No device for ifindex 0 [ 126.615880][ T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.618375][ T9] usb 8-1: config 0 has no interface number 0 [ 126.618700][T10248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.620381][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 126.627725][ T9] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 126.631313][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.634166][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.638696][ T9] usb 8-1: config 0 descriptor?? [ 126.644878][T10312] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.658506][ T9] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 126.778884][T10248] veth0_vlan: entered promiscuous mode [ 126.786057][T10248] veth1_vlan: entered promiscuous mode [ 126.812978][T10248] veth0_macvtap: entered promiscuous mode [ 126.818895][T10248] veth1_macvtap: entered promiscuous mode [ 126.832286][T10248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.839212][T10248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.849724][T10248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.853445][T10248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.856992][T10248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.861437][T10248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.923198][ T7411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.925899][ T7411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.953502][ T7411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.956045][ T7411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.233108][T10386] vcan1: entered allmulticast mode [ 127.250067][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 127.301087][T10397] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 127.301680][T10399] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 127.303552][T10397] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1204'. [ 127.305893][T10399] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1204'. [ 127.343780][T10401] hpfs: hpfs_map_sector(): read error [ 127.358121][ T6031] net_ratelimit: 1 callbacks suppressed [ 127.358132][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.392538][T10409] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1207'. [ 127.405700][ T6030] usb 8-1: USB disconnect, device number 5 [ 127.529122][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.602765][T10438] xt_cluster: node mask cannot exceed total number of nodes [ 127.791027][T10445] tipc: Enabled bearer , priority 0 [ 127.830607][T10445] syzkaller0: entered promiscuous mode [ 127.832487][T10445] syzkaller0: entered allmulticast mode [ 127.890338][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 127.926536][ T5954] Bluetooth: hci3: command tx timeout [ 128.044270][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 128.265035][T10491] new mount options do not match the existing superblock, will be ignored [ 128.294621][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 128.377963][T10510] pim6reg9: entered allmulticast mode [ 128.410106][T10512] fuse: blksize only supported for fuseblk [ 128.455051][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1237'. [ 128.586038][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.610052][T10530] bridge0: Device is already in use. [ 128.651677][T10536] vlan3: entered promiscuous mode [ 128.829545][ T53] tipc: Node number set to 4134020043 [ 129.027022][T10566] netlink: 'syz.3.1250': attribute type 10 has an invalid length. [ 129.030074][T10566] dummy0: entered promiscuous mode [ 129.033343][T10566] bridge0: port 3(dummy0) entered blocking state [ 129.036373][T10566] bridge0: port 3(dummy0) entered disabled state [ 129.039312][T10566] dummy0: entered allmulticast mode [ 129.045098][T10566] bridge0: port 3(dummy0) entered blocking state [ 129.047909][T10566] bridge0: port 3(dummy0) entered forwarding state [ 129.216411][T10586] program syz.4.1257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.568414][ T5954] Bluetooth: hci3: Malformed Event: 0x13 [ 129.572363][ T5954] Bluetooth: hci3: Malformed Event: 0x13 [ 129.642266][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.652093][T10623] netlink: 'syz.0.1269': attribute type 10 has an invalid length. [ 130.049462][ T5954] Bluetooth: hci3: command tx timeout [ 130.102770][T10673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.106060][T10673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.279807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.442091][ T6031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.696354][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.753406][T10699] ufs: You didn't specify the type of your ufs filesystem [ 130.753406][T10699] [ 130.753406][T10699] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 130.753406][T10699] [ 130.753406][T10699] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 130.763672][T10699] ufs: ufstype=old is supported read-only [ 130.765891][T10699] syz.0.1292: attempt to access beyond end of device [ 130.765891][T10699] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 130.774503][T10702] ufs: You didn't specify the type of your ufs filesystem [ 130.774503][T10702] [ 130.774503][T10702] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 130.774503][T10702] [ 130.774503][T10702] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 130.786851][T10702] ufs: ufstype=old is supported read-only [ 130.788783][T10702] syz.0.1292: attempt to access beyond end of device [ 130.788783][T10702] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 130.797926][T10706] netlink: zone id is out of range [ 130.799577][T10706] netlink: zone id is out of range [ 130.801201][T10706] netlink: zone id is out of range [ 130.803112][T10705] dns_resolver: Unsupported server list version (0) [ 131.394018][T10760] pimreg: entered allmulticast mode [ 131.515919][ T40] kauditd_printk_skb: 449 callbacks suppressed [ 131.515934][ T40] audit: type=1400 audit(1753540548.668:10368): avc: denied { execmem } for pid=10777 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 131.628330][ T40] audit: type=1400 audit(1753540548.787:10369): avc: denied { create } for pid=10779 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.637005][ T40] audit: type=1400 audit(1753540548.787:10370): avc: denied { write } for pid=10779 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.643166][ T40] audit: type=1400 audit(1753540548.797:10371): avc: denied { create } for pid=10777 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.649646][ T40] audit: type=1400 audit(1753540548.797:10372): avc: denied { bind } for pid=10777 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.655200][ T40] audit: type=1400 audit(1753540548.797:10373): avc: denied { getopt } for pid=10777 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.672323][ T40] audit: type=1400 audit(1753540548.826:10374): avc: denied { read } for pid=10779 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.695210][T10782] __nla_validate_parse: 16 callbacks suppressed [ 131.695226][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 131.703549][T10782] xt_ecn: cannot match TCP bits for non-tcp packets [ 131.706108][ T40] audit: type=1400 audit(1753540548.856:10375): avc: denied { create } for pid=10784 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.718720][ T40] audit: type=1400 audit(1753540548.856:10376): avc: denied { write } for pid=10784 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.737554][ T40] audit: type=1400 audit(1753540548.866:10377): avc: denied { ioctl } for pid=10784 comm="syz.3.1318" path="/dev/vbi2" dev="devtmpfs" ino=990 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.842748][T10803] netlink: 'syz.3.1325': attribute type 6 has an invalid length. [ 131.846902][T10803] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1325'. [ 132.068526][T10819] netlink: 'syz.2.1330': attribute type 29 has an invalid length. [ 132.075206][T10819] netlink: 'syz.2.1330': attribute type 29 has an invalid length. [ 132.153816][ T5954] Bluetooth: hci3: command tx timeout [ 132.169898][T10829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10829 comm=syz.2.1334 [ 132.306880][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 132.444616][T10850] 9pnet_fd: Insufficient options for proto=fd [ 132.472560][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 132.476527][ T53] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.481111][ T53] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.484600][ T53] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.489688][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.494211][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.499190][ T53] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.503122][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.510114][T10824] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.515593][ T53] hub 8-1:1.0: bad descriptor, ignoring hub [ 132.518552][ T53] hub 8-1:1.0: probe with driver hub failed with error -5 [ 132.521906][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 132.524194][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 132.528162][ T53] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 132.531806][ T53] cdc_wdm 8-1:1.0: Unknown control protocol [ 132.793167][ T6012] net_ratelimit: 16 callbacks suppressed [ 132.793183][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.831947][ T61] usb 8-1: USB disconnect, device number 6 [ 132.878261][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881034][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271644][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 133.285547][T10864] syzkaller1: entered promiscuous mode [ 133.288029][T10864] syzkaller1: entered allmulticast mode [ 133.500584][T10882] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.519518][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.582704][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 133.669988][T10905] openvswitch: netlink: IPv6 tunnel dst address is zero [ 133.770081][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.774034][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.846936][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 133.851576][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 133.856430][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.961249][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 134.221332][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 134.415364][T10960] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1373'. [ 134.784090][T10977] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 134.805967][T10977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.814749][ T6030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.815222][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 134.820647][T10977] 8021q: VLANs not supported on gre0 [ 134.826457][T10977] bond4: (slave dummy0): making interface the new active one [ 134.830836][T10977] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 134.896470][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.997745][T10986] wg2: entered promiscuous mode [ 134.999238][T10986] wg2: entered allmulticast mode [ 135.053782][T10988] netlink: 'syz.4.1383': attribute type 15 has an invalid length. [ 135.136468][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.139591][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.142184][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.144942][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.411390][T11008] kAFS: No cell specified [ 135.448018][T11013] binder: 11009:11013 ioctl c0306201 200000000540 returned -22 [ 135.559109][T11023] netlink: 'syz.2.1395': attribute type 7 has an invalid length. [ 136.010109][T11055] netlink: 'syz.4.1405': attribute type 18 has an invalid length. [ 136.247537][ T6031] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 136.409543][ T6031] usb 8-1: Using ep0 maxpacket: 16 [ 136.413442][ T6031] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 136.416230][ T6031] usb 8-1: config 0 has no interface number 0 [ 136.418213][ T6031] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.421780][ T6031] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 136.426387][ T6031] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 136.429687][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 136.432267][ T6031] usb 8-1: Product: syz [ 136.433577][ T6031] usb 8-1: SerialNumber: syz [ 136.438191][ T6031] usb 8-1: config 0 descriptor?? [ 136.443916][ T6031] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 136.447145][ T6031] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input20 [ 136.642652][ T40] kauditd_printk_skb: 289 callbacks suppressed [ 136.642662][ T40] audit: type=1400 audit(1753540553.743:10667): avc: denied { read } for pid=5346 comm="acpid" name="event8" dev="devtmpfs" ino=3086 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 