last executing test programs: 4.541867606s ago: executing program 1 (id=2547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000fd0001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.20075838s ago: executing program 0 (id=2552): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000095000/0x3000)=nil, 0x3000, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$snddsp_status(&(0x7f0000a83000/0x3000)=nil, 0x1000, 0x3, 0xe4f617693a23b214, r2, 0x82000000) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.031438157s ago: executing program 0 (id=2555): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000002280), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0xa0, 0x24, 0x26}}]}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x40) syz_usb_connect$printer(0x5, 0x2d, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000080001, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x28, 0x0, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 3.610624413s ago: executing program 1 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00'}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000040), 0xfffffffd, 0x400800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x300, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x4800, 0x26800}}}}}}]}, 0x48}}, 0x0) 3.610201285s ago: executing program 1 (id=2560): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141101) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="a485", 0x2}], 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f027}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x6fffffd) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x52) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000100)="e10f7b6c8202938d2b62e1d01e5077a54517e9f5ac123b846fbd8543a410a46a8564ec693a6938d1ed052cfbad8040fdc52b94c310b5122cd9c9", 0x3a, 0x2, &(0x7f0000000340)={r6, r7+60000000}) r8 = syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="e0480a2478e8e4bec42858760634515b18efa1f0ab2d4f2f71d39ec42c1c0f793b2c16769a2c36be55d233bebbdebce1314c2182321790866b5709fc9ab5242324aa9aed54c02506334811534a6336994f3d238395b3959bcb88f1cb2c6e96998797fe9bfb878bdd94093db55bd0e33aa38877ea1e6c7e89b1f24d1bcfd52195269b3e901f42feff5d8c4368d78b9aee1a18ccd8aceb35119b613410fb9d587c8dd18e258569cf53a2d87cfb1754de08c809479286") syz_open_procfs(r8, &(0x7f00000002c0)='net/ip6_tables_matches\x00') r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e12230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c018bc00"}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) 3.182243683s ago: executing program 2 (id=2564): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3f000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.182094842s ago: executing program 2 (id=2565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000c0", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000000000000000000140020"], 0x64}}, 0x0) 3.122070708s ago: executing program 2 (id=2566): syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000280)=0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) (async) r5 = syz_io_uring_setup(0x2b23, &(0x7f0000000300)={0x0, 0x52b7, 0x0, 0x0, 0x228, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r10}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x19) (async) close_range(r0, 0xffffffffffffffff, 0x0) r12 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x111400, 0x8) r13 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_PROTOCOL(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x1, 0x6, 0x201}, 0x14}}, 0x0) ioctl$GIO_CMAP(r12, 0x4b70, &(0x7f0000000000)) 2.731447364s ago: executing program 0 (id=2569): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000019580)=ANY=[@ANYBLOB="58000000a9e5e8a44509cf040660629745c8b775f13887de9e9b5f239f63c5b393e727f62f95bd557fa74384c4798f0a36bce8112dceb3ab1586a114b26ef1cf12bbae5f8ec0fb91710c09b9f35e703293253008ca56376d6808ef08e4d60dc11bd3d8d443a64055e4b988dd980f1cd84bfbf4c1129ae1ba9c77bdf910ad5bade329ff16fb7514118569a3af77556368c12305316cdb431847bbf161200e2b646fbbd371fb8fb4bca98f455a24046890b9e6504c878c3a29afbce4bdc420", @ANYBLOB="000828bd7000", @ANYRES32=r2, @ANYBLOB="08002b00f7ffffff08002b0081ffffff050033000100000008000b008f0000000a000900ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x24008044}, 0x40000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x2, 0x0, 0x4, 0xb}, {0x3, 0x18, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9}], 0xfffffffa}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x2, 0x3, 0x40, 0x6, 0x0, 0x2004d1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x800000000000000, 0x3], 0x0, 0x14286}) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 2.227868411s ago: executing program 0 (id=2571): mkdirat(0xffffffffffffff9c, 0x0, 0x4) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x388f, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='svcrdma_dma_map_rw_err\x00', r9, 0x0, 0x81}, 0x18) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x30}}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 2.227510408s ago: executing program 2 (id=2572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)) close(r0) r3 = msgget(0x2, 0x600) msgrcv(r3, 0xfffffffffffffffe, 0x0, 0x2, 0x3000) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) msgsnd(r3, &(0x7f0000000100)={0x2}, 0x8, 0x0) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000005c0)=0xe4) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) setresgid(0xee00, r7, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000008c0)=0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x698, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000a80)={{0x3, 0x0, r4, r5, r7, 0x100, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x2, 0x400, 0x2, 0x3, 0x1, 0x4, r8}) 2.225638783s ago: executing program 1 (id=2573): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, "8960a117724e7cc0caa809852b3f3da819eca42e2ba47065f463afc747d9f789", 0x7, 0x6, 0x5, 0x1}, 0x3c) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x3f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x30000c01}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800470418280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r4) syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0x40001) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a300000230008004100727865001400330076657468305f6d616376746170000000"], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x1, 0x70bd29}, 0x14}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x426440, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0x2, @pix_mp={0x0, 0x18a0, 0x34324152, 0x0, 0x3, [{}, {0x10, 0xbf2e}, {0x0, 0x10}], 0x3, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x70000, 0x8, {0x0, 0x2710}, {0x5, 0x1, 0xf, 0x9, 0x4, 0x2, "bb2c1366"}, 0xb59, 0x1, {&(0x7f0000000340)=[{0x34, 0x4, {0x617}, 0xa}, {0x3, 0x400, {0x7}, 0x6}]}, 0xffff}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x3fe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102381, 0x18fed) 1.348424081s ago: executing program 0 (id=2575): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x4, 0x3}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) listen(0xffffffffffffffff, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x3e8, 0x0) 1.34824364s ago: executing program 2 (id=2576): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a0000000000000000050000000900010073797a300000000048000000030a0103000000000000000073797a30000000000900030073797a300000000008000a40000000031400048008000240000000120800014000000001140000001100010000000000000000000000000a"], 0x90}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0xd5) openat$cgroup(r6, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 1.27206405s ago: executing program 3 (id=2577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000180)={0x65b670a7, 0xfffffffd, {0xffffffffffffffff}, {0xee01}, 0x7, 0x992}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x3, 0x433, {}, {}, 0x5, 0xc1fb}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0) 1.011585703s ago: executing program 1 (id=2578): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000400ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) 902.101534ms ago: executing program 3 (id=2579): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "ddbe86525ee4d9e8", "4559a988bcd91441999255501dafc444", "b3f96a7d", "4f2fdab5d3c4c4db"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x1, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 901.901113ms ago: executing program 3 (id=2580): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000019580)=ANY=[@ANYBLOB="58000000a9e5e8a44509cf040660629745c8b775f13887de9e9b5f239f63c5b393e727f62f95bd557fa74384c4798f0a36bce8112dceb3ab1586a114b26ef1cf12bbae5f8ec0fb91710c09b9f35e703293253008ca56376d6808ef08e4d60dc11bd3d8d443a64055e4b988dd980f1cd84bfbf4c1129ae1ba9c77bdf910ad5bade329ff16fb7514118569a3af77556368c12305316cdb431847bbf161200e2b646fbbd371fb8fb4bca98f455a24046890b9e6504c878c3a29afbce4bdc420", @ANYBLOB="000828bd7000", @ANYRES32=r2, @ANYBLOB="08002b00f7ffffff08002b0081ffffff050033000100000008000b008f0000000a000900ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x24008044}, 0x40000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x2, 0x0, 0x4, 0xb}, {0x3, 0x18, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9}], 0xfffffffa}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x2, 0x3, 0x40, 0x6, 0x0, 0x2004d1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x800000000000000, 0x3], 0x0, 0x14286}) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 481.882091ms ago: executing program 0 (id=2581): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141101) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="a485", 0x2}], 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f027}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x6fffffd) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x52) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000100)="e10f7b6c8202938d2b62e1d01e5077a54517e9f5ac123b846fbd8543a410a46a8564ec693a6938d1ed052cfbad8040fdc52b94c310b5122cd9c9", 0x3a, 0x2, &(0x7f0000000340)={r6, r7+60000000}) r8 = syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="e0480a2478e8e4bec42858760634515b18efa1f0ab2d4f2f71d39ec42c1c0f793b2c16769a2c36be55d233bebbdebce1314c2182321790866b5709fc9ab5242324aa9aed54c02506334811534a6336994f3d238395b3959bcb88f1cb2c6e96998797fe9bfb878bdd94093db55bd0e33aa38877ea1e6c7e89b1f24d1bcfd52195269b3e901f42feff5d8c4368d78b9aee1a18ccd8aceb35119b613410fb9d587c8dd18e258569cf53a2d87cfb1754de08c809479286") syz_open_procfs(r8, &(0x7f00000002c0)='net/ip6_tables_matches\x00') r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e12230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c018bc00"}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) 470.82064ms ago: executing program 2 (id=2582): ioperm(0x6, 0x6, 0x8) lsm_list_modules(&(0x7f0000000040), &(0x7f0000000040), 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34800000", @ANYRES16=r1, @ANYBLOB="010029bd7000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010380)=@newtaction={0x180, 0x30, 0x1, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_vlan={0xc8, 0x9, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x80000000, 0x6, 0x3, 0xc6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x65, 0x6, "55b0ae6841f84f2d8272cb00526333cd857b97475d112a642c9358a528892a1824eca636e58446944e0a0ab42d20ca086a07949113da10418328d65227f6fc6de4a81ab8158621e47e2ac419b3413d8a9b10e808dcd7e9139cf9574e2f8c97dff7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xa0, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x5b, 0x6, "dd78809a230a3ebd424d9c460dfd067f14d74fc03c62ed61dd18e2662c71edd674bea339aed2d43472d87dd628dab84ce059efdc0549a5e07f8b686895b3074318402dc4ae66fbfbe1a8c046bfc984745e7aaef971c29f"}, {0xc}, {0xc}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x354, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2c0, 0x2a8, 0x2a8, 0x2c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x208, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6_vti0\x00', {0x9, 