last executing test programs: 20m50.332196813s ago: executing program 0 (id=1824): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x100000000000044, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x100) read$FUSE(r1, &(0x7f0000006000)={0x2020}, 0x2020) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) r4 = socket(0x2b, 0x80801, 0x1) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000001600)={0x1cf8, r8, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_NAN_FUNC={0x6c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xb}, @NL80211_NAN_FUNC_SERVICE_INFO={0x56, 0xb, "596613a0733f3b29373ad781914f858e01b1b9541fd03cb720a69075adf0b13d2367ead47f5aa1bef715dae63874dd7081a9ecf48a304fc61271b650010a769ace40525d0adbb21c2345bc5ffc22f11d9f77"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x164c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x5e4, 0xe, 0x0, 0x1, [{0xfe, 0x0, "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"}, {0xa8, 0x0, "a673223dad1cc4ff8b3bf3721607e24f7ab2ee4ec33970710806d2d242735af4bb6a2566ce51b5685574592135a8c05da89fcd73b73d3ff0cb2d24313ff1464a18e7666f8a9a28c194d10406bcc1f0a37d8e451462905f1588def95280a797c38f7dd44b4a1163483e32fb06df136ebd07db47f75c6d2705a6b365409efbd142fee654bf17957c793d6ba44f94beab35cf7c9dacac21ae541c1d6e52340bd94e9d816f41"}, {0x52, 0x0, "79c361feb2c1d6cb312d6cf36e1ccd7d2fed68aefc250f5bd8bfb675831e25e98e7fe1497ba64d79f46f670f7cb644b70d6a95a60dec0bcf5010b14130350a848cdc1c933de35d84dca0036334bb"}, {0xb6, 0x0, "828c3d5f44b15296a77d36f105102f6bf223e052c54c0498ea9ece0222f325c7f170a8a147908dd4863817e1f3b1f3c75c73c321072d217667d8c8503795c6b72b115bdc80ee5b2c70d92e5c8f43043db445f678f1427ac9dffe0090a5eb4e06a39f3bea1bc722a1ce0c969c28cd933de601463934ca0cb4cc21bcdf6ff1c10e9cc10b18ec2c4e88197da59062dd4d5d7e5f261e3312a5b74b74d5e0b7b27c044141835e18360e10c0effe0d41f57d14776a"}, {0xdf, 0x0, "3f5acb98efc37021a68a30727db5c7ed3ea22fb2cd5885efd0fbbcd5920aea25424ff70f17bb9c0997e64098aa2ce827736a3941e8bc8a4d9c420957b302e86947b2d6db167f054d6f22f0a731a6a44b9de0100a8b3495bf32febff1364b285c9ae886e4fdccf8ca38d6a62efd282202fd2aa07368879f4af901a9569259bafb0750748e6354df6ae43febc0a33923ad065c7133bbd449a413b9621ed258950488ded3dd8dd2a61557e150ea9cec137f27e5a4fd8ccb985e640d85efb69d0a15e6db3f7d9fa2fba0d6b141f501a45a30da06828a1153c812f7b75d"}, {0xa4, 0x0, "05c5596e70be860f8d4ec5aa3f0699822f5173356ab2bbb939c631e400ed5d4b71a01f0487eb3b48fdbc0f2eb3c5953d2650bd14d721be7601b9f9ee7958fcbe4aabc9345880bdc58dcbcdffd3785eaa3dd8cc714c835feb9d5692756726c995d395198e5d052bdc81a81c57f5347229f21f43622a9043664c22e3c67362d3103f0cfddd88ba21fd6e2f24cf4c0e0aded11e07acce8b4cda14b37cf4a8f2988a"}, {0x2e, 0x0, "75f234f107edb525e3696b3d38857f12f030fcfe212249457fd926113b18cde8166cfc26a0f6c16383aa"}, {0xdd, 0x0, "7c7e48a654cc28a23baa082ff2dbbbfb755850bc5e639391bd664cee6a8b261b5f2a02bb516f0e2973f575de21e7cb139849cdcfea0befa2f388f716d02740f56a328cf37c91e1b4aadd4e840a3e888ecf872a2e8bd3331d161a5b07d036cc9b23f27779e07b56a7b4ef034d8ce6a14c353ab752dee512ecbf25cf4bcec32593f49acf6ed2df5e18f42e63599909e7ea03ae2aa175db878595558489577a7c94a1862d3c6f75a0e59a513efeb4a61b45c2a90e7ab8d3061c9f69b50273c4d7a5a97ed3439d082f4e21ee65e5e4ea4ad5151ed92a736c4150b0"}, {0x4}, {0x91, 0x0, "0a04b55db696f2f8a240ed701f05cc0e2685645f83a77caa495c95e7faebaaf5bb2809c52d9d1afbd987d3e49e8bf42a0a689d3d3cee08c2ef3ce38254668f7e6657f4f2317fd81d302c05ecbc3da690ae3c96c81d32b7677665335b96071303efc31b6587e7b146fb420bbd09803838a5e54f01792dfee514ea05e91e051167c41b1ed0a10ba35f31b8adcae5"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1008, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x51, 0xb, "d34e54f88013c6747d1ca08c825e2f6e253203d14fea17641e0ef17d14a76e717592f40fe9975e65d41b5be07435d4c6e0e643c5a14016c6e485f89ec54073489141de4014a1b48892bc58e64b"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xfc, 0xe, 0x0, 0x1, [{0x24, 0x0, "4002e8796cb168c968cfe7d07224de0a057acaec09335926fbee9b08e09f2041"}, {0xd2, 0x0, "80f0ab1039c30b418d8234037b1e3e6bcd984c29446fb221c717dde4bc495d62c3049d47e345089ac49b950fd5905a7036217df450cfe548b4984043d93e1f99b8c1c3a79ad90f57a4fc205eb3fd900b3f77f66004ec8b4eccc788764dbd99e0bde341dd7a3ef40360af6368d11a46f85a27e68f719a13e62203a8f5c5ed7a343caba514c0ec18831b8c32fd387942dabbfca411d36fe71dd59d7e0bdd1ef03eb07fde45b9546677ffa3ef9b1097c418890b7b56ec9fc9cee6ce5c8e8a9973f8708cf91d1458406133c344f313c4"}]}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x542e}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x264, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x238, 0xe, 0x0, 0x1, [{0xf2, 0x0, "e61d5ed85b6273f543045d25684b9e6ce3ea6eb745b216bd35c59eb5218cfd45a283f90043a950855542bb0c96503a23ad1bb6deb47bb8d990b1c07d8e66e7466baaf31f6dcc2e186a05480ccb99be52bc0a31ea465a35a156b11133daaaba3c9c00e9cc9c7e740f4fe5aa6fb111f2d3a2e042d6dc0ee9a28b5ee4fbbc71d840b4a677de3516b710e6990c79132fec1036aa6a5bdaddc9293af4c14efa95d10ca739ff7acebc6743465b12b01ddaa81121b6861b980a452fc28bf10f9188925a8cb8501f6839604044bcf836e495a9e5e29ce27d5a53eb3f891d5ccac32f524102ff81b0ef5b18671a9c9163a854"}, {0xf8, 0x0, "ed1f20aef6d31ea54bd862bc0301403b55cf94e2a9a870993a352c94986852cfc7a2c3315ac6b5283c306dc56958ec1dc8de40a1b1c51665bff70fec96267104e9ab53e3149096cf3e419acc586119e84e2adec0278bb278d75b732231a3ce6df8bcb4b0742104c9e4a2db6f4fad2d4152673baa04879f66aa731e84f85b35b8ab8f44194e1fa789a78f10c4f064ad1fbacc3c12d62ed92aab8333bf96d995645b1f1390f604e9fabcdd7c0006562f0492426a4f633c2016c4f7ef5bbe86dc76aa20e37c545bca779ee21a132153fc7183bfa9deb417e0608f8e9c65b14bcb68d0fdadf2b5a7bcbb9c257fa541aafa26edf9b03f"}, {0x2e, 0x0, "2752baebb5fb6f0ea90d7071a87bd054a79b68e96af0b291c1d95045d9fa17cf795ed31974ab73a1ef30"}, {0x18, 0x0, "171c368838db206cae69500c70767cd8a306dfb3"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xa6}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa, 0xb, "7e27ebc764b2"}]}, @NL80211_ATTR_NAN_FUNC={0x264, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0b62094e01a7"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "52391be50705"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x12}, @NL80211_NAN_FUNC_SRF={0x22c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xe5}]}]}, 0x1cf8}, 0x1, 0x0, 0x0, 0x400c000}, 0xc050) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20m49.987918771s ago: executing program 0 (id=1828): r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) 20m49.737836876s ago: executing program 0 (id=1829): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}], 0x1, 0x0) semop(r0, &(0x7f0000000140)=[{0x3, 0x5, 0x1000}], 0x1) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 20m48.512231449s ago: executing program 0 (id=1835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x100809, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@default_permissions}], [{@subj_type}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x35, 0x37, 0x32, 0x35, 0x31, 0x34], 0x2d, [0x37, 0x62, 0x38, 0x37], 0x2d, [0x31, 0x0, 0x37, 0xf6d70af54b35891c], 0x2d, [0x64, 0x62, 0x39, 0x38], 0x2d, [0x36, 0x31, 0x37, 0x39, 0x0, 0x62, 0x30, 0x31]}}}, {@obj_type={'obj_type', 0x3d, '/dev/audio#\x00'}}]}}, 0x1, 0x0, &(0x7f0000000300)="11eb7621eb5dc4b38a4b818d1aab099259038740c7eda50af7c05c61fa8a838a") mkdirat(r2, 0x0, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r8, 0x402, 0x20) syz_open_procfs(0x0, 0x0) 20m45.343061226s ago: executing program 0 (id=1849): ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r6, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004088) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000002c0)=""/133, &(0x7f0000000240)=0x85) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESHEX=0x0], 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000040)=""/95) 20m45.101974966s ago: executing program 0 (id=1850): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) 20m44.072685652s ago: executing program 32 (id=1850): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) 3.059272571s ago: executing program 2 (id=6389): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, 0x0, 0x2000040) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.8436984s ago: executing program 2 (id=6394): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) 2.538885223s ago: executing program 2 (id=6400): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x803, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.21159384s ago: executing program 1 (id=6405): timer_create(0x0, &(0x7f0000000000)={0x0, 0x32, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x2) 2.21117605s ago: executing program 2 (id=6406): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000e000000400000000300000043"], 0x50) 2.091151047s ago: executing program 2 (id=6408): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x800c050}, 0x8080) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x1}, 0xc) 1.863894636s ago: executing program 2 (id=6410): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x21000200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 1.801201325s ago: executing program 1 (id=6411): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.486256001s ago: executing program 1 (id=6416): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x480000, 0x0, 0x2}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"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"}) 1.361836083s ago: executing program 5 (id=6418): ftruncate(0xffffffffffffffff, 0xffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000840)=""/4096, 0x1000, 0x142, &(0x7f00000004c0)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x3f, 0x30, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x14, 0x11, 0x1, 0x4, [{@private=0xa010102, 0x8}, {@multicast1, 0x140}]}]}}, {0x2, 0x4e21, 0x8}}}}}, 0x0) 1.226565825s ago: executing program 5 (id=6420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000340)="f30fc7b29cb20f20c06635000000200f22c066b95703000066b8d38e000066ba000000000f30660f38822f66b9800000c00f326635001000000f300f0feab40f1ca70900f30f09ba4200ed66b9044d564b0f32", 0x53}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x10003, 0x1, 0x4002004c4, 0x2001004, 0x808, 0x10001, 0xa4a4, 0x0, 0x1, 0x7], 0xf000, 0x292144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.159238543s ago: executing program 4 (id=6421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 1.037426719s ago: executing program 1 (id=6423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 963.7087ms ago: executing program 4 (id=6424): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000000)="000086d7", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0xdd86, r1, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302000b2c000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)="55f0e46e5a", 0x5}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98", 0x26}], 0x4}, 0x40011) 861.482169ms ago: executing program 3 (id=6425): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001203000000000000000000000d00000000000000000008000300000000030000000100000006000000002e30"], 0x0, 0x4c, 0x0, 0x0, 0x7}, 0x28) 799.752227ms ago: executing program 1 (id=6426): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d0001bc92f5cf33dc0fc76089620000", @ANYRES32, @ANYBLOB="000096000a"], 0x28}}, 0x800) 777.700254ms ago: executing program 4 (id=6427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a040, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) 671.281427ms ago: executing program 3 (id=6428): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 590.993117ms ago: executing program 1 (id=6429): r0 = socket(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x80000000, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) 503.782691ms ago: executing program 4 (id=6430): ftruncate(0xffffffffffffffff, 0xffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000840)=""/4096, 0x1000, 0x142, &(0x7f00000004c0)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x3f, 0x30, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x14, 0x11, 0x1, 0x4, [{@private=0xa010102, 0x8}, {@multicast1, 0x140}]}]}}, {0x2, 0x4e21, 0x8}}}}}, 0x0) 503.149511ms ago: executing program 5 (id=6431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000480), 