136.651373][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 136.654691][ T40] audit: type=1400 audit(1753540553.743:10668): avc: denied { open } for pid=5346 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3086 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 136.664422][ T40] audit: type=1400 audit(1753540553.743:10669): avc: denied { ioctl } for pid=5346 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3086 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 136.678961][ T40] audit: type=1400 audit(1753540553.743:10670): avc: denied { ioctl } for pid=11053 comm="syz.3.1406" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.696509][ T40] audit: type=1400 audit(1753540553.793:10671): avc: denied { module_request } for pid=11099 comm="syz.2.1421" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 136.726985][ T40] audit: type=1400 audit(1753540553.823:10672): avc: denied { sys_module } for pid=11099 comm="syz.2.1421" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 136.733130][ T40] audit: type=1400 audit(1753540553.823:10673): avc: denied { bpf } for pid=11101 comm="syz.0.1420" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.740350][ T40] audit: type=1400 audit(1753540553.823:10674): avc: denied { prog_run } for pid=11101 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.746119][ T40] audit: type=1400 audit(1753540553.833:10675): avc: denied { read write } for pid=6804 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.752497][T11100] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 136.753032][ T40] audit: type=1400 audit(1753540553.833:10676): avc: denied { open } for pid=6804 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.834200][T11114] __nla_validate_parse: 5 callbacks suppressed [ 136.834216][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 136.858569][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.860988][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.864076][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.866628][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.868956][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.871256][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.873697][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.876104][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.878543][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.880904][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 136.884534][ T6030] usb 8-1: USB disconnect, device number 7 [ 136.886466][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 136.896292][ T6030] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 136.903845][T11123] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 137.042657][T11130] ptrace attach of "/syz-executor exec"[6804] was attempted by ""[11130] [ 137.222380][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 137.337066][T11156] team0: Port device team_slave_0 removed [ 137.786582][ T61] Process accounting resumed [ 137.798072][T11199] ntfs3(sr0): Primary boot signature is not NTFS. [ 137.801822][T11199] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 137.846614][T11206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1448'. [ 137.849570][T11206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1448'. [ 137.859272][T11207] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.037298][T11221] 9pnet_virtio: no channels available for device 127.0.0.1 [ 138.054814][T11222] netlink: 'syz.2.1455': attribute type 13 has an invalid length. [ 138.071194][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 138.084273][T11224] xt_hashlimit: size too large, truncated to 1048576 [ 138.103311][ T6030] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 138.113218][T11222] net_ratelimit: 107 callbacks suppressed [ 138.113224][T11222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.244267][ T6030] usb 9-1: device descriptor read/64, error -71 [ 138.347795][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 138.496440][ T6030] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 138.637443][ T6030] usb 9-1: device descriptor read/64, error -71 [ 138.758649][ T6030] usb usb9-port1: attempt power cycle [ 139.116505][T11274] tipc: Enabling of bearer rejected, failed to enable media [ 139.121897][ T6030] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 139.165266][ T6030] usb 9-1: device descriptor read/8, error -71 [ 139.388668][T11291] can: request_module (can-proto-0) failed. [ 139.399309][T11290] can: request_module (can-proto-0) failed. [ 139.422062][T11295] overlayfs: failed to clone upperpath [ 139.423970][ T6030] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 139.450857][ T6030] usb 9-1: device descriptor read/8, error -71 [ 139.564763][ T6030] usb usb9-port1: unable to enumerate USB device [ 139.758778][T11313] syz.2.1471 (11313) used greatest stack depth: 19624 bytes left [ 140.027013][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 140.406696][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'. [ 140.900013][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.903106][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.907376][T11392] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 140.910202][T11392] binder: 11391:11392 ioctl c00c620f 200000000400 returned -22 [ 140.968468][T11396] SET target dimension over the limit! [ 141.082859][T11399] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.087152][T11399] overlayfs: failed to set xattr on upper [ 141.088970][T11399] overlayfs: ...falling back to redirect_dir=nofollow. [ 141.091142][T11399] overlayfs: ...falling back to index=off. [ 141.093147][T11399] overlayfs: ...falling back to uuid=null. [ 141.219374][T11408] SELinux: ebitmap start bit (511) is not a multiple of the map unit size (64) [ 141.222204][T11408] SELinux: failed to load policy [ 141.230754][T11408] tun0: tun_chr_ioctl cmd 1074025676 [ 141.232442][T11408] tun0: owner set to 0 [ 141.323637][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1504'. [ 141.336605][T11413] erspan0: entered promiscuous mode [ 141.339203][T11413] macvtap1: entered promiscuous mode [ 141.341272][T11413] macvtap1: entered allmulticast mode [ 141.343552][T11413] erspan0: entered allmulticast mode [ 141.351963][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 141.377651][T11413] erspan0: left allmulticast mode [ 141.379580][T11413] erspan0: left promiscuous mode [ 141.696453][ T40] kauditd_printk_skb: 28456 callbacks suppressed [ 141.696481][ T40] audit: type=1400 audit(1753540558.754:39121): avc: denied { ioctl } for pid=11436 comm="syz.4.1513" path="socket:[35825]" dev="sockfs" ino=35825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.750426][ T40] audit: type=1400 audit(1753540558.814:39122): avc: denied { create } for pid=11443 comm="syz.0.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.756067][ T40] audit: type=1400 audit(1753540558.814:39123): avc: denied { read } for pid=11444 comm="syz.4.1515" dev="nsfs" ino=4026533087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.762648][ T40] audit: type=1400 audit(1753540558.814:39124): avc: denied { open } for pid=11444 comm="syz.4.1515" path="net:[4026533087]" dev="nsfs" ino=4026533087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.771947][ T40] audit: type=1400 audit(1753540558.814:39125): avc: denied { create } for pid=11444 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.779114][ T40] audit: type=1400 audit(1753540558.814:39126): avc: denied { read } for pid=11444 comm="syz.4.1515" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.787077][ T40] audit: type=1400 audit(1753540558.814:39127): avc: denied { open } for pid=11444 comm="syz.4.1515" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.796004][ T40] audit: type=1400 audit(1753540558.814:39128): avc: denied { ioctl } for pid=11444 comm="syz.4.1515" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.804529][ T40] audit: type=1400 audit(1753540558.814:39129): avc: denied { read } for pid=11444 comm="syz.4.1515" path="socket:[37642]" dev="sockfs" ino=37642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.811947][ T40] audit: type=1400 audit(1753540558.824:39130): avc: denied { bind } for pid=11443 comm="syz.0.1514" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.905636][T11461] No such timeout policy "syz0" [ 141.962343][T11465] overlay: ./file0 is not a directory [ 142.004367][T11467] overlayfs: empty lowerdir [ 142.289944][T11478] gretap2: entered promiscuous mode [ 142.637478][T11507] nbd: socks must be embedded in a SOCK_ITEM attr [ 142.641255][T11507] block nbd0: shutting down sockets [ 142.739715][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1536'. [ 142.742707][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'. [ 142.745609][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1536'. [ 143.099478][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1540'. [ 143.535149][T11533] SELinux: failed to load policy [ 143.796298][T11547] netlink: 'syz.3.1547': attribute type 30 has an invalid length. [ 143.802802][T11547] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.805594][T11547] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.808313][T11547] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.811101][T11547] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.817655][T11547] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.820613][T11547] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.824046][T11547] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.827091][T11547] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.974704][T11569] batadv_slave_1: entered promiscuous mode [ 144.030419][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 144.040365][T11568] batadv_slave_1: left promiscuous mode [ 144.087149][T11584] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 144.119593][T11586] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 144.156982][T11589] overlayfs: failed to clone upperpath [ 144.373591][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.377739][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.394622][T11601] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1564'. [ 144.619525][ T6030] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 144.768295][ T6030] usb 8-1: device descriptor read/64, error -71 [ 144.945105][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 145.029336][ T6030] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 145.179929][ T6030] usb 8-1: device descriptor read/64, error -71 [ 145.285370][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 145.290899][ T6030] usb usb8-port1: attempt power cycle [ 145.362827][T11640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.652401][ T6030] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 145.673231][ T6030] usb 8-1: device descriptor read/8, error -71 [ 145.889055][T11655] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 145.915452][ T6030] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 145.920619][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'. [ 145.950438][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.966687][ T6030] usb 8-1: device descriptor read/8, error -71 [ 145.994908][T11663] 9p: Unknown uid 00000000004294967295 [ 146.021934][T11664] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 146.038094][T11664] cramfs: wrong magic [ 146.044947][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 146.047742][T11665] IPVS: Unknown mcast interface: vcan0 [ 146.076514][ T6030] usb usb8-port1: unable to enumerate USB device [ 146.097741][T11677] cgroup: Unknown subsys name 'cpuset' [ 146.132214][T11680] cgroup: Unknown subsys name 'cpuset' [ 146.383811][T11700] set match dimension is over the limit! [ 147.106284][ T40] kauditd_printk_skb: 303 callbacks suppressed [ 147.106295][ T40] audit: type=1400 audit(1753540564.134:39434): avc: denied { bind } for pid=11728 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.114927][ T40] audit: type=1400 audit(1753540564.134:39435): avc: denied { listen } for pid=11728 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.147809][ T40] audit: type=1400 audit(1753540564.174:39436): avc: denied { connect } for pid=11728 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.186333][ T40] audit: type=1400 audit(1753540564.214:39437): avc: denied { map } for pid=11730 comm="syz.2.1603" path="socket:[42032]" dev="sockfs" ino=42032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.195303][ T40] audit: type=1400 audit(1753540564.214:39438): avc: denied { read accept } for pid=11730 comm="syz.2.1603" path="socket:[42032]" dev="sockfs" ino=42032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.202985][ T40] audit: type=1400 audit(1753540564.234:39439): avc: denied { name_bind } for pid=11730 comm="syz.2.1603" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 147.210775][ T40] audit: type=1400 audit(1753540564.234:39440): avc: denied { accept } for pid=11732 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 147.225106][ T40] audit: type=1400 audit(1753540564.254:39441): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.232891][ T40] audit: type=1400 audit(1753540564.254:39442): avc: denied { open } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.240696][ T40] audit: type=1400 audit(1753540564.254:39443): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.405773][T11745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.731331][T11751] affs: No valid root block on device nullb0 [ 147.942152][T11770] __nla_validate_parse: 3 callbacks suppressed [ 147.942169][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 148.012212][T11783] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 148.158557][T11791] tmpfs: Bad value for 'mpol' [ 148.193342][T11794] syzkaller1: entered promiscuous mode [ 148.196052][T11794] syzkaller1: entered allmulticast mode [ 148.414435][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.418024][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.579788][T11807] netlink: 'syz.2.1630': attribute type 7 has an invalid length. [ 148.582613][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 148.810793][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 148.819181][T11826] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 148.823115][T11826] batadv_slave_0: entered promiscuous mode [ 148.883853][T11826] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1637'. [ 149.007437][T11830] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.010850][T11830] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 149.014229][T11830] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.017485][T11830] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 149.037916][ T6030] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 149.183954][T11832] No control pipe specified [ 149.190565][ T6030] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.194881][ T6030] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.199713][ T6030] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.204874][ T6030] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.211038][ T6030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.217159][ T6030] usb 8-1: config 0 descriptor?? [ 149.629702][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.632224][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.634529][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.636923][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.639334][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.642758][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.645096][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.647569][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.650030][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.652638][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.654967][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.658072][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.661048][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.663564][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.666105][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.669666][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.672291][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.674491][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.676744][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.678878][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.681392][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.683777][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.686081][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.688341][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.691009][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.693384][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.695716][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.697826][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.700101][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.702663][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.705157][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.707500][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.708307][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 149.709869][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.709891][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.709903][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.709915][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.709927][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.709939][ T6030] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 149.717184][ T6030] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 149.750130][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.752361][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.754331][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.756271][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.758026][T11843] xt_l2tp: v2 doesn't support IP mode [ 149.758207][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.763305][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.765313][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.767226][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.769181][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.772060][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.774153][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.776381][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.778296][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.780385][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.783517][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.785845][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.787808][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.792453][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.796043][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.798880][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.801927][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.804586][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.807626][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.810396][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.813477][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.816143][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.818963][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.824103][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.830114][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.835238][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.838475][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.841298][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.841561][T11824] syzkaller1: entered promiscuous mode [ 149.844143][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.845598][T11824] syzkaller1: entered allmulticast mode [ 149.847382][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.849453][T11849] ptm ptm53: ldisc open failed (-12), clearing slot 53 [ 149.850764][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.855384][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.857318][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.859141][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.861143][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 149.865234][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.868238][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.870424][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.874353][ T10] usb 8-1: USB disconnect, device number 12 [ 149.880743][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.889851][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.899639][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.905120][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.907733][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.910456][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.915437][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.918510][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.921547][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.923458][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.925361][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.927238][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.929700][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.933460][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.935502][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.937424][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.939304][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.941394][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 149.943244][T11844] tmpfs: Invalid gid '0x00000000ffffffff' [ 150.084362][T11869] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 150.096447][T11869] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 150.130777][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1650'. [ 150.499136][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 150.540360][T11882] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1653'. [ 150.546571][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 151.008785][T11928] overlayfs: failed to clone upperpath [ 151.106002][T11941] dlm: Unknown command passed to DLM device : 255 [ 151.106002][T11941] [ 151.197134][T11947] ./cgroup: Can't lookup blockdev [ 151.368401][T11967] No such timeout policy "syz0" [ 152.040041][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 155.088988][ T6221] wlan1: Trigger new scan to find an IBSS to join [ 158.055873][ T6211] wlan1: Trigger new scan to find an IBSS to join [ 158.988300][ T46] wlan1: Creating new IBSS network, BSSID 7e:e3:7e:07:a2:e8 [ 165.371655][T12017] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 165.375765][T12017] qnx6: wrong signature (magic) in superblock #1. [ 165.378597][T12017] qnx6: unable to read the first superblock [ 165.397335][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 165.397350][ T40] audit: type=1400 audit(1753540582.375:39606): avc: denied { read write } for pid=6804 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.408404][ T40] audit: type=1400 audit(1753540582.385:39607): avc: denied { open } for pid=6804 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.418475][ T40] audit: type=1400 audit(1753540582.385:39608): avc: denied { ioctl } for pid=6804 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.427743][ T40] audit: type=1400 audit(1753540582.395:39609): avc: denied { read } for pid=12023 comm="syz.0.1695" name="comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.436970][ T40] audit: type=1400 audit(1753540582.395:39610): avc: denied { open } for pid=12023 comm="syz.0.1695" path="/dev/comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.440470][T12024] __nla_validate_parse: 2 callbacks suppressed [ 165.440482][T12024] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1695'. [ 165.446102][ T40] audit: type=1400 audit(1753540582.395:39611): avc: denied { read } for pid=12023 comm="syz.0.1695" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.461335][ T40] audit: type=1400 audit(1753540582.395:39612): avc: denied { open } for pid=12023 comm="syz.0.1695" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.468768][ T40] audit: type=1400 audit(1753540582.395:39613): avc: denied { ioctl } for pid=12023 comm="syz.0.1695" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.476880][ T40] audit: type=1400 audit(1753540582.395:39614): avc: denied { set_context_mgr } for pid=12023 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 165.484277][ T40] audit: type=1400 audit(1753540582.415:39615): avc: denied { prog_load } for pid=12018 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.496349][T12024] Bluetooth: MGMT ver 1.23 [ 165.571691][T12036] 9pnet_fd: p9_fd_create_tcp (12036): problem connecting socket to 127.0.0.1 [ 165.593614][T12038] netlink: 'syz.0.1696': attribute type 14 has an invalid length. [ 165.607798][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 165.651190][T12044] tmpfs: Bad value for 'mpol' [ 166.257250][T12050] syz.3.1702: attempt to access beyond end of device [ 166.257250][T12050] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 166.262349][T12050] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 166.298234][T12051] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 166.344190][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 166.446246][T12064] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 166.448301][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.482677][T12071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 166.966872][T12084] syz.0.1711 (12084): drop_caches: 2 [ 166.973074][T12084] syz.0.1711 (12084): drop_caches: 2 [ 167.149155][T12088] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 