0x3, 0x13, 0x3ff, 0x8, 0x6, 0x80000001, 0x18, 0x8}, {0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x4, {0x100}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f4, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, &(0x7f0000000080), {[{{@ip={@multicast1, @multicast2, 0xff, 0xff, 'vlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x11, 0x1, 0x8}, 0x0, 0x94, 0xc4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xb, 0x1, @local, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@ecn={{0x24}, {0x20, 0x20, 0x61, 0x6c}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xd4, 0x104, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@set={{0x40}, {{0x1, [0x0, 0x6, 0x0, 0x4, 0x6], 0x1, 0x5}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x6, @rand_addr=0x64010101, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x600, 0x350, 0x1, 0x1}}, @common=@ttl={{0x24}, {0x2, 0x3}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0xf8, 0x8}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffff00, 0xffffff00, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0xf3, 0x3, 0x28}, 0x0, 0x9c, 0xd8, 0x0, {}, [@common=@ah={{0x2c}, {[0x4, 0x6]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x2, 0x101, @ipv6=@local, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x550) 349.415914ms ago: executing program 3 (id=2583): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xe, 0x6, 0x200, &(0x7f0000003c40)="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"}) 60.980612ms ago: executing program 3 (id=2584): r0 = syz_open_dev$dri(&(0x7f0000001480), 0xb, 0x200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={r1}) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xa) (async, rerun: 64) r5 = socket$xdp(0x2c, 0x3, 0x0) dup(r5) (async) syz_open_dev$midi(&(0x7f00000001c0), 0x0, 0x2) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) 427.201µs ago: executing program 1 (id=2585): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x0, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000080)=0xffffffff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010018005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 3 (id=2586): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600040001ff7f0000"], 0x78) close(0xffffffffffffffff) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r0, 0x0, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0xfffffbff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf0ffff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 61 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.884586][ T40] audit: type=1326 audit(1879974635.952:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.898141][ T40] audit: type=1326 audit(1879974635.952:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.905229][ T40] audit: type=1326 audit(1879974635.952:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.912109][ T40] audit: type=1326 audit(1879974635.952:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.918814][ T40] audit: type=1326 audit(1879974635.952:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.930805][ T40] audit: type=1326 audit(1879974635.952:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.937661][ T40] audit: type=1326 audit(1879974635.952:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 178.944382][ T40] audit: type=1326 audit(1879974635.952:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.2.1231" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 179.040849][T10071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.262033][T10075] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 179.267338][T10075] veth0_vlan: left promiscuous mode [ 179.273957][T10075] veth0_vlan: entered promiscuous mode [ 179.278533][T10075] team0: Device veth0_vlan failed to register rx_handler [ 179.313720][T10077] netlink: 'syz.3.1227': attribute type 27 has an invalid length. [ 179.424960][T10079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.427888][T10079] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.437596][T10079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.730758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 179.741310][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 180.511184][T10118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.770628][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.140644][ T836] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.391683][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 181.444641][ T836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 181.448220][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.451465][ T836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.454635][ T836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.458996][ T836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.462145][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.679072][ T836] usb 5-1: GET_CAPABILITIES returned 0 [ 181.680932][ T836] usbtmc 5-1:16.0: can't read capabilities [ 181.810579][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 182.064055][ T5980] usb 5-1: USB disconnect, device number 10 [ 182.365784][T10149] pimreg: entered allmulticast mode [ 182.423498][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1249'. [ 182.618860][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 182.652664][T10168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.659609][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 182.681180][T10177] 9pnet_fd: Insufficient options for proto=fd [ 182.757837][T10168] vlan0: entered promiscuous mode [ 182.759540][T10168] bond1: entered promiscuous mode [ 182.766213][T10178] dummy0: entered promiscuous mode [ 182.770473][T10178] bond0: (slave dummy0): Releasing backup interface [ 182.781047][T10178] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 182.850848][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.890599][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.039869][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 184.039880][ T40] audit: type=1804 audit(1879974641.132:622): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1268" name="file0" dev="tmpfs" ino=1818 res=1 errno=0 [ 184.090619][T10215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.243129][T10240] bridge0: port 3(netdevsim0) entered blocking state [ 184.249235][T10240] bridge0: port 3(netdevsim0) entered disabled state [ 184.251920][T10240] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 184.254930][T10240] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.261921][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 184.410881][ T40] audit: type=1804 audit(1879974641.512:623): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1278" name="/newroot/278/file0" dev="tmpfs" ino=1535 res=1 errno=0 [ 184.418696][T10253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.430854][T10255] netlink: 'syz.2.1279': attribute type 2 has an invalid length. [ 184.482639][ T5952] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 184.485932][ T5952] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 184.495186][T10258] overlayfs: failed to clone upperpath [ 184.660157][T10238] lo speed is unknown, defaulting to 1000 [ 184.854591][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 184.891149][T10272] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 184.894298][T10272] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 184.930647][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 185.352801][T10269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.356381][T10269] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 185.560721][T10320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1289'. [ 185.584352][ T40] audit: type=1804 audit(1879974642.682:624): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1290" name="file0" dev="tmpfs" ino=1841 res=1 errno=0 [ 185.595597][T10322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.880476][T10320] lo speed is unknown, defaulting to 1000 [ 185.970585][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.391363][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1295'. [ 186.511699][T10379] ubi: mtd0 is already attached to ubi31 [ 187.010602][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 187.326054][T10404] ubi: mtd0 is already attached to ubi31 [ 188.060588][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.348812][T10439] xt_CT: No such helper "snmp" [ 188.434084][T10447] ubi: mtd0 is already attached to ubi31 [ 189.100611][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.250674][ T5998] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.471890][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 189.475374][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.478425][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 189.484067][ T5998] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 189.487018][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.489544][ T5998] usb 5-1: Product: syz [ 189.491258][ T5998] usb 5-1: Manufacturer: syz [ 189.495051][ T5998] usb 5-1: SerialNumber: syz [ 189.499054][ T5998] usb 5-1: config 0 descriptor?? [ 189.729457][ T40] audit: type=1804 audit(1879974646.822:625): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1329" name="file0" dev="tmpfs" ino=1878 res=1 errno=0 [ 189.831456][T10477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.048787][ T5998] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 190.130648][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 190.889715][T10489] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1333'. [ 190.957025][ T5980] usb 5-1: USB disconnect, device number 11 [ 191.170700][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.478608][T10496] bond1: (slave dummy0): Releasing backup interface [ 191.481739][T10496] dummy0: left promiscuous mode [ 191.489119][T10496] bridge_slave_0: left allmulticast mode [ 191.491761][T10496] bridge_slave_0: left promiscuous mode [ 191.493608][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.499103][T10496] bridge_slave_1: left allmulticast mode [ 191.502138][T10496] bridge_slave_1: left promiscuous mode [ 191.503972][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.508301][T10496] : (slave bond_slave_0): Releasing backup interface [ 191.513250][T10496] : (slave bond_slave_1): Releasing backup interface [ 191.518234][T10496] team0: Port device team_slave_0 removed [ 191.521797][T10496] team0: Port device team_slave_1 removed [ 191.523811][T10496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.526417][T10496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.531713][T10496] team0: Port device geneve0 removed [ 191.534107][T10496] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 191.536322][T10496] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 191.538634][T10496] bridge0: port 3(netdevsim0) entered disabled state [ 191.543904][T10496] vlan0: left promiscuous mode [ 191.545542][T10496] bond1: left promiscuous mode [ 191.547288][ T5948] lo speed is unknown, defaulting to 1000 [ 191.549098][ T5948] syz2: Port: 1 Link DOWN [ 191.603128][ T40] audit: type=1804 audit(1879974648.702:626): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1340" name="/newroot/295/file0" dev="tmpfs" ino=1626 res=1 errno=0 [ 191.615687][T10505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.898663][T10520] overlayfs: conflicting options: userxattr,metacopy=on [ 192.220605][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.755268][ T40] audit: type=1804 audit(1879974649.852:627): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1349" name="file0" dev="tmpfs" ino=1916 res=1 errno=0 [ 192.770847][T10537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.251693][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.540351][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 193.696965][T10542] lo speed is unknown, defaulting to 1000 [ 