0x0, 0x40040) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 430.697217ms ago: executing program 3 (id=6432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f000000c200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000390000009578"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, 0x94) 367.611688ms ago: executing program 4 (id=6433): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x480000, 0x0, 0x2}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"34b30f02c5ccf6e3b71cda04b68b6891370cd0a442844b737a7254514f9ff20d0954650127067cd50d8f25db5fc9ccd4dbb2ecc29dc8dc51bcd2291a6a12912a3ce524ba851af6d1366d2b46f9f063dde6bea45fb0f4ab6a35088ea81c8a5ea6d0c3fbc6a89ae582119699a04f2be00b3aa3766c9f658af98e3122b00522a2ee14e3746ec2266e538c13710185ec5a7e4936e212c07483e1798957ffbb6311f2a13a7109d4293b216f78d59d41eb3af775e48d7a82a6c8f6476e2456a1a4288c672fbf1072ae9c51060f80707d1bc48eb1802a805df2ee990bcece5fe8b0ebba31c4d5efa47b3353aa02663aca26e817c88dc094d75330fbe2fea0037d4f92435d2eed5585bfaeddfdb50bb10bed6860313613f4a96d7d0b263cb0930f155ed09f2ff433f90d5065a376d43502ac8f17257c0fe5f448d9805a835286f2ff887e02e8a243902c124d3d52a1057f20a29ca1c012869a6d606e3440cc51cca66021bae0cf8c0a5af7a21c79481b1a31b98fe0c29fb5dfc5737442cdfad6421ec95345bd0165c6f6123e616873d97282e5098add56b95e805782aa67f237269b5b2b3e24edd1dc78f25130926496f5623ae306bc3d72d2b80f8939e60526330f873d00360441d906627f0183607151b1f03602050670984a3640871c2690496bbc8949fb63abd5033e508055dc0dd759913beba87e39e7af72170d622e2ecf9aeb4e479bbff8ad292a3a5bd70f8f433bc4b89be144ace57501f8f016868ed7dd8bab97f4f3feb242f4f620913c478058c036df363abbf7c239d340017c2de6b688e322c9b51c269aa110def3ad16337d197f3c452ac661bac7c0531c4d98618f99d750b0c3d8539051188a0f4583dd3538982e8a84121055cd721571ca98bb0c3ec3e446c4c7bc5c9b800367a859a00ef3a505327f9f2da247ce118a82deeb04ad22eeaf97dbd454518defd5adeb288a7842e9e2839ec587e3275abf3a812154080aa60182e60cb73b2020d2865551141ac1e077a3a3a764fff1b024346594f3a004197673c896069dc253f81dac7ca4e906bf2c0d241f59e4b8dad8549871e94b33755db2526223d1e290e300701a0a926033d515429f751f72a87f2eb0336cc72be75af2b75b82c70807718604aa9c6b3c2bc27551f1a0dcffc5eef025f86c13f1fbb426de372b15e4d6a63c4754cecd5071e25e8d6f5796830e7ef62b65c5c076ad2a9ab0850f97c5765ece5885caf0ca0d63a56c45d09c77553ba254983c05d7c722bd7e2061bb71e8e9a7cc444a24643ff32bb80f95ddf50455ed9b59288df68da87510cc3ff08521b39002fe8ea04ee30135324934c286cebc277a9189ac3322b96e8df8bd2a00a0a3da54b3dbe4e9cd46b762ac7f2c7ded1aa8c9741b675f7fe2dc699ab9a2615924fda6e879fc2ae27030d149ed88482945304447d8d027"}) 330.139942ms ago: executing program 3 (id=6434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x85101) ioctl$KVM_RUN(r1, 0xae80, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket(0xa, 0x3, 0xff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x100000000, 0x2, 0x3ff, 0x5, 0x7, 0xffffffff00000000, 0x8, 0x2e, 0xfffffffffffffffb, 0x100000001, 0x7, 0x4, 0x996c, 0x6, 0x3], 0x1}) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0xff}]}}}}}, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x80000000, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) listen(r2, 0x50) listen(r0, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 306.246982ms ago: executing program 5 (id=6435): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)) 170.146891ms ago: executing program 5 (id=6436): r0 = socket(0x10, 0x80003, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x804) 160.024959ms ago: executing program 3 (id=6437): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000000)="000086d7", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0xdd86, r1, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302000b2c000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)="55f0e46e5a", 0x5}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e55", 0x29}], 0x4}, 0x40011) 88.785903ms ago: executing program 5 (id=6438): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8602, 0x0) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000180)={[0x3]}, 0x8) 9.153437ms ago: executing program 4 (id=6439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 0s ago: executing program 3 (id=6440): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kernel console output (not intermixed with test programs): 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2000.844385][T27688] RSP: 002b:00007f9cf0fd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2000.844408][T27688] RAX: ffffffffffffffda RBX: 00007f9cf0fd56c0 RCX: 00007f9cf2d5b78e [ 2000.844423][T27688] RDX: 000000000000000f RSI: 00007f9cf0fd50a0 RDI: 0000000000000004 [ 2000.844435][T27688] RBP: 00007f9cf0fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2000.844448][T27688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2000.844460][T27688] R13: 00007f9cf3016128 R14: 00007f9cf3016090 R15: 00007f9cf313fa48 [ 2000.844500][T27688] [ 2001.222785][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5450'. [ 2001.671827][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2001.904430][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 2002.542494][ T10] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 2002.564354][ T10] usb 4-1: config 0 has no interface number 0 [ 2002.597188][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2002.615378][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.838143][ T10] usb 4-1: Product: syz [ 2002.848467][ T10] usb 4-1: Manufacturer: syz [ 2002.858429][ T10] usb 4-1: SerialNumber: syz [ 2002.879606][ T10] usb 4-1: config 0 descriptor?? [ 2002.906107][ T10] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2003.011277][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2003.021590][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 2003.047377][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2003.071410][ T10] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2003.082595][ T10] usb 4-1: media controller created [ 2003.087868][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2003.096285][ T10] dw2102: i2c transfer failed. [ 2003.101989][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2003.112903][ T10] dw2102: i2c transfer failed. [ 2003.118327][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2003.131757][ T10] dw2102: i2c transfer failed. [ 2003.141990][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2003.157877][ T10] dw2102: i2c transfer failed. [ 2003.171496][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2003.341806][ T10] dw2102: i2c transfer failed. [ 2003.342558][T27711] fuse: Unknown parameter 'E÷á|¸õ 0;nR [ 2025.593968][T27998] dump_stack_lvl+0xe8/0x150 [ 2025.593989][T27998] should_fail_ex+0x412/0x560 [ 2025.594006][T27998] should_failslab+0xa8/0x100 [ 2025.594022][T27998] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2025.594039][T27998] ? __alloc_skb+0x193/0x390 [ 2025.594053][T27998] ? __alloc_skb+0x1d7/0x390 [ 2025.594065][T27998] ? __local_bh_enable_ip+0xd0/0x130 [ 2025.594077][T27998] ? __alloc_skb+0x193/0x390 [ 2025.594091][T27998] __alloc_skb+0x1d7/0x390 [ 2025.594107][T27998] alloc_skb_with_frags+0xca/0x890 [ 2025.594121][T27998] ? __might_fault+0xaf/0x130 [ 2025.594145][T27998] sock_alloc_send_pskb+0x878/0x990 [ 2025.594171][T27998] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2025.594191][T27998] ? __lock_acquire+0x6b5/0x2cf0 [ 2025.594208][T27998] ? iov_iter_advance+0x8b/0x1c0 [ 2025.594225][T27998] tun_get_user+0x92d/0x3dd0 [ 2025.594245][T27998] ? aa_file_perm+0x12d/0x1630 [ 2025.594263][T27998] ? aa_file_perm+0x440/0x1630 [ 2025.594277][T27998] ? __pfx_tun_get_user+0x10/0x10 [ 2025.594291][T27998] ? __lock_acquire+0x6b5/0x2cf0 [ 2025.594308][T27998] ? kstrtoull+0x12f/0x1d0 [ 2025.594325][T27998] ? ref_tracker_alloc+0x363/0x4d0 [ 2025.594341][T27998] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2025.594357][T27998] ? tun_get+0x1c/0x2f0 [ 2025.594368][T27998] ? tun_get+0x1c/0x2f0 [ 2025.594383][T27998] ? tun_get+0x1c/0x2f0 [ 2025.594394][T27998] ? tun_get+0x1c/0x2f0 [ 2025.594408][T27998] tun_chr_write_iter+0x113/0x200 [ 2025.594422][T27998] vfs_write+0x61d/0xb90 [ 2025.594443][T27998] ? __pfx_vfs_write+0x10/0x10 [ 2025.594465][T27998] ? __fget_files+0x2a/0x420 [ 2025.594482][T27998] ksys_write+0x150/0x270 [ 2025.594500][T27998] ? __pfx_ksys_write+0x10/0x10 [ 2025.594522][T27998] do_syscall_64+0xe2/0xf80 [ 2025.594535][T27998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.594546][T27998] ? trace_irq_disable+0x37/0x100 [ 2025.594558][T27998] ? clear_bhb_loop+0x60/0xb0 [ 2025.594572][T27998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.594583][T27998] RIP: 0033:0x7f645519aeb9 [ 2025.594596][T27998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2025.594606][T27998] RSP: 002b:00007f6455fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2025.594621][T27998] RAX: ffffffffffffffda RBX: 00007f6455415fa0 RCX: 00007f645519aeb9 [ 2025.594630][T27998] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 2025.594638][T27998] RBP: 00007f6455fd9090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.594645][T27998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.594652][T27998] R13: 00007f6455416038 R14: 00007f6455415fa0 R15: 00007f645553fa48 [ 2025.594670][T27998] [ 2025.894960][T22493] dvb-usb: bulk message failed: -22 (6/0) [ 2025.901225][T22493] dw2102: i2c transfer failed. [ 2025.911431][T22493] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2026.377416][T22493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2026.513557][T22493] dvb-usb: bulk message failed: -22 (3/0) [ 2026.566608][T22493] dw2102: command 0x0e transfer failed. [ 2026.592103][T22493] dvb-usb: bulk message failed: -22 (3/0) [ 2026.597899][T22493] dw2102: command 0x0e transfer failed. [ 2026.638760][T28007] netlink: 'syz.1.5537': attribute type 2 has an invalid length. [ 2026.815231][T28009] xt_recent: Unsupported userspace flags (000000de) [ 2026.843488][ T30] audit: type=1326 audit(1770127055.088:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2026.847150][T28009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.031708][T22493] dvb-usb: bulk message failed: -22 (3/0) [ 2027.141745][T22493] dw2102: command 0x0e transfer failed. [ 2027.147327][T22493] dvb-usb: bulk message failed: -22 (3/0) [ 2027.194555][T22493] dw2102: command 0x0e transfer failed. [ 2027.200167][T22493] dvb-usb: bulk message failed: -22 (1/0) [ 2027.253629][T22493] dw2102: command 0x51 transfer failed. [ 2027.640253][T28009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.787417][T28015] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2027.871823][ T30] audit: type=1326 audit(1770127055.088:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2027.990909][ T30] audit: type=1326 audit(1770127055.088:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2028.024378][T22493] DVB: Unable to find symbol ds3000_attach() [ 2028.139909][T22493] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 2028.182870][ T30] audit: type=1326 audit(1770127055.088:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2028.361235][ T30] audit: type=1326 audit(1770127055.088:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2028.444609][T22493] rc_core: IR keymap rc-su3000 not found [ 2028.623808][T28026] netlink: 'syz.2.5542': attribute type 1 has an invalid length. [ 2028.634032][T28026] netlink: 'syz.2.5542': attribute type 2 has an invalid length. [ 2028.691384][T22493] Registered IR keymap rc-empty [ 2028.730758][ T30] audit: type=1326 audit(1770127055.088:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2028.761511][T22493] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2028.907569][T22493] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input196 [ 2028.931930][ T30] audit: type=1326 audit(1770127055.088:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2028.977631][T22493] dvb-usb: schedule remote query interval to 150 msecs. [ 2029.029054][T22493] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2029.063293][T22493] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 2029.133033][T22493] usb 6-1: USB disconnect, device number 108 [ 2029.201011][ T30] audit: type=1326 audit(1770127055.088:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2029.296022][ T30] audit: type=1326 audit(1770127055.088:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2029.692470][ T30] audit: type=1326 audit(1770127055.088:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28008 comm="syz.2.5540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f645519aeb9 code=0x7ffc0000 [ 2029.736391][T22493] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 2030.281804][T22493] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2031.325765][T28050] xt_hashlimit: size too large, truncated to 1048576 [ 2031.548082][T28056] xt_recent: Unsupported userspace flags (000000de) [ 2031.585763][T28056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.815164][T28056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.046683][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2032.046748][ T30] audit: type=1326 audit(1770127060.308:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28055 comm="syz.4.