167.202126][T12092] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 167.264724][T12107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12107 comm=syz.2.1718 [ 167.416920][T12123] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 167.552060][ T1025] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 167.705904][ T1025] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.709010][ T1025] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.711845][ T1025] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.715142][ T1025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.719052][ T1025] usb 8-1: config 0 descriptor?? [ 167.730658][ T1025] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.733717][ T1025] dvb-usb: bulk message failed: -22 (3/0) [ 167.742796][ T1025] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.752605][ T1025] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.755893][ T1025] usb 8-1: media controller created [ 167.760632][ T1025] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.774655][ T1025] dvb-usb: bulk message failed: -22 (6/0) [ 167.776932][ T1025] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.780769][ T1025] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input23 [ 167.789538][ T1025] dvb-usb: schedule remote query interval to 150 msecs. [ 167.791761][ T1025] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.927789][ T6030] usb 8-1: USB disconnect, device number 13 [ 167.941202][ T6030] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 168.093621][T12151] Cannot find add_set index 4 as target [ 168.099537][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1734'. [ 168.118765][T12153] bridge5: port 1(ip6gretap1) entered blocking state [ 168.121051][T12153] bridge5: port 1(ip6gretap1) entered disabled state [ 168.123513][T12153] ip6gretap1: entered allmulticast mode [ 168.126123][T12153] ip6gretap1: entered promiscuous mode [ 168.197373][T12164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1737'. [ 168.201664][T12164] openvswitch: netlink: Message has 16 unknown bytes. [ 168.434852][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1742'. [ 168.534039][T12208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1745'. [ 168.759001][T12240] bridge0: port 3(veth0_to_bridge) entered blocking state [ 168.761599][T12240] bridge0: port 3(veth0_to_bridge) entered disabled state [ 168.764520][T12240] veth0_to_bridge: entered allmulticast mode [ 168.767192][T12240] veth0_to_bridge: entered promiscuous mode [ 168.841834][T12252] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1753'. [ 168.849520][T12252] bridge0: entered allmulticast mode [ 168.854669][T12252] pim6reg: entered allmulticast mode [ 168.858172][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 168.861035][T12252] veth0_to_bridge: left allmulticast mode [ 168.862864][T12252] veth0_to_bridge: left promiscuous mode [ 168.864860][T12252] bridge0: port 3(veth0_to_bridge) entered disabled state [ 168.868762][T12252] bridge_slave_1: left allmulticast mode [ 168.870550][T12252] bridge_slave_1: left promiscuous mode [ 168.872435][T12252] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.876992][T12252] bridge_slave_0: left allmulticast mode [ 168.878791][T12252] bridge_slave_0: left promiscuous mode [ 168.880617][T12252] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.894724][T12252] bridge0 (unregistering): left allmulticast mode [ 168.996333][T12269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1756'. [ 169.024804][ T5954] Bluetooth: hci3: link tx timeout [ 169.027250][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.107135][T12284] tipc: Enabling of bearer rejected, failed to enable media [ 169.330807][T12293] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 169.333410][T12293] team0: entered promiscuous mode [ 169.335236][T12293] team_slave_0: entered promiscuous mode [ 169.337717][T12293] team_slave_1: entered promiscuous mode [ 169.390762][ T5954] Bluetooth: hci3: link tx timeout [ 169.392935][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.418709][T12299] dvmrp1: entered allmulticast mode [ 169.425864][T12301] ip6t_srh: unknown srh match flags B153 [ 169.452254][T12303] program syz.0.1766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.455805][T12303] ata1.00: non-matching transfer count (32/0) [ 169.595168][ T5954] Bluetooth: hci3: link tx timeout [ 169.597340][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.489476][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 170.489488][ T40] audit: type=1400 audit(1753540587.469:39860): avc: denied { create } for pid=12325 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.492186][T12326] xt_hashlimit: max too large, truncated to 1048576 [ 170.501236][T12326] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.509936][ T40] audit: type=1400 audit(1753540587.489:39861): avc: denied { read } for pid=12325 comm="syz.3.1773" dev="nsfs" ino=4026533161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 170.518042][ T40] audit: type=1400 audit(1753540587.489:39862): avc: denied { open } for pid=12325 comm="syz.3.1773" path="net:[4026533161]" dev="nsfs" ino=4026533161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 170.525788][ T40] audit: type=1400 audit(1753540587.489:39863): avc: denied { setopt } for pid=12325 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.542722][ T40] audit: type=1400 audit(1753540587.519:39864): avc: denied { create } for pid=12327 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.550937][ T40] audit: type=1400 audit(1753540587.519:39865): avc: denied { ioctl } for pid=12327 comm="syz.3.1774" path="socket:[41718]" dev="sockfs" ino=41718 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.558743][ T40] audit: type=1400 audit(1753540587.529:39866): avc: denied { read } for pid=12327 comm="syz.3.1774" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.566093][ T40] audit: type=1400 audit(1753540587.529:39867): avc: denied { open } for pid=12327 comm="syz.3.1774" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.573328][ T40] audit: type=1400 audit(1753540587.529:39868): avc: denied { ioctl } for pid=12327 comm="syz.3.1774" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.648046][ T5954] Bluetooth: hci3: link tx timeout [ 170.649720][ T5954] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.683415][ T40] audit: type=1400 audit(1753540587.658:39869): avc: denied { create } for pid=12329 comm="syz.3.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.687792][T12330] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 170.691771][T12330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.694321][T12330] vhci_hcd vhci_hcd.0: Device attached [ 170.702768][T12330] vhci_hcd vhci_hcd.0: port 0 already used [ 170.710476][T12331] vhci_hcd: connection closed [ 170.711569][ T6203] vhci_hcd: stop threads [ 170.714404][ T6203] vhci_hcd: release socket [ 170.716088][ T6203] vhci_hcd: disconnect device [ 171.035866][ T5954] Bluetooth: hci3: command 0x0406 tx timeout [ 171.317010][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.319968][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.319982][T12364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.325149][T12364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.326736][T12366] __nla_validate_parse: 6 callbacks suppressed [ 171.326745][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 171.523447][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.526343][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.532298][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.535116][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.553794][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.558060][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.561608][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.565046][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.567948][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.570696][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.573446][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.576106][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.587822][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.591320][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.594034][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.598385][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.601225][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.604585][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.611222][T12411] netlink: 'syz.2.1798': attribute type 11 has an invalid length. [ 171.614230][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.619167][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.622090][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.625422][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.628610][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.631321][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.634223][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.637083][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.640334][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.643360][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.646151][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.649674][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.652642][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.655724][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.658753][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.661491][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.664509][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.670755][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.674399][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.677756][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.680592][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.683249][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.692986][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.698755][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.701896][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.705156][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.710331][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.713326][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.716077][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.718951][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.722300][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.725070][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.729082][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.732144][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.734773][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.738173][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.740821][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.743423][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.746031][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.748831][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.752350][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.754913][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.757951][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.760660][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.763184][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.766140][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.768938][T12393] overlayfs: unescaped trailing colons in lowerdir mount option. [ 171.820557][T12432] blkio.reset_stats is deprecated [ 171.847922][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 172.025294][T12441] tmpfs: Bad value for 'mpol' [ 172.326001][T12450] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1810'. [ 172.332752][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 172.364993][T12452] openvswitch: netlink: IP tunnel dst address not specified [ 172.411159][T12454] x_tables: duplicate underflow at hook 3 [ 172.558785][T12471] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1819'. [ 172.562130][T12472] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1819'. [ 172.563739][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 172.975925][T12475] netlink: 'syz.0.1820': attribute type 32 has an invalid length. [ 173.156337][T12491] bridge0: port 4(veth0_to_bridge) entered blocking state [ 173.158770][T12491] bridge0: port 4(veth0_to_bridge) entered disabled state [ 173.161123][T12491] veth0_to_bridge: entered allmulticast mode [ 173.164148][T12491] veth0_to_bridge: entered promiscuous mode [ 173.165913][T12491] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.170444][T12491] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 173.174398][T12491] bridge0: port 4(veth0_to_bridge) entered blocking state [ 173.176477][T12491] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 173.295479][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1829'. [ 