193.732358][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.734254][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.300646][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.616071][T10568] lo speed is unknown, defaulting to 1000 [ 194.819637][T10587] fuse: Unknown parameter '0000000000' [ 195.330664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.822547][T10618] /dev/nullb0: Can't lookup blockdev [ 195.956735][T10623] fuse: Bad value for 'fd' [ 196.370626][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.714845][T10640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1378'. [ 197.337497][T10652] input: syz0 as /devices/virtual/input/input7 [ 197.410668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.628602][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 197.632030][T10670] fuse: Bad value for 'fd' [ 197.775229][T10654] lo speed is unknown, defaulting to 1000 [ 197.944914][ T40] audit: type=1804 audit(1879974655.042:628): pid=10693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1389" name="file0" dev="tmpfs" ino=1995 res=1 errno=0 [ 197.954131][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 197.962115][T10693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.450578][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.012374][ T40] audit: type=1326 audit(1879974656.102:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.020737][ T40] audit: type=1326 audit(1879974656.102:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.027682][ T40] audit: type=1326 audit(1879974656.112:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.036231][ T40] audit: type=1326 audit(1879974656.112:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.043038][ T40] audit: type=1326 audit(1879974656.112:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.049903][ T40] audit: type=1326 audit(1879974656.112:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.056497][ T40] audit: type=1326 audit(1879974656.112:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.063383][ T40] audit: type=1326 audit(1879974656.112:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.070133][ T40] audit: type=1326 audit(1879974656.112:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 199.490583][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.774013][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 199.871970][T10747] 8021q: adding VLAN 0 to HW filter on device  [ 199.874644][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.911881][T10747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.919333][ T836] lo speed is unknown, defaulting to 1000 [ 199.922182][ T836] syz2: Port: 1 Link ACTIVE [ 200.081230][T10757] can0: slcan on ptm0. [ 200.141009][T10756] can0 (unregistered): slcan off ptm0. [ 200.314190][T10771] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1414'. [ 200.530593][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.705042][T10776] input: syz1 as /devices/virtual/input/input8 [ 201.455521][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 201.473284][T10820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.570647][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.589515][T10831] overlayfs: failed to clone upperpath [ 201.601275][T10823] overlayfs: overlapping lowerdir path [ 201.741722][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'. [ 201.748178][T10843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.411976][T10861] overlayfs: failed to clone upperpath [ 202.610612][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 202.839397][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 202.849237][T10876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.865556][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 203.214345][T10896] xt_cluster: node mask cannot exceed total number of nodes [ 203.217529][T10896] xt_cluster: node mask cannot exceed total number of nodes [ 203.278658][T10884] netlink: 'syz.3.1453': attribute type 4 has an invalid length. [ 203.650658][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.806458][T10900] lo speed is unknown, defaulting to 1000 [ 203.876233][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 204.041529][T10925] syz_tun: entered allmulticast mode [ 204.044402][T10924] syz_tun: left allmulticast mode [ 204.700668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.795031][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'. [ 205.730630][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.014665][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 206.014676][ T40] audit: type=1804 audit(1879974663.112:702): pid=10998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1490" name="file0" dev="tmpfs" ino=2157 res=1 errno=0 [ 206.014932][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 206.032751][T10998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.164267][ T40] audit: type=1326 audit(1879974663.262:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.2.1491" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 206.780688][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.440653][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1499'. [ 207.753898][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1502'. [ 207.820575][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.857993][T11017] lo speed is unknown, defaulting to 1000 [ 208.327266][T11053] bridge0: port 1(netdevsim0) entered blocking state [ 208.330924][T11053] bridge0: port 1(netdevsim0) entered disabled state [ 208.334357][T11053] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 208.364558][T11055] overlayfs: missing 'lowerdir' [ 208.461697][T11053] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 208.462028][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 208.568667][T11062] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 208.695443][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 208.698489][ T40] audit: type=1804 audit(1879974665.792:704): pid=11068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1512" name="/newroot/331/file0" dev="tmpfs" ino=1835 res=1 errno=0 [ 208.714959][T11068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.850657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 208.871061][T11085] 9pnet_fd: Insufficient options for proto=fd [ 208.873806][T11085] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1517'. [ 209.253301][ T40] audit: type=1804 audit(1879974666.352:705): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1521" name="file0" dev="tmpfs" ino=2042 res=1 errno=0 [ 209.260299][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 209.267973][T11102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.766401][T11118] vlan0: entered allmulticast mode [ 209.768178][T11118] bond0: entered allmulticast mode [ 209.770144][T11118] bridge0: port 2(vlan0) entered blocking state [ 209.774772][T11118] bridge0: port 2(vlan0) entered disabled state [ 209.777821][T11118] vlan0: entered promiscuous mode [ 209.779504][T11118] bond0: entered promiscuous mode [ 209.900585][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.950125][T11125] fuse: Unknown parameter 'Ñh¨B‚Öj£:y’Þâây©' [ 210.057659][T11132] ip6t_rpfilter: unknown options [ 210.116075][T11138] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1534'. [ 210.119127][T11138] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1534'. [ 210.122499][T11138] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1534'. [ 210.148267][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 210.173415][ T40] audit: type=1804 audit(1879974667.272:706): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1536" name="file0" dev="tmpfs" ino=2084 res=1 errno=0 [ 210.184153][T11142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.225847][ T40] audit: type=1804 audit(1879974667.322:707): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1537" name="file0" dev="tmpfs" ino=2090 res=1 errno=0 [ 210.232862][T11144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.498207][T11149] netlink: 'syz.1.1538': attribute type 10 has an invalid length. [ 210.509369][T11149] veth0_vlan: left promiscuous mode [ 210.513668][T11149] veth0_vlan: entered promiscuous mode [ 210.519176][T11149] team0: Device veth0_vlan failed to register rx_handler [ 210.749396][T11153] ubi: mtd0 is already attached to ubi31 [ 210.940668][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 211.431704][T11168] 9pnet_fd: Insufficient options for proto=fd [ 211.789818][T11189] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 211.970605][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 212.312355][T11197] siw: device registration error -23 [ 212.642053][T11214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.010600][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 213.633877][T11230] netlink: 'syz.2.1567': attribute type 10 has an invalid length. [ 213.638875][T11230] hsr_slave_0: left promiscuous mode [ 213.641138][T11230] hsr_slave_1: left promiscuous mode [ 213.739789][T11233] __nla_validate_parse: 3 callbacks suppressed [ 213.739800][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 213.746272][T11233] fuse: Unknown parameter '0x0000000000000048$' [ 213.975893][T11254] vim2m vim2m.0: vidioc_s_fmt queue busy [ 214.050595][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.106343][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1572'. [ 214.808418][T11280] netlink: zone id is out of range [ 214.814102][T11280] netlink: set zone limit has 8 unknown bytes [ 214.958824][T11288] ubi: mtd0 is already attached to ubi31 [ 215.090599][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 215.647993][T11310] input: syz0 as /devices/virtual/input/input9 [ 215.735117][T11316] pimreg: entered allmulticast mode [ 215.738587][T11316] pimreg: left allmulticast mode [ 215.740259][T11316] lo: left allmulticast mode [ 215.846877][T11319] lo: entered allmulticast mode [ 215.849161][T11318] lo: left allmulticast mode [ 215.951465][T11325] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.955927][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 216.140580][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.116056][T11349] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.118336][T11349] tipc: Enabled bearer , priority 10 [ 217.170575][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.250711][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.321788][T11363] ubi: mtd0 is already attached to ubi31 [ 217.530579][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.050783][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.210638][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.803021][T11398] netlink: 'syz.0.1617': attribute type 10 has an invalid length. [ 218.831965][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 219.002845][T11404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1619'. [ 219.090614][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 219.205681][T11413] netlink: 'syz.0.1623': attribute type 4 has an invalid length. [ 219.209719][T11413] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1623'. [ 219.306145][T11418] overlayfs: failed to clone upperpath [ 219.507244][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1626'. [ 219.510102][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1626'. [ 220.137433][ T40] audit: type=1326 audit(1879974677.232:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.140571][ C3] net_ratelimit: 2 callbacks suppressed [ 220.140581][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.145093][ T40] audit: type=1326 audit(1879974677.232:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.168860][ T40] audit: type=1326 audit(1879974677.232:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.176384][ T40] audit: type=1326 audit(1879974677.232:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.184571][ T40] audit: type=1326 audit(1879974677.232:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.192737][ T40] audit: type=1326 audit(1879974677.232:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.201520][ T40] audit: type=1326 audit(1879974677.252:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.208129][ T40] audit: type=1326 audit(1879974677.252:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.216604][ T40] audit: type=1326 audit(1879974677.252:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.224881][ T40] audit: type=1326 audit(1879974677.252:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11437 comm="syz.0.1631" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 220.290737][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.763029][T11445] lo speed is unknown, defaulting to 1000 [ 221.170580][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.193568][T11457] ubi: mtd0 is already attached to ubi31 [ 221.330591][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 221.510056][T11464] cgroup: No subsys list or none specified [ 222.220577][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 222.380590][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 222.597875][T11492] netlink: 'syz.1.1647': attribute type 11 has an invalid length. [ 222.735256][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1647'. [ 223.006373][T11498] sctp: [Deprecated]: syz.3.1649 (pid 11498) Use of int in max_burst socket option. [ 223.006373][T11498] Use struct sctp_assoc_value instead [ 223.250595][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 223.410606][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 223.788233][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 224.290590][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 224.450615][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 224.856847][T11549] overlayfs: failed to clone upperpath [ 225.192889][ T5998] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 225.330577][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.360998][ T5998] usb 5-1: device descriptor read/64, error -71 [ 225.500582][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 225.611018][ T5998] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 225.761627][T11572] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 225.794747][T11572] bond2: (slave gretap1): making interface the new active one [ 225.800066][T11572] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 225.803334][ T5998] usb 5-1: device descriptor read/64, error -71 [ 225.822827][T11572] bond2 (unregistering): (slave gretap1): Releasing active interface [ 225.858285][T11572] bond2 (unregistering): Released all slaves [ 225.911054][ T5998] usb usb5-port1: attempt power cycle [ 226.031629][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 226.034468][T11581] bridge_slave_1: left allmulticast mode [ 226.036278][T11581] bridge_slave_1: left promiscuous mode [ 226.039000][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.052745][T11581] bridge_slave_0: left allmulticast mode [ 226.054589][T11581] bridge_slave_0: left promiscuous mode [ 226.057780][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.260968][ T5998] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 226.281502][ T5998] usb 5-1: device descriptor read/8, error -71 [ 226.380735][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.520947][ T5998] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 226.530645][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 226.542359][ T5998] usb 5-1: device descriptor read/8, error -71 [ 226.651449][ T5998] usb usb5-port1: unable to enumerate USB device [ 227.067518][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 227.067529][ T40] audit: type=1804 audit(1879974684.162:736): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1679" name="file0" dev="tmpfs" ino=2418 res=1 errno=0 [ 227.070136][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 227.089758][T11601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.410574][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.570666][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.087056][T11620] netlink: 'syz.0.1683': attribute type 30 has an invalid length. [ 228.254238][T11625] netlink: 'syz.3.1686': attribute type 21 has an invalid length. [ 228.256748][T11625] netlink: 'syz.3.1686': attribute type 6 has an invalid length. [ 228.259227][T11625] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1686'. [ 228.292228][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 228.450583][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 228.538788][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 228.620595][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 229.242775][T11650] lo speed is unknown, defaulting to 1000 [ 229.298041][T11668] vlan0: entered promiscuous mode [ 229.299711][T11668] hsr_slave_1: entered promiscuous mode [ 229.301724][T11668] vlan0: entered allmulticast mode [ 229.303360][T11668] hsr_slave_1: entered allmulticast mode [ 229.490596][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 229.818631][ C2] vcan0: j1939_tp_rxtimer: 0xffff88800df6c800: rx timeout, send abort [ 229.821437][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88800df6c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.913634][T11681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1709'. [ 229.956040][ T40] audit: type=1326 audit(1879974687.052:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11686 comm="syz.2.1712" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 230.464994][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.467445][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.469825][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.472693][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.475121][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.477430][T11703] lo speed is unknown, defaulting to 1000 [ 230.477495][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.500970][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.503993][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.506433][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.508801][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.521171][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.524283][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.526719][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.529096][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.540580][ C3] net_ratelimit: 1 callbacks suppressed [ 230.540590][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.541168][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.546989][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.549388][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.570933][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.573344][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.581584][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.591151][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.593566][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.595965][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.598329][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.610937][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.613331][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.615744][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.618137][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.620511][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.635847][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.640819][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.643217][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.645783][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.648191][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.661237][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.661456][T11712] overlay: ./file0 is not a directory [ 230.663657][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.668997][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.673169][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.673236][T11712] overlay: ./file0 is not a directory [ 230.675611][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.690611][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.691166][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.695247][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.697644][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.700022][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.730922][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.733354][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.741248][T11713] IPVS: length: 78 != 8 [ 230.755638][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.762846][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.771181][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.779167][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.788698][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.796520][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.803640][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.813168][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 230.866773][ T5998] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 230.981208][T11712] lo speed is unknown, defaulting to 1000 [ 231.362452][ T40] audit: type=1800 audit(1879974688.462:738): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1721" name="file0" dev="overlay" ino=2058 res=0 errno=0 [ 231.570576][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.740576][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.752271][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 232.158126][T11746] tipc: Started in network mode [ 232.159730][T11746] tipc: Node identity , cluster identity 4711 [ 232.160848][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 232.163303][T11746] tipc: Failed to set node id, please configure manually [ 232.166763][T11746] tipc: Enabling of bearer rejected, failed to enable media [ 232.169822][T11742] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 232.174322][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 232.216890][T11757] netlink: 'syz.2.1731': attribute type 11 has an invalid length. [ 232.260988][ T5998] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 232.416832][ T5998] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.421012][ T5998] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.425919][ T5998] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.436033][ T5998] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 232.446122][ T5998] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 232.456974][ T5998] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.468589][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.477567][ T5998] usb 5-1: Product: syz [ 232.480047][ T5998] usb 5-1: Manufacturer: syz [ 232.488040][ T5998] cdc_wdm 5-1:1.0: skipping garbage [ 232.494184][ T5998] cdc_wdm 5-1:1.0: skipping garbage [ 232.498668][ T5998] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 232.503203][ T5998] cdc_wdm 5-1:1.0: Unknown control protocol [ 232.620622][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 232.780580][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.005985][ T64] usb 5-1: USB disconnect, device number 16 [ 233.266669][ T40] audit: type=1326 audit(1879974690.362:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.273549][ T40] audit: type=1326 audit(1879974690.362:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.280175][ T40] audit: type=1326 audit(1879974690.362:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.400770][ T40] audit: type=1326 audit(1879974690.362:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.409929][ T40] audit: type=1326 audit(1879974690.362:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.417083][ T40] audit: type=1326 audit(1879974690.362:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.426896][ T40] audit: type=1326 audit(1879974690.362:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.433633][ T40] audit: type=1326 audit(1879974690.362:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.440096][ T40] audit: type=1326 audit(1879974690.362:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.452683][ T40] audit: type=1326 audit(1879974690.362:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.1738" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 233.660607][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.731386][T11787] syz.0.1741 (11787): drop_caches: 2 [ 233.734495][T11787] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 233.820582][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 233.857861][T11787] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 234.113362][T11801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1743'. [ 234.691138][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 234.809115][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'. [ 235.090257][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 235.312166][T11830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1751'. [ 235.519272][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1752'. [ 235.740610][ C3] net_ratelimit: 2 callbacks suppressed [ 235.740622][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 235.775210][T11838] random: crng reseeded on system resumption [ 235.900582][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.770600][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 236.930588][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 237.463582][T11878] overlayfs: failed to clone upperpath [ 237.810711][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 237.970592][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 238.850621][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 238.912889][T11927] netlink: 'syz.0.1779': attribute type 27 has an invalid length. [ 238.947279][T11927] bridge0: port 1(syz_tun) entered disabled state [ 238.960676][T11931] xt_hashlimit: overflow, try lower: 0/0 [ 238.963707][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1772'. [ 238.998605][T11933] bridge0: port 1(syz_tun) entered blocking state [ 239.000506][T11933] bridge0: port 1(syz_tun) entered forwarding state [ 239.018414][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.020601][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 239.049771][T11933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.261451][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 239.391247][T11944] xt_hashlimit: overflow, try lower: 0/0 [ 239.457464][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1787'. [ 239.479197][T11950] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 239.794587][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 239.900584][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 239.965399][T11974] netlink: 'syz.0.1794': attribute type 10 has an invalid length. [ 239.967952][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1794'. [ 240.930636][ C3] net_ratelimit: 2 callbacks suppressed [ 240.930648][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.100572][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.430631][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 241.430644][ T40] audit: type=1326 audit(1879974698.522:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.1.1805" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 241.560387][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 241.930105][T12022] vivid-007: disconnect [ 241.937437][T12022] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1809'. [ 241.980687][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.140589][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.592001][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 242.713296][T12020] vivid-007: reconnect [ 243.010577][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.082903][T12050] overlay: ./file0 is not a directory [ 243.110508][T12050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1817'. [ 243.170120][T12054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1818'. [ 243.180603][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.355598][T12061] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 244.060576][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.220631][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.343482][T12090] __nla_validate_parse: 2 callbacks suppressed [ 244.343492][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 244.670484][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 245.090634][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.192254][T12119] overlayfs: failed to clone upperpath [ 245.203465][T12123] overlayfs: failed to clone lowerpath [ 245.250583][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.289014][T12111] overlayfs: failed to clone upperpath [ 245.351426][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 245.450495][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1846'. [ 245.453368][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1846'. [ 245.683435][T12142] batadv_slave_0: entered promiscuous mode [ 246.058723][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 246.130621][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.143071][T12150] ip6tnl1: entered promiscuous mode [ 246.144696][T12150] ip6tnl1: entered allmulticast mode [ 246.147824][T12150] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 246.300665][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.465976][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 246.496875][T12162] could not allocate digest TFM handle blake2s-224-x86 [ 246.568343][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 246.603098][T12181] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1861'. [ 247.170634][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.330587][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.362287][T12195] 9pnet_fd: Insufficient options for proto=fd [ 247.800429][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 248.036740][T12221] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 248.210607][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.370595][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.518656][T12229] overlayfs: failed to clone lowerpath [ 249.048216][T12242] can0: slcan on ttyprintk. [ 249.182021][T12241] can0 (unregistered): slcan off ttyprintk. [ 249.250584][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.300591][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.873271][T12317] netlink: 'syz.0.1899': attribute type 58 has an invalid length. [ 251.330612][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 251.610966][T12331] __nla_validate_parse: 2 callbacks suppressed [ 251.610981][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1906'. [ 251.880615][ T64] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 252.042129][ T64] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.045183][ T64] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.059827][ T64] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.064108][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.143909][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1910'. [ 252.146695][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1910'. [ 252.301106][ T64] usb 5-1: usb_control_msg returned -71 [ 252.303028][ T64] usbtmc 5-1:16.0: can't read capabilities [ 252.315807][ T64] usb 5-1: USB disconnect, device number 17 [ 252.380568][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 252.851661][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 252.902996][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1917'. [ 253.150605][ T64] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 253.321877][ T64] usb 5-1: config 0 has no interfaces? [ 253.327216][ T64] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 253.330003][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.341862][ T64] usb 5-1: Product: syz [ 253.343194][ T64] usb 5-1: Manufacturer: syz [ 253.344585][ T64] usb 5-1: SerialNumber: syz [ 253.353790][ T64] usb 5-1: config 0 descriptor?? [ 253.410580][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.577318][ T5980] usb 5-1: USB disconnect, device number 18 [ 254.289517][ T40] audit: type=1107 audit(1879974711.382:799): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¤g¸'j‹NšJ0„ç pªúyEG)¬ÔÌ袵 [ 254.289517][ T40] q”¾Bœ¾ÑÓœÛùφҭ½$2(P.€)sõ|B¹Ÿ´h÷ç==\‹t˱dŽ…}9pµàsÕܤèp¯68Ï|Ùn„85_#Vûyù׋·ZãUª”ï¤ÕÏ:¸ƒ¶@2©rÍÐÖ î…ŸTg¾çXQ,6¢4ÇáÁ)’3&ÙT $±Æ’lË=ògT¸ÆŒà»Là1%lƒlÝTHË$ hѲ‘¨˜v2€ Èöìâ÷y&>®_›éĦŠZ:ʽM„l~#µÍÁɺFN‹=ä¯ÒI䶈Â}ü”XmÆ"¿qåR(Æ5¯ì/žëaà=ç]Ý8å÷å9ˆÖ¤' [ 254.450619][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.172327][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.174324][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.327762][T12459] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 255.337276][T12459] tipc: Started in network mode [ 255.338974][T12459] tipc: Node identity 4, cluster identity 4711 [ 255.342076][T12459] tipc: Node number set to 4 [ 255.397170][T12461] overlayfs: failed to clone lowerpath [ 255.410437][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'. [ 255.500575][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.642164][T12469] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.723858][T12476] batadv_slave_1: entered promiscuous mode [ 255.727143][T12475] batadv_slave_1: left promiscuous mode [ 256.439576][T12496] 9pnet_fd: Insufficient options for proto=fd [ 256.530598][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.619031][T12508] fuseblk: Bad value for 'fd' [ 256.668356][T12503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1962'. [ 256.831139][T12519] pim6reg: entered allmulticast mode [ 256.836329][T12521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 256.838915][T12519] pim6reg: left allmulticast mode [ 256.839896][T12521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1969'. [ 256.847291][T12521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 256.851604][T12521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1969'. [ 256.887233][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 256.946809][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 256.949910][T12527] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1970'. [ 256.954516][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 256.962241][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1972'. [ 257.308625][T12549] netlink: 'syz.0.1978': attribute type 2 has an invalid length. [ 257.312144][T12549] netlink: 'syz.0.1978': attribute type 8 has an invalid length. [ 257.352132][ T40] audit: type=1800 audit(1879974714.452:800): pid=12551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1979" name="/" dev="9p" ino=2 res=0 errno=0 [ 257.432558][T12553] tipc: Started in network mode [ 257.434227][T12553] tipc: Node identity 4, cluster identity 4711 [ 257.436237][T12553] tipc: Node number set to 4 [ 257.440059][T12553] tipc: Enabled bearer , priority 22 [ 257.513426][T12555] netlink: 'syz.0.1981': attribute type 1 has an invalid length. [ 257.580610][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.642383][ T40] audit: type=1326 audit(1879974714.742:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.0.1984" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67579 code=0x0 [ 258.071368][T12598] 9pnet_fd: Insufficient options for proto=fd [ 258.319738][T12610] xt_hashlimit: overflow, try lower: 0/0 [ 258.610639][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.642622][T12633] random: crng reseeded on system resumption [ 258.694534][T12637] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 258.699854][T12637] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 258.760772][T12647] gretap0: entered promiscuous mode [ 258.838646][T12652] Failed to get privilege flags for destination (handle=0x2:0x0) [ 258.844190][T12652] fuse: Unknown parameter 'þùŠ L¨<ø·½™UÚøKQú7ï]÷›:¿èœ5œ} ¾²KZÐÉͤê(¡ÄܲŸS6†íµÓ}¥p'o©zc¿^àUX€eº¿0íÚÍæèÒ²?