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2032.127249][ T30] audit: type=1326 audit(1770127060.308:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28055 comm="syz.4.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2032.193103][T28066] xt_hashlimit: size too large, truncated to 1048576 [ 2032.219978][T28067] fuse: Unknown parameter 'E÷á|¸õ 0;nR, priority 0 [ 2040.221269][T28149] syzkaller0: entered promiscuous mode [ 2040.270484][T28149] syzkaller0: entered allmulticast mode [ 2040.541749][T11649] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2040.749321][T11649] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2040.773724][T11649] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2040.923138][T11649] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2041.059123][T11649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.157327][T28149] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2041.179267][T11649] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2041.189424][T20853] tipc: Node number set to 964497334 [ 2041.208247][T28167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5580'. [ 2041.270957][T28162] netlink: 'syz.2.5579': attribute type 13 has an invalid length. [ 2042.128276][ T5920] usb 2-1: USB disconnect, device number 56 [ 2042.227694][T28171] syzkaller0: entered promiscuous mode [ 2042.236483][T28171] syzkaller0: entered allmulticast mode [ 2042.264702][T28148] tipc: Resetting bearer [ 2042.370207][T28148] tipc: Disabling bearer [ 2042.758115][T28178] vlan3: entered allmulticast mode [ 2042.763736][T28178] geneve1: entered allmulticast mode [ 2043.140554][T28182] fuse: Unknown parameter 'user_i00000000000000000000' [ 2043.323702][T28195] fuse: Unknown parameter 'E÷á|¸õ 0;nR 1 [ 2054.675710][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2054.675973][T28330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.696047][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2054.739036][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2054.750000][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2054.812612][ T130] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2054.883498][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2054.901763][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2054.914238][T28330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.931807][ T5920] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2054.968792][T28330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.970062][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.257836][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.277054][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.322483][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.361387][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.380633][ T5920] usb 4-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 2055.402203][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.413300][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2055.445641][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.462335][ T5920] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2055.496250][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2055.505171][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.538250][ T5920] usb 4-1: SerialNumber: syz [ 2055.562114][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.614595][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.636819][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.669448][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.680728][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.688843][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.698922][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.722631][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.779449][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.809156][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.834294][T28329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.863271][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.897488][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2055.911466][T28329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.913184][ T130] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2055.932928][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2055.950570][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.962159][ T130] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2055.969797][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2055.994915][ T130] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2056.011779][ T130] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2056.030038][ T130] usb 6-1: Product: syz [ 2056.034970][ T130] usb 6-1: Manufacturer: syz [ 2056.039654][ T130] usb 6-1: SerialNumber: syz [ 2056.049858][ T130] usb 6-1: config 0 descriptor?? [ 2056.066698][ T130] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 2056.225937][T28339] fuse: Bad value for 'fd' [ 2056.240482][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2056.240504][ T30] audit: type=1326 audit(1770127084.518:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.286678][ T30] audit: type=1326 audit(1770127084.518:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.287375][T28326] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2056.309624][ T30] audit: type=1326 audit(1770127084.518:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.309719][ T30] audit: type=1326 audit(1770127084.518:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8ccf9ac22 code=0x7ffc0000 [ 2056.309778][ T30] audit: type=1326 audit(1770127084.518:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8ccf9ac22 code=0x7ffc0000 [ 2056.309857][ T30] audit: type=1326 audit(1770127084.518:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.309901][ T30] audit: type=1326 audit(1770127084.518:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.309978][ T30] audit: type=1326 audit(1770127084.518:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.497820][ T30] audit: type=1326 audit(1770127084.518:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28336 comm="syz.4.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ccf9aeb9 code=0x7ffc0000 [ 2056.531530][ T130] usb 6-1: USB disconnect, device number 110 [ 2056.540429][ T130] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 2056.625397][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2056.648200][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2056.687653][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2056.844787][ T5920] usb 4-1: 0:2 : does not exist [ 2056.849747][ T5920] usb 4-1: unit 5: unexpected type 0x0e [ 2056.856500][ T5146] Bluetooth: hci5: command tx timeout [ 2056.869053][ T5920] usb 4-1: USB disconnect, device number 112 [ 2057.116132][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2057.243611][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.275540][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2057.508924][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2057.530296][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.551351][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2057.834227][T28354] xt_hashlimit: size too large, truncated to 1048576 [ 2058.375903][T28334] chnl_net:caif_netlink_parms(): no params data found [ 2058.642161][ T79] bridge_slave_0: left allmulticast mode [ 2058.648030][ T79] bridge_slave_0: left promiscuous mode [ 2058.693428][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.933453][ T5146] Bluetooth: hci5: command tx timeout [ 2059.533358][ T79] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2059.701048][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2059.715522][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2059.728221][ T79] bond0 (unregistering): Released all slaves [ 2059.884106][ T79] bond1 (unregistering): Released all slaves [ 2059.975430][T28334] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.989499][T28334] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.998114][T28334] bridge_slave_0: entered allmulticast mode [ 2060.006560][T28334] bridge_slave_0: entered promiscuous mode [ 2060.015071][ T79] : left promiscuous mode [ 2060.033016][T28334] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.040786][T28334] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.049111][T28334] bridge_slave_1: entered allmulticast mode [ 2060.058608][T28334] bridge_slave_1: entered promiscuous mode [ 2060.098799][ T79] tipc: Left network mode [ 2060.108175][T28334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.132985][T28334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2060.190564][T28334] team0: Port device team_slave_0 added [ 2060.217525][T28334] team0: Port device team_slave_1 added [ 2060.284848][T28334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.304614][T28334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2060.333764][T28334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.358756][T28334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.365891][T28334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2060.393355][T28334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.511401][T28334] hsr_slave_0: entered promiscuous mode [ 2060.518427][T28334] hsr_slave_1: entered promiscuous mode [ 2060.525355][T28334] debugfs: 'hsr0' already exists in 'hsr' [ 2060.531417][T28334] Cannot create hsr debugfs directory [ 2060.718730][ T79] hsr_slave_0: left promiscuous mode [ 2060.735555][ T79] hsr_slave_1: left promiscuous mode [ 2060.741394][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2060.761751][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2060.770093][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2060.780109][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2060.805124][ T79] veth1_macvtap: left promiscuous mode [ 2060.810904][ T79] veth0_macvtap: left promiscuous mode [ 2060.817519][ T79] veth1_vlan: left promiscuous mode [ 2060.827506][ T79] veth0_vlan: left promiscuous mode [ 2061.012707][ T5146] Bluetooth: hci5: command tx timeout [ 2061.666833][ T79] team0 (unregistering): Port device team_slave_1 removed [ 2061.734319][ T79] team0 (unregistering): Port device team_slave_0 removed [ 2062.889986][ T79] IPVS: stop unused estimator thread 0... [ 2062.969256][T28334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2062.982817][T28334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2062.998056][T28334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2063.014468][T28334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2063.093676][ T5146] Bluetooth: hci5: command tx timeout [ 2063.143265][T28334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2063.171483][T28334] 8021q: adding VLAN 0 to HW filter on device team0 [ 2063.196997][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2063.204222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2063.239535][T21764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.246748][T21764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2063.358067][T28334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2063.426338][T28334] veth0_vlan: entered promiscuous mode [ 2063.440370][T28334] veth1_vlan: entered promiscuous mode [ 2063.488362][T28334] veth0_macvtap: entered promiscuous mode [ 2063.501589][T28334] veth1_macvtap: entered promiscuous mode [ 2063.530365][T28334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2063.547444][T28334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2063.569598][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.588882][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.612706][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.627537][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.693926][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.711854][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.754952][T21751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.771753][T21751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.874093][T28368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5620'. [ 2071.383661][T28373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5631'. [ 2072.229454][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2072.247773][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2072.259760][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2072.275255][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2072.285877][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2072.971382][T28389] chnl_net:caif_netlink_parms(): no params data found [ 2073.548733][ T5920] usb 3-1: USB disconnect, device number 64 [ 2073.570407][ T5920] xr_serial 3-1:150.204: device disconnected [ 2073.624075][T28389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.644306][T28389] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.667352][T28389] bridge_slave_0: entered allmulticast mode [ 2073.692843][T28389] bridge_slave_0: entered promiscuous mode [ 2073.713854][T28389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.720988][T28389] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.742080][T28389] bridge_slave_1: entered allmulticast mode [ 2073.753341][T28389] bridge_slave_1: entered promiscuous mode [ 2074.078156][T21770] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.162383][T28389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2074.194909][T28389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2074.279963][T21770] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.374556][ T5146] Bluetooth: hci2: command tx timeout [ 2074.379701][T28389] team0: Port device team_slave_0 added [ 2074.391121][T28389] team0: Port device team_slave_1 added [ 2074.463876][T21770] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.539011][T28389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2074.546208][T28389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2074.595315][T28389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2074.678227][T21770] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.706280][T28389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2074.721672][T28389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2074.772862][T28389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2074.887314][T28389] hsr_slave_0: entered promiscuous mode [ 2074.903036][T28389] hsr_slave_1: entered promiscuous mode [ 2074.909615][T28389] debugfs: 'hsr0' already exists in 'hsr' [ 2074.921499][T28389] Cannot create hsr debugfs directory [ 2075.067009][T21770] bridge_slave_1: left allmulticast mode [ 2075.072748][T21770] bridge_slave_1: left promiscuous mode [ 2075.078433][T21770] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.105548][T21770] bridge_slave_0: left allmulticast mode [ 2075.111315][T21770] bridge_slave_0: left promiscuous mode [ 2075.132166][T21770] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.307349][T21770] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 2075.850286][T21770] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2075.862669][T21770] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2075.874170][T21770] .` (unregistering): Released all slaves [ 2076.067340][T21770] bond0 (unregistering): Released all slaves [ 2076.207304][T21770] : left promiscuous mode [ 2076.292478][T21770] tipc: Left network mode [ 2076.452288][ T5146] Bluetooth: hci2: command tx timeout [ 2076.739397][T28389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2076.756552][T28389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2076.776654][T28389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2076.815485][T28389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2077.039226][T21770] hsr_slave_0: left promiscuous mode [ 2077.048595][T21770] hsr_slave_1: left promiscuous mode [ 2077.055795][T21770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2077.063683][T21770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2077.072942][T21770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2077.080707][T21770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2077.095518][T21770] veth1_macvtap: left promiscuous mode [ 2077.101117][T21770] veth0_macvtap: left promiscuous mode [ 2077.107052][T21770] veth1_vlan: left promiscuous mode [ 2077.112642][T21770] veth0_vlan: left promiscuous mode [ 2077.867852][T21770] team0 (unregistering): Port device team_slave_1 removed [ 2077.935733][T21770] team0 (unregistering): Port device team_slave_0 removed [ 2078.543787][ T5146] Bluetooth: hci2: command tx timeout [ 2078.571265][T28389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2078.646837][T28389] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.686727][T27552] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.693964][T27552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.720806][T21751] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.728241][T21751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.895097][T21770] IPVS: stop unused estimator thread 0... [ 2078.941481][T28389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2079.025676][T28389] veth0_vlan: entered promiscuous mode [ 2079.043751][T28389] veth1_vlan: entered promiscuous mode [ 2079.099361][T28389] veth0_macvtap: entered promiscuous mode [ 2079.114619][T28389] veth1_macvtap: entered promiscuous mode [ 2079.141155][T28389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2079.161464][T28389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2079.187731][T21764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.208018][T21764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.228740][T21764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.254764][T21764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2079.327751][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2079.351710][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2079.388733][T27552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2079.402139][T27552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2080.623038][ T5146] Bluetooth: hci2: command tx timeout [ 2085.444648][T28421] fuse: Bad value for 'fd' [ 2085.671334][T28431] xt_hashlimit: size too large, truncated to 1048576 [ 2086.222362][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2086.270141][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2086.280207][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2086.303649][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2086.312037][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2086.465884][T28436] vlan2: entered allmulticast mode [ 2086.488662][T28436] geneve1: entered allmulticast mode [ 2086.671720][ T5920] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2086.872046][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2086.891800][ T130] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2086.920036][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2086.936339][T28437] chnl_net:caif_netlink_parms(): no params data found [ 2087.001394][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2087.061075][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2087.079529][ T130] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 2087.099018][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 2087.125724][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2087.143202][ T130] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 2087.163419][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.197291][ T130] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2087.213515][ T130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.232043][ T5825] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2087.242783][ T5920] usb 2-1: config 0 descriptor?? [ 2087.251208][ T130] usb 3-1: Product: syz [ 2087.274487][ T130] usb 3-1: Manufacturer: syz [ 2087.384251][ T130] usb 3-1: SerialNumber: syz [ 2087.402761][ T130] usb 3-1: config 0 descriptor?? [ 2087.421741][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 2087.428810][T28443] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2087.448050][ T5825] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 2087.483614][ T5825] usb 6-1: config 2 has no interface number 0 [ 2087.513373][ T5825] usb 6-1: config 2 interface 88 has no altsetting 0 [ 2087.556853][ T5825] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2087.589203][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.647426][T28443] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2087.656014][ T5825] usb 6-1: Product: syz [ 2087.667236][ T5825] usb 6-1: Manufacturer: syz [ 2087.701668][ T5825] usb 6-1: SerialNumber: syz [ 2087.740808][T27552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.878423][T28443] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2088.093808][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 2088.106818][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2088.177121][T28448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.186056][T28448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.242054][ T5920] usb 2-1: USB disconnect, device number 57 [ 2088.319573][T27552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.348731][T28437] bridge0: port 1(bridge_slave_0) entered blocking state [ 2088.370768][T28437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.372774][ T5831] Bluetooth: hci4: command tx timeout [ 2088.465004][T28437] bridge_slave_0: entered allmulticast mode [ 2088.483091][T28437] bridge_slave_0: entered promiscuous mode [ 2088.529132][T27552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.573382][T28437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2088.584196][T28437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.598632][T28437] bridge_slave_1: entered allmulticast mode [ 2088.614574][T28437] bridge_slave_1: entered promiscuous mode [ 2088.691029][T27552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.798027][T28437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.921436][T28437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2088.932920][ T5825] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2088.974306][ T5825] asix 6-1:2.88: probe with driver asix failed with error -71 [ 2088.996714][ T5825] usb 6-1: USB disconnect, device number 111 [ 2089.088526][T28437] team0: Port device team_slave_0 added [ 2089.176257][T28437] team0: Port device team_slave_1 added [ 2089.202766][T20853] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2089.251076][T28437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.260756][T28437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.463941][T20853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.484566][T20853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2089.507883][T20853] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 2089.530827][T20853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2089.547694][T28437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.585196][T20853] usb 2-1: SerialNumber: syz [ 2089.614359][T28437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2089.640049][T28437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2089.697791][ T5825] usb 3-1: USB disconnect, device number 65 [ 2089.791713][T28437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2089.808753][T28471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2089.906676][T20853] usb 2-1: 0:2 : does not exist [ 2089.944262][T20853] usb 2-1: USB disconnect, device number 58 [ 2090.187544][T28437] hsr_slave_0: entered promiscuous mode [ 2090.273357][T28437] hsr_slave_1: entered promiscuous mode [ 2090.279905][T28437] debugfs: 'hsr0' already exists in 'hsr' [ 2090.406544][T28437] Cannot create hsr debugfs directory [ 2090.462579][ T5831] Bluetooth: hci4: command tx timeout [ 2091.584421][T28493] xt_hashlimit: size too large, truncated to 1048576 [ 2092.537855][ T5831] Bluetooth: hci4: command tx timeout [ 2093.425204][T28502] xt_recent: Unsupported userspace flags (000000de) [ 2093.440993][ T30] audit: type=1326 audit(1770127121.698:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.513782][ T30] audit: type=1326 audit(1770127121.698:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.573486][ T30] audit: type=1326 audit(1770127121.698:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.661743][ T30] audit: type=1326 audit(1770127121.698:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.721494][T27552] bond1 (unregistering): Released all slaves [ 2093.741765][T20853] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2093.761756][ T30] audit: type=1326 audit(1770127121.698:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.832198][ T30] audit: type=1326 audit(1770127121.698:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.947745][ T30] audit: type=1326 audit(1770127121.698:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2093.957652][T27552] : left promiscuous mode [ 2094.002525][T20853] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.036054][T20853] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2094.050118][ T30] audit: type=1326 audit(1770127121.698:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2094.113464][T20853] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2094.131904][T20853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.149518][T20853] usb 6-1: Product: syz [ 2094.160477][ T30] audit: type=1326 audit(1770127121.698:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2094.198463][T20853] usb 6-1: Manufacturer: syz [ 2094.211687][T20853] usb 6-1: SerialNumber: syz [ 2094.237847][T28511] netlink: 'syz.4.5661': attribute type 2 has an invalid length. [ 2094.408901][ T30] audit: type=1326 audit(1770127121.698:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28500 comm="syz.5.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2094.413835][T27552] tipc: Left network mode [ 2094.575521][ T130] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2094.593387][T28501] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2094.617344][ T5831] Bluetooth: hci4: command tx timeout [ 2094.752517][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 2094.763826][ T130] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.861640][ T130] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2094.886925][ T130] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2094.901195][ T130] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2094.924798][ T130] usb 2-1: Product: syz [ 2094.944665][ T130] usb 2-1: Manufacturer: syz [ 2094.980519][ T130] hub 2-1:4.0: USB hub found [ 2095.024987][T20853] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 2095.031568][T20853] cdc_ncm 6-1:1.0: bind() failure [ 2095.084754][T20853] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2095.106713][T20853] cdc_ncm 6-1:1.1: bind() failure [ 2095.152575][T20853] usb 6-1: USB disconnect, device number 112 [ 2095.178292][ T130] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 2095.329920][ T5896] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2095.533422][ T5896] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2095.558061][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.579797][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.633387][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2095.650733][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.660450][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.672280][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2095.691391][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.713391][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.743344][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2095.785156][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.808766][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.825728][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2095.834507][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.845037][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.885702][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2095.912684][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.938492][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.970990][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2095.987514][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.997835][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2096.073287][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2096.103388][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2096.126391][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2096.156819][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2096.195553][ T5896] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2096.215592][ T5896] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2096.249965][ T5896] usb 3-1: Product: syz [ 2096.340476][ T5896] usb 3-1: Manufacturer: syz [ 2096.365258][ T5896] usb 3-1: SerialNumber: syz [ 2096.376121][ T5896] usb 3-1: config 0 descriptor?? [ 2096.391922][ T5896] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 2096.412768][T27552] hsr_slave_0: left promiscuous mode [ 2096.419133][T27552] hsr_slave_1: left promiscuous mode [ 2096.486554][T27552] team_slave_0: left promiscuous mode [ 2096.492474][T27552] team_slave_1: left promiscuous mode [ 2096.522588][T27552] veth1_macvtap: left promiscuous mode [ 2096.572485][T27552] veth0_macvtap: left promiscuous mode [ 2096.597209][T28515] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2096.605425][T27552] veth1_vlan: left promiscuous mode [ 2096.611088][T27552] veth0_vlan: left promiscuous mode [ 2097.326456][T28525] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5666'. [ 2097.337165][ T5896] usb 2-1: USB disconnect, device number 59 [ 2098.436177][T27552] team0 (unregistering): Port device team_slave_1 removed [ 2098.548564][T27552] team0 (unregistering): Port device team_slave_0 removed [ 2099.022560][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.029109][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.456924][T28525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2099.541540][T28525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2099.566427][T28525] bond0 (unregistering): Released all slaves [ 2099.609257][T28437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2099.636891][T28437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2099.638788][ T130] usb 3-1: USB disconnect, device number 66 [ 2099.644684][T28547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5672'. [ 2099.663579][ T130] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 2099.681439][T28437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2099.910812][T28437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2100.216641][T27552] IPVS: stop unused estimator thread 0... [ 2100.272267][T20853] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2100.272589][T28569] vlan2: entered allmulticast mode [ 2100.282130][T14097] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2100.452802][T14097] usb 2-1: Using ep0 maxpacket: 8 [ 2100.462518][T20853] usb 3-1: Using ep0 maxpacket: 32 [ 2100.480810][T14097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 122, changing to 10 [ 2100.483500][T28437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2100.505317][T20853] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.520866][T28437] 8021q: adding VLAN 0 to HW filter on device team0 [ 2100.531846][T14097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24801, setting to 1024 [ 2100.551766][T20853] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.578970][T14097] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2100.600409][T14097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.612275][T20853] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2100.651123][T20853] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2100.680203][T14097] usb 2-1: config 0 descriptor?? [ 2100.686228][T20853] usb 3-1: Product: syz [ 2100.712497][T20853] usb 3-1: Manufacturer: syz [ 2100.773728][T20853] hub 3-1:4.0: USB hub found [ 2100.807758][T21751] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.815134][T21751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2100.840709][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5679'. [ 2100.887266][T21751] bridge0: port 2(bridge_slave_1) entered blocking state [ 2100.894607][T21751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2100.917618][T28573] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2100.927100][T28561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.937723][T28561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.965273][T28561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.000306][T20853] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 2101.022321][T28561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.031540][T28561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.116828][T28561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.142854][T28561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.217339][T28561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.264497][T28561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.309080][T28561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.330791][T28437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2101.415013][T14097] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2101.485751][T28437] veth0_vlan: entered promiscuous mode [ 2101.529110][T28437] veth1_vlan: entered promiscuous mode [ 2101.614848][T28581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.634899][T28437] veth0_macvtap: entered promiscuous mode [ 2101.652244][T28581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.673685][T28437] veth1_macvtap: entered promiscuous mode [ 2101.674853][T28581] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2101.721093][T28437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2101.740684][ T5896] usb 2-1: USB disconnect, device number 60 [ 2101.785207][T28437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2101.844746][T21770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.871258][T21770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.915761][T21770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2101.968437][T21770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.173386][T21770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2102.191668][T21770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2102.276375][T21758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2102.300935][T21758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2102.680951][T20853] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2102.982763][T20853] usb 6-1: Using ep0 maxpacket: 16 [ 2102.993125][T20853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.021412][T20853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2103.034735][ T5920] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2103.084278][T20853] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2103.114941][T20853] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2103.139585][T20853] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2103.151289][T20853] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2103.160114][T20853] usb 