last executing test programs: 10m29.986899719s ago: executing program 0 (id=4490): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0xb125}, 0x8) 10m29.905028636s ago: executing program 0 (id=4491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x25}, 0x10) 10m29.904752304s ago: executing program 0 (id=4493): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 10m29.73440634s ago: executing program 0 (id=4503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 10m29.653520748s ago: executing program 0 (id=4497): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 10m29.321937852s ago: executing program 0 (id=4507): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 10m29.212388733s ago: executing program 32 (id=4507): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 5m3.986755818s ago: executing program 2 (id=10928): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5m3.983619081s ago: executing program 2 (id=10930): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) unlink(&(0x7f00000001c0)='./file0\x00') 5m3.871850349s ago: executing program 2 (id=10931): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1}, 0x20040851) 5m3.852439486s ago: executing program 2 (id=10933): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 5m3.78452734s ago: executing program 2 (id=10936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001d00)=ANY=[], 0x0) 5m2.670511916s ago: executing program 2 (id=10946): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 5m2.622485091s ago: executing program 33 (id=10946): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 4m27.659688402s ago: executing program 5 (id=11400): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0x100}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.560104748s ago: executing program 5 (id=11402): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m27.527537318s ago: executing program 5 (id=11403): syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000080), 0x4) 4m27.446198979s ago: executing program 5 (id=11405): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 4m27.443118287s ago: executing program 5 (id=11407): ioperm(0x1ff, 0x8, 0x5) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.290192527s ago: executing program 5 (id=11408): ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) 4m27.235235545s ago: executing program 34 (id=11408): ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) 6.854506734s ago: executing program 6 (id=14399): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) 5.820908548s ago: executing program 6 (id=14404): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xc0, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8a, 0x11, 0x1, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x8a, 0x0, @gue={{0x1, 0x0, 0x2, 0xa, 0x0, @void}, "e524eb6dd31786b756adbd778bd60535da6233c5384d928a90c8c9287d6b598a26cea3d0907b00bdbe91d1e05ccb6669e7386a616c177b24c6807885f0382e0898efeacc5cfc40cc77373618afdb944de5e858d16825d31bbfd8f8a57987f3f1a22869aff1c1fee074b0c70633e68e94f0860604b7fd25a95134445a0ab7"}}}}}}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.203900413s ago: executing program 6 (id=14407): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write(r0, &(0x7f0000000280)="0f", 0x1) 4.636065006s ago: executing program 1 (id=14409): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') close_range(r2, 0xffffffffffffffff, 0x0) 4.359374755s ago: executing program 6 (id=14414): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x0, &(0x7f0000000180)}], 0x1}) 4.176288519s ago: executing program 3 (id=14415): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) 2.66470218s ago: executing program 4 (id=14416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240041e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.562605985s ago: executing program 1 (id=14418): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$qrtr(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x0, 0x2000}, 0x1c, 0xc5548f5) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r3, 0x0) 2.206588977s ago: executing program 4 (id=14419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000640)='\x00', 0x1, 0x4000000, &(0x7f0000000380)={0x11, 0xd, r4, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 2.005254061s ago: executing program 3 (id=14420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setrlimit(0x9, &(0x7f0000000000)={0x0, 0x2400000}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x94) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x7, "a098f75bcd9a5516f311a8eaa9ce4a38b900", "674e20c1c38da0a452bae176e96e2b1e08fcde1ee4805fe36ef556ff6cb46fd595915c864cafe26107bc517193b48ef7", "5e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a", {"75d450fb18d042893597291d77675a63", "8674ef6f2b136c97448a476ca98e61cf"}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000140), 0x0, 0x0) 1.920465769s ago: executing program 3 (id=14421): ioperm(0x7, 0x4, 0x7) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 1.866278385s ago: executing program 4 (id=14422): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x5bbb, 0xc549, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.419948116s ago: executing program 1 (id=14423): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1.415371309s ago: executing program 4 (id=14431): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660da000000000000000000000000000000000000e2ffffff00", "d8a024e5", "20000926000200"}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) 1.32691928s ago: executing program 4 (id=14424): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write(r0, &(0x7f0000000280)="0f", 0x1) 1.104270581s ago: executing program 1 (id=14425): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 883.160246ms ago: executing program 1 (id=14426): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x34, 0x6, 0x0, 0x2}, {0x16, 0x0, 0x0, 0x100}]}) bind$xdp(r3, &(0x7f0000000240)={0x2d, 0x0, 0x0, 0x8c}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0x4, 0x1, 0xfffffffe, 0x4, 0x1000, 0x1, 0x20000004, 0x4, 0xa, 0x0, 0x6, 0x5, 0xb6ac, 0x9, 0xffffffff, 0x6, 0x10009, 0xfe9, 0x401, 0x8000, 0x6, 0x4, 0x9, 0x48, 0x6, 0x80, 0xfffffffd, 0x81, 0x7, 0x8]}) 701.782169ms ago: executing program 3 (id=14427): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f00000005c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x0, r2, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x43400078, 0x1000000000, 0x5, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 657.904372ms ago: executing program 3 (id=14428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 550.762022ms ago: executing program 3 (id=14429): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x9000) socket(0x3e, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 404.135356ms ago: executing program 6 (id=14430): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7465fefa615ba27200004008db6ce0000000002000"/34], &(0x7f0000000080)=0x24) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8847}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) socket(0x22, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 80.888052ms ago: executing program 6 (id=14432): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x81}}}}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="b822", 0x2}], 0x1}, 0x4015) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) dup3(r1, r2, 0x80000) syz_io_uring_setup(0x79d1, 0x0, 0x0, 0x0, 0x0) 4.104947ms ago: executing program 1 (id=14433): timer_create(0x0, 0x0, &(0x7f0000000300)) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 4 (id=14441): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xbb}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r3, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x36, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) kernel console output (not intermixed with test programs): 91.346386][ T5919] ? kernfs_put+0x3f/0x60 [ 791.346400][ T5919] ? internal_create_group+0x915/0xf40 [ 791.346423][ T5919] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.346464][ T5919] ? policy_nodemask+0xed/0x4f0 [ 791.346481][ T5919] alloc_pages_mpol+0x1fb/0x540 [ 791.346496][ T5919] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 791.346513][ T5919] ? ib_setup_port_attrs+0x2b4/0x600 [ 791.346527][ T5919] ___kmalloc_large_node+0xe5/0x120 [ 791.346545][ T5919] __kmalloc_large_node_noprof+0x1c/0x70 [ 791.346561][ T5919] __kmalloc_noprof+0x5be/0x850 [ 791.346572][ T5919] ? rdma_port_get_link_layer+0x57/0xe0 [ 791.346590][ T5919] ib_setup_port_attrs+0x2b4/0x600 [ 791.346603][ T5919] ? kobject_put+0xb9/0x640 [ 791.346619][ T5919] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 791.346636][ T5919] ? __init_waitqueue_head+0xca/0x150 [ 791.346655][ T5919] add_one_compat_dev+0x5b3/0x820 [ 791.346674][ T5919] rdma_dev_init_net+0x30a/0x590 [ 791.346690][ T5919] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 791.346706][ T5919] ? __kmalloc_noprof+0x320/0x850 [ 791.346719][ T5919] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 791.346736][ T5919] ops_init+0x1e2/0x5f0 [ 791.346754][ T5919] setup_net+0x118/0x3a0 [ 791.346769][ T5919] ? __pfx_setup_net+0x10/0x10 [ 791.346784][ T5919] ? mutex_init_lockdep+0xf1/0x120 [ 791.346800][ T5919] copy_net_ns+0x46f/0x7c0 [ 791.346818][ T5919] create_new_namespaces+0x3ea/0xac0 [ 791.346838][ T5919] unshare_nsproxy_namespaces+0xf2/0x220 [ 791.346855][ T5919] ksys_unshare+0x438/0xab0 [ 791.346874][ T5919] ? __pfx_ksys_unshare+0x10/0x10 [ 791.346897][ T5919] __ia32_sys_unshare+0x30/0x40 [ 791.346914][ T5919] __do_fast_syscall_32+0xe7/0x950 [ 791.346928][ T5919] do_fast_syscall_32+0x32/0x70 [ 791.346940][ T5919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.346956][ T5919] RIP: 0023:0xf7fc5f7c [ 791.346966][ T5919] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 791.346979][ T5919] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 791.346995][ T5919] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 791.347005][ T5919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 791.347015][ T5919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.347024][ T5919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 791.347034][ T5919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.347055][ T5919] [ 791.347193][ T5919] Mem-Info: [ 791.460573][ T5919] active_anon:9001 inactive_anon:5828 isolated_anon:0 [ 791.460573][ T5919] active_file:5534 inactive_file:11235 isolated_file:25 [ 791.460573][ T5919] unevictable:1767 dirty:415 writeback:0 [ 791.460573][ T5919] slab_reclaimable:7049 slab_unreclaimable:79230 [ 791.460573][ T5919] mapped:23975 shmem:12147 pagetables:2548 [ 791.460573][ T5919] sec_pagetables:346 bounce:0 [ 791.460573][ T5919] kernel_misc_reclaimable:0 [ 791.460573][ T5919] free:43875 free_pcp:1242 free_cma:0 [ 791.475677][ T5919] Node 0 active_anon:12kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8628kB pagetables:1344kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 791.487095][ T5919] Node 1 active_anon:35992kB inactive_anon:23308kB active_file:22732kB inactive_file:44932kB unevictable:3532kB isolated(anon):0kB isolated(file):100kB mapped:95872kB dirty:1660kB writeback:0kB shmem:45052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9364kB pagetables:8848kB sec_pagetables:228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 791.499690][ T5919] Node 0 DMA free:3868kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 791.509961][ T5919] lowmem_reserve[]: 0 285 285 285 285 [ 791.512265][ T5919] Node 0 DMA32 free:35472kB boost:29448kB min:42536kB low:45808kB high:49080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:3144kB present:1032196kB managed:292496kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 791.522914][ T5919] lowmem_reserve[]: 0 0 0 0 0 [ 791.524501][ T5919] Node 1 DMA32 free:142636kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32656kB inactive_anon:23288kB active_file:22724kB inactive_file:40888kB unevictable:7148kB writepending:1660kB zspages:3544kB present:1048432kB managed:948212kB mlocked:3688kB bounce:0kB free_pcp:1460kB local_pcp:0kB free_cma:0kB [ 791.536107][ T5919] lowmem_reserve[]: 0 0 0 0 0 [ 791.537782][ T5919] Node 0 DMA: 98*4kB (UE) 90*8kB (UE) 35*16kB (UE) 30*32kB (U) 7*64kB (UE) 1*128kB (E) 1*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3976kB [ 791.542967][ T5919] Node 0 DMA32: 1038*4kB (UME) 619*8kB (UME) 210*16kB (UME) 229*32kB (UME) 77*64kB (UME) 28*128kB (UME) 10*256kB (UME) 3*512kB (UM) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 35472kB [ 791.549531][ T5919] Node 1 DMA32: 1138*4kB (UM) 5979*8kB (UME) 4985*16kB (UME) 274*32kB (U) 28*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 143088kB [ 791.554769][ T5919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.558051][ T5919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.561519][ T5919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 791.564724][ T5919] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 791.567674][ T5919] 29856 total pagecache pages [ 791.569215][ T5919] 1713 pages in swap cache [ 791.570841][ T5919] Free swap = 100kB [ 791.572381][ T5919] Total swap = 124996kB [ 791.573998][ T5919] 524155 pages RAM [ 791.575521][ T5919] 0 pages HighMem/MovableOnly [ 791.577223][ T5919] 210138 pages reserved [ 791.578633][ T5919] 0 pages cma reserved [ 792.224755][ T5943] netlink: 'syz.3.13227': attribute type 1 has an invalid length. [ 792.242801][ T5943] 8021q: adding VLAN 0 to HW filter on device bond15 [ 792.278837][ T5943] vlan5: entered allmulticast mode [ 792.282862][ T5943] bond15: entered allmulticast mode [ 793.217144][ T5967] bridge0: left promiscuous mode [ 793.277342][ T5967] veth1_to_batadv: left promiscuous mode [ 793.289957][ T5967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 793.294887][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.301710][ T5967] hsr0: left promiscuous mode [ 793.308131][ T5967] veth1_macvtap: left promiscuous mode [ 793.312068][ T5967] veth0_macvtap: left promiscuous mode [ 793.315832][ T5967] veth0_macvtap: entered promiscuous mode [ 793.319834][ T5967] veth1_macvtap: entered promiscuous mode [ 793.332944][ T5967] veth1_to_batadv: entered promiscuous mode [ 793.339666][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13233'. [ 793.343500][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13233'. [ 793.343961][ T5967] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 793.353983][ T6337] hsr0: entered promiscuous mode [ 793.362077][ T6337] bridge0: entered promiscuous mode [ 793.397285][ T59] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.400894][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.411108][ T59] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.416133][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.424047][ T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.431281][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.439833][ T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.443837][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.498832][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.530679][ T5980] netlink: 'syz.1.13239': attribute type 1 has an invalid length. [ 793.568418][ T5980] 8021q: adding VLAN 0 to HW filter on device bond14 [ 793.571679][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.658148][ T5980] vlan1: entered allmulticast mode [ 793.659938][ T5980] bond14: entered allmulticast mode [ 793.705936][ T5980] bond14: (slave geneve5): making interface the new active one [ 793.708754][ T5980] geneve5: entered allmulticast mode [ 793.713534][ T5980] bond14: (slave geneve5): Enslaving as an active interface with an up link [ 793.770950][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13242'. [ 