é¡fu£`hlI¶TýQTE‘¥çRW½ÔÀa* Òš£pURÒ‚¨Ëé÷‹ü¾v³Csšõt €®jž ÜiG¾Õ{ñ‰00000000000000000000' [ 259.086763][T12661] kAFS: No cell specified [ 259.120155][T12663] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.233662][T12672] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 259.236608][T12672] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.239168][T12672] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.242200][T12672] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.244759][T12672] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.250715][T12672] team0: Port device geneve0 added [ 259.650652][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.690578][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 261.405765][T12736] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 261.725196][T12747] __nla_validate_parse: 5 callbacks suppressed [ 261.725227][T12747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2049'. [ 261.740596][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.367198][ T5998] IPVS: starting estimator thread 0... [ 262.370085][T12786] tipc: Enabled bearer , priority 10 [ 262.451827][T12787] IPVS: using max 49 ests per chain, 117600 per kthread [ 262.740308][T12796] overlay: Unknown parameter 'obj_role' [ 262.770593][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.983082][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 263.810609][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.835340][T12822] 9pnet_fd: Insufficient options for proto=fd [ 264.087258][T12832] fuse: Bad value for 'group_id' [ 264.088939][T12832] fuse: Bad value for 'group_id' [ 264.183509][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 264.316322][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'. [ 264.860660][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.100967][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'. [ 265.129800][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 265.251679][T12883] rdma_rxe: rxe_newlink: failed to add lo [ 265.311389][T12886] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 265.317824][T12886] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2089'. [ 265.686709][T12894] ubi: mtd0 is already attached to ubi31 [ 265.890631][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 266.656473][ T40] audit: type=1326 audit(627140098.768:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.669150][ T40] audit: type=1326 audit(627140098.768:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.687416][ T40] audit: type=1326 audit(627140098.768:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.693833][ T40] audit: type=1326 audit(627140098.768:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.727596][ T40] audit: type=1326 audit(627140098.768:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.736660][ T40] audit: type=1326 audit(627140098.768:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.744100][ T40] audit: type=1326 audit(627140098.768:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.751885][ T40] audit: type=1326 audit(627140098.768:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.758457][ T40] audit: type=1326 audit(627140098.768:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.765338][ T40] audit: type=1326 audit(627140098.768:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2103" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 266.930674][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.970635][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.240491][T12956] cgroup: fork rejected by pids controller in /syz1 [ 268.805787][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2118'. [ 269.010586][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.075393][T13035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 269.080136][T13035] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 269.904909][T13041] ubi: mtd0 is already attached to ubi31 [ 270.050586][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.879305][T13068] netlink: 'syz.3.2130': attribute type 10 has an invalid length. [ 270.967095][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 271.090659][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.589823][T13096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2141'. [ 271.601014][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'. [ 271.801795][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 272.140649][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.163564][T13123] siw: device registration error -23 [ 272.347082][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 272.347095][ T40] audit: type=1326 audit(627140104.418:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 272.358072][ T40] audit: type=1326 audit(627140104.418:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 272.378548][T13125] ubi: mtd0 is already attached to ubi31 [ 272.789065][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 272.815401][T13134] xt_hashlimit: size too large, truncated to 1048576 [ 272.831157][T13134] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 272.917278][T13138] 9pnet_fd: Insufficient options for proto=fd [ 273.017557][T13148] wireguard0: entered promiscuous mode [ 273.019387][T13148] wireguard0: entered allmulticast mode [ 273.180574][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.330635][ T7958] IPVS: ip_vs_send_async error -101 [ 273.480701][ T836] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 273.672196][ T836] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.677588][ T836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.680255][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.682853][ T836] usb 5-1: Product: syz [ 273.684145][ T836] usb 5-1: Manufacturer: syz [ 273.685578][ T836] usb 5-1: SerialNumber: syz [ 273.900932][ T836] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 274.211017][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 274.294745][ T836] usb 5-1: USB disconnect, device number 19 [ 274.297867][ T836] usblp0: removed [ 274.369391][ T29] lo speed is unknown, defaulting to 1000 [ 274.372196][ T29] syz2: Port: 1 Link DOWN [ 274.978480][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 274.985746][ T40] audit: type=1326 audit(627140107.098:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.1.2171" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x0 [ 275.104603][T13202] overlay: Unknown parameter '//file0' [ 275.260668][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.277519][T13207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2172'. [ 275.592434][T13220] overlayfs: failed to clone upperpath [ 276.290656][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 276.634050][ T836] libceph: connect (1)[c::]:6789 error -101 [ 276.660663][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 276.661907][T13237] ceph: No mds server is up or the cluster is laggy [ 277.215469][T13250] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 277.221766][T13250] overlayfs: missing 'lowerdir' [ 277.272700][T13252] IPv6: NLM_F_REPLACE set, but no existing node found! [ 277.340639][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.363804][T13254] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2188'. [ 277.917240][ T40] audit: type=1326 audit(627140110.028:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.927332][ T40] audit: type=1326 audit(627140110.028:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.936866][ T40] audit: type=1326 audit(627140110.038:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.943602][ T40] audit: type=1326 audit(627140110.038:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.950224][ T40] audit: type=1326 audit(627140110.038:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.959233][ T40] audit: type=1326 audit(627140110.038:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.966429][ T40] audit: type=1326 audit(627140110.038:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.975405][ T40] audit: type=1326 audit(627140110.038:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.982406][ T40] audit: type=1326 audit(627140110.038:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 277.993832][ T40] audit: type=1326 audit(627140110.038:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.3.2194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 278.057886][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 278.370636][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 278.388164][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 278.540376][T13296] netlink: 'syz.3.2201': attribute type 16 has an invalid length. [ 278.543858][T13296] netlink: 'syz.3.2201': attribute type 17 has an invalid length. [ 278.557522][T13298] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 278.685578][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 278.886764][T13315] tipc: Enabling of bearer rejected, failed to enable media [ 279.420586][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.126740][T13349] autofs: Bad value for 'fd' [ 280.460590][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.693008][ T7958] IPVS: ip_vs_send_async error -101 [ 280.921642][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 281.233289][T13402] wireguard0: entered promiscuous mode [ 281.235116][T13402] wireguard0: entered allmulticast mode [ 281.500575][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 281.811380][T13417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.081389][T13432] overlay: Unknown parameter 'volatile:/' [ 282.091731][T13434] overlayfs: failed to clone upperpath [ 282.107988][T13434] netlink: zone id is out of range [ 282.109743][T13434] netlink: zone id is out of range [ 282.112125][T13434] netlink: zone id is out of range [ 282.117197][T13434] netlink: zone id is out of range [ 282.118777][T13434] netlink: zone id is out of range [ 282.417750][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 282.540715][ C3] net_ratelimit: 47 callbacks suppressed [ 282.540733][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 282.631673][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'. [ 283.580629][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 284.610613][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 285.334857][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 285.582776][T13517] syz_tun: entered allmulticast mode [ 285.586336][T13516] syz_tun: left allmulticast mode [ 285.660640][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 286.093634][T13529] wireguard0: entered promiscuous mode [ 286.095612][T13529] wireguard0: entered allmulticast mode [ 286.700586][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 286.874311][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 287.114013][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.119112][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.125328][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.128046][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.130817][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.150611][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.157727][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.165957][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.169449][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.173928][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.382376][T13553] lo speed is unknown, defaulting to 1000 [ 287.469438][T13553] chnl_net:caif_netlink_parms(): no params data found [ 287.571986][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.574277][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.576584][T13553] bridge_slave_0: entered allmulticast mode [ 287.579121][T13553] bridge_slave_0: entered promiscuous mode [ 287.582201][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.584431][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.586730][T13553] bridge_slave_1: entered allmulticast mode [ 287.589284][T13553] bridge_slave_1: entered promiscuous mode [ 287.633465][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.645160][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.719449][T13553] team0: Port device team_slave_0 added [ 287.730658][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 287.736642][T13553] team0: Port device team_slave_1 added [ 287.903871][ T8776] team0: Port device geneve0 removed [ 287.916748][T13576] netlink: 'syz.1.2288': attribute type 4 has an invalid length. [ 287.919219][T13576] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2288'. [ 288.046835][ T7864] smc: removing ib device syz0 [ 288.046876][ T8776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.052994][ T8776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.056646][ T8776] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 288.064302][ T8776] bond0 (unregistering): Released all slaves [ 288.076511][ T8776] bond1 (unregistering): Released all slaves [ 288.088009][ T8776] bond2 (unregistering): Released all slaves [ 288.127396][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.133151][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.145083][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.158915][T13576] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 288.169179][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.176598][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.190620][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.270055][T13553] hsr_slave_0: entered promiscuous mode [ 288.273138][T13553] hsr_slave_1: entered promiscuous mode [ 288.600935][ T64] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 288.761798][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.765112][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.768017][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.770648][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.772970][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.776741][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.780466][ T64] usb 5-1: config 0 descriptor?? [ 289.027188][T13553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.033348][T13553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.037535][T13553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.042392][T13553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.100066][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.112710][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.117690][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.119936][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.129075][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.131401][ T8772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.189485][T13655] overlayfs: failed to clone upperpath [ 289.191506][T13609] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 289.203960][ T64] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 289.222123][ T64] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 289.250820][ T5952] Bluetooth: hci2: command tx timeout [ 289.269863][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.302482][T13553] veth0_vlan: entered promiscuous mode [ 289.342140][T13663] lo speed is unknown, defaulting to 1000 [ 289.343434][T13553] veth1_vlan: entered promiscuous mode [ 289.381221][T13553] veth0_macvtap: entered promiscuous mode [ 289.384892][T13553] veth1_macvtap: entered promiscuous mode [ 289.398941][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.406471][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.410759][T13553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.413486][T13553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.416219][T13553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.418906][T13553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.463620][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.471069][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.522189][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.524710][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.674254][T13680] fuse: Unknown parameter '0x000000000000000d' [ 289.810598][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 289.929677][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.934456][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.937764][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.941411][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.943955][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.032421][T13690] lo speed is unknown, defaulting to 1000 [ 290.113361][T13690] chnl_net:caif_netlink_parms(): no params data found [ 290.204580][ T8776] tipc: Disabling bearer [ 290.206542][ T8776] tipc: Left network mode [ 290.235020][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.237426][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.239766][T13690] bridge_slave_0: entered allmulticast mode [ 290.244365][T13690] bridge_slave_0: entered promiscuous mode [ 290.264000][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.266333][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.268631][T13690] bridge_slave_1: entered allmulticast mode [ 290.271644][T13690] bridge_slave_1: entered promiscuous mode [ 290.305019][T13690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.309317][T13690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.368441][T13690] team0: Port device team_slave_0 added [ 290.372372][T13690] team0: Port device team_slave_1 added [ 290.410643][T13690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.413016][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.421125][T13690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.425164][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.427299][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.435510][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.477547][T13705] overlay: ./file0 is not a directory [ 290.479645][T13705] fuse: Bad value for 'fd' [ 290.505805][T13690] hsr_slave_0: entered promiscuous mode [ 290.508039][T13690] hsr_slave_1: entered promiscuous mode [ 290.510205][T13690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.513226][T13690] Cannot create hsr debugfs directory [ 290.529104][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 290.529114][ T40] audit: type=1326 audit(627140378.641:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.538503][ T40] audit: type=1326 audit(627140378.651:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.545367][ T40] audit: type=1326 audit(627140378.651:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.552314][ T40] audit: type=1326 audit(627140378.651:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.558820][ T40] audit: type=1326 audit(627140378.651:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.565456][ T40] audit: type=1326 audit(627140378.651:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.572254][ T40] audit: type=1326 audit(627140378.651:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.578600][ T40] audit: type=1326 audit(627140378.651:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.585045][ T40] audit: type=1326 audit(627140378.651:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.591534][ T40] audit: type=1326 audit(627140378.651:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.3.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 290.622634][ T8776] hsr_slave_0: left promiscuous mode [ 290.624986][ T8776] hsr_slave_1: left promiscuous mode [ 290.627082][ T8776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.630934][ T8776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.644817][ T8776] pimreg (unregistering): left allmulticast mode [ 290.862312][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 290.972469][T13715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2320'. [ 291.235557][ T836] usb 5-1: USB disconnect, device number 20 [ 291.330972][ T5952] Bluetooth: hci2: command tx timeout [ 291.400482][ T8776] team0 (unregistering): Port device team_slave_1 removed [ 291.469982][ T8776] team0 (unregistering): Port device team_slave_0 removed [ 291.890685][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 291.971037][ T5952] Bluetooth: hci4: command tx timeout [ 292.054601][T13690] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.082373][T13723] lo speed is unknown, defaulting to 1000 [ 292.171419][T13741] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 292.173495][T13741] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.176505][T13741] vhci_hcd vhci_hcd.0: Device attached [ 292.183348][T13741] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 292.185421][T13741] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.188099][T13741] vhci_hcd vhci_hcd.0: Device attached [ 292.190443][T13741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.196724][T13741] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 292.198793][T13741] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.205109][T13690] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.205524][T13741] vhci_hcd vhci_hcd.0: Device attached [ 292.215348][T13741] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 292.217428][T13741] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 292.219791][T13741] vhci_hcd vhci_hcd.0: Device attached [ 292.225930][T13741] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(24) [ 292.227929][T13741] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 292.230473][T13741] vhci_hcd vhci_hcd.0: Device attached [ 292.238612][T13741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.281765][T13690] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.353340][T13690] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.371499][ T5998] vhci_hcd: vhci_device speed not set [ 292.431049][ T5998] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 292.478775][T13690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.484358][T13690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.488444][T13690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.498878][T13690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.549065][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.561468][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.610911][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.613183][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.621774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.624039][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.706915][T13748] vhci_hcd: connection closed [ 292.708050][T13750] vhci_hcd: connection closed [ 292.709668][T13746] vhci_hcd: connection closed [ 292.710593][T13742] vhci_hcd: connection reset by peer [ 292.711935][T13752] vhci_hcd: connection closed [ 292.714398][ T63] vhci_hcd: stop threads [ 292.717253][ T63] vhci_hcd: release socket [ 292.727069][ T63] vhci_hcd: disconnect device [ 292.729875][ T63] vhci_hcd: stop threads [ 292.732191][ T63] vhci_hcd: release socket [ 292.734112][ T63] vhci_hcd: disconnect device [ 292.736626][ T63] vhci_hcd: stop threads [ 292.738099][ T63] vhci_hcd: release socket [ 292.739723][ T63] vhci_hcd: disconnect device [ 292.743158][ T63] vhci_hcd: stop threads [ 292.745468][ T63] vhci_hcd: release socket [ 292.747537][ T63] vhci_hcd: disconnect device [ 292.749891][ T63] vhci_hcd: stop threads [ 292.753709][ T63] vhci_hcd: release socket [ 292.755853][ T63] vhci_hcd: disconnect device [ 292.858582][T13690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.885569][T13690] veth0_vlan: entered promiscuous mode [ 292.891781][T13690] veth1_vlan: entered promiscuous mode [ 292.906978][T13690] veth0_macvtap: entered promiscuous mode [ 292.912278][T13690] veth1_macvtap: entered promiscuous mode [ 292.921487][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.924816][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.928610][T13690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.930634][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 