174.038714][ T6031] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 174.193472][ T6031] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 174.196671][ T6031] usb 8-1: can't read configurations, error -71 [ 174.258883][T12518] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 174.436643][T12523] x_tables: duplicate underflow at hook 1 [ 174.679320][ T1025] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 174.772612][T12530] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 174.777294][T12530] cramfs: wrong magic [ 174.781798][T12530] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 174.785308][T12530] cramfs: wrong magic [ 174.829245][ T1025] usb 9-1: Using ep0 maxpacket: 32 [ 174.834440][ T1025] usb 9-1: config 8 has an invalid interface number: 25 but max is 0 [ 174.837510][ T1025] usb 9-1: config 8 has an invalid descriptor of length 150, skipping remainder of the config [ 174.841599][ T1025] usb 9-1: config 8 has no interface number 0 [ 174.843667][ T1025] usb 9-1: config 8 interface 25 altsetting 1 endpoint 0x9 has invalid maxpacket 1152, setting to 1024 [ 174.847888][ T1025] usb 9-1: config 8 interface 25 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 174.852382][ T1025] usb 9-1: config 8 interface 25 has no altsetting 0 [ 174.856606][ T1025] usb 9-1: New USB device found, idVendor=100d, idProduct=9032, bcdDevice= c.27 [ 174.859985][ T1025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.862808][ T1025] usb 9-1: Manufacturer: ࡠ [ 174.864286][ T1025] usb 9-1: SerialNumber: 䐊 [ 175.007019][T12554] netlink: ct family unspecified [ 175.008697][T12554] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.077201][T12560] gfs2: gfs2 mount does not exist [ 175.079428][ T1025] usb 9-1: USB disconnect, device number 6 [ 175.081392][T12560] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 175.084294][T12560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.137218][T12567] ip6t_srh: unknown srh match flags 4000 [ 175.248118][T12573] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.256585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.256969][T12573] bridge0: port 4(veth0_to_bridge) entered disabled state [ 175.263071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.263412][T12573] bridge0: port 3(dummy0) entered disabled state [ 175.268136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.270055][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.277370][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.562784][ T40] kauditd_printk_skb: 248 callbacks suppressed [ 175.562795][ T40] audit: type=1400 audit(1753540592.534:40118): avc: denied { create } for pid=12595 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.571453][ T40] audit: type=1400 audit(1753540592.534:40119): avc: denied { ioctl } for pid=12595 comm="syz.2.1856" path="socket:[44116]" dev="sockfs" ino=44116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.603954][ T40] audit: type=1400 audit(1753540592.574:40120): avc: denied { bind } for pid=12595 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.679712][T12605] wg2: entered promiscuous mode [ 175.681485][T12605] wg2: entered allmulticast mode [ 175.712531][ T40] audit: type=1400 audit(1753540592.684:40121): avc: denied { prog_run } for pid=12606 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 175.738130][ T40] audit: type=1400 audit(1753540592.704:40122): avc: denied { create } for pid=12608 comm="syz.2.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.745554][ T40] audit: type=1400 audit(1753540592.714:40123): avc: denied { execute } for pid=12608 comm="syz.2.1861" path="/544/cpu.stat" dev="tmpfs" ino=2921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.753483][ T40] audit: type=1400 audit(1753540592.714:40124): avc: denied { mount } for pid=12608 comm="syz.2.1861" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 175.784669][ T40] audit: type=1400 audit(1753540592.754:40125): avc: denied { name_bind } for pid=12611 comm="syz.2.1862" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 175.792231][ T40] audit: type=1400 audit(1753540592.754:40126): avc: denied { node_bind } for pid=12611 comm="syz.2.1862" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 175.840951][T12615] FAULT_INJECTION: forcing a failure. [ 175.840951][T12615] name failslab, interval 1, probability 0, space 0, times 1 [ 175.844876][T12615] CPU: 2 UID: 0 PID: 12615 Comm: syz.4.1863 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 175.844892][T12615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.844899][T12615] Call Trace: [ 175.844903][T12615] [ 175.844908][T12615] dump_stack_lvl+0x16c/0x1f0 [ 175.844929][T12615] should_fail_ex+0x512/0x640 [ 175.844946][T12615] ? fs_reclaim_acquire+0xae/0x150 [ 175.844972][T12615] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 175.844985][T12615] should_failslab+0xc2/0x120 [ 175.844996][T12615] __kmalloc_noprof+0xd2/0x510 [ 175.845015][T12615] tomoyo_realpath_from_path+0xc2/0x6e0 [ 175.845028][T12615] ? tomoyo_profile+0x47/0x60 [ 175.845041][T12615] tomoyo_path_number_perm+0x245/0x580 [ 175.845056][T12615] ? tomoyo_path_number_perm+0x237/0x580 [ 175.845073][T12615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.845090][T12615] ? find_held_lock+0x2b/0x80 [ 175.845117][T12615] ? find_held_lock+0x2b/0x80 [ 175.845129][T12615] ? hook_file_ioctl_common+0x145/0x410 [ 175.845145][T12615] ? __fget_files+0x20e/0x3c0 [ 175.845158][T12615] security_file_ioctl+0x9b/0x240 [ 175.845170][T12615] __x64_sys_ioctl+0xb7/0x210 [ 175.845185][T12615] do_syscall_64+0xcd/0x4c0 [ 175.845197][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.845209][T12615] RIP: 0033:0x7f61ddf8e9a9 [ 175.845218][T12615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.845228][T12615] RSP: 002b:00007f61dee4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.845239][T12615] RAX: ffffffffffffffda RBX: 00007f61de1b5fa0 RCX: 00007f61ddf8e9a9 [ 175.845246][T12615] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000004 [ 175.845252][T12615] RBP: 00007f61dee4d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.845258][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.845264][T12615] R13: 0000000000000000 R14: 00007f61de1b5fa0 R15: 00007ffc4491cdc8 [ 175.845278][T12615] [ 175.845713][T12615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.854809][ T40] audit: type=1400 audit(1753540592.824:40127): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.889104][T12623] x_tables: duplicate underflow at hook 1 [ 175.936004][T12632] 9pnet_fd: Insufficient options for proto=fd [ 175.939553][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 176.028064][T12643] ufs: You didn't specify the type of your ufs filesystem [ 176.028064][T12643] [ 176.028064][T12643] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 176.028064][T12643] [ 176.028064][T12643] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 176.041060][T12643] ufs: failed to set blocksize [ 176.057762][T12648] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 176.061905][T12648] syz_tun: entered promiscuous mode [ 176.066556][T12648] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 176.164902][T12651] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1875'. [ 176.177232][T12658] gtp0: entered promiscuous mode [ 176.302718][ T6013] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 176.461600][ T6013] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.464803][ T6013] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.468633][ T6013] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.471909][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.474503][ T6013] usb 8-1: Product: syz [ 176.475988][ T6013] usb 8-1: Manufacturer: syz [ 176.477891][ T6013] usb 8-1: SerialNumber: syz [ 176.481320][ T6013] usb 8-1: config 0 descriptor?? [ 176.485333][ T6013] usb 8-1: selecting invalid altsetting 0 [ 176.630710][ T5950] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 176.688412][ T1025] usb 8-1: USB disconnect, device number 16 [ 176.800655][ T5950] usb 9-1: Using ep0 maxpacket: 32 [ 176.806220][ T5950] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.809208][ T5950] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.812356][ T5950] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.815418][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.818983][ T5950] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.822552][ T5950] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.827320][ T5950] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.831132][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.836651][ T5950] usb 9-1: config 0 descriptor?? [ 177.052797][ T5950] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.057668][ T5950] usb 9-1: USB disconnect, device number 7 [ 177.061226][ T5950] usblp1: removed [ 177.456774][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 177.491153][ T6013] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 177.600596][T12709] [U] 1WT`8H$09\ [ 177.602765][T12709] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 177.605226][T12708] [U]  [ 177.643860][ T6013] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 177.646488][ T6013] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 177.649103][ T6013] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 177.652509][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.656006][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 177.659634][ T6013] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.664512][ T6013] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 177.668283][ T6013] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.670046][T12713] syz.3.1895 (12713): drop_caches: 2 [ 177.672467][ T6013] usb 9-1: config 0 descriptor?? [ 177.676878][T12676] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 177.886103][ T6013] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.980230][T12724] netlink: 'syz.4.1881': attribute type 10 has an invalid length. [ 177.983367][T12724] syz_tun: entered promiscuous mode [ 177.989508][T12724] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 178.303282][T12726] smc: net device bond0 applied user defined pnetid SYZ2 [ 178.305780][T12726] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1899'. [ 178.373449][T12726] smc: removing net device bond0 with user defined pnetid SYZ2 [ 178.377404][T12726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.382472][T12726] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 178.386612][T12726] bond0 (unregistering): Released all slaves [ 178.624621][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 178.628555][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 178.727422][T12746] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.092318][T12760] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 179.192989][T12767] netlink: 'syz.3.1912': attribute type 5 has an invalid length. [ 179.217895][T12769] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 179.222531][T12769] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1913'. [ 179.225940][T12769] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1913'. [ 179.228691][T12769] netlink: 'syz.3.1913': attribute type 5 has an invalid length. [ 179.231070][T12769] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1913'. [ 179.433848][ T927] usb 9-1: USB disconnect, device number 8 [ 179.450469][ T927] usblp1: removed [ 180.024885][T12837] FAULT_INJECTION: forcing a failure. [ 180.024885][T12837] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.029528][T12837] CPU: 0 UID: 0 PID: 12837 Comm: syz.0.1929 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 180.029543][T12837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.029549][T12837] Call Trace: [ 180.029553][T12837] [ 180.029557][T12837] dump_stack_lvl+0x16c/0x1f0 [ 180.029579][T12837] should_fail_ex+0x512/0x640 [ 180.029602][T12837] _copy_from_user+0x2e/0xd0 [ 180.029614][T12837] copy_msghdr_from_user+0x98/0x160 [ 180.029633][T12837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 180.029656][T12837] ___sys_sendmsg+0xfe/0x1d0 [ 180.029667][T12837] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.029676][T12837] ? __lock_acquire+0x622/0x1c90 [ 180.029703][T12837] __sys_sendmsg+0x16d/0x220 [ 180.029713][T12837] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.029732][T12837] do_syscall_64+0xcd/0x4c0 [ 180.029744][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.029755][T12837] RIP: 0033:0x7f523b38e9a9 [ 180.029764][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.029774][T12837] RSP: 002b:00007f523c146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.029785][T12837] RAX: ffffffffffffffda RBX: 00007f523b5b6080 RCX: 00007f523b38e9a9 [ 180.029792][T12837] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000004 [ 180.029798][T12837] RBP: 00007f523c146090 R08: 0000000000000000 R09: 0000000000000000 [ 180.029804][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.029810][T12837] R13: 