794.003194][ T5994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13242'. [ 794.007589][T28915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.106521][ T5996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13244'. [ 795.102864][T18934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.119120][T18934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.139014][T32043] IPVS: starting estimator thread 0... [ 795.243588][ T6015] IPVS: using max 25 ests per chain, 60000 per kthread [ 795.360738][ T6020] IPVS: length: 218 != 24 [ 795.501472][T32043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.176243][ T6046] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13261'. [ 796.932639][ T6063] lo: Caught tx_queue_len zero misconfig [ 797.036999][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13267'. [ 797.127477][ T6073] netlink: 'syz.4.13269': attribute type 1 has an invalid length. [ 797.144199][ T6073] 8021q: adding VLAN 0 to HW filter on device bond13 [ 797.182561][ T6073] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 797.201370][ T6073] macvlan2: entered promiscuous mode [ 797.203212][ T6073] macvlan2: entered allmulticast mode [ 797.205920][ T6073] bond13: entered promiscuous mode [ 797.207640][ T6073] veth0_to_bond: entered promiscuous mode [ 797.210157][ T6073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 797.216210][ T6073] bond13: left promiscuous mode [ 797.219160][ T6073] veth0_to_bond: left promiscuous mode [ 797.357563][ T6078] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13271'. [ 797.954717][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13275'. [ 798.118908][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13275'. [ 798.183193][ T6095] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 798.323068][ T6095] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 798.333096][ T6095] CPU: 3 UID: 0 PID: 6095 Comm: syz.3.13277 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.333118][ T6095] Tainted: [L]=SOFTLOCKUP [ 798.333124][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 798.333132][ T6095] Call Trace: [ 798.333139][ T6095] [ 798.333147][ T6095] dump_stack_lvl+0x100/0x190 [ 798.333193][ T6095] sysfs_warn_dup.cold+0x1c/0x28 [ 798.333215][ T6095] sysfs_do_create_link_sd+0x113/0x140 [ 798.333232][ T6095] sysfs_create_link+0x61/0xc0 [ 798.333245][ T6095] device_add+0x675/0x1950 [ 798.333268][ T6095] ? __pfx_device_add+0x10/0x10 [ 798.333286][ T6095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.333306][ T6095] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 798.333327][ T6095] wiphy_register+0x1edd/0x2d90 [ 798.333345][ T6095] ? __rtnl_unlock+0xb9/0xf0 [ 798.333366][ T6095] ? __pfx_wiphy_register+0x10/0x10 [ 798.333382][ T6095] ? __asan_memset+0x23/0x50 [ 798.333401][ T6095] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 798.333423][ T6095] ieee80211_register_hw+0x3055/0x4570 [ 798.333445][ T6095] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 798.333459][ T6095] ? __pfx___debug_object_init+0x10/0x10 [ 798.333483][ T6095] ? find_held_lock+0x2b/0x80 [ 798.333501][ T6095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.333519][ T6095] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 798.333566][ T6095] ? __hrtimer_setup+0x208/0x330 [ 798.333585][ T6095] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 798.333613][ T6095] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 798.333630][ T6095] ? __asan_memcpy+0x3c/0x60 [ 798.333652][ T6095] hwsim_new_radio_nl+0xc5f/0x1370 [ 798.333667][ T6095] ? rcu_is_watching+0x12/0xc0 [ 798.333683][ T6095] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.333701][ T6095] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 798.333715][ T6095] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 798.333731][ T6095] genl_family_rcv_msg_doit+0x214/0x300 [ 798.333745][ T6095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 798.333757][ T6095] ? genl_get_cmd+0x3e7/0x760 [ 798.333779][ T6095] ? bpf_lsm_capable+0x9/0x10 [ 798.333817][ T6095] ? security_capable+0x80/0x260 [ 798.333840][ T6095] ? ns_capable+0xd2/0xf0 [ 798.333858][ T6095] genl_rcv_msg+0x560/0x800 [ 798.333874][ T6095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.333889][ T6095] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 798.333906][ T6095] ? __lock_acquire+0x4a5/0x2630 [ 798.333923][ T6095] netlink_rcv_skb+0x159/0x420 [ 798.333940][ T6095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.333953][ T6095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.333976][ T6095] ? netlink_deliver_tap+0x1ae/0xcc0 [ 798.333994][ T6095] genl_rcv+0x28/0x40 [ 798.334005][ T6095] netlink_unicast+0x585/0x850 [ 798.334024][ T6095] ? __pfx_netlink_unicast+0x10/0x10 [ 798.334047][ T6095] netlink_sendmsg+0x8b0/0xda0 [ 798.334066][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.334091][ T6095] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 798.334115][ T6095] ____sys_sendmsg+0x9e1/0xb70 [ 798.334136][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.334156][ T6095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.334175][ T6095] ? __pfx___futex_wait+0x10/0x10 [ 798.334197][ T6095] ? __pfx_futex_wake_mark+0x10/0x10 [ 798.334217][ T6095] ___sys_sendmsg+0x190/0x1e0 [ 798.334239][ T6095] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.334265][ T6095] ? find_held_lock+0x2b/0x80 [ 798.334289][ T6095] __sys_sendmsg+0x170/0x220 [ 798.334304][ T6095] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.334324][ T6095] ? rcu_is_watching+0x12/0xc0 [ 798.334341][ T6095] __do_fast_syscall_32+0xe7/0x950 [ 798.334357][ T6095] do_fast_syscall_32+0x32/0x70 [ 798.334369][ T6095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.334385][ T6095] RIP: 0023:0xf705ef7c [ 798.334397][ T6095] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 798.334408][ T6095] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 798.334421][ T6095] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 798.334428][ T6095] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.334436][ T6095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.334444][ T6095] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 798.334452][ T6095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.334468][ T6095] [ 798.697464][ T6103] fuse: fd is not a fuse device [ 799.411407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.938424][ T6150] overlayfs: failed to clone lowerpath [ 800.012300][ T6153] fuse: fd is not a fuse device [ 800.534007][ T6171] syz_tun: entered allmulticast mode [ 800.705113][ T6176] fuse: fd is not a fuse device [ 801.323107][ T6167] syz_tun: left allmulticast mode [ 801.436373][ T6186] syzkaller0: entered promiscuous mode [ 801.438347][ T6186] syzkaller0: entered allmulticast mode [ 801.723203][ T6193] overlayfs: failed to clone upperpath [ 802.395030][ T6214] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 802.465373][ T6214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.471704][ T6214] hsr0: left promiscuous mode [ 802.476333][ T6214] veth1_vlan: left promiscuous mode [ 802.480298][ T6214] veth0_vlan: left promiscuous mode [ 802.485782][ T6214] veth0_vlan: entered promiscuous mode [ 802.491751][ T6214] veth1_vlan: entered promiscuous mode [ 802.497904][ T6214] veth1_macvtap: left promiscuous mode [ 802.502306][ T6214] veth0_macvtap: left promiscuous mode [ 802.506116][ T6214] veth0_macvtap: entered promiscuous mode [ 802.510039][ T6214] veth1_macvtap: entered promiscuous mode [ 802.516052][ T6214] mac80211_hwsim hwsim14 »»»»»»: left promiscuous mode [ 802.524422][ T6214] mac80211_hwsim hwsim14 »»»»»»: entered promiscuous mode [ 802.528875][ T6214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.537268][ T6214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.550207][ T6214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.564409][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.572711][ T6214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 802.582865][ T6214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 802.600598][ T6214] 8021q: adding VLAN 0 to HW filter on device eth0 [ 802.603788][ T6214] 8021q: adding VLAN 0 to HW filter on device eth1 [ 802.606896][ T6214] 8021q: adding VLAN 0 to HW filter on device eth2 [ 802.610128][ T6214] 8021q: adding VLAN 0 to HW filter on device eth3 [ 802.627616][ T6214] 8021q: adding VLAN 0 to HW filter on device bond6 [ 802.637548][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 802.648432][ T6214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.670320][ T6214] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.678360][ T6214] 8021q: adding VLAN 0 to HW filter on device bond9 [ 802.702114][ T6214] 8021q: adding VLAN 0 to HW filter on device bond10 [ 802.737263][ T6214] bond11: left promiscuous mode [ 802.738878][ T6214] bridge8: left promiscuous mode [ 802.742171][ T6214] 8021q: adding VLAN 0 to HW filter on device bond11 [ 802.748728][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.752107][ T6214] bond12: left promiscuous mode [ 802.759935][ T6214] 8021q: adding VLAN 0 to HW filter on device bond14 [ 802.774374][T19594] lo speed is unknown, defaulting to 1000 [ 802.776361][T19594] sz1: Port: 1 Link ACTIVE [ 802.776943][ T10] hsr0: entered promiscuous mode [ 802.781876][T19594] lo speed is unknown, defaulting to 1000 [ 802.877697][ T201] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.877717][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13324'. [ 802.880342][ T201] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.891352][ T201] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 802.894060][ T201] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.896601][ T201] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.899098][ T201] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 802.914531][ T201] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.918024][ T201] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.921414][ T201] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 802.924501][ T201] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.927423][ T201] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.930214][ T201] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 802.942471][ T6226] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address [ 802.946662][ T6226] bond16: (slave vxcan1): Error -95 calling set_mac_address [ 802.994082][ T6232] macvlan4: entered promiscuous mode [ 802.998195][ T6232] macvlan4: entered allmulticast mode [ 803.010777][ T6232] bond16: (slave macvlan4): Error -98 calling set_mac_address [ 803.043631][ T201] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 803.063560][ T59] bond10: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 803.079221][ T59] bond10: (slave veth23): making interface the new active one [ 803.087762][ T59] bond10: active interface up! [ 803.406727][ T6238] veth1_vlan: left allmulticast mode [ 803.573160][ T6240] tipc: Enabling of bearer rejected, failed to enable media [ 803.587104][ T59] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.593706][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.597318][ T59] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 803.604281][ T59] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.609597][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.615510][ T59] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 803.626160][ T59] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.634079][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.639233][ T59] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 803.646505][ T59] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.649697][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.655261][ T59] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 803.734539][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.798138][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.860588][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.037671][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13341'. [ 804.110841][ T6287] fuse: fd is not a fuse device [ 804.154926][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13343'. [ 804.210131][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13343'. [ 804.926172][ T6337] libceph: connect (1)[c::]:6789 error -101 [ 804.931916][ T6337] libceph: mon0 (1)[c::]:6789 connect error [ 804.934319][ T6304] ceph: No mds server is up or the cluster is laggy [ 805.557342][ T6322] fuse: fd is not a fuse device [ 806.210619][ T6346] overlayfs: failed to clone upperpath [ 806.244123][ T6349] netlink: 'syz.4.13365': attribute type 11 has an invalid length. [ 806.289288][ T6349] erspan0: left promiscuous mode [ 806.305710][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.313452][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.337800][ T6349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 806.341683][ T6349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.348275][ T6349] veth1_vlan: left promiscuous mode [ 806.352619][ T6349] veth0_vlan: left promiscuous mode [ 806.357489][ T6349] veth0_vlan: entered promiscuous mode [ 806.362177][ T6349] veth1_vlan: entered promiscuous mode [ 806.369878][ T6349] veth0_macvtap: left promiscuous mode [ 806.374800][ T6349] veth0_macvtap: entered promiscuous mode [ 806.382968][ T6349] erspan0: entered promiscuous mode [ 806.388824][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.394988][ T6349] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 806.414393][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.417774][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.424211][ T59] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.429671][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.474620][ T5845] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 806.477685][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.482454][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.494553][ T59] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.502663][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.242362][ T201] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 807.321623][ T5845] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 807.465701][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13370'. [ 807.471812][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13370'. [ 807.503851][ T40] audit: type=1804 audit(1779446398.463:3886): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.13371" name="/newroot/384/bus/bus" dev="overlay" ino=2097 res=1 errno=0 [ 807.723669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.281389][ T1244] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 808.287076][ T1244] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 808.465648][ T6400] fuse: fd is not a fuse device [ 809.199858][ T6411] overlayfs: failed to clone upperpath [ 809.331326][ T6337] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 809.386176][ T6417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.389159][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 810.112302][ T5830] lo speed is unknown, defaulting to 1000 [ 810.115385][ T5830] sz1: Port: 1 Link DOWN [ 810.123143][ T59] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.131265][ T59] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.134331][ T59] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 810.137562][ T59] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.140645][ T59] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.144146][ T59] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 810.147572][ T6428] syzkaller1: entered promiscuous mode [ 810.150046][ T6428] syzkaller1: entered