6-1: Manufacturer: syz [ 2103.171086][T20853] usb 6-1: config 0 descriptor?? [ 2103.203330][ T10] usb 3-1: USB disconnect, device number 67 [ 2103.224273][ T5920] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2103.234343][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2103.246847][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2103.599105][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2103.621813][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2103.632107][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2103.653064][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2103.686505][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2103.745655][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2103.787440][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2103.818413][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2103.878143][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2103.912650][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2103.943773][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2103.970443][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2104.021210][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2104.224037][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2104.234494][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2104.256025][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2104.283912][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2104.383969][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2104.436778][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2104.460498][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2104.505366][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2104.534435][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2104.548754][ T5920] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2104.577268][ T5920] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2104.610854][ T5920] usb 2-1: Product: syz [ 2104.648782][ T5920] usb 2-1: Manufacturer: syz [ 2104.682210][ T5920] usb 2-1: SerialNumber: syz [ 2104.696230][ T5920] usb 2-1: config 0 descriptor?? [ 2104.721350][ T5920] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 2104.882550][ T5896] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2104.891423][ T5920] usb 5-1: USB disconnect, device number 75 [ 2104.950899][T20853] usb 2-1: USB disconnect, device number 61 [ 2104.979343][T20853] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 2105.043164][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2105.055182][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2105.064121][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2105.071491][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 2105.071809][ T130] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2105.087046][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2105.104162][ T5896] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 2105.113027][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2105.122267][ T5896] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.158310][ T5896] usb 4-1: config 8 has no interface number 0 [ 2105.164584][ T5896] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2105.176444][ T5896] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2105.186638][ T5896] usb 4-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2105.205014][ T5896] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2105.214741][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.222915][ T5896] usb 4-1: Product: syz [ 2105.227709][ T5896] usb 4-1: Manufacturer: syz [ 2105.232614][ T5896] usb 4-1: SerialNumber: syz [ 2105.240276][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.276150][ T130] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 2105.312805][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.364711][ T130] usb 3-1: config 0 descriptor?? [ 2105.483018][T22493] usb 6-1: USB disconnect, device number 113 [ 2105.499939][ T5896] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 2105.611143][ T5896] usb 4-1: USB disconnect, device number 113 [ 2105.778919][ T130] logitech 0003:046D:C293.0038: invalid report_count 50514 [ 2105.791745][ T130] logitech 0003:046D:C293.0038: item 0 2 1 9 parsing failed [ 2105.806292][ T130] logitech 0003:046D:C293.0038: parse failed [ 2105.818015][ T130] logitech 0003:046D:C293.0038: probe with driver logitech failed with error -22 [ 2105.941717][ T5896] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 2106.006146][ T130] usb 3-1: USB disconnect, device number 68 [ 2106.085456][T28624] chnl_net:caif_netlink_parms(): no params data found [ 2106.121916][ T5896] usb 4-1: Invalid ep0 maxpacket: 64 [ 2106.194193][T21758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.271692][ T5896] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 2106.412230][T21758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.462719][ T5896] usb 4-1: Invalid ep0 maxpacket: 64 [ 2106.476115][ T5896] usb usb4-port1: attempt power cycle [ 2106.532061][T21758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.566575][T28651] program syz.1.5700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2106.620739][ T5825] IPVS: starting estimator thread 0... [ 2106.668363][ T130] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2106.795371][T28624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.798890][T28652] IPVS: using max 28 ests per chain, 67200 per kthread [ 2106.815423][T28624] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.824040][T28624] bridge_slave_0: entered allmulticast mode [ 2106.870210][T28624] bridge_slave_0: entered promiscuous mode [ 2106.886781][ T130] usb 6-1: Using ep0 maxpacket: 32 [ 2106.939452][ T5896] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 2106.954656][ T130] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2106.967053][ T130] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2107.009291][ T130] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2107.012426][ T5896] usb 4-1: Invalid ep0 maxpacket: 64 [ 2107.026670][ T130] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2107.061890][ T130] usb 6-1: Product: syz [ 2107.076556][ T130] usb 6-1: Manufacturer: syz [ 2107.105407][ T130] hub 6-1:4.0: USB hub found [ 2107.152008][ T5896] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 2107.176299][ T5146] Bluetooth: hci1: command tx timeout [ 2107.178759][T21758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.195747][ T5896] usb 4-1: Invalid ep0 maxpacket: 64 [ 2107.201497][ T5896] usb usb4-port1: unable to enumerate USB device [ 2107.328227][ T130] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 2107.483238][T28624] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.159264][T28624] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.196223][T28624] bridge_slave_1: entered allmulticast mode [ 2108.237114][T28624] bridge_slave_1: entered promiscuous mode [ 2108.438045][T28624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2108.465024][T28624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2108.588023][T28624] team0: Port device team_slave_0 added [ 2108.604824][T28624] team0: Port device team_slave_1 added [ 2108.692945][ T5825] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2108.709750][T28624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2108.717583][T28624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2108.745354][T28624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2108.795727][ T130] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2108.862969][T28624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2108.870332][T28624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2108.899068][T28624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2109.051945][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 2109.265325][ T5146] Bluetooth: hci1: command tx timeout [ 2109.265511][ T5825] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2109.354763][ T130] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2109.384009][ T130] usb 2-1: can't read configurations, error -61 [ 2109.417471][T28624] hsr_slave_0: entered promiscuous mode [ 2109.440240][T28624] hsr_slave_1: entered promiscuous mode [ 2109.447290][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2109.471873][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2109.484438][T28624] debugfs: 'hsr0' already exists in 'hsr' [ 2109.486482][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2109.500690][T28624] Cannot create hsr debugfs directory [ 2109.558456][ T130] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2109.573196][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2109.583653][T21758] bridge_slave_1: left allmulticast mode [ 2109.589426][T21758] bridge_slave_1: left promiscuous mode [ 2109.603714][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2109.615321][T21758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2109.624096][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2109.642944][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2109.653375][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2109.666094][T21758] bridge_slave_0: left allmulticast mode [ 2109.672145][T21758] bridge_slave_0: left promiscuous mode [ 2109.682809][ T5920] usb 6-1: USB disconnect, device number 114 [ 2109.698856][T21758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.710981][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2109.735024][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2109.749569][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2109.751910][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 2109.783508][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2109.792052][ T130] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2109.800920][ T130] usb 2-1: can't read configurations, error -61 [ 2109.809039][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2109.810619][ T130] usb usb2-port1: attempt power cycle [ 2109.848642][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2109.890736][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2109.927444][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2109.952624][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2109.991699][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2110.012843][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2110.022299][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2110.050061][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2110.060937][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2110.105383][ T5825] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2110.130809][ T5825] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2110.145659][ T5825] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2110.156725][ T5825] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2110.180551][ T5825] usb 3-1: Product: syz [ 2110.185309][ T5825] usb 3-1: Manufacturer: syz [ 2110.190191][ T5825] usb 3-1: SerialNumber: syz [ 2110.191999][ T130] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2110.198096][ T5825] usb 3-1: config 0 descriptor?? [ 2110.244400][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 2110.250705][ T5825] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2110.257527][ T130] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2110.279513][ T130] usb 2-1: can't read configurations, error -61 [ 2110.421957][ T130] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2110.463811][ T130] usb 2-1: Using ep0 maxpacket: 32 [ 2110.478066][ T130] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2110.496140][ T130] usb 2-1: can't read configurations, error -61 [ 2110.509147][ T130] usb usb2-port1: unable to enumerate USB device [ 2110.847344][T21758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.874177][T21758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.896725][T21758] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2110.912501][T21758] bond0 (unregistering): Released all slaves [ 2110.935433][T21758] bond1 (unregistering): Released all slaves [ 2111.256571][T21758] bond2 (unregistering): Released all slaves [ 2111.342654][ T5146] Bluetooth: hci1: command tx timeout [ 2111.794128][T21758] bond3 (unregistering): Released all slaves [ 2112.013854][ T5920] usb 3-1: USB disconnect, device number 69 [ 2112.049517][ T5920] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2112.055922][T21758] : left promiscuous mode [ 2112.327010][T21758] tipc: Left network mode [ 2112.497322][T28709] xt_hashlimit: size too large, truncated to 1048576 [ 2113.424111][ T5146] Bluetooth: hci1: command tx timeout [ 2114.847606][T28725] netlink: 'syz.5.5720': attribute type 2 has an invalid length. [ 2115.601431][T28624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2115.752905][T28624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2115.821692][T22493] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2115.887837][T28624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2116.054218][T22493] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2116.072514][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2116.140351][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2116.174535][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2116.260861][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2116.298098][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2116.341486][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2116.365489][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2116.387328][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2116.414254][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2116.443926][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2116.445984][T28624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2116.515047][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2116.515062][ T30] audit: type=1326 audit(1770127144.798:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28740 comm="syz.3.5723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4680f9aeb9 code=0x0 [ 2116.641727][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2116.685860][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2116.709205][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2116.738537][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2116.904338][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2116.933978][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2116.944211][T21758] hsr_slave_0: left promiscuous mode [ 2116.952637][T21758] hsr_slave_1: left promiscuous mode [ 2116.961448][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2116.963293][T21758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2117.014819][T21758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2117.014844][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2117.049537][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2117.050619][T21758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2117.089291][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2117.112123][T21758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2117.129551][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2117.151435][T22493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2117.178282][T22493] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2117.206496][T22493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2117.277376][T22493] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2117.307798][T22493] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2117.336632][T22493] usb 2-1: Product: syz [ 2117.340832][T22493] usb 2-1: Manufacturer: syz [ 2117.383616][T22493] usb 2-1: SerialNumber: syz [ 2117.404487][T22493] usb 2-1: config 0 descriptor?? [ 2117.430241][T21758] veth1_macvtap: left promiscuous mode [ 2117.443887][T21758] veth0_macvtap: left promiscuous mode [ 2117.444064][T22493] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2117.487865][T21758] veth1_vlan: left promiscuous mode [ 2117.500461][T21758] veth0_vlan: left promiscuous mode [ 2117.799157][T21758] team0 (unregistering): Port device batadv1 removed [ 2118.221722][T28761] fuse: Bad value for 'fd' [ 2119.511920][T21758] team0 (unregistering): Port device team_slave_1 removed [ 2119.597683][T21758] team0 (unregistering): Port device team_slave_0 removed [ 2119.989951][ T5920] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2120.166482][ T5920] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2120.186401][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.206898][ T5920] usb 6-1: Product: syz [ 2120.211210][ T5920] usb 6-1: Manufacturer: syz [ 2120.227661][ T5920] usb 6-1: SerialNumber: syz [ 2120.461170][T22493] usb 2-1: USB disconnect, device number 66 [ 2120.503473][T22493] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2120.606233][T28768] netlink: 'syz.1.5729': attribute type 2 has an invalid length. [ 2120.698996][ T5920] net_ratelimit: 348 callbacks suppressed [ 2120.699026][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2120.703938][T28773] netlink: 'syz.3.5731': attribute type 4 has an invalid length. [ 2120.726125][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2120.756849][T28768] @„;: entered promiscuous mode [ 2120.826333][T28624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2120.923220][T28624] 8021q: adding VLAN 0 to HW filter on device team0 [ 2120.963851][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2120.971173][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2120.979677][T22493] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2121.008587][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.015845][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.133334][T21758] IPVS: stop unused estimator thread 0... [ 2121.142205][T22493] usb 3-1: Using ep0 maxpacket: 16 [ 2121.149445][T22493] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.202208][T22493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2121.231384][T22493] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2121.258640][T22493] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2121.302586][T22493] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2121.312446][T22493] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2121.320606][T22493] usb 3-1: Manufacturer: syz [ 2121.406332][T22493] usb 3-1: config 0 descriptor?? [ 2121.606490][T28624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2121.786125][T28624] veth0_vlan: entered promiscuous mode [ 2121.905171][T28624] veth1_vlan: entered promiscuous mode [ 2122.054856][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2122.179459][T28624] veth0_macvtap: entered promiscuous mode [ 2122.221303][T28624] veth1_macvtap: entered promiscuous mode [ 2122.269642][T28624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2122.318180][T28624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2122.343273][T21751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.360707][T21751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.396206][T21751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.424829][T21751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.558545][T21751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.569229][T21751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.647387][T21770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.666958][T21770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.114400][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 2123.152436][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2123.213251][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2123.262376][ T5920] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2123.307680][ T5920] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2123.343448][ T5920] usb 6-1: USB disconnect, device number 115 [ 2123.687329][T20853] usb 3-1: USB disconnect, device number 70 [ 2124.540929][T28858] trusted_key: syz.4.5763 sent an empty control message without MSG_MORE. [ 2125.089051][ T30] audit: type=1326 audit(1770127153.368:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.5771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe92d19aeb9 code=0x0 [ 2127.600232][T28939] netlink: 'syz.1.5793': attribute type 2 has an invalid length. [ 2134.589483][ T30] audit: type=1326 audit(1770127162.858:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2134.655866][ T30] audit: type=1326 audit(1770127162.868:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2134.742752][ T30] audit: type=1326 audit(1770127162.868:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2134.829235][ T30] audit: type=1326 audit(1770127162.868:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2134.922389][ T30] audit: type=1326 audit(1770127162.908:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2134.986045][ T30] audit: type=1326 audit(1770127162.908:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2135.057080][ T30] audit: type=1326 audit(1770127162.908:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2135.121702][ T30] audit: type=1326 audit(1770127162.908:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2135.184079][ T30] audit: type=1326 audit(1770127162.908:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2135.271766][ T30] audit: type=1326 audit(1770127162.908:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29067 comm="syz.5.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5fc079aeb9 code=0x7ffc0000 [ 2139.776010][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2139.776030][ T30] audit: type=1326 audit(1770127168.058:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2139.898131][ T30] audit: type=1326 audit(1770127168.058:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2139.991015][ T30] audit: type=1326 audit(1770127168.058:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.092549][ T30] audit: type=1326 audit(1770127168.108:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.192831][ T30] audit: type=1326 audit(1770127168.108:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.259133][ T30] audit: type=1326 audit(1770127168.108:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.349313][ T30] audit: type=1326 audit(1770127168.108:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.450599][ T30] audit: type=1326 audit(1770127168.108:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.500139][ T30] audit: type=1326 audit(1770127168.108:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2140.551946][ T30] audit: type=1326 audit(1770127168.118:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29190 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2144.445448][T29259] kvm: vcpu 0: requested 320 ns lapic timer period limited to 200000 ns [ 2144.463624][T29259] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2146.483806][T29316] netlink: 'syz.2.5943': attribute type 3 has an invalid length. [ 2147.588090][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2147.588111][ T30] audit: type=1326 audit(1770127175.868:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2147.681683][ T30] audit: type=1326 audit(1770127175.868:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2147.751654][ T30] audit: type=1326 audit(1770127175.868:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2147.821901][ T30] audit: type=1326 audit(1770127175.868:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2147.898219][ T30] audit: type=1326 audit(1770127175.868:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2147.996974][ T30] audit: type=1326 audit(1770127175.868:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2148.086793][ T30] audit: type=1326 audit(1770127175.868:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2148.175573][ T30] audit: type=1326 audit(1770127175.868:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2148.295016][ T30] audit: type=1326 audit(1770127175.868:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2148.398123][ T30] audit: type=1326 audit(1770127175.868:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29346 comm="syz.2.