0000000000000000 R14: 00007f523b5b6080 R15: 00007ffcc4939668 [ 180.029823][T12837] [ 180.120182][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 180.124168][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 180.150482][T12843] xt_socket: unknown flags 0xc [ 180.153470][T12846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.217578][T12848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.281767][T12853] trusted_key: encrypted_key: master key parameter '' is invalid [ 180.286762][T12853] sctp: [Deprecated]: syz.2.1936 (pid 12853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.286762][T12853] Use struct sctp_sack_info instead [ 180.293057][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 180.347980][T12857] bridge2: port 1(ip6gretap2) entered blocking state [ 180.351023][T12857] bridge2: port 1(ip6gretap2) entered disabled state [ 180.353326][T12857] ip6gretap2: entered allmulticast mode [ 180.355866][T12857] ip6gretap2: entered promiscuous mode [ 180.377166][T12857] veth5: entered promiscuous mode [ 180.378877][T12857] bridge2: port 2(veth5) entered blocking state [ 180.380846][T12857] bridge2: port 2(veth5) entered disabled state [ 180.383132][T12857] veth5: entered allmulticast mode [ 180.606295][ T40] kauditd_printk_skb: 230 callbacks suppressed [ 180.606306][ T40] audit: type=1400 audit(1753540597.571:40358): avc: denied { create } for pid=12882 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.615055][ T40] audit: type=1400 audit(1753540597.581:40359): avc: denied { map_create } for pid=12882 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.622823][ T40] audit: type=1400 audit(1753540597.581:40360): avc: denied { map_read map_write } for pid=12882 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.649234][ T40] audit: type=1400 audit(1753540597.611:40361): avc: denied { create } for pid=12885 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.649676][T12886] rdma_op ffff888055eb19f0 conn xmit_rdma 0000000000000000 [ 180.655368][ T40] audit: type=1400 audit(1753540597.611:40362): avc: denied { bind } for pid=12885 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.655394][ T40] audit: type=1400 audit(1753540597.611:40363): avc: denied { write } for pid=12885 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.681951][T12886] bond5: entered promiscuous mode [ 180.683988][T12886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.689732][ T40] audit: type=1400 audit(1753540597.651:40364): avc: denied { watch } for pid=12885 comm="syz.3.1949" path="/377/file0" dev="tmpfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.696596][T12892] xt_hashlimit: size too large, truncated to 1048576 [ 180.699162][T12887] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 180.702095][ T40] audit: type=1400 audit(1753540597.651:40365): avc: denied { watch_sb watch_reads } for pid=12885 comm="syz.3.1949" path="/377/file0" dev="tmpfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.719148][ T40] audit: type=1400 audit(1753540597.661:40366): avc: denied { setopt } for pid=12891 comm="syz.2.1950" lport=59 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.732838][ T40] audit: type=1400 audit(1753540597.691:40367): avc: denied { write } for pid=12880 comm="syz.0.1948" name="tcp6" dev="proc" ino=4026533868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 180.852142][T12911] netlink: 'syz.2.1955': attribute type 18 has an invalid length. [ 181.100198][T12935] cgroup: No subsys list or none specified [ 181.188389][T12861] overlayfs: statfs failed on './file0' [ 181.290983][T12945] kvm: emulating exchange as write [ 181.369445][T12958] can0: slcan on ptm0. [ 181.434518][T12970] bridge3: entered promiscuous mode [ 181.436256][T12970] bridge3: entered allmulticast mode [ 181.442047][T12973] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.453884][T12956] can0 (unregistered): slcan off ptm0. [ 181.529487][T12986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12986 comm=syz.2.1974 [ 181.544973][T12986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12986 comm=syz.2.1974 [ 181.637067][T12994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.641041][T12994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.706913][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.711359][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.714471][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.717787][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.720731][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.847985][T13000] chnl_net:caif_netlink_parms(): no params data found [ 182.006428][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.008776][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.024065][T13000] bridge_slave_0: entered allmulticast mode [ 182.026733][T13000] bridge_slave_0: entered promiscuous mode [ 182.035098][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.037503][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.039732][T13000] bridge_slave_1: entered allmulticast mode [ 182.046395][T13000] bridge_slave_1: entered promiscuous mode [ 182.115521][ T6218] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.118841][ T6218] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.128975][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.133972][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.172698][T13000] team0: Port device team_slave_0 added [ 182.177350][T13000] team0: Port device team_slave_1 added [ 182.223924][ T6218] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.227233][ T6218] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.234264][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.236416][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.245924][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.250175][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.252323][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.261542][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.308088][T13000] hsr_slave_0: entered promiscuous mode [ 182.310454][T13000] hsr_slave_1: entered promiscuous mode [ 182.312527][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.315350][T13000] Cannot create hsr debugfs directory [ 182.346564][ T6218] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.349546][ T6218] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.400578][T13042] autofs: Bad value for 'fd' [ 182.438319][ T6218] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.440878][T13044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.441990][ T6218] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.445721][T13044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.532125][T13056] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 182.618078][ T6218] veth5: left allmulticast mode [ 182.620156][ T6218] bridge2: port 2(veth5) entered disabled state [ 182.624114][ T6218] ip6gretap2: left allmulticast mode [ 182.625904][ T6218] ip6gretap2: left promiscuous mode [ 182.628004][ T6218] bridge2: port 1(ip6gretap2) entered disabled state [ 182.777859][ T6218] bond2 (unregistering): (slave gretap1): Releasing active interface [ 182.811057][ T6218] dvmrp1 (unregistering): left allmulticast mode [ 183.190958][ T6218] bond1 (unregistering): Released all slaves [ 183.277530][ T6218] bond2 (unregistering): Released all slaves [ 183.288524][ T6218] bond3 (unregistering): Released all slaves [ 183.366088][ T6218] bond4 (unregistering): (slave dummy0): Releasing active interface [ 183.370581][ T6218] bond4 (unregistering): Released all slaves [ 183.404787][T13069] bond1: entered allmulticast mode [ 183.472110][ T6218] tipc: Disabling bearer [ 183.478703][ T6218] tipc: Left network mode [ 183.508512][ T6218] IPVS: stopping master sync thread 6541 ... [ 183.662424][ T6218] mac80211_hwsim hwsim8 wlan1 (unregistering): left promiscuous mode [ 183.774815][ T5954] Bluetooth: hci4: command tx timeout [ 183.787225][ T6218] batadv_slave_0: left promiscuous mode [ 183.818267][ T6218] hsr_slave_0: left promiscuous mode [ 183.824725][ T6218] hsr_slave_1: left promiscuous mode [ 183.827428][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.830389][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.833717][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.836342][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.856944][ T6218] veth1_macvtap: left promiscuous mode [ 183.858656][ T6218] veth0_macvtap: left promiscuous mode [ 183.860404][ T6218] veth1_vlan: left promiscuous mode [ 183.862107][ T6218] veth0_vlan: left promiscuous mode [ 183.919751][ T6218] pim6reg (unregistering): left allmulticast mode [ 185.034544][T13000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.039582][T13000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.048954][T13000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.054561][T13000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.085819][T13131] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 185.105391][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.115342][T13000] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.120123][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.122363][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.135346][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.137573][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.146163][T13139] __nla_validate_parse: 12 callbacks suppressed [ 185.146173][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 185.240602][T13139] hsr_slave_1 (unregistering): left promiscuous mode [ 185.280352][ T6218] IPVS: stop unused estimator thread 0... [ 185.281768][T13155] Bluetooth: Invalid esc byte 0x40 [ 185.307853][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.329334][T13000] veth0_vlan: entered promiscuous mode [ 185.335508][T13000] veth1_vlan: entered promiscuous mode [ 185.348072][T13000] veth0_macvtap: entered promiscuous mode [ 185.352312][T13000] veth1_macvtap: entered promiscuous mode [ 185.361195][T13000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.380373][T13000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.386379][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 185.386761][T13000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.392714][T13000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.395724][T13000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.399006][T13000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.404528][T13165] random: crng reseeded on system resumption [ 185.423399][T13165] Restarting kernel threads ... [ 185.426906][T13165] Done restarting kernel threads. [ 185.479055][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.481540][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.501509][ T7409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.506281][ T7409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.522318][T13179] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2024'. [ 185.553738][T13174] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2026'. [ 185.605927][T13182] FAULT_INJECTION: forcing a failure. [ 185.605927][T13182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.614171][T13182] CPU: 3 UID: 0 PID: 13182 Comm: syz.2.1975 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 185.614187][T13182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.614194][T13182] Call Trace: [ 185.614198][T13182] [ 185.614202][T13182] dump_stack_lvl+0x16c/0x1f0 [ 185.614224][T13182] should_fail_ex+0x512/0x640 [ 185.614244][T13182] _copy_from_iter+0x29f/0x16f0 [ 185.614257][T13182] ? __alloc_skb+0x200/0x380 [ 185.614274][T13182] ? __pfx__copy_from_iter+0x10/0x10 [ 185.614286][T13182] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 185.614303][T13182] netlink_sendmsg+0x829/0xdd0 [ 185.614318][T13182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.614335][T13182] ____sys_sendmsg+0xa98/0xc70 [ 185.614349][T13182] ? copy_msghdr_from_user+0x10a/0x160 [ 185.614367][T13182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.614386][T13182] ___sys_sendmsg+0x134/0x1d0 [ 185.614396][T13182] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.614405][T13182] ? __lock_acquire+0x622/0x1c90 [ 185.614431][T13182] __sys_sendmsg+0x16d/0x220 [ 185.614442][T13182] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.614460][T13182] do_syscall_64+0xcd/0x4c0 [ 185.614472][T13182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.614483][T13182] RIP: 0033:0x7f39c6f8e9a9 [ 185.614492][T13182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.614502][T13182] RSP: 002b:00007f39c7dc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.614513][T13182] RAX: ffffffffffffffda RBX: 00007f39c71b6080 RCX: 00007f39c6f8e9a9 [ 185.614519][T13182] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000004 [ 185.614526][T13182] RBP: 00007f39c7dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.614532][T13182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.614538][T13182] R13: 