allmulticast mode [ 810.154152][ T5830] lo speed is unknown, defaulting to 1000 [ 810.156532][ T59] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.159967][ T59] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.163432][ T59] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 810.167588][ T59] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.171300][ T59] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.184263][ T59] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 810.228956][ T6446] dummy0: left promiscuous mode [ 810.265397][ T6446] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 810.301245][ T39] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 810.824110][ T6480] netlink: 'syz.4.13408': attribute type 12 has an invalid length. [ 810.957916][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13409'. [ 810.962535][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13409'. [ 811.131759][ T6491] fuse: fd is not a fuse device [ 811.162507][ T39] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 811.366875][ T6501] netlink: 'syz.4.13425': attribute type 10 has an invalid length. [ 811.380049][ T6501] team0: Port device dummy0 added [ 811.487073][ T6506] mac80211_hwsim hwsim21 wlan0 (unregistering): left promiscuous mode [ 811.494446][ T6506] bridge6: port 1(wlan0) entered disabled state [ 811.720261][ T6514] fuse: root generation should be zero [ 811.783893][ T6517] binder: 6515:6517 ioctl c0306201 80000080 returned -14 [ 811.790618][ T6517] binder: 6515:6517 ioctl c0306201 800003c0 returned -14 [ 812.139948][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.147651][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.157898][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.185682][ T6529] batadv_slave_1: left promiscuous mode [ 812.191844][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.195686][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.204072][ T6529] veth1_vlan: left promiscuous mode [ 812.206918][ T6529] veth0_vlan: left promiscuous mode [ 812.209173][ T6529] veth0_vlan: entered promiscuous mode [ 812.213738][ T6529] veth1_vlan: entered promiscuous mode [ 812.220572][ T6529] veth1_macvtap: left promiscuous mode [ 812.223683][ T6529] veth0_macvtap: left promiscuous mode [ 812.226415][ T6529] veth0_macvtap: entered promiscuous mode [ 812.232179][ T6529] veth1_macvtap: entered promiscuous mode [ 812.237470][ T6529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.240695][ T6529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.244641][ T6529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.247979][ T6529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 812.255598][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.267757][ T6529] batadv0: entered promiscuous mode [ 812.273073][ T6529] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 812.295364][ T6529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.339122][T32043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 812.365997][ T6535] netlink: 'syz.3.13429': attribute type 10 has an invalid length. [ 812.394396][ T1244] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.397431][ T1244] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.405156][ T1244] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.411922][ T1244] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.421355][T32043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 812.424669][ T1244] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 812.442916][ T1244] bond2: (slave veth5): making interface the new active one [ 812.453633][ T1244] bond2: active interface up! [ 812.486905][ T6544] fuse: fd is not a fuse device [ 812.494469][ T1244] bond3: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 812.506121][ T1244] bond3: (slave veth17): making interface the new active one [ 812.518425][ T1244] bond3: active interface up! [ 812.681526][ C3] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 812.761806][ T201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 813.482050][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.802467][ T201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 813.811351][ T201] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 814.400777][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13444'. [ 814.601737][ T5830] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 814.983900][ T6597] fuse: fd is not a fuse device [ 815.227377][ T6605] netlink: 'syz.6.13454': attribute type 10 has an invalid length. [ 815.232846][ T6605] ipvlan0: entered allmulticast mode [ 815.234595][ T6605] veth0_vlan: entered allmulticast mode [ 815.243324][ T6605] team0: Device ipvlan0 failed to register rx_handler [ 815.495617][ T6617] 0ªî{X¹¦: entered promiscuous mode [ 815.602788][ T6621] netlink: 'syz.4.13462': attribute type 2 has an invalid length. [ 815.606229][ T6621] netlink: 'syz.4.13462': attribute type 2 has an invalid length. [ 815.640215][ T6623] netlink: 'syz.3.13463': attribute type 4 has an invalid length. [ 817.087553][ T6662] fuse: fd is not a fuse device [ 817.337948][ T6669] fuse: fd is not a fuse device [ 817.433395][ T6673] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 817.461596][T32043] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 817.651466][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.767008][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13488'. [ 818.091487][T32043] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 819.581391][ T10] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 819.733207][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 819.745704][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 819.753945][ T10] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 819.757261][ T10] usb 11-1: can't read configurations, error -71 [ 820.927296][ T6775] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' already exists in 'ieee80211' [ 820.951188][ T40] audit: type=1804 audit(1779446411.913:3887): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13520" name="file0" dev="tmpfs" ino=17442 res=1 errno=0 [ 820.980296][ T6779] ref_ctr increment failed for inode: 0x4422 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888051870000 [ 820.993962][ T6778] uprobe: syz.3.13520:6778 failed to unregister, leaking uprobe [ 821.012941][ T6775] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 821.020059][ T6775] CPU: 3 UID: 0 PID: 6775 Comm: syz.1.13518 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.020086][ T6775] Tainted: [L]=SOFTLOCKUP [ 821.020092][ T6775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 821.020103][ T6775] Call Trace: [ 821.020110][ T6775] [ 821.020118][ T6775] dump_stack_lvl+0x100/0x190 [ 821.020141][ T6775] sysfs_warn_dup.cold+0x1c/0x28 [ 821.020165][ T6775] sysfs_do_create_link_sd+0x113/0x140 [ 821.020186][ T6775] sysfs_create_link+0x61/0xc0 [ 821.020202][ T6775] device_add+0x675/0x1950 [ 821.020225][ T6775] ? __pfx_device_add+0x10/0x10 [ 821.020245][ T6775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 821.020268][ T6775] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 821.020292][ T6775] wiphy_register+0x1edd/0x2d90 [ 821.020313][ T6775] ? __rtnl_unlock+0xb9/0xf0 [ 821.020337][ T6775] ? __pfx_wiphy_register+0x10/0x10 [ 821.020356][ T6775] ? __asan_memset+0x23/0x50 [ 821.020377][ T6775] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 821.020399][ T6775] ieee80211_register_hw+0x3055/0x4570 [ 821.020422][ T6775] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 821.020437][ T6775] ? __pfx___debug_object_init+0x10/0x10 [ 821.020463][ T6775] ? find_held_lock+0x2b/0x80 [ 821.020482][ T6775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 821.020503][ T6775] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 821.020524][ T6775] ? __hrtimer_setup+0x208/0x330 [ 821.020541][ T6775] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 821.020570][ T6775] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 821.020588][ T6775] ? __asan_memcpy+0x3c/0x60 [ 821.020612][ T6775] hwsim_new_radio_nl+0xc5f/0x1370 [ 821.020628][ T6775] ? rcu_is_watching+0x12/0xc0 [ 821.020645][ T6775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 821.020666][ T6775] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 821.020682][ T6775] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 821.020701][ T6775] genl_family_rcv_msg_doit+0x214/0x300 [ 821.020717][ T6775] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 821.020731][ T6775] ? genl_get_cmd+0x3e7/0x760 [ 821.020757][ T6775] ? bpf_lsm_capable+0x9/0x10 [ 821.020772][ T6775] ? security_capable+0x80/0x260 [ 821.020794][ T6775] ? ns_capable+0xd2/0xf0 [ 821.020857][ T6775] genl_rcv_msg+0x560/0x800 [ 821.020887][ T6775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.020904][ T6775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 821.020929][ T6775] netlink_rcv_skb+0x159/0x420 [ 821.020952][ T6775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 821.020982][ T6775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 821.021015][ T6775] ? netlink_deliver_tap+0x1ae/0xcc0 [ 821.021038][ T6775] genl_rcv+0x28/0x40 [ 821.021050][ T6775] netlink_unicast+0x585/0x850 [ 821.021073][ T6775] ? __pfx_netlink_unicast+0x10/0x10 [ 821.021098][ T6775] netlink_sendmsg+0x8b0/0xda0 [ 821.021120][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.021143][ T6775] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 821.021170][ T6775] ____sys_sendmsg+0x9e1/0xb70 [ 821.021190][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 821.021212][ T6775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.021230][ T6775] ? __pfx___futex_wait+0x10/0x10 [ 821.021251][ T6775] ? __pfx_futex_wake_mark+0x10/0x10 [ 821.021272][ T6775] ___sys_sendmsg+0x190/0x1e0 [ 821.021295][ T6775] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.021324][ T6775] ? find_held_lock+0x2b/0x80 [ 821.021355][ T6775] __sys_sendmsg+0x170/0x220 [ 821.021373][ T6775] ? __pfx___sys_sendmsg+0x10/0x10 [ 821.021397][ T6775] ? rcu_is_watching+0x12/0xc0 [ 821.021416][ T6775] __do_fast_syscall_32+0xe7/0x950 [ 821.021432][ T6775] do_fast_syscall_32+0x32/0x70 [ 821.021446][ T6775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.021464][ T6775] RIP: 0023:0xf7f82f7c [ 821.021478][ T6775] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 821.021492][ T6775] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 821.021507][ T6775] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 821.021516][ T6775] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.021524][ T6775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.021532][ T6775] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 821.021539][ T6775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.021557][ T6775] [ 821.605863][ T6801] fuse: fd is not a fuse device [ 821.811183][ C3] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 821.811342][T17487] Bluetooth: hci3: command 0x0406 tx timeout [ 822.360932][ T6825] netlink: 'syz.1.13536': attribute type 3 has an invalid length. [ 822.366300][ T6825] netlink: 'syz.1.13536': attribute type 3 has an invalid length. [ 822.523594][ T6830] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.13537'. [ 822.855911][ T6834] fuse: fd is not a fuse device [ 822.991782][ T10] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 823.032373][ T6845] fuse: fd is not a fuse device [ 823.073140][ T6848] overlayfs: failed to clone upperpath [ 823.141089][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 823.147152][ T10] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 823.163157][ T10] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 823.170389][ T10] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.175767][ T10] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 823.184022][ T10] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 823.188159][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.191547][ T10] usb 11-1: Product: syz [ 823.193035][ T10] usb 11-1: Manufacturer: syz [ 823.194829][ T10] usb 11-1: SerialNumber: syz [ 823.208879][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 823.212771][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input97 [ 823.336819][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13549'. [ 823.342583][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13549'. [ 823.357336][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13549'. [ 823.431264][ T10] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 823.434483][ T10] (id 0x00) [ 823.481311][ T10] rc_core: IR keymap rc-imon-pad not found [ 823.483300][ T10] Registered IR keymap rc-empty [ 823.485591][ T10] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 823.489001][ T10] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 823.571028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 823.606351][ T6872] netlink: 'syz.3.13555': attribute type 4 has an invalid length. [ 823.611024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 823.621040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 823.684255][ T6874] fuse: fd is not a fuse device [ 823.691974][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 823.696625][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input98 [ 823.711256][ T6876] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2449498425/2449498426 [ 823.719006][ T6876] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2449498425/2449498426 [ 823.721981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.725006][ T10] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:8> initialized [ 823.753080][ T6878] fuse: fd is not a fuse device [ 823.881723][T16987] Bluetooth: hci3: command 0x0406 tx timeout [ 824.199426][ T6904] fuse: fd is not a fuse device [ 824.290560][ T6905] imon:send_packet: task interrupted [ 824.293023][ T6905] imon:send_packet: packet tx failed (-512) [ 824.297740][ T6905] imon:vfd_write: send packet #1 failed [ 824.302188][ T6905] imon:send_packet: task interrupted [ 824.304750][ T6905] imon:send_packet: packet tx failed (-512) [ 824.307325][ T6905] imon:vfd_write: send packet #0 failed [ 824.312352][ T6905] imon:send_packet: task interrupted [ 824.315557][ T6905] imon:send_packet: packet tx failed (-512) [ 824.318268][ T6905] imon:vfd_write: send packet #0 failed [ 824.325405][ T6905] imon:send_packet: task interrupted [ 824.335350][ T6905] imon:send_packet: packet tx failed (-512) [ 824.338047][ T6905] imon:vfd_write: send packet #0 failed [ 824.342108][ T6905] imon:send_packet: task interrupted [ 824.344481][ T6905] imon:send_packet: packet tx failed (-512) [ 824.347047][ T6905] imon:vfd_write: send packet #0 failed [ 824.349878][ T6905] imon:send_packet: task interrupted [ 824.352912][ T6905] imon:send_packet: packet tx failed (-512) [ 824.358876][ T6905] imon:vfd_write: send packet #0 failed [ 824.364494][ T6905] imon:send_packet: task interrupted [ 824.367957][ T6905] imon:send_packet: packet tx failed (-512) [ 824.370775][ T6905] imon:vfd_write: send packet #0 failed [ 824.376426][ T6905] imon:send_packet: packet tx failed (-32) [ 824.379091][ T6905] imon:vfd_write: send packet #0 failed [ 824.418918][T32043] usb 11-1: USB disconnect, device number 8 [ 825.118615][ T6936] overlayfs: failed to clone upperpath [ 825.331797][ T6337] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 825.503161][ T6337] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.507371][ T6337] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 825.519864][ T6337] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.528954][ T6337] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.538861][ T6337] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 825.547721][ T6337] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.557009][ T6337] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.562506][ T6337] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.571229][ T6337] usb 11-1: Product: syz [ 825.572679][ T6337] usb 11-1: Manufacturer: syz [ 825.578836][ T6934] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 825.584464][ T6337] cdc_wdm 11-1:1.0: skipping garbage [ 825.588857][ T6337] cdc_wdm 11-1:1.0: skipping garbage [ 825.591691][ T6337] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 825.594026][ T6337] cdc_wdm 11-1:1.0: Unknown control protocol [ 825.641317][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 825.643053][ T6953] overlayfs: failed to clone upperpath [ 825.795895][ C3] wdm_int_callback: 6 callbacks suppressed [ 825.795919][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.801815][ C3] wdm_int_callback: 6 callbacks suppressed [ 825.801841][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.807740][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.810667][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.813821][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.816733][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.819746][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.822581][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.825129][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.827926][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.830790][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.833905][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.837238][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.840069][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.842992][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.845913][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.848799][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.851784][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 825.854339][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 825.856532][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 826.170956][ T6337] usb 11-1: USB disconnect, device number 9 [ 826.171046][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 826.794289][ T6984] fuse: fd is not a fuse device [ 826.808722][ T6986] fuse: fd is not a fuse device [ 827.285189][ T7014] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 827.287823][ T7014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.290717][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13601'. [ 828.366303][ T7049] 9p: Bad value for 'rfdno' [ 828.849827][ T201] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.856550][ T201] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.860175][ T201] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.865851][ T201] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.869876][ T201] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.874547][ T201] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.878345][ T201] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.882076][ T201] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.023055][ T7088] fuse: fd is not a fuse device [ 829.159736][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13626'. [ 829.630793][ T7104] fuse: fd is not a fuse device [ 830.150230][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13637'. [ 830.914467][ T7147] overlayfs: failed to clone upperpath [ 831.120886][ T7153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 831.142513][ T7153] hsr0: left promiscuous mode [ 831.147397][ T7153] veth1_vlan: left promiscuous mode [ 831.151535][ T7153] veth0_vlan: left promiscuous mode [ 831.159267][ T7153] veth0_vlan: entered promiscuous mode [ 831.165305][ T7153] veth1_vlan: entered promiscuous mode [ 831.174264][ T7153] veth1_macvtap: left promiscuous mode [ 831.178046][ T7153] veth0_macvtap: left promiscuous mode [ 831.182162][ T7153] veth0_macvtap: entered promiscuous mode [ 831.188806][ T7153] veth1_macvtap: entered promiscuous mode [ 831.201887][ T7153] mac80211_hwsim hwsim14 »»»»»»: left promiscuous mode [ 831.209306][ T7153] mac80211_hwsim hwsim14 »»»»»»: entered promiscuous mode [ 831.214286][ T7153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.219812][ T7153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.234405][ T7153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.244552][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.250892][ T7153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 831.259030][ T7153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 831.278370][ T7153] 8021q: adding VLAN 0 to HW filter on device eth0 [ 831.282716][ T7153] 8021q: adding VLAN 0 to HW filter on device eth1 [ 831.286910][ T7153] 8021q: adding VLAN 0 to HW filter on device eth2 [ 831.290240][ T7153] 8021q: adding VLAN 0 to HW filter on device eth3 [ 831.322272][ T7153] 8021q: adding VLAN 0 to HW filter on device bond6 [ 831.327312][ T7169] netlink: 'syz.6.13649': attribute type 39 has an invalid length. [ 831.334481][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 831.348636][ T7153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 831.362686][ T7153] 8021q: adding VLAN 0 to HW filter on device bond8 [ 831.375021][ T7153] 8021q: adding VLAN 0 to HW filter on device bond9 [ 831.407891][ T7153] 8021q: adding VLAN 0 to HW filter on device bond10 [ 831.426370][ T7153] 8021q: adding VLAN 0 to HW filter on device bond11 [ 831.433021][ T7153] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.436394][ T7153] 8021q: adding VLAN 0 to HW filter on device bond12 [ 831.439975][ T7153] 8021q: adding VLAN 0 to HW filter on device bond13 [ 831.446808][ T7153] 8021q: adding VLAN 0 to HW filter on device bond14 [ 831.455755][ T7153] 8021q: adding VLAN 0 to HW filter on device bond15 [ 831.464556][ T7153] 8021q: adding VLAN 0 to HW filter on device bond16 [ 831.469817][T32043] lo speed is unknown, defaulting to 1000 [ 831.474414][T32043] sz1: Port: 1 Link ACTIVE [ 831.476180][ T29] hsr0: entered promiscuous mode [ 831.535641][T30949] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.538406][T30949] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.540940][T30949] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.565189][T32043] lo speed is unknown, defaulting to 1000 [ 831.575232][T30949] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.584562][T30949] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.596441][T30949] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.601268][T30949] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.604586][T30949] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.608308][T30949] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.618818][ T7176] bond9: entered allmulticast mode [ 831.620582][ T7176] ip6gre2: entered allmulticast mode [ 831.636815][T30949] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.645327][T30949] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.649118][T30949] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.659290][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13652'. [ 831.700505][ T7175] bond9: left allmulticast mode [ 831.702316][ T7175] ip6gre2: left allmulticast mode [ 831.885260][ T7183] overlayfs: failed to clone upperpath [ 833.497751][ T7234] fuse: fd is not a fuse device [ 833.512672][ T7239] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13673'. [ 833.670473][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13675'. [ 833.677722][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13675'. [ 833.735933][ T7250] fuse: fd is not a fuse device [ 833.737921][ T7251] overlayfs: failed to clone upperpath [ 833.807220][ T7254] fuse: fd is not a fuse device [ 833.855774][ T7257] fuse: fd is not a fuse device [ 833.924660][ T7264] fuse: fd is not a fuse device [ 833.994733][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13686'. [ 834.106174][ T7284] fuse: fd is not a fuse device [ 834.413265][ T7311] fuse: fd is not a fuse device [ 834.803267][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13705'. [ 835.068902][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13711'. [ 836.535187][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13727'. [ 836.574601][ T7399] fuse: fd is not a fuse device [ 836.747189][ T7405] fuse: fd is not a fuse device [ 836.908295][ T7409] netlink: 'syz.1.13733': attribute type 32 has an invalid length. [ 836.913784][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13733'. [ 836.922164][ T7409] netlink: 'syz.1.13733': attribute type 32 has an invalid length. [ 837.043156][ T7419] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 837.478296][ T7435] overlayfs: failed to clone upperpath [ 837.920028][ T7447] netlink: 'syz.6.13748': attribute type 1 has an invalid length. [ 837.947521][ T7447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.975172][ T7447] bond5: (slave geneve2): making interface the new active one [ 837.984905][ T7447] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 838.181645][ T40] audit: type=1804 audit(1779446429.153:3888): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13750" name="file0" dev="tmpfs" ino=16290 res=1 errno=0 [ 838.301205][ T10] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 838.317383][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13753'. [ 838.463439][ T10] usb 11-1: config index 0 descriptor too short (expected 14098, got 18) [ 838.467718][ T10] usb 11-1: config 49 has an invalid descriptor of length 10, skipping remainder of the config [ 838.473833][ T10] usb 11-1: config 49 has 0 interfaces, different from the descriptor's value: 10 [ 838.478305][ T10] usb 11-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 838.483450][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.718914][ T10] usb 11-1: string descriptor 0 read error: -71 [ 838.724531][ T10] usb 11-1: USB disconnect, device number 10 [ 839.326670][ T7478] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 839.390787][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13761'. [ 839.504456][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13764'. [ 841.651305][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 841.686649][ T46] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.693583][ T46] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.700114][ T46] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.704362][ T46] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.707683][ T46] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.714128][ T46] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.719527][ T46] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.726104][ T46] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.968684][ T40] audit: type=1804 audit(1779446432.933:3889): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.13775" name="/newroot/455/file0" dev="tmpfs" ino=2476 res=1 errno=0 [ 842.046645][ T7529] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 842.047012][T17487] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 842.049340][ T7529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.053117][T17487] CPU: 3 UID: 0 PID: 17487 Comm: kworker/u33:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.053141][T17487] Tainted: [L]=SOFTLOCKUP [ 842.053146][T17487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 842.053157][T17487] Workqueue: hci3 hci_rx_work [ 842.053188][T17487] Call Trace: [ 842.053193][T17487] [ 842.053198][T17487] dump_stack_lvl+0x100/0x190 [ 842.053220][T17487] sysfs_warn_dup.cold+0x1c/0x28 [ 842.053240][T17487] sysfs_create_dir_ns+0x24b/0x2b0 [ 842.053260][T17487] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 842.053273][T17487] ? find_held_lock+0x2b/0x80 [ 842.053292][T17487] ? kobject_add_internal+0x25f/0x930 [ 842.053309][T17487] ? kobject_add_internal+0x25f/0x930 [ 842.053325][T17487] ? do_raw_spin_unlock+0x145/0x1e0 [ 842.053341][T17487] kobject_add_internal+0x2c8/0x930 [ 842.053358][T17487] kobject_add+0x16a/0x1e0 [ 842.053372][T17487] ? __pfx_kobject_add+0x10/0x10 [ 842.053386][T17487] ? class_to_subsys+0x10f/0x150 [ 842.053410][T17487] ? kobject_put+0xb9/0x640 [ 842.053422][T17487] ? _raw_spin_unlock+0x28/0x50 [ 842.053442][T17487] device_add+0x294/0x1950 [ 842.053459][T17487] ? __pfx_dev_set_name+0x10/0x10 [ 842.053478][T17487] ? __pfx_device_add+0x10/0x10 [ 842.053493][T17487] ? mgmt_send_event_skb+0x2fb/0x460 [ 842.053515][T17487] hci_conn_add_sysfs+0x1a3/0x260 [ 842.053529][T17487] le_conn_complete_evt+0x11eb/0x1f60 [ 842.053549][T17487] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 842.053569][T17487] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 842.053588][T17487] ? skb_pull_data+0x15f/0x1e0 [ 842.053610][T17487] hci_le_meta_evt+0x34a/0x5f0 [ 842.053629][T17487] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 842.053648][T17487] hci_event_packet+0x51c/0xcd0 [ 842.053664][T17487] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 842.053682][T17487] ? __pfx_hci_event_packet+0x10/0x10 [ 842.053700][T17487] ? kcov_remote_start+0x374/0x660 [ 842.053719][T17487] ? lockdep_hardirqs_on+0x78/0x100 [ 842.053740][T17487] hci_rx_work+0x451/0xfc0 [ 842.053759][T17487] process_one_work+0xa0e/0x1980 [ 842.053779][T17487] ? __pfx_process_one_work+0x10/0x10 [ 842.053796][T17487] ? __pfx_hci_rx_work+0x10/0x10 [ 842.053813][T17487] worker_thread+0x5ef/0xe50 [ 842.053831][T17487] ? kthread+0x13a/0x450 [ 842.053840][T17487] ? __pfx_worker_thread+0x10/0x10 [ 842.053870][T17487] kthread+0x370/0x450 [ 842.053883][T17487] ? __pfx_kthread+0x10/0x10 [ 842.053895][T17487] ret_from_fork+0x72b/0xd50 [ 842.053912][T17487] ? __pfx_ret_from_fork+0x10/0x10 [ 842.053927][T17487] ? __switch_to+0x800/0x1100 [ 842.053947][T17487] ? __pfx_kthread+0x10/0x10 [ 842.053959][T17487] ret_from_fork_asm+0x1a/0x30 [ 842.053985][T17487] [ 842.054019][T17487] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 842.169799][T17487] Bluetooth: hci3: failed to register connection device [ 842.751205][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13791'. [ 843.021570][ T59] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.025716][ T59] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.034853][ T59] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.041963][ T59] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.513646][ T7572] fuse: fd is not a fuse device [ 843.574232][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13803'. [ 843.578647][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13803'. [ 843.583811][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13803'. [ 843.587647][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13803'. [ 843.591738][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13803'. [ 843.903382][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13798'. [ 843.935841][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13800'. [ 843.943066][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13800'. [ 844.040890][ T5830] lo speed is unknown, defaulting to 1000 [ 844.042019][ T59] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.043584][ T5830] sz1: Port: 1 Link DOWN [ 844.053999][ T59] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.057445][ T59] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 844.060615][ T59] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.063976][ T59] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.067331][ T59] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 844.097880][ T5830] lo speed is unknown, defaulting to 1000 [ 844.100454][ T59] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.107949][ T59] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.110866][ T59] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 