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fe92d19aeb9 code=0x7ffc0000 [ 2151.484654][T29461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2152.165652][T29476] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 2160.462209][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.468594][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.973426][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6071'. [ 2161.965664][T29656] sctp: [Deprecated]: syz.5.6077 (pid 29656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2161.965664][T29656] Use struct sctp_sack_info instead [ 2165.344273][T29741] program syz.5.6118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2165.467839][T29743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2166.280958][T29764] 8021q: VLANs not supported on gre0 [ 2166.882214][T29777] program syz.5.6132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2167.170786][T29783] syzkaller0: entered promiscuous mode [ 2167.199558][T29783] syzkaller0: entered allmulticast mode [ 2167.890725][T29805] program syz.4.6147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2169.684280][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 2169.684300][ T30] audit: type=1326 audit(1770127197.968:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2169.768432][ T30] audit: type=1326 audit(1770127197.968:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2169.817720][ T30] audit: type=1326 audit(1770127197.968:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2169.885651][ T30] audit: type=1326 audit(1770127197.998:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2169.940880][ T30] audit: type=1326 audit(1770127197.998:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2169.991715][ T30] audit: type=1326 audit(1770127197.998:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2170.034569][ T30] audit: type=1326 audit(1770127197.998:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2170.088700][ T30] audit: type=1326 audit(1770127197.998:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2170.144165][ T30] audit: type=1326 audit(1770127197.998:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2170.189757][ T30] audit: type=1326 audit(1770127197.998:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29847 comm="syz.4.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5219aeb9 code=0x7ffc0000 [ 2170.218935][T29860] program syz.5.6169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2170.890159][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6178'. [ 2170.981238][T29880] vlan2: entered promiscuous mode [ 2171.021998][T29880] macvtap0: entered promiscuous mode [ 2171.590506][T29900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6185'. [ 2172.169353][T29922] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6195'. [ 2172.468214][T29932] program syz.3.6201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2177.802457][T30073] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 2177.851436][T30073] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2177.896745][ T5146] Bluetooth: hci5: command 0x0406 tx timeout [ 2178.360214][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6268'. [ 2178.397757][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6268'. [ 2178.442044][T30089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2179.446847][T30110] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 2179.506405][T30110] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2186.529229][T30345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6378'. [ 2186.730633][T30345] team0 (unregistering): Port device team_slave_0 removed [ 2186.785819][T30345] team0 (unregistering): Port device team_slave_1 removed [ 2187.039604][T30355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6383'. [ 2187.091995][T30355] ipvlan2: entered promiscuous mode [ 2187.898133][T30389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2188.047536][T30395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6400'. [ 2188.276814][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 2188.276837][ T30] audit: type=1326 audit(1770127216.548:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30404 comm="syz.3.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4680f9aeb9 code=0x7ffc0000 [ 2188.337887][ T30] audit: type=1326 audit(1770127216.588:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30404 comm="syz.3.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4680f9aeb9 code=0x7ffc0000 [ 2188.378309][ T30] audit: type=1326 audit(1770127216.588:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30404 comm="syz.3.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4680f9aeb9 code=0x7ffc0000 [ 2188.468019][ T30] audit: type=1326 audit(1770127216.588:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30404 comm="syz.3.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4680f9aeb9 code=0x7ffc0000 [ 2188.523725][ T30] audit: type=1326 audit(1770127216.588:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30404 comm="syz.3.6407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4680f9aeb9 code=0x7ffc0000 [ 2189.007588][T30430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2189.741738][T30455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2190.156761][T30467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2190.437647][T30481] ------------[ cut here ]------------ [ 2190.443434][T30481] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 2190.443456][T30481] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.3.6440/30481 [ 2190.463341][T30481] Modules linked in: [ 2190.467898][T30481] CPU: 1 UID: 0 PID: 30481 Comm: syz.3.6440 Tainted: G L syzkaller #0 PREEMPT(full) [ 2190.479073][T30481] Tainted: [L]=SOFTLOCKUP [ 2190.483580][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2190.493770][T30481] RIP: 0010:path_noexec+0x1af/0x200 [ 2190.500199][T30481] Code: 02 31 ff 48 89 de e8 80 f2 83 ff d1 eb eb 07 e8 97 ed 83 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 98 59 59 09 cc e8 82 ed 83 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 2190.520857][T30481] RSP: 0018:ffffc9000368fbd8 EFLAGS: 00010287 [ 2190.527339][T30481] RAX: ffffffff824089ce RBX: ffff888058d20940 RCX: 0000000000080000 [ 2190.535459][T30481] RDX: ffffc9001e4b5000 RSI: 0000000000000069 RDI: 000000000000006a [ 2190.543866][T30481] RBP: 0000000000080000 R08: ffff88802ae2db80 R09: 0000000000000003 [ 2190.552049][T30481] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 2190.560059][T30481] R13: 1ffff920006d1f90 R14: 0000000000000000 R15: dffffc0000000000 [ 2190.568217][T30481] FS: 00007f4681f3f6c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 2190.577510][T30481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2190.584275][T30481] CR2: 000000110c2f843b CR3: 000000005ced8000 CR4: 00000000003526f0 [ 2190.592558][T30481] Call Trace: [ 2190.595960][T30481] [ 2190.599789][T30481] do_mmap+0xa32/0x10c0 [ 2190.604962][T30481] ? __pfx_do_mmap+0x10/0x10 [ 2190.609738][T30481] ? down_write_killable+0x180/0x240 [ 2190.616063][T30481] ? __pfx_down_write_killable+0x10/0x10 [ 2190.622205][T30481] ? apparmor_mmap_file+0x23e/0x2b0 [ 2190.627554][T30481] vm_mmap_pgoff+0x2c9/0x4f0 [ 2190.632277][T30481] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2190.637483][T30481] ? __fget_files+0x2a/0x420 [ 2190.642241][T30481] ? __fget_files+0x3a0/0x420 [ 2190.646966][T30481] ? __fget_files+0x2a/0x420 [ 2190.651671][T30481] ksys_mmap_pgoff+0x51e/0x760 [ 2190.656673][T30481] do_syscall_64+0xe2/0xf80 [ 2190.661229][T30481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.667426][T30481] ? trace_irq_disable+0x37/0x100 [ 2190.672544][T30481] ? clear_bhb_loop+0x60/0xb0 [ 2190.677272][T30481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.683481][T30481] RIP: 0033:0x7f4680f9aeb9 [ 2190.688021][T30481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2190.708781][T30481] RSP: 002b:00007f4681f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2190.718116][T30481] RAX: ffffffffffffffda RBX: 00007f4681215fa0 RCX: 00007f4680f9aeb9 [ 2190.726719][T30481] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 2190.734810][T30481] RBP: 00007f4681008c1f R08: 0000000000000005 R09: 0000000000000000 [ 2190.742882][T30481] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2190.750995][T30481] R13: 00007f4681216038 R14: 00007f4681215fa0 R15: 00007f468133fa48 [ 2190.759175][T30481] [ 2190.762310][T30481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2190.769624][T30481] CPU: 1 UID: 0 PID: 30481 Comm: syz.3.6440 Tainted: G L syzkaller #0 PREEMPT(full) [ 2190.780607][T30481] Tainted: [L]=SOFTLOCKUP [ 2190.784964][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2190.795139][T30481] Call Trace: [ 2190.798447][T30481] [ 2190.801435][T30481] vpanic+0x1e0/0x670 [ 2190.805643][T30481] panic+0xc5/0xd0 [ 2190.809499][T30481] ? __pfx_panic+0x10/0x10 [ 2190.813966][T30481] __warn+0x315/0x4a0 [ 2190.817966][T30481] ? path_noexec+0x1af/0x200 [ 2190.822588][T30481] ? path_noexec+0x1af/0x200 [ 2190.827308][T30481] __report_bug+0x29a/0x540 [ 2190.831842][T30481] ? path_noexec+0x1af/0x200 [ 2190.836450][T30481] ? __pfx___report_bug+0x10/0x10 [ 2190.841507][T30481] ? futex_unqueue+0x211/0x240 [ 2190.846336][T30481] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 2190.853045][T30481] ? path_noexec+0x1af/0x200 [ 2190.858220][T30481] report_bug+0x16a/0x220 [ 2190.862715][T30481] ? path_noexec+0x1af/0x200 [ 2190.867438][T30481] ? path_noexec+0x1b1/0x200 [ 2190.872071][T30481] handle_bug+0x98/0x200 [ 2190.876400][T30481] exc_invalid_op+0x1a/0x50 [ 2190.880936][T30481] asm_exc_invalid_op+0x1a/0x20 [ 2190.885799][T30481] RIP: 0010:path_noexec+0x1af/0x200 [ 2190.891008][T30481] Code: 02 31 ff 48 89 de e8 80 f2 83 ff d1 eb eb 07 e8 97 ed 83 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 98 59 59 09 cc e8 82 ed 83 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 2190.910714][T30481] RSP: 0018:ffffc9000368fbd8 EFLAGS: 00010287 [ 2190.916810][T30481] RAX: ffffffff824089ce RBX: ffff888058d20940 RCX: 0000000000080000 [ 2190.924813][T30481] RDX: ffffc9001e4b5000 RSI: 0000000000000069 RDI: 000000000000006a [ 2190.932977][T30481] RBP: 0000000000080000 R08: ffff88802ae2db80 R09: 0000000000000003 [ 2190.940961][T30481] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 2190.949023][T30481] R13: 1ffff920006d1f90 R14: 0000000000000000 R15: dffffc0000000000 [ 2190.957182][T30481] ? path_noexec+0x1ae/0x200 [ 2190.961898][T30481] ? path_noexec+0x1ae/0x200 [ 2190.966616][T30481] do_mmap+0xa32/0x10c0 [ 2190.971182][T30481] ? __pfx_do_mmap+0x10/0x10 [ 2190.975830][T30481] ? down_write_killable+0x180/0x240 [ 2190.981236][T30481] ? __pfx_down_write_killable+0x10/0x10 [ 2190.986990][T30481] ? apparmor_mmap_file+0x23e/0x2b0 [ 2190.992395][T30481] vm_mmap_pgoff+0x2c9/0x4f0 [ 2190.997010][T30481] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2191.002498][T30481] ? __fget_files+0x2a/0x420 [ 2191.007097][T30481] ? __fget_files+0x3a0/0x420 [ 2191.011823][T30481] ? __fget_files+0x2a/0x420 [ 2191.016443][T30481] ksys_mmap_pgoff+0x51e/0x760 [ 2191.021239][T30481] do_syscall_64+0xe2/0xf80 [ 2191.025930][T30481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.032012][T30481] ? trace_irq_disable+0x37/0x100 [ 2191.037042][T30481] ? clear_bhb_loop+0x60/0xb0 [ 2191.042355][T30481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.048293][T30481] RIP: 0033:0x7f4680f9aeb9 [ 2191.052848][T30481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.072495][T30481] RSP: 002b:00007f4681f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2191.080939][T30481] RAX: ffffffffffffffda RBX: 00007f4681215fa0 RCX: 00007f4680f9aeb9 [ 2191.088924][T30481] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 2191.096900][T30481] RBP: 00007f4681008c1f R08: 0000000000000005 R09: 0000000000000000 [ 2191.104960][T30481] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2191.113109][T30481] R13: 00007f4681216038 R14: 00007f4681215fa0 R15: 00007f468133fa48 [ 2191.121108][T30481] [ 2191.124783][T30481] Kernel Offset: disabled [ 2191.129145][T30481] Rebooting in 86400 seconds..