0000000000000000 R14: 00007f39c71b6080 R15: 00007ffc91506d58 [ 185.614551][T13182] [ 185.652809][ T40] kauditd_printk_skb: 350 callbacks suppressed [ 185.652820][ T40] audit: type=1400 audit(185.060:40718): avc: denied { read write } for pid=13185 comm="syz.4.2029" name="swradio8" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.730361][T13188] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 185.732457][T13188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.744038][T13188] vhci_hcd vhci_hcd.0: Device attached [ 185.766428][ T40] audit: type=1400 audit(185.060:40719): avc: denied { open } for pid=13185 comm="syz.4.2029" path="/dev/swradio8" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.773974][ T40] audit: type=1400 audit(185.070:40720): avc: denied { ioctl } for pid=13185 comm="syz.4.2029" path="/dev/swradio8" dev="devtmpfs" ino=1083 ioctlcmd=0x7a4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.781611][ T40] audit: type=1400 audit(185.070:40721): avc: denied { map_create } for pid=13185 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.787553][ T40] audit: type=1400 audit(185.070:40722): avc: denied { map_read map_write } for pid=13185 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.793704][ T40] audit: type=1400 audit(185.130:40723): avc: denied { bind } for pid=13187 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.799160][T13194] netlink: 'syz.4.2030': attribute type 10 has an invalid length. [ 185.813040][ T40] audit: type=1400 audit(185.160:40724): avc: denied { create } for pid=13187 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.816083][T13194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.818930][ T40] audit: type=1400 audit(185.160:40725): avc: denied { write } for pid=13187 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.818956][ T40] audit: type=1400 audit(185.190:40726): avc: denied { map } for pid=13191 comm="syz.2.2031" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 185.835816][T13194] team0: Port device bond0 added [ 185.836343][ T40] audit: type=1400 audit(185.250:40727): avc: denied { read } for pid=13195 comm="syz.2.2032" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.853335][ T5954] Bluetooth: hci4: command tx timeout [ 185.983059][ T29] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 186.035548][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 186.038291][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 186.362283][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2042'. [ 186.388120][T13230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13230 comm=syz.0.2042 [ 186.442464][ T6596] usb 5-1: USB disconnect, device number 8 [ 186.477117][ T8549] tipc: Resetting bearer [ 186.498242][ T8549] tipc: Disabling bearer [ 186.736872][ T7409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.740465][ T7409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.801126][ T7409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.806653][ T7409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.884473][ T7409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.887570][ T7409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.924223][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.932075][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.936063][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.940143][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.943096][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.976286][ T7409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.979586][ T7409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.990646][T13234] ip6tnl0: entered promiscuous mode [ 187.089202][T13236] chnl_net:caif_netlink_parms(): no params data found [ 187.101817][T13252] netlink: 'syz.3.2048': attribute type 15 has an invalid length. [ 187.104340][T13252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2048'. [ 187.163742][ T7409] ip6gretap1: left allmulticast mode [ 187.165436][ T7409] ip6gretap1: left promiscuous mode [ 187.168108][ T7409] bridge5: port 1(ip6gretap1) entered disabled state [ 187.297508][ T7409] dvmrp1 (unregistering): left allmulticast mode [ 187.306374][ T7409] bond2 (unregistering): (slave geneve2): Releasing active interface [ 187.679866][ T7409] bond1 (unregistering): Released all slaves [ 187.765223][ T7409] bond2 (unregistering): Released all slaves [ 187.767058][T13189] vhci_hcd: connection reset by peer [ 187.769356][ T6212] vhci_hcd: stop threads [ 187.770698][ T6212] vhci_hcd: release socket [ 187.771742][ T7409] bond0 (unregistering): Released all slaves [ 187.772119][ T6212] vhci_hcd: disconnect device [ 187.807193][T13261] bond6: entered allmulticast mode [ 187.861554][ T7409] tipc: Left network mode [ 187.863750][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.866039][T13236] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.868320][T13236] bridge_slave_0: entered allmulticast mode [ 187.870877][T13236] bridge_slave_0: entered promiscuous mode [ 187.875912][T13236] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.878789][T13236] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.881631][T13236] bridge_slave_1: entered allmulticast mode [ 187.885726][T13236] bridge_slave_1: entered promiscuous mode [ 187.931150][T13236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.934017][ T5954] Bluetooth: hci4: command tx timeout [ 187.937259][T13236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.974352][T13236] team0: Port device team_slave_0 added [ 187.987636][T13236] team0: Port device team_slave_1 added [ 188.044785][T13236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.046896][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.056182][T13236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.061431][T13236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.063772][T13236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.071975][T13236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.136916][T13236] hsr_slave_0: entered promiscuous mode [ 188.139077][T13236] hsr_slave_1: entered promiscuous mode [ 188.141070][T13236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.144979][T13236] Cannot create hsr debugfs directory [ 188.183597][ T7409] hsr_slave_1: left promiscuous mode [ 188.186338][ T7409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.189654][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.223852][ T7409] veth1_macvtap: left promiscuous mode [ 188.226123][ T7409] veth0_macvtap: left promiscuous mode [ 188.228408][ T7409] veth1_vlan: left promiscuous mode [ 188.230615][ T7409] veth0_vlan: left promiscuous mode [ 188.314845][ T7409] pim6reg (unregistering): left allmulticast mode [ 188.804987][ T7409] team_slave_1 (unregistering): left promiscuous mode [ 188.810419][ T7409] team0 (unregistering): Port device team_slave_1 removed [ 188.887201][ T7409] team_slave_0 (unregistering): left promiscuous mode [ 188.890252][ T7409] team0 (unregistering): Port device team_slave_0 removed [ 188.975555][ T5954] Bluetooth: hci0: command tx timeout [ 189.076856][ T6211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.003269][ T5954] Bluetooth: hci4: command tx timeout [ 190.034829][T13307] geneve3: entered promiscuous mode [ 190.036356][T13307] geneve3: entered allmulticast mode [ 190.090364][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 190.133666][T13236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.146077][T13236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.146454][T13311] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:0 [ 190.151299][ T9] IPVS: starting estimator thread 0... [ 190.152776][T13236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.153341][T13312] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:0 [ 190.154259][T13311] usb usb1: check_ctrlrecip: process 13311 (syz.4.2065) requesting ep 01 but needs 81 [ 190.162600][T13311] usb usb1: usbfs: process 13311 (syz.4.2065) did not claim interface 0 before use [ 190.164833][T13236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.183707][T13321] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 190.237909][T13236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.250621][T13236] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.271389][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.274189][T13313] IPVS: using max 41 ests per chain, 98400 per kthread [ 190.274520][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.287007][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.289222][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.316289][T13337] overlayfs: failed to resolve 'verity=require': -2 [ 190.428524][T13236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.451576][T13236] veth0_vlan: entered promiscuous mode [ 190.458280][T13236] veth1_vlan: entered promiscuous mode [ 190.476641][T13236] veth0_macvtap: entered promiscuous mode [ 190.480688][T13236] veth1_macvtap: entered promiscuous mode [ 190.490038][T13236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.495350][T13236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.500008][T13236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.503464][T13236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.506541][T13236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.509684][T13236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.568791][ T7409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.571298][ T7409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.585554][ T6206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.587927][ T6206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.591226][T13352] block device autoloading is deprecated and will be removed. [ 190.593423][ T6013] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 190.600341][T13352] tmpfs: Unknown parameter 'grpquota_block_hard' [ 190.606939][T13352] netlink: 'syz.2.2073': attribute type 15 has an invalid length. [ 190.663196][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 190.663224][ T40] audit: type=1400 audit(190.070:40911): avc: denied { create } for pid=13355 comm="syz.2.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 190.671806][ T40] audit: type=1400 audit(190.080:40912): avc: denied { ioctl } for pid=13355 comm="syz.2.2074" path="socket:[46809]" dev="sockfs" ino=46809 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 190.712331][ T40] audit: type=1400 audit(190.120:40913): avc: denied { create } for pid=13362 comm="syz.2.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.718841][ T40] audit: type=1400 audit(190.130:40914): avc: denied { read write } for pid=13362 comm="syz.2.2075" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.731172][ T40] audit: type=1400 audit(190.130:40915): avc: denied { open } for pid=13362 comm="syz.2.2075" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.742406][ T40] audit: type=1400 audit(190.140:40916): avc: denied { ioctl } for pid=13362 comm="syz.2.2075" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.743344][ T6013] usb 9-1: device descriptor read/64, error -71 [ 190.755884][ T40] audit: type=1400 audit(190.170:40917): avc: denied { setopt } for pid=13362 comm="syz.2.