844.114570][ T59] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.117709][ T59] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.120466][ T59] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.065121][ T7626] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 845.067765][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.986870][ T40] audit: type=1804 audit(1779446436.953:3890): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13824" name="file0" dev="tmpfs" ino=13776 res=1 errno=0 [ 846.933692][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13818'. [ 846.986112][ T7651] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 846.988553][ T7651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.994318][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.822978][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13837'. [ 848.037043][ T7701] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 848.039425][ T7701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.057929][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13843'. [ 848.215185][T17487] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 848.820358][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13852'. [ 848.859663][ T7725] 8021q: adding VLAN 0 to HW filter on device bond18 [ 848.879867][ T7725] bond18 (unregistering): Released all slaves [ 848.994360][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13853'. [ 849.230607][ T7734] fuse: fd is not a fuse device [ 851.735952][ T7799] syzkaller0: entered promiscuous mode [ 851.738485][ T7799] syzkaller0: entered allmulticast mode [ 851.934463][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13885'. [ 851.969198][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13885'. [ 854.114789][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13902'. [ 854.141665][ T7847] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 854.286684][ T7871] fuse: fd is not a fuse device [ 854.299256][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13910'. [ 854.307052][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13910'. [ 854.465202][ T7885] ref_ctr increment failed for inode: 0x405c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888020f01880 [ 854.466350][ T40] audit: type=1804 audit(1779446445.433:3891): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13918" name="file0" dev="tmpfs" ino=16476 res=1 errno=0 [ 854.492259][ T7884] uprobe: syz.1.13918:7884 failed to unregister, leaking uprobe [ 854.854997][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13925'. [ 856.031258][ T7944] overlayfs: failed to clone lowerpath [ 856.491330][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13949'. [ 856.943873][ T7987] fuse: fd is not a fuse device [ 856.994407][ T7994] tipc: Failed to remove unknown binding: 66,0,0/2886997039:90867613/90867615 [ 856.997372][ T7994] tipc: Failed to remove unknown binding: 66,0,0/2886997039:90867613/90867614 [ 857.002844][ T7994] tipc: Failed to remove unknown binding: 66,0,0/2886997039:90867613/90867615 [ 857.008199][ T7994] tipc: Failed to remove unknown binding: 66,0,0/2886997039:90867613/90867614 [ 857.259649][ T8001] netlink: 'syz.4.13958': attribute type 10 has an invalid length. [ 857.263085][ T8001] ipvlan0: entered allmulticast mode [ 857.265679][ T8001] veth0_vlan: entered allmulticast mode [ 857.271372][ T8001] team0: Device ipvlan0 failed to register rx_handler [ 858.410928][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13965'. [ 858.416360][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13965'. [ 858.476126][ T8024] netlink: 'syz.3.13967': attribute type 13 has an invalid length. [ 858.546556][ T8024] 9p: Bad value for 'wfdno' [ 858.753217][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13969'. [ 858.909328][ T8035] fuse: fd is not a fuse device [ 859.664003][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13973'. [ 861.574175][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13981'. [ 861.716391][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13982'. [ 861.722854][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13982'. [ 862.025154][ T8091] fuse: fd is not a fuse device [ 862.181107][ T8094] bond1: (slave ip6gretap2): making interface the new active one [ 862.186189][ T8094] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 862.577220][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13992'. [ 863.599111][ T8116] fuse: fd is not a fuse device [ 864.179188][ T8125] mac80211_hwsim hwsim43 syzkaller0: Caught tx_queue_len zero misconfig [ 866.025283][ T8136] fuse: fd is not a fuse device [ 870.340750][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14017'. [ 871.824157][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14024'. [ 872.936516][ T8265] fuse: fd is not a fuse device [ 873.071403][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14045'. [ 873.807050][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14060'. [ 873.849791][ T8324] fuse: fd is not a fuse device [ 873.929575][ T8332] fuse: fd is not a fuse device [ 874.169099][ T8346] fuse: fd is not a fuse device [ 874.316443][ T8356] fuse: fd is not a fuse device [ 874.537141][ T40] audit: type=1326 audit(1779446465.503:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.14075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef7c code=0x7fc00000 [ 874.546500][ T40] audit: type=1326 audit(1779446465.503:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.14075" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706ef7c code=0x7fc00000 [ 874.905739][ T8383] fuse: fd is not a fuse device [ 874.923869][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.963582][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14082'. [ 875.208778][ T40] audit: type=1326 audit(1779446466.173:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.14075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef7c code=0x7fc00000 [ 875.246539][ T8412] netlink: 'syz.6.14085': attribute type 4 has an invalid length. [ 875.260743][ T8412] netlink: 'syz.6.14085': attribute type 4 has an invalid length. [ 875.413141][ T8430] netlink: 'syz.6.14092': attribute type 1 has an invalid length. [ 875.439432][ T8430] 8021q: adding VLAN 0 to HW filter on device bond6 [ 875.463364][ T8430] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 875.469745][ T8430] bond6: entered allmulticast mode [ 875.487565][ T8430] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 875.553715][ T8440] gretap2: entered promiscuous mode [ 875.556093][ T8440] batman_adv: batadv0: Adding interface: gretap2 [ 875.558177][ T8440] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 875.567682][ T8440] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 876.390934][ T40] audit: type=1326 audit(1779446467.353:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8451 comm="syz.1.14099" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82f7c code=0x0 [ 876.776248][ T8471] lo speed is unknown, defaulting to 1000 [ 877.361449][ T40] audit: type=1804 audit(1779446468.323:3896): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14110" name="file0" dev="ramfs" ino=171734 res=1 errno=0 [ 877.513149][ T8493] netlink: 'syz.3.14112': attribute type 4 has an invalid length. [ 878.343600][ T8514] overlayfs: failed to clone upperpath [ 879.610853][ T8529] netlink: 'syz.3.14127': attribute type 11 has an invalid length. [ 879.697863][ T8529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 879.704781][ T8529] hsr0: left promiscuous mode [ 879.709041][ T8529] veth1_vlan: left promiscuous mode [ 879.713300][ T8529] veth0_vlan: left promiscuous mode [ 879.716862][ T8529] veth0_vlan: entered promiscuous mode [ 879.722959][ T8529] veth1_vlan: entered promiscuous mode [ 879.728757][ T8529] veth1_macvtap: left promiscuous mode [ 879.732783][ T8529] veth0_macvtap: left promiscuous mode [ 879.737045][ T8529] veth0_macvtap: entered promiscuous mode [ 879.740799][ T8529] veth1_macvtap: entered promiscuous mode [ 879.750212][ T8529] mac80211_hwsim hwsim14 »»»»»»: left promiscuous mode [ 879.757175][ T8529] mac80211_hwsim hwsim14 »»»»»»: entered promiscuous mode [ 879.760693][ T8529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 879.765811][ T8529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 879.778302][ T8529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.790653][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.799357][ T8529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 879.809683][ T8529] 8021q: adding VLAN 0 to HW filter on device bond5 [ 879.837896][ T8529] 8021q: adding VLAN 0 to HW filter on device eth0 [ 879.842893][ T8529] 8021q: adding VLAN 0 to HW filter on device eth1 [ 879.847472][ T8529] 8021q: adding VLAN 0 to HW filter on device eth2 [ 879.851502][ T8529] 8021q: adding VLAN 0 to HW filter on device eth3 [ 879.877951][ T8529] 8021q: adding VLAN 0 to HW filter on device bond6 [ 879.883562][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 879.892960][ T8529] 8021q: adding VLAN 0 to HW filter on device bond7 [ 879.903345][ T8529] 8021q: adding VLAN 0 to HW filter on device bond8 [ 879.910209][ T8529] 8021q: adding VLAN 0 to HW filter on device bond9 [ 879.934237][ T8529] 8021q: adding VLAN 0 to HW filter on device bond10 [ 879.946205][ T8529] 8021q: adding VLAN 0 to HW filter on device bond11 [ 879.953339][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.957368][ T8529] 8021q: adding VLAN 0 to HW filter on device bond12 [ 879.962051][ T8529] 8021q: adding VLAN 0 to HW filter on device bond13 [ 879.966996][ T8529] 8021q: adding VLAN 0 to HW filter on device bond14 [ 879.977255][ T8529] 8021q: adding VLAN 0 to HW filter on device bond15 [ 879.982317][ T8529] 8021q: adding VLAN 0 to HW filter on device bond16 [ 879.988402][ T8529] 8021q: adding VLAN 0 to HW filter on device bond17 [ 879.992447][ T8529] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 879.997530][ T4085] lo speed is unknown, defaulting to 1000 [ 880.007235][ T4085] sz1: Port: 1 Link ACTIVE [ 880.035628][ T53] hsr0: entered promiscuous mode [ 880.047017][ T201] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.050447][ T201] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.055297][ T201] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.059807][ T201] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.081219][ T201] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.091639][ T201] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.099653][ T4085] lo speed is unknown, defaulting to 1000 [ 880.142846][ T201] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.146055][ T201] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.148820][ T201] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.160633][ T201] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.164698][ T201] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.167444][ T201] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.226987][ T8549] ipvlan0: left allmulticast mode [ 880.228896][ T8549] veth0_vlan: left allmulticast mode [ 880.233735][ T8549] bridge1: left promiscuous mode [ 880.235384][ T8549] bridge1: left allmulticast mode [ 880.237382][ T8549] macvtap1: left promiscuous mode [ 880.239795][ T8549] macvtap1: left allmulticast mode [ 880.243631][ T8549] ip6tnl2: left allmulticast mode [ 880.250530][ T8549] bond6: left promiscuous mode [ 880.252765][ T8549] bridge4: left promiscuous mode [ 880.256148][ T8549] bond7: left promiscuous mode [ 880.258037][ T8549] bond7: left allmulticast mode [ 880.261255][ T8549] bond10: left promiscuous mode [ 880.264324][ T8549] vlan3: left allmulticast mode [ 880.266456][ T8549] bond12: left allmulticast mode [ 880.268473][ T8549] geneve3: left allmulticast mode [ 880.403840][ T8554] syzkaller0: entered promiscuous mode [ 880.405954][ T8554] syzkaller0: entered allmulticast mode [ 880.409033][ T8554] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 881.053089][ T8575] netlink: 'syz.6.14141': attribute type 11 has an invalid length. [ 881.076240][ T40] audit: type=1804 audit(1779446472.043:3897): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14151" name="bus" dev="ramfs" ino=168849 res=1 errno=0 [ 881.084689][ T40] audit: type=1804 audit(1779446472.043:3898): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.14151" name="bus" dev="ramfs" ino=168849 res=1 errno=0 [ 881.103451][ T8575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.107619][ T8575] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.124640][ T8575] batadv0: left promiscuous mode [ 881.130838][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.193163][ T8575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 881.196617][ T8575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 881.209362][ T8575] veth1_vlan: left promiscuous mode [ 881.212633][ T8575] veth0_vlan: left promiscuous mode [ 881.215389][ T8575] veth0_vlan: entered promiscuous mode [ 881.219535][ T8575] veth1_vlan: entered promiscuous mode [ 881.235658][ T8575] veth1_macvtap: left promiscuous mode [ 881.238175][ T8575] veth0_macvtap: left promiscuous mode [ 881.240874][ T8575] veth0_macvtap: entered promiscuous mode [ 881.249173][ T8575] veth1_macvtap: entered promiscuous mode [ 881.273795][ T8575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.289451][ T8575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 881.317234][ T8575] batadv0: entered promiscuous mode [ 881.323090][ T8575] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 881.332487][ T8575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 881.339177][ T8575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 881.356569][ T8575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 881.360214][ T8575] geneve2: entered promiscuous mode [ 881.369542][ T8575] 8021q: adding VLAN 0 to HW filter on device eth0 [ 881.373585][ T8575] 8021q: adding VLAN 0 to HW filter on device eth1 [ 881.377299][ T8575] 8021q: adding VLAN 0 to HW filter on device eth2 [ 881.380819][ T8575] 8021q: adding VLAN 0 to HW filter on device eth3 [ 881.391066][ T8575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 881.395204][ T8575] batman_adv: batadv0: Interface activated: gretap2 [ 881.431438][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 881.472562][ T59] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.476156][ T59] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.617069][ T59] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.620697][ T59] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.630386][ T8579] lo speed is unknown, defaulting to 1000 [ 881.661326][T21218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 881.721364][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 881.801277][ T1244] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 881.818026][ T8579] syz.3.14142: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 881.820182][ T1244] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 881.829615][ T8579] CPU: 2 UID: 0 PID: 8579 Comm: syz.3.14142 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.829640][ T8579] Tainted: [L]=SOFTLOCKUP [ 881.829645][ T8579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 881.829654][ T8579] Call Trace: [ 881.829660][ T8579] [ 881.829667][ T8579] dump_stack_lvl+0x100/0x190 [ 881.829691][ T8579] warn_alloc.cold+0x95/0x1c1 [ 881.829708][ T8579] ? __pfx_warn_alloc+0x10/0x10 [ 881.829742][ T8579] ? __pfx___might_resched+0x10/0x10 [ 881.829764][ T8579] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 881.829795][ T8579] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 881.829812][ T8579] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 881.829835][ T8579] ? kernfs_put+0x3f/0x60 [ 881.829851][ T8579] ? internal_create_group+0x915/0xf40 [ 881.829877][ T8579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 881.829900][ T8579] ? policy_nodemask+0xed/0x4f0 [ 881.829919][ T8579] alloc_pages_mpol+0x1fb/0x540 [ 881.829943][ T8579] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 881.829964][ T8579] ? ib_setup_port_attrs+0x2b4/0x600 [ 881.829982][ T8579] ___kmalloc_large_node+0xe5/0x120 [ 881.830002][ T8579] __kmalloc_large_node_noprof+0x1c/0x70 [ 881.830022][ T8579] __kmalloc_noprof+0x5be/0x850 [ 881.830034][ T8579] ? rdma_port_get_link_layer+0x57/0xe0 [ 881.830054][ T8579] ib_setup_port_attrs+0x2b4/0x600 [ 881.830070][ T8579] ? kobject_put+0xb9/0x640 [ 881.830089][ T8579] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 881.830109][ T8579] ? __init_waitqueue_head+0xca/0x150 [ 881.830130][ T8579] add_one_compat_dev+0x5b3/0x820 [ 881.830152][ T8579] rdma_dev_init_net+0x30a/0x590 [ 881.830171][ T8579] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 881.830190][ T8579] ? __kmalloc_noprof+0x320/0x850 [ 881.830205][ T8579] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 881.830224][ T8579] ops_init+0x1e2/0x5f0 [ 881.830246][ T8579] setup_net+0x118/0x3a0 [ 881.830264][ T8579] ? __pfx_setup_net+0x10/0x10 [ 881.830281][ T8579] ? mutex_init_lockdep+0xf1/0x120 [ 881.830299][ T8579] copy_net_ns+0x46f/0x7c0 [ 881.830320][ T8579] create_new_namespaces+0x3ea/0xac0 [ 881.830343][ T8579] unshare_nsproxy_namespaces+0xf2/0x220 [ 881.830363][ T8579] ksys_unshare+0x438/0xab0 [ 881.830387][ T8579] ? __pfx_ksys_unshare+0x10/0x10 [ 881.830413][ T8579] __ia32_sys_unshare+0x30/0x40 [ 881.830432][ T8579] __do_fast_syscall_32+0xe7/0x950 [ 881.830446][ T8579] ? lockdep_hardirqs_on+0x78/0x100 [ 881.830467][ T8579] do_fast_syscall_32+0x32/0x70 [ 881.830479][ T8579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.830497][ T8579] RIP: 0023:0xf705ef7c [ 881.830508][ T8579] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 881.830521][ T8579] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 881.830537][ T8579] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 881.830545][ T8579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.830552][ T8579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.830560][ T8579] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 881.830567][ T8579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.830603][ T8579] [ 881.830609][ T8579] Mem-Info: [ 881.832641][ T8600] netlink: 'syz.4.14146': attribute type 4 has an invalid length. [ 881.835036][ T8579] active_anon:10922 inactive_anon:8515 isolated_anon:0 [ 881.835036][ T8579] active_file:4513 inactive_file:9155 isolated_file:0 [ 881.835036][ T8579] unevictable:9962 dirty:429 writeback:0 [ 881.835036][ T8579] slab_reclaimable:7055 slab_unreclaimable:79637 [ 881.835036][ T8579] mapped:24707 shmem:17589 pagetables:2584 [ 881.835036][ T8579] sec_pagetables:377 bounce:0 [ 881.835036][ T8579] kernel_misc_reclaimable:0 [ 881.835036][ T8579] free:29546 free_pcp:328 free_cma:0 [ 881.851630][ T8600] netlink: 'syz.4.14146': attribute type 4 has an invalid length. [ 881.931828][T21218] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 881.933321][ T8579] Node 0 active_anon:12kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8628kB pagetables:1344kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 881.941363][ T8602] netlink: 'syz.4.14147': attribute type 29 has an invalid length. [ 881.961623][T21218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 881.964445][ T8579] Node 1 active_anon:30088kB inactive_anon:47752kB active_file:17744kB inactive_file:36012kB unevictable:36312kB isolated(anon):0kB isolated(file):0kB mapped:98904kB dirty:1716kB writeback:0kB shmem:66820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9112kB pagetables:9092kB sec_pagetables:344kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 882.027108][ T8579] Node 0 DMA free:3940kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.038394][ T8579] lowmem_reserve[]: 0 285 285 285 285 [ 882.040252][ T8579] Node 0 DMA32 free:33868kB boost:29448kB min:42536kB low:45808kB high:49080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:3140kB present:1032196kB managed:292496kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.056278][ T8579] lowmem_reserve[]: 0 0 0 0 0 [ 882.058358][ T8579] Node 1 DMA32 free:80252kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30088kB inactive_anon:47752kB active_file:17944kB inactive_file:35412kB unevictable:36312kB writepending:1716kB zspages:3952kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2800kB local_pcp:0kB free_cma:0kB [ 882.072768][ T8579] lowmem_reserve[]: 0 0 0 0 0 [ 882.074909][ T8579] Node 0 DMA: 78*4kB (UE) 89*8kB (UE) 36*16kB (UE) 31*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3936kB [ 882.089412][ T8579] Node 0 DMA32: 1027*4kB (UME) 616*8kB (UME) 210*16kB (UM) 189*32kB (UME) 74*64kB (UME) 28*128kB (UME) 10*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 33932kB [ 882.097616][ T8579] Node 1 DMA32: 699*4kB (UME) 712*8kB (UME) 4062*16kB (UME) 145*32kB (UM) 11*64kB (UM) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 79340kB [ 882.104451][ T8579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.109580][ T8579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 882.111642][ T1244] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 882.113957][ T8579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.117159][ T1244] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 882.121700][ T8579] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 882.129398][ T8579] 37964 total pagecache pages [ 882.135030][ T8579] 1682 pages in swap cache [ 882.136928][ T8604] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1975705351/1975705353 [ 882.137434][ T8579] Free swap = 152kB [ 882.143523][ T8579] Total swap = 124996kB [ 882.145263][ T8579] 524155 pages RAM [ 882.146684][ T8579] 0 pages HighMem/MovableOnly [ 882.146967][ T8604] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1975705351/1975705352 [ 882.148571][ T8579] 210138 pages reserved [ 882.148585][ T8579] 0 pages cma reserved [ 882.162464][ T8604] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1975705351/1975705353 [ 882.166634][ T8604] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1975705351/1975705352 [ 882.231328][ T1244] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 882.252904][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 882.281702][T32043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 882.773626][T32066] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 882.777316][T32066] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 882.977860][ T8630] fuse: fd is not a fuse device [ 883.116904][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14165'. [ 883.117316][ T40] audit: type=1804 audit(1779446474.083:3899): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.14163" name="file0" dev="ramfs" ino=168925 res=1 errno=0 [ 883.802366][T24498] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 884.247686][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.312094][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.369609][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.074102][ T1244] net_ratelimit: 51 callbacks suppressed [ 885.074127][ T1244] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.084111][ T1244] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 885.190445][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.193570][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 885.300332][T21218] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.304996][T21218] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 885.410779][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.414572][ T59] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 885.520194][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 885.524638][ T59] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 885.904517][ T8726] netlink: 'syz.3.14182': attribute type 1 has an invalid length. [ 886.116183][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14186'. [ 886.173613][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14186'. [ 886.551358][ T8745] fuse: fd is not a fuse device [ 886.613916][ T8749] lo speed is unknown, defaulting to 1000 [ 887.006882][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 887.040872][ T40] audit: type=1804 audit(1779446478.005:3900): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.14198" name="bus" dev="ramfs" ino=172083 res=1 errno=0 [ 887.049700][ T40] audit: type=1804 audit(1779446478.005:3901): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.14198" name="bus" dev="ramfs" ino=172083 res=1 errno=0 [ 888.413922][ T8767] vlan4: left allmulticast mode [ 888.415728][ T8767] bond13: left allmulticast mode [ 888.423130][ T8767] ip6gre3: left allmulticast mode [ 888.430847][ T8767] vlan5: left allmulticast mode [ 888.432696][ T8767] bond15: left allmulticast mode [ 888.463364][ T5845] lo speed is unknown, defaulting to 1000 [ 888.465783][ T5845] sz1: Port: 1 Link DOWN [ 888.467548][ T5845] lo speed is unknown, defaulting to 1000 [ 888.468466][ T1244] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.472650][ T1244] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.475977][ T1244] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 888.481201][ T1244] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.484317][ T1244] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.487924][ T1244] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 888.491411][ T1244] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.495142][ T1244] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.499714][ T1244] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 888.502994][ T1244] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.506007][ T1244] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.508878][ T1244] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 889.033158][ T29] libceph: connect (1)[c::]:6789 error -99 [ 889.035999][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 889.053525][ T8790] lo speed is unknown, defaulting to 1000 [ 889.181410][ T8786] ceph: No mds server is up or the cluster is laggy [ 890.118238][T30949] net_ratelimit: 95 callbacks suppressed [ 890.118257][T30949] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.123456][T30949] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 890.138435][ T8805] netlink: 'syz.6.14208': attribute type 1 has an invalid length. [ 890.142260][ T8805] netlink: 'syz.6.14208': attribute type 4 has an invalid length. [ 890.146608][ T8805] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.14208'. [ 890.227699][T30949] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.231534][T30949] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 890.348143][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.369420][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 890.497582][T30949] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.511477][T30949] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 890.521701][ T8818] fuse: fd is not a fuse device [ 890.592533][ T8824] fuse: fd is not a fuse device [ 890.617550][T32066] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 890.621273][T32066] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 890.990731][ T8829] fuse: fd is not a fuse device [ 891.176133][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14223'. [ 891.248204][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14223'. [ 893.110673][ T8867] overlayfs: failed to clone upperpath [ 894.040989][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14239'. [ 894.201387][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14240'. [ 894.265699][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14240'. [ 894.784106][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14246'. [ 894.787243][ T8905] fuse: fd is not a fuse device [ 894.789388][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14246'. [ 895.215261][ T79] net_ratelimit: 85 callbacks suppressed [ 895.215283][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.223973][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 895.338245][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.346349][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 895.455510][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.458573][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 895.571911][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.581498][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 895.706722][T30949] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.711903][T30949] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 896.035083][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 896.436690][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14252'. [ 896.565404][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14252'. [ 896.881865][ T8945] bridge_slave_0: entered promiscuous mode [ 896.969668][ T8952] netlink: 'syz.1.14266': attribute type 13 has an invalid length. [ 897.051415][ T8952] 9p: Bad value for 'wfdno' [ 899.147420][ T8969] overlayfs: failed to clone upperpath [ 899.206444][ T8973] fuse: fd is not a fuse device [ 899.356106][ T8978] syz_tun: entered allmulticast mode [ 899.359913][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14275'. [ 899.442134][ T8977] syz_tun: left allmulticast mode [ 900.239407][ T201] net_ratelimit: 81 callbacks suppressed [ 900.239429][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.247086][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 900.263716][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14282'. [ 900.362796][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.367112][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 900.483347][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.487106][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 900.585617][ T9007] overlayfs: failed to clone upperpath [ 900.595989][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.614679][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 900.742609][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.748766][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 901.808782][ T9027] lo speed is unknown, defaulting to 1000 [ 901.866911][ T9027] warn_alloc: 2 callbacks suppressed [ 901.866927][ T9027] syz.3.14302: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 901.875507][ T9027] CPU: 1 UID: 0 PID: 9027 Comm: syz.3.14302 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.875530][ T9027] Tainted: [L]=SOFTLOCKUP [ 901.875535][ T9027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 901.875543][ T9027] Call Trace: [ 901.875548][ T9027] [ 901.875554][ T9027] dump_stack_lvl+0x100/0x190 [ 901.875577][ T9027] warn_alloc.cold+0x95/0x1c1 [ 901.875592][ T9027] ? __pfx_warn_alloc+0x10/0x10 [ 901.875653][ T9027] ? __pfx___might_resched+0x10/0x10 [ 901.875677][ T9027] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 901.875706][ T9027] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 901.875722][ T9027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 901.875743][ T9027] ? kernfs_put+0x3f/0x60 [ 901.875758][ T9027] ? internal_create_group+0x915/0xf40 [ 901.875783][ T9027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 901.875804][ T9027] ? policy_nodemask+0xed/0x4f0 [ 901.875821][ T9027] alloc_pages_mpol+0x1fb/0x540 [ 901.875838][ T9027] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 901.875857][ T9027] ? ib_setup_port_attrs+0x2b4/0x600 [ 901.875873][ T9027] ___kmalloc_large_node+0xe5/0x120 [ 901.875891][ T9027] __kmalloc_large_node_noprof+0x1c/0x70 [ 901.875910][ T9027] __kmalloc_noprof+0x5be/0x850 [ 901.875922][ T9027] ? rdma_port_get_link_layer+0x57/0xe0 [ 901.875941][ T9027] ib_setup_port_attrs+0x2b4/0x600 [ 901.875956][ T9027] ? kobject_put+0xb9/0x640 [ 901.875973][ T9027] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 901.875993][ T9027] ? __init_waitqueue_head+0xca/0x150 [ 901.876013][ T9027] add_one_compat_dev+0x5b3/0x820 [ 901.876033][ T9027] rdma_dev_init_net+0x30a/0x590 [ 901.876050][ T9027] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 901.876068][ T9027] ? __kmalloc_noprof+0x320/0x850 [ 901.876083][ T9027] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 901.876100][ T9027] ops_init+0x1e2/0x5f0 [ 901.876119][ T9027] setup_net+0x118/0x3a0 [ 901.876149][ T9027] ? __pfx_setup_net+0x10/0x10 [ 901.876168][ T9027] ? mutex_init_lockdep+0xf1/0x120 [ 901.876185][ T9027] copy_net_ns+0x46f/0x7c0 [ 901.876204][ T9027] create_new_namespaces+0x3ea/0xac0 [ 901.876226][ T9027] copy_namespaces+0x468/0x5e0 [ 901.876248][ T9027] copy_process+0x3531/0x7ed0 [ 901.876266][ T9027] ? __futex_wait+0x256/0x300 [ 901.876293][ T9027] ? __pfx_copy_process+0x10/0x10 [ 901.876312][ T9027] ? find_held_lock+0x2b/0x80 [ 901.876335][ T9027] kernel_clone+0x12e/0x9c0 [ 901.876352][ T9027] ? __pfx_futex_wait+0x10/0x10 [ 901.876370][ T9027] ? __pfx_kernel_clone+0x10/0x10 [ 901.876397][ T9027] __do_compat_sys_ia32_clone+0xd4/0x120 [ 901.876421][ T9027] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 901.876442][ T9027] ? mntput_no_expire+0xd8/0x220 [ 901.876466][ T9027] ? __pfx___ia32_sys_mount+0x10/0x10 [ 901.876487][ T9027] ? rcu_is_watching+0x12/0xc0 [ 901.876507][ T9027] __do_fast_syscall_32+0xe7/0x950 [ 901.876523][ T9027] do_fast_syscall_32+0x32/0x70 [ 901.876537][ T9027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 901.876554][ T9027] RIP: 0023:0xf705ef7c [ 901.876566][ T9027] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 901.876578][ T9027] RSP: 002b:00000000f544d4bc EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 901.876592][ T9027] RAX: ffffffffffffffda RBX: 000000005f62e049 RCX: 0000000000000010 [ 901.876600][ T9027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 901.876607][ T9027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 901.876614][ T9027] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 901.876622][ T9027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 901.876638][ T9027] [ 901.876662][ T9027] Mem-Info: [ 902.003869][ T9027] active_anon:8894 inactive_anon:7900 isolated_anon:0 [ 902.003869][ T9027] active_file:7779 inactive_file:6370 isolated_file:0 [ 902.003869][ T9027] unevictable:1770 dirty:338 writeback:0 [ 902.003869][ T9027] slab_reclaimable:7058 slab_unreclaimable:79765 [ 902.003869][ T9027] mapped:21892 shmem:14742 pagetables:2577 [ 902.003869][ T9027] sec_pagetables:378 bounce:0 [ 902.003869][ T9027] kernel_misc_reclaimable:0 [ 902.003869][ T9027] free:35782 free_pcp:2329 free_cma:0 [ 902.019557][ T9027] Node 0 active_anon:12kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8640kB pagetables:1344kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 902.031456][ T9027] Node 1 active_anon:35964kB inactive_anon:31596kB active_file:31216kB inactive_file:25472kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:87544kB dirty:1352kB writeback:0kB shmem:55432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9192kB pagetables:8964kB sec_pagetables:348kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 902.050580][ T9027] Node 0 DMA free:3960kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 902.061660][ T9027] lowmem_reserve[]: 0 285 285 285 285 [ 902.067342][ T9027] Node 0 DMA32 free:33792kB boost:29448kB min:42536kB low:45808kB high:49080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:3140kB present:1032196kB managed:292496kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 902.084734][ T9027] lowmem_reserve[]: 0 0 0 0 0 [ 902.086298][ T9027] Node 1 DMA32 free:92936kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35964kB inactive_anon:31596kB active_file:35216kB inactive_file:25472kB unevictable:3544kB writepending:1352kB zspages:3952kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:17244kB local_pcp:668kB free_cma:0kB [ 902.097611][ T9027] lowmem_reserve[]: 0 0 0 0 0 [ 902.099105][ T9027] Node 0 DMA: 84*4kB (UE) 89*8kB (UE) 36*16kB (UE) 31*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3960kB [ 902.110404][ T9027] Node 0 DMA32: 1030*4kB (UME) 621*8kB (UME) 210*16kB (UM) 184*32kB (UME) 74*64kB (UME) 28*128kB (UME) 10*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 33824kB [ 902.116230][ T9027] Node 1 DMA32: 1*4kB (U) 1482*8kB (U) 4999*16kB (U) 13*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 92260kB [ 902.121121][ T9027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 902.125098][ T9027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 902.128474][ T9027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 902.138407][ T9027] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 902.141389][ T9027] 31616 total pagecache pages [ 902.143041][ T9027] 1685 pages in swap cache [ 902.144466][ T9027] Free swap = 152kB [ 902.145693][ T9027] Total swap = 124996kB [ 902.146984][ T9027] 524155 pages RAM [ 902.148199][ T9027] 0 pages HighMem/MovableOnly [ 902.149814][ T9027] 210138 pages reserved [ 902.151174][ T9027] 0 pages cma reserved [ 902.642987][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14298'. [ 902.701849][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14300'. [ 903.345375][ T9061] netlink: 'syz.4.14309': attribute type 39 has an invalid length. [ 903.569956][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14311'. [ 903.634559][ T9067] bridge12: port 1(veth35) entered blocking state [ 903.641241][ T9067] bridge12: port 1(veth35) entered disabled state [ 903.644926][ T9067] veth35: entered allmulticast mode [ 903.649056][ T9067] veth35: entered promiscuous mode [ 903.682701][ T9069] bridge12: port 2(veth37) entered blocking state [ 903.686005][ T9069] bridge12: port 2(veth37) entered disabled state [ 903.689470][ T9069] veth37: entered allmulticast mode [ 903.693759][ T9069] veth37: entered promiscuous mode [ 903.877768][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14315'. [ 903.904143][ T9077] netlink: 'syz.4.14315': attribute type 5 has an invalid length. [ 903.907478][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14315'. [ 905.327781][ T46] net_ratelimit: 88 callbacks suppressed [ 905.327803][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.336489][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 905.451070][T32066] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.455251][T32066] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 905.493768][ T9109] netlink: 'syz.3.14325': attribute type 1 has an invalid length. [ 905.560490][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.564233][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 905.670366][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.677044][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 905.780166][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.783396][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 906.760915][ T9139] overlayfs: failed to clone upperpath [ 907.268022][ T9149] bridge0: port 1(vlan6) entered blocking state [ 907.270226][ T9149] bridge0: port 1(vlan6) entered disabled state [ 907.272622][ T9149] vlan6: entered allmulticast mode [ 907.274703][ T9149] bridge_slave_0: entered allmulticast mode [ 907.340083][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14337'. [ 907.370237][ T9151] netlink: 'syz.3.14337': attribute type 5 has an invalid length. [ 907.379387][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14337'. [ 908.451709][ T9168] fuse: fd is not a fuse device [ 908.843812][ T9176] netlink: 'syz.4.14346': attribute type 1 has an invalid length. [ 908.847147][ T9176] netlink: 'syz.4.14346': attribute type 4 has an invalid length. [ 908.855852][ T9176] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.14346'. [ 909.099923][T24498] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 909.808981][ T53] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 910.378155][ T79] net_ratelimit: 92 callbacks suppressed [ 910.378174][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.392334][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 910.508188][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.515571][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 910.629977][ T1244] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.632648][ T1244] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 910.732733][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14353'. [ 910.739713][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.742976][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 910.815134][ T9203] bridge14: port 1(veth35) entered blocking state [ 910.817511][ T9203] bridge14: port 1(veth35) entered disabled state [ 910.820291][ T9203] veth35: entered allmulticast mode [ 910.823529][ T9203] veth35: entered promiscuous mode [ 910.857860][ T1244] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.861524][ T1244] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 910.919423][ T9203] bridge14: port 2(veth37) entered blocking state [ 910.921656][ T9203] bridge14: port 2(veth37) entered disabled state [ 910.923903][ T9203] veth37: entered allmulticast mode [ 910.926683][ T9203] veth37: entered promiscuous mode [ 910.935681][ T9202] Process accounting resumed [ 911.258369][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14356'. [ 911.336149][ T9216] bond18: entered promiscuous mode [ 911.340743][ T9216] bond18: entered allmulticast mode [ 911.725157][ T9236] 0ªî{X¹¦: left promiscuous mode [ 911.732758][ T9236] erspan0: left promiscuous mode [ 911.752994][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.773891][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.827622][ T9236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 911.832306][ T9236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 911.842065][ T9236] veth1_vlan: left promiscuous mode [ 911.854804][ T9236] veth0_vlan: left promiscuous mode [ 911.859204][ T9236] veth0_vlan: entered promiscuous mode [ 911.863285][ T9236] veth1_vlan: entered promiscuous mode [ 911.874049][ T9236] veth0_macvtap: left promiscuous mode [ 911.878578][ T9236] veth0_macvtap: entered promiscuous mode [ 911.897564][ T9236] erspan0: entered promiscuous mode [ 911.904492][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.963178][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.969109][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.976045][ T59] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.982693][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.992679][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.009724][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.021379][T32043] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 912.028105][T32066] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.031557][T32066] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.477096][ T29] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 912.990117][T30949] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 913.956405][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 914.030188][ T79] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 914.039990][ T79] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 914.522274][ T9282] Process accounting resumed [ 915.076963][T18699] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 915.408217][ T9299] fuse: fd is not a fuse device [ 915.422210][ T29] kernel read not supported for file /newroot/3282/file0 (pid: 29 comm: kworker/1:0) [ 915.475856][ T59] net_ratelimit: 88 callbacks suppressed [ 915.475879][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.484409][ T59] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 915.595654][T30949] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.599971][T30949] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 915.716527][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.725400][ T79] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 915.835357][T32066] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.838061][T32066] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 915.945808][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.951683][ T59] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 916.560486][ T9308] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.14384'. [ 917.956288][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 918.249397][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14388'. [ 918.252820][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14388'. [ 918.994848][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14394'. [ 919.333953][ T9355] veth1_to_batadv: left promiscuous mode [ 919.510624][ T9355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.514390][ T9355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.521102][ T9355] hsr0: left promiscuous mode [ 919.547180][ T9355] veth1_macvtap: left promiscuous mode [ 919.555896][ T9355] veth0_macvtap: left promiscuous mode [ 919.559290][ T9355] veth0_macvtap: entered promiscuous mode [ 919.562355][ T9355] veth1_macvtap: entered promiscuous mode [ 919.569225][T19594] hsr0: entered promiscuous mode [ 919.595675][ T201] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.598413][ T201] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.605455][ T201] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.608566][ T201] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.554546][ T201] net_ratelimit: 93 callbacks suppressed [ 920.554572][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.560287][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 920.668401][ T9368] netlink: 'syz.1.14402': attribute type 1 has an invalid length. [ 920.673227][T32066] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.693666][T32066] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.696798][T32066] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 920.728619][ T9371] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 920.740046][ T9368] bond15: (slave bridge0): Enslaving as a backup interface with an up link [ 920.745601][T19594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.780671][ T9368] veth35: entered promiscuous mode [ 920.783224][ T9368] veth35: entered allmulticast mode [ 920.788075][ T9368] bond15: (slave veth35): Enslaving as a backup interface with a down link [ 920.803099][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.806507][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 920.914945][ T79] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.934213][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 923.101228][T19594] libceph: connect (1)[c::]:6789 error -101 [ 923.103805][T19594] libceph: mon0 (1)[c::]:6789 connect error [ 923.250911][ T9420] ceph: No mds server is up or the cluster is laggy [ 923.411892][T24498] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 923.573337][T24498] usb 11-1: Using ep0 maxpacket: 16 [ 923.630654][T24498] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 923.964967][T24498] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 923.967969][T24498] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.970736][T24498] usb 11-1: Product: syz [ 923.972730][T24498] usb 11-1: Manufacturer: syz [ 923.974300][T24498] usb 11-1: SerialNumber: syz [ 923.981808][T24498] usb 11-1: config 0 descriptor?? [ 923.994161][T24498] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 923.999451][T24498] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 925.588937][T24498] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 925.671501][ T201] net_ratelimit: 87 callbacks suppressed [ 925.671518][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.680491][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 925.783911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.803166][ T201] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.807983][ T201] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 925.921958][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.925570][ T59] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 926.026751][T24498] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 926.030728][ T46] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.033730][T24498] em28xx 11-1:0.0: board has no eeprom [ 926.036158][ T46] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 926.110767][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 926.140849][ T59] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.479352][ T9460] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14425'. [ 926.665211][ T40] audit: type=1326 audit(1779446517.654:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.1.14426" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82f7c code=0x0 [ 926.928301][ T9469] team0: No ports can be present during mode change [ 926.932106][ T9469] vlan0: entered promiscuous mode [ 926.936490][ T9469] tipc: Enabled bearer , priority 0 [ 927.073113][ T9425] em28xx 11-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 927.140069][T24498] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 927.145325][T24498] em28xx 11-1:0.0: dvb set to bulk mode. [ 927.150413][ T53] em28xx 11-1:0.0: Binding DVB extension [ 927.171551][T24498] usb 11-1: USB disconnect, device number 11 [ 927.181995][T24498] em28xx 11-1:0.0: Disconnecting em28xx [ 927.197288][ T53] kworker/3:1: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 927.204865][ T53] CPU: 3 UID: 0 PID: 53 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.204895][ T53] Tainted: [L]=SOFTLOCKUP [ 927.204902][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 927.204915][ T53] Workqueue: events request_module_async [ 927.205024][ T53] Call Trace: [ 927.205031][ T53] [ 927.205040][ T53] dump_stack_lvl+0x100/0x190 [ 927.205066][ T53] warn_alloc.cold+0x95/0x1c1 [ 927.205089][ T53] ? __pfx_warn_alloc+0x10/0x10 [ 927.205130][ T53] ? __pfx___might_resched+0x10/0x10 [ 927.205159][ T53] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 927.205197][ T53] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 927.205230][ T53] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.205265][ T53] ? usb_alloc_urb+0x66/0xa0 [ 927.205292][ T53] ? kasan_save_stack+0x30/0x50 [ 927.205311][ T53] ? __kasan_kmalloc+0xaa/0xb0 [ 927.205329][ T53] ? usb_alloc_urb+0x66/0xa0 [ 927.205350][ T53] ? em28xx_alloc_urbs+0x5fa/0xf60 [ 927.205370][ T53] ? em28xx_dvb_init.cold+0x1f2/0x7391 [ 927.205416][ T53] ? request_module_async+0x61/0x80 [ 927.205436][ T53] ? process_one_work+0xa0e/0x1980 [ 927.205453][ T53] ? worker_thread+0x5ef/0xe50 [ 927.205480][ T53] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 927.205510][ T53] ? policy_nodemask+0xed/0x4f0 [ 927.205532][ T53] alloc_pages_mpol+0x1fb/0x540 [ 927.205552][ T53] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 927.205577][ T53] ? em28xx_alloc_urbs+0x655/0xf60 [ 927.205594][ T53] ___kmalloc_large_node+0xe5/0x120 [ 927.205619][ T53] __kmalloc_large_node_noprof+0x1c/0x70 [ 927.205641][ T53] __kmalloc_noprof+0x5be/0x850 [ 927.205656][ T53] ? __asan_memset+0x23/0x50 [ 927.205686][ T53] em28xx_alloc_urbs+0x655/0xf60 [ 927.205710][ T53] ? kasan_save_track+0x14/0x30 [ 927.205726][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.205741][ T53] em28xx_dvb_init.cold+0x1f2/0x7391 [ 927.205761][ T53] ? lock_acquire+0x1b1/0x370 [ 927.205780][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.205799][ T53] ? rcu_is_watching+0x12/0xc0 [ 927.205820][ T53] ? trace_contention_end+0x122/0x170 [ 927.205840][ T53] ? __mutex_lock+0x26d/0x1b10 [ 927.205857][ T53] ? em28xx_init_extension+0x2f/0x200 [ 927.205881][ T53] ? add_lock_to_list+0x99/0x110 [ 927.205904][ T53] ? em28xx_audio_init+0x132/0x1a0 [ 927.205922][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 927.205941][ T53] ? lockdep_unlock+0x5a/0xc0 [ 927.205965][ T53] ? em28xx_v4l2_init+0x89/0xb0 [ 927.205993][ T53] ? __pfx_em28xx_audio_init+0x10/0x10 [ 927.206023][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.206041][ T53] em28xx_init_extension+0x13a/0x200 [ 927.206066][ T53] request_module_async+0x61/0x80 [ 927.206091][ T53] process_one_work+0xa0e/0x1980 [ 927.206124][ T53] ? __pfx_process_one_work+0x10/0x10 [ 927.206152][ T53] ? __pfx_request_module_async+0x10/0x10 [ 927.206179][ T53] worker_thread+0x5ef/0xe50 [ 927.206210][ T53] ? kthread+0x13a/0x450 [ 927.206226][ T53] ? __pfx_worker_thread+0x10/0x10 [ 927.206245][ T53] kthread+0x370/0x450 [ 927.206267][ T53] ? __pfx_kthread+0x10/0x10 [ 927.206287][ T53] ret_from_fork+0x72b/0xd50 [ 927.206312][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 927.206335][ T53] ? __switch_to+0x800/0x1100 [ 927.206365][ T53] ? __pfx_kthread+0x10/0x10 [ 927.206384][ T53] ret_from_fork_asm+0x1a/0x30 [ 927.206425][ T53] [ 927.206434][ T53] Mem-Info: [ 927.363054][ T53] active_anon:11515 inactive_anon:8089 isolated_anon:0 [ 927.363054][ T53] active_file:4996 inactive_file:10231 isolated_file:0 [ 927.363054][ T53] unevictable:1770 dirty:157 writeback:0 [ 927.363054][ T53] slab_reclaimable:7108 slab_unreclaimable:80374 [ 927.363054][ T53] mapped:25039 shmem:17417 pagetables:2686 [ 927.363054][ T53] sec_pagetables:385 bounce:0 [ 927.363054][ T53] kernel_misc_reclaimable:0 [ 927.363054][ T53] free:32040 free_pcp:1218 free_cma:0 [ 927.380799][ T53] Node 0 active_anon:12kB inactive_anon:4kB active_file:48kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8640kB pagetables:1344kB sec_pagetables:1164kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 927.397418][ T53] Node 1 active_anon:46048kB inactive_anon:32352kB active_file:19936kB inactive_file:40916kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:100132kB dirty:628kB writeback:0kB shmem:66132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9144kB pagetables:9400kB sec_pagetables:376kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 927.417581][ T53] Node 0 DMA free:3940kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.438648][ T53] lowmem_reserve[]: 0 285 285 285 285 [ 927.449844][ T53] Node 0 DMA32 free:31224kB boost:29448kB min:42536kB low:45808kB high:49080kB reserved_highatomic:2048KB free_highatomic:376KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:3140kB present:1032196kB managed:292496kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 927.467731][ T53] lowmem_reserve[]: 0 0 0 0 0 [ 927.470129][ T53] Node 1 DMA32 free:92584kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45928kB inactive_anon:32144kB active_file:19936kB inactive_file:40916kB unevictable:3544kB writepending:692kB zspages:3880kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:5436kB local_pcp:64kB free_cma:0kB [ 927.484759][ T53] lowmem_reserve[]: 0 0 0 0 0 [ 927.487010][ T53] Node 0 DMA: 73*4kB (U) 88*8kB (UE) 36*16kB (UE) 32*32kB (UE) 7*64kB (UE) 1*128kB (E) 1*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3940kB [ 927.494134][ T53] Node 0 DMA32: 1026*4kB (UMEH) 614*8kB (UMEH) 204*16kB (UMH) 125*32kB (UMEH) 65*64kB (UME) 28*128kB (UME) 10*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 31192kB [ 927.502832][ T53] Node 1 DMA32: 1*4kB (U) 1777*8kB (U) 4859*16kB (UE) 14*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 92412kB [ 927.509515][ T53] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.514201][ T53] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.518576][ T53] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.523417][ T53] Node 1 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.527146][ T53] 34459 total pagecache pages [ 927.529322][ T53] 1836 pages in swap cache [ 927.531578][ T53] Free swap = 252kB [ 927.533367][ T53] Total swap = 124996kB [ 927.535182][ T53] 524155 pages RAM [ 927.536808][ T53] 0 pages HighMem/MovableOnly [ 927.538878][ T53] 210138 pages reserved [ 927.547218][ T53] 0 pages cma reserved [ 927.550562][ T53] ------------[ cut here ]------------ [ 927.553062][ T53] !PageLargeKmalloc(page) [ 927.553079][ T53] WARNING: mm/slub.c:6475 at free_large_kmalloc+0xbf/0x100, CPU#3: kworker/3:1/53 [ 927.559160][ T53] Modules linked in: [ 927.562412][ T53] CPU: 3 UID: 0 PID: 53 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.567022][ T53] Tainted: [L]=SOFTLOCKUP [ 927.569018][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 927.573250][ T53] Workqueue: events request_module_async [ 927.575367][ T53] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 927.577916][ T53] Code: 28 90 0f 0b 90 80 3d b8 c2 57 0e 00 0f 84 57 a6 bb fe 48 8b 74 24 28 48 89 ef e8 2c ff 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 bd bc f0 8d 5b 5d 41 5c 41 [ 927.584994][ T53] RSP: 0018:ffffc9000074f810 EFLAGS: 00010293 [ 927.587458][ T53] RAX: 00000000000000f0 RBX: ffffea0001bfa000 RCX: 000000000000002e [ 927.591130][ T53] RDX: 0000000000000000 RSI: ffff88806fe80000 RDI: ffffea0001bfa000 [ 927.594333][ T53] RBP: ffff88806fe80000 R08: 0000000000000005 R09: 0000000000000000 [ 927.597540][ T53] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff8880727f5e98 [ 927.601166][ T53] R13: ffff888049b92900 R14: dffffc0000000000 R15: ffffed100e4febd5 [ 927.605003][ T53] FS: 0000000000000000(0000) GS:ffff888097471000(0000) knlGS:0000000000000000 [ 927.609143][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.612274][ T53] CR2: 0000561780ffc5d0 CR3: 000000005949d000 CR4: 0000000000352ef0 [ 927.615483][ T53] Call Trace: [ 927.617051][ T53] [ 927.618885][ T53] usb_free_urb.part.0+0xf8/0x110 [ 927.621682][ T53] usb_free_urb+0x1f/0x30 [ 927.623684][ T53] em28xx_uninit_usb_xfer+0xf3/0x360 [ 927.626286][ T53] em28xx_alloc_urbs+0xb43/0xf60 [ 927.628473][ T53] ? kasan_save_track+0x14/0x30 [ 927.630747][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.633159][ T53] em28xx_dvb_init.cold+0x1f2/0x7391 [ 927.635854][ T53] ? lock_acquire+0x1b1/0x370 [ 927.637967][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.640548][ T53] ? rcu_is_watching+0x12/0xc0 [ 927.642268][ T53] ? trace_contention_end+0x122/0x170 [ 927.644074][ T53] ? __mutex_lock+0x26d/0x1b10 [ 927.645714][ T53] ? em28xx_init_extension+0x2f/0x200 [ 927.647644][ T53] ? add_lock_to_list+0x99/0x110 [ 927.649427][ T53] ? em28xx_audio_init+0x132/0x1a0 [ 927.651426][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 927.653810][ T53] ? lockdep_unlock+0x5a/0xc0 [ 927.656074][ T53] ? em28xx_v4l2_init+0x89/0xb0 [ 927.658308][ T53] ? __pfx_em28xx_audio_init+0x10/0x10 [ 927.660929][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.663340][ T53] em28xx_init_extension+0x13a/0x200 [ 927.665604][ T53] request_module_async+0x61/0x80 [ 927.667764][ T53] process_one_work+0xa0e/0x1980 [ 927.670046][ T53] ? __pfx_process_one_work+0x10/0x10 [ 927.672791][ T53] ? __pfx_request_module_async+0x10/0x10 [ 927.675684][ T53] worker_thread+0x5ef/0xe50 [ 927.677681][ T53] ? kthread+0x13a/0x450 [ 927.679254][ T53] ? __pfx_worker_thread+0x10/0x10 [ 927.681450][ T53] kthread+0x370/0x450 [ 927.682905][ T53] ? __pfx_kthread+0x10/0x10 [ 927.684603][ T53] ret_from_fork+0x72b/0xd50 [ 927.686638][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 927.688938][ T53] ? __switch_to+0x800/0x1100 [ 927.690925][ T53] ? __pfx_kthread+0x10/0x10 [ 927.692921][ T53] ret_from_fork_asm+0x1a/0x30 [ 927.694753][ T53] [ 927.696349][ T53] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 927.699315][ T53] CPU: 3 UID: 0 PID: 53 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.703774][ T53] Tainted: [L]=SOFTLOCKUP [ 927.705579][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 927.709712][ T53] Workqueue: events request_module_async [ 927.712284][ T53] Call Trace: [ 927.713852][ T53] [ 927.715124][ T53] dump_stack_lvl+0x100/0x190 [ 927.717238][ T53] vpanic+0x552/0x970 [ 927.718914][ T53] ? __pfx_vpanic+0x10/0x10 [ 927.720969][ T53] panic+0xd1/0xe0 [ 927.722480][ T53] ? __pfx_panic+0x10/0x10 [ 927.724536][ T53] ? check_panic_on_warn+0x1f/0x90 [ 927.726929][ T53] check_panic_on_warn.cold+0x19/0x34 [ 927.729284][ T53] ? free_large_kmalloc+0xbf/0x100 [ 927.731447][ T53] __warn.cold+0x191/0x328 [ 927.733375][ T53] __report_bug+0x296/0x3d0 [ 927.734880][ T53] ? free_large_kmalloc+0xbf/0x100 [ 927.736863][ T53] ? __pfx___report_bug+0x10/0x10 [ 927.739085][ T53] ? lock_acquire+0x1b1/0x370 [ 927.741121][ T53] ? find_held_lock+0x2b/0x80 [ 927.742963][ T53] ? __free_one_page+0x109/0x1090 [ 927.744624][ T53] ? __free_one_page+0x109/0x1090 [ 927.746516][ T53] ? free_large_kmalloc+0xbf/0x100 [ 927.748248][ T53] report_bug+0xb2/0x220 [ 927.749928][ T53] ? free_large_kmalloc+0xbf/0x100 [ 927.752021][ T53] handle_bug+0x16a/0x2a0 [ 927.753802][ T53] exc_invalid_op+0x17/0x50 [ 927.755578][ T53] asm_exc_invalid_op+0x1a/0x20 [ 927.757624][ T53] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 927.759844][ T53] Code: 28 90 0f 0b 90 80 3d b8 c2 57 0e 00 0f 84 57 a6 bb fe 48 8b 74 24 28 48 89 ef e8 2c ff 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 bd bc f0 8d 5b 5d 41 5c 41 [ 927.768156][ T53] RSP: 0018:ffffc9000074f810 EFLAGS: 00010293 [ 927.770932][ T53] RAX: 00000000000000f0 RBX: ffffea0001bfa000 RCX: 000000000000002e [ 927.774366][ T53] RDX: 0000000000000000 RSI: ffff88806fe80000 RDI: ffffea0001bfa000 [ 927.777930][ T53] RBP: ffff88806fe80000 R08: 0000000000000005 R09: 0000000000000000 [ 927.781342][ T53] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff8880727f5e98 [ 927.784548][ T53] R13: ffff888049b92900 R14: dffffc0000000000 R15: ffffed100e4febd5 [ 927.788096][ T53] usb_free_urb.part.0+0xf8/0x110 [ 927.790559][ T53] usb_free_urb+0x1f/0x30 [ 927.792568][ T53] em28xx_uninit_usb_xfer+0xf3/0x360 [ 927.794452][ T53] em28xx_alloc_urbs+0xb43/0xf60 [ 927.796486][ T53] ? kasan_save_track+0x14/0x30 [ 927.798807][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.801060][ T53] em28xx_dvb_init.cold+0x1f2/0x7391 [ 927.803590][ T53] ? lock_acquire+0x1b1/0x370 [ 927.805558][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.807650][ T53] ? rcu_is_watching+0x12/0xc0 [ 927.809618][ T53] ? trace_contention_end+0x122/0x170 [ 927.811631][ T53] ? __mutex_lock+0x26d/0x1b10 [ 927.813609][ T53] ? em28xx_init_extension+0x2f/0x200 [ 927.815797][ T53] ? add_lock_to_list+0x99/0x110 [ 927.817897][ T53] ? em28xx_audio_init+0x132/0x1a0 [ 927.819958][ T53] ? __pfx___mutex_lock+0x10/0x10 [ 927.822189][ T53] ? lockdep_unlock+0x5a/0xc0 [ 927.824462][ T53] ? em28xx_v4l2_init+0x89/0xb0 [ 927.826246][ T53] ? __pfx_em28xx_audio_init+0x10/0x10 [ 927.828208][ T53] ? __pfx_em28xx_dvb_init+0x10/0x10 [ 927.829927][ T53] em28xx_init_extension+0x13a/0x200 [ 927.831810][ T53] request_module_async+0x61/0x80 [ 927.833985][ T53] process_one_work+0xa0e/0x1980 [ 927.836194][ T53] ? __pfx_process_one_work+0x10/0x10 [ 927.838472][ T53] ? __pfx_request_module_async+0x10/0x10 [ 927.840865][ T53] worker_thread+0x5ef/0xe50 [ 927.842882][ T53] ? kthread+0x13a/0x450 [ 927.844419][ T53] ? __pfx_worker_thread+0x10/0x10 [ 927.846370][ T53] kthread+0x370/0x450 [ 927.848254][ T53] ? __pfx_kthread+0x10/0x10 [ 927.850426][ T53] ret_from_fork+0x72b/0xd50 [ 927.852485][ T53] ? __pfx_ret_from_fork+0x10/0x10 [ 927.854746][ T53] ? __switch_to+0x800/0x1100 [ 927.856775][ T53] ? __pfx_kthread+0x10/0x10 [ 927.858720][ T53] ret_from_fork_asm+0x1a/0x30 [ 927.860783][ T53] [ 927.863029][ T53] Kernel Offset: disabled [ 927.864903][ T53] Rebooting in 86400 seconds..