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.763822][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2075'. [ 190.766903][ T40] audit: type=1400 audit(190.180:40918): avc: denied { watch watch_reads } for pid=13353 comm="syz.0.2044" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.774485][ T40] audit: type=1400 audit(190.190:40919): avc: denied { ioctl } for pid=13362 comm="syz.2.2075" path="socket:[46822]" dev="sockfs" ino=46822 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.782131][ T40] audit: type=1400 audit(190.190:40920): avc: denied { module_request } for pid=13362 comm="syz.2.2075" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 191.003034][ T6013] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 191.043321][ T5954] Bluetooth: hci0: command tx timeout [ 191.045173][T13378] SELinux: policydb string length 14080 does not match expected length 8 [ 191.047829][T13378] SELinux: failed to load policy [ 191.123500][ T29] vhci_hcd: vhci_device speed not set [ 191.133495][ T6013] usb 9-1: device descriptor read/64, error -71 [ 191.244321][ T6013] usb usb9-port1: attempt power cycle [ 191.249955][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 191.249962][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 191.264699][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 191.264706][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 191.290020][T13395] bond1: entered promiscuous mode [ 191.297417][T13395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.340473][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 191.351817][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 191.356844][T13400] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 191.357860][T13401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.360010][T13400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.411715][T13403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.603330][ T6013] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 191.643065][ T6013] usb 9-1: device descriptor read/8, error -71 [ 191.913101][ T6013] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 191.934053][ T6013] usb 9-1: device descriptor read/8, error -71 [ 192.043382][ T6013] usb usb9-port1: unable to enumerate USB device [ 192.254031][T13409] afs: Unknown parameter 'dyn@l{~GM˶ZNJ-t}8' [ 192.441421][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 192.444651][T13419] syzkaller1: entered promiscuous mode [ 192.446215][T13419] syzkaller1: entered allmulticast mode [ 192.658676][T13428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2096'. [ 193.123041][ T63] Bluetooth: hci0: command tx timeout [ 193.455541][T13459] syz.4.2105 uses old SIOCAX25GETINFO [ 193.563923][T13468] netlink: 'syz.0.2104': attribute type 1 has an invalid length. [ 193.566389][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 193.570081][T13468] Unknown options in mask 5 [ 193.615889][T13474] ip6_vti0: entered promiscuous mode [ 193.821254][T13487] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 194.020989][T13513] overlayfs: failed to clone upperpath [ 194.143223][ T29] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 194.178787][T13521] overlayfs: failed to resolve './bus/file0': -2 [ 194.216867][T13526] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 194.251746][T13530] x_tables: duplicate underflow at hook 2 [ 194.295088][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 194.300423][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 194.303749][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.306254][ T29] usb 5-1: Product: syz [ 194.307653][ T29] usb 5-1: Manufacturer: syz [ 194.309182][ T29] usb 5-1: SerialNumber: syz [ 194.486644][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.490556][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.508329][T13554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=13554 comm=syz.3.2134 [ 194.512508][T13554] lo: Master is either lo or non-ether device [ 194.807038][T13591] netlink: 'syz.3.2145': attribute type 14 has an invalid length. [ 194.923848][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 194.951277][T13600] cgroup: name respecified [ 195.213155][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 195.326324][ C2] usblp0: nonzero write bulk status received: -71 [ 195.330144][ T5950] usb 5-1: USB disconnect, device number 9 [ 195.333300][ T5950] usblp0: removed [ 195.393483][T13615] binder: BINDER_SET_CONTEXT_MGR already set [ 195.395622][T13615] binder: 13613:13615 ioctl 4018620d 2000000000c0 returned -16 [ 195.422113][T13566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.424704][T13566] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.447072][T13566] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.449142][T13566] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.449519][T13617] fuse: Bad value for 'fd' [ 195.450345][T13615] fuse: Bad value for 'fd' [ 195.465119][T13566] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 195.472682][T13566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.475086][T13566] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.481407][T13566] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.510779][T13617] binder: BINDER_SET_CONTEXT_MGR already set [ 195.513434][T13614] binder_alloc: binder_alloc_mmap_handler: 13613 200000ffd000-200001000000 already mapped failed -16 [ 195.517216][T13617] binder: 13613:13617 ioctl 4018620d 200000000040 returned -16 [ 195.519976][T13614] binder_alloc: 13613: binder_alloc_buf, no vma [ 195.675217][ T40] kauditd_printk_skb: 225 callbacks suppressed [ 195.675227][ T40] audit: type=1400 audit(195.090:41146): avc: denied { create } for pid=13641 comm="syz.2.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.683370][T13642] syzkaller1: entered promiscuous mode [ 195.685088][T13642] syzkaller1: entered allmulticast mode [ 195.687787][ T40] audit: type=1400 audit(195.100:41147): avc: denied { ioctl } for pid=13641 comm="syz.2.2163" path="socket:[51320]" dev="sockfs" ino=51320 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.696526][ T40] audit: type=1400 audit(195.110:41148): avc: denied { read } for pid=13641 comm="syz.2.2163" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.709467][ T40] audit: type=1400 audit(195.110:41149): avc: denied { open } for pid=13641 comm="syz.2.2163" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.709732][T13642] ocfs2: Unknown parameter 'usrquota/card#' [ 195.716465][ T40] audit: type=1400 audit(195.120:41150): avc: denied { mounton } for pid=13641 comm="syz.2.2163" path="/38/bus" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.728072][ T40] audit: type=1400 audit(195.140:41151): avc: denied { ioctl } for pid=13641 comm="syz.2.2163" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.741688][T13649] bond0: (slave syz_tun): Releasing backup interface [ 195.851898][ T40] audit: type=1400 audit(195.260:41152): avc: denied { create } for pid=13652 comm="syz.4.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.861432][ T40] audit: type=1400 audit(195.270:41153): avc: denied { mount } for pid=13652 comm="syz.4.2167" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 195.873411][ T40] audit: type=1400 audit(195.270:41154): avc: denied { execute } for pid=13652 comm="syz.4.2167" path="/213/cpu.stat" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.883313][ T40] audit: type=1400 audit(195.270:41155): avc: denied { create } for pid=13652 comm="syz.4.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.037627][T13669] netlink: 'syz.0.2172': attribute type 5 has an invalid length. [ 196.523234][ T29] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 196.627499][T13689] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 196.631208][T13689] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 196.634704][T13689] CPU: 3 UID: 0 PID: 13689 Comm: syz.4.2177 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 196.639625][T13689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.643054][T13689] RIP: 0010:h5_recv+0x104/0x910 [ 196.644732][T13689] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 21 c5 4e f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 196.650611][T13689] RSP: 0018:ffffc90004d67c00 EFLAGS: 00010293 [ 196.652476][T13689] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886d234a [ 196.655191][T13689] RDX: ffff888028fba440 RSI: ffffffff886d238f RDI: 0000000000000005 [ 196.657666][T13689] RBP: ffffc90004d67d88 R08: 0000000000000005 R09: 0000000000000000 [ 196.660165][T13689] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 196.662622][T13689] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb35180 [ 196.665150][T13689] FS: 00007f61dee0b6c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 196.667947][T13689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.669993][T13689] CR2: 00007f61dee0bd58 CR3: 00000000498aa000 CR4: 0000000000352ef0 [ 196.672505][T13689] Call Trace: [ 196.673619][T13689] [ 196.674609][T13689] ? __pfx_h5_recv+0x10/0x10 [ 196.676153][T13689] hci_uart_tty_receive+0x254/0x7e0 [ 196.677791][T13689] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 196.679615][T13689] tty_ioctl+0x583/0x1640 [ 196.680983][T13689] ? __pfx_tty_ioctl+0x10/0x10 [ 196.682491][T13689] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 196.684451][ T29] usb 5-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.684947][T13689] ? hook_file_ioctl_common+0x145/0x410 [ 196.684969][T13689] ? selinux_file_ioctl+0x180/0x270 [ 196.688985][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 196.690669][T13689] ? selinux_file_ioctl+0xb4/0x270 [ 196.690684][T13689] ? __pfx_tty_ioctl+0x10/0x10 [ 196.690696][T13689] __x64_sys_ioctl+0x18e/0x210 [ 196.695250][ T29] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 196.696302][T13689] do_syscall_64+0xcd/0x4c0 [ 196.696318][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.696330][T13689] RIP: 0033:0x7f61ddf8e9a9 [ 196.697816][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.699503][T13689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.699523][T13689] RSP: 002b:00007f61dee0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.702269][ T29] usb 5-1: Product: 鸼힣撆另뷄劙㏿촲視藷化␏ﳐ亪苻䵴䖾茾ʞ茣㷴登敻缣둅鄉ؿ앹䤑ꞻ虴憜栐Ẑ㸞⿕髬㬽嗹樏੏ᄇꮝꡣ괤⾹켌瞀ﭞა앳쫌鶧鶽횺튞秶쐉汿 [ 196.704065][T13689] RAX: ffffffffffffffda RBX: 00007f61de1b6160 RCX: 00007f61ddf8e9a9 [ 196.704081][T13689] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 196.704093][T13689] RBP: 00007f61de010d69 R08: 0000000000000000 R09: 0000000000000000 [ 196.704104][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.704115][T13689] R13: 0000000000000000 R14: 00007f61de1b6160 R15: 00007ffc4491cdc8 [ 196.704133][T13689] [ 196.704140][T13689] Modules linked in: [ 196.704470][T13689] ---[ end trace 0000000000000000 ]--- [ 196.706236][ T29] usb 5-1: Manufacturer: 傪偠౞括凗窒푭 [ 196.707811][T13689] RIP: 0010:h5_recv+0x104/0x910 [ 196.710214][ T29] usb 5-1: SerialNumber: ᰐ [ 196.717257][T13689] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 21 c5 4e f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 196.721578][T13685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.727288][T13689] RSP: 0018:ffffc90004d67c00 EFLAGS: 00010293 [ 196.727769][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 196.763253][T13689] [ 196.764082][T13689] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886d234a [ 196.766624][T13689] RDX: ffff888028fba440 RSI: ffffffff886d238f RDI: 0000000000000005 [ 196.769203][T13689] RBP: ffffc90004d67d88 R08: 0000000000000005 R09: 0000000000000000 [ 196.771768][T13689] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 196.774842][T13689] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb35180 [ 196.777400][T13689] FS: 00007f61dee0b6c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 196.780315][T13689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.783199][T13689] CR2: 00007f61dee0bd58 CR3: 00000000498aa000 CR4: 0000000000352ef0 [ 196.786544][T13689] Kernel panic - not syncing: Fatal exception [ 196.789091][T13689] Kernel Offset: disabled [ 196.790485][T13689] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:58:46 Registers: info registers vcpu 0 CPU#0 RAX=000000000016088c RBX=0000000000000000 RCX=ffffffff8b867c99 RDX=ffffed100d486646 RSI=ffffffff8c1573e0 RDI=ffffffff81920e71 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000002984f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7186488 00007f39c7186480 00007f39c7186478 00007f39c7186450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7ced100 00007f39c7186440 00007f39c7180004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39c7186498 00007f39c7186490 00007f39c7186488 00007f39c7186480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001339f4 RBX=0000000000000001 RCX=ffffffff8b867c99 RDX=ffffed100d4a6646 RSI=ffffffff8c1573e0 RDI=ffffffff81920e71 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000000 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61dee4cf98 CR3=000000004edae000 CR4=00352ef0 DR0=0000000000004e53 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc18af8c30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92e9011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92e9011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92e9011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92e9011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92e9011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92e9011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000127da4 RBX=0000000000000002 RCX=ffffffff8b867c99 RDX=ffffed100d4c6646 RSI=ffffffff8c1573e0 RDI=ffffffff81920e71 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a94550 R15=0000000000000000 RIP=ffffffff8b8667ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61dee0af98 CR3=00000000498aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100088002000c 0070707000010008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320786568 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a5665 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90004d67570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b0b9e20 R15=ffffffff855a5600 RIP=ffffffff855a568f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f61dee0b6c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61dee0bd58 CR3=00000000498aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de186488 00007f61de186480 00007f61de186478 00007f61de186450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61deced100 00007f61de186440 00007f61de186458 00007f61de1864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61de186498 00007f61de186490 00007f61de186488 00007f61de186480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000