292.933024][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.936358][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.940201][T13690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.947670][T13690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.950444][T13690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.953403][T13690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.956150][T13690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.007097][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.009538][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.023379][ T7864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.025846][ T7864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.410613][ T5952] Bluetooth: hci2: command tx timeout [ 293.746492][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.751032][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.754847][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.757862][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.764706][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.876345][T13773] lo speed is unknown, defaulting to 1000 [ 293.953849][T13773] chnl_net:caif_netlink_parms(): no params data found [ 293.980594][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 294.053899][ T67] Bluetooth: hci4: command tx timeout [ 294.085643][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.090170][T13773] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.096832][T13773] bridge_slave_0: entered allmulticast mode [ 294.099403][T13773] bridge_slave_0: entered promiscuous mode [ 294.103539][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.105793][T13773] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.108005][T13773] bridge_slave_1: entered allmulticast mode [ 294.114513][T13773] bridge_slave_1: entered promiscuous mode [ 294.157365][T13773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.162592][T13773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.226491][T13773] team0: Port device team_slave_0 added [ 294.230488][T13773] team0: Port device team_slave_1 added [ 294.268718][T13773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.274617][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.283795][T13773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.288023][T13773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.290448][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.299492][T13773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.331310][T13807] ubi: mtd0 is already attached to ubi31 [ 294.340692][T13773] hsr_slave_0: entered promiscuous mode [ 294.344322][T13773] hsr_slave_1: entered promiscuous mode [ 294.346427][T13773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.348777][T13773] Cannot create hsr debugfs directory [ 294.678250][T13773] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 294.681348][T13773] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 294.685245][T13773] bridge0: port 1(netdevsim0) entered disabled state [ 294.783961][T13773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.789096][T13773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.794881][T13773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.799330][T13773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.820107][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.822443][T13773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.824796][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.827011][T13773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.855868][T13773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.866104][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.869908][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.892460][T13773] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.899370][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.902113][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.907651][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.909927][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.010591][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.076314][T13773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.119677][T13773] veth0_vlan: entered promiscuous mode [ 295.131191][T13773] veth1_vlan: entered promiscuous mode [ 295.153029][T13773] veth0_macvtap: entered promiscuous mode [ 295.157990][T13773] veth1_macvtap: entered promiscuous mode [ 295.166434][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.169840][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.173326][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.176672][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.180919][T13773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.196794][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.200200][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.203655][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.207157][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.212420][T13773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.216599][T13773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.219435][T13773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.223713][T13773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.226558][T13773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.325265][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.327730][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.345474][ T7864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.348844][ T7864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.430421][T13822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.443056][T13826] ubi: mtd0 is already attached to ubi31 [ 295.490923][ T67] Bluetooth: hci2: command tx timeout [ 295.810807][ T67] Bluetooth: hci0: command tx timeout [ 295.895943][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2346'. [ 295.965789][T13845] can: request_module (can-proto-5) failed. [ 296.050610][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 296.140812][ T67] Bluetooth: hci4: command tx timeout [ 296.838018][T13866] ubi: mtd0 is already attached to ubi31 [ 296.954335][T13855] netlink: 'syz.1.2351': attribute type 2 has an invalid length. [ 297.030467][T13873] 9pnet_fd: Insufficient options for proto=fd [ 297.090678][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 297.186062][T13875] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 297.561905][ T5998] vhci_hcd: vhci_device speed not set [ 297.637771][T13890] netlink: 'syz.2.2360': attribute type 27 has an invalid length. [ 297.664717][T13890] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.667183][T13890] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.692319][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 297.724666][T13890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.732603][T13890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.785096][T13890] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.787944][T13890] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.791821][T13890] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.795060][T13890] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.891136][ T67] Bluetooth: hci0: command tx timeout [ 297.951238][T13896] bridge0: port 3(netdevsim0) entered blocking state [ 297.953604][T13896] bridge0: port 3(netdevsim0) entered disabled state [ 297.955827][T13896] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 297.958976][T13896] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 297.963960][T13896] bridge0: port 3(netdevsim0) entered blocking state [ 297.967112][T13896] bridge0: port 3(netdevsim0) entered forwarding state [ 297.978085][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2362'. [ 298.140598][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.211017][ T67] Bluetooth: hci4: command tx timeout [ 298.245377][T13908] ubi: mtd0 is already attached to ubi31 [ 299.013556][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.022844][T13933] bridge0: port 1(syz_tun) entered disabled state [ 299.029702][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.033612][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.037095][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.040399][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.044004][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.047311][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.050886][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.055209][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.058581][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.062326][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.065743][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.069053][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.072893][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.077097][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.081089][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.084751][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.088365][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.092269][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.096124][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.099868][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.104195][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.107789][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.113736][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.121145][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.124749][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.128138][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.132368][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.136474][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.140771][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.144943][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.149025][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.153164][T13933] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 299.170685][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 299.348201][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 299.354606][T13942] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 299.357590][T13942] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 299.970697][ T67] Bluetooth: hci0: command tx timeout [ 300.070193][T13946] bridge0: port 3(netdevsim0) entered blocking state [ 300.072897][T13946] bridge0: port 3(netdevsim0) entered disabled state [ 300.075268][T13946] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 300.078246][T13949] ubi: mtd0 is already attached to ubi31 [ 300.080275][T13946] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 300.104707][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 300.220582][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 300.325289][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2380'. [ 300.328062][T13962] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 300.397446][T13966] IPVS: set_ctl: invalid protocol: 94 172.30.0.1:20004 [ 300.416562][T13966] veth1_to_bond: entered allmulticast mode [ 300.435520][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2382'. [ 300.438082][ T1974] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 300.445192][ T1974] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 300.447537][ T1974] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 300.449879][ T1974] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 300.452733][ T1974] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 300.458753][ T1974] hid-generic 0005:16C0:5505.0006: hidraw1: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 300.475411][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 301.250840][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 301.253776][T13965] veth1_to_bond: left allmulticast mode [ 301.555185][T13987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.692201][T13989] block nbd0: server does not support multiple connections per device. [ 301.696477][T13989] block nbd0: shutting down sockets [ 301.899318][T13992] netlink: 'syz.1.2390': attribute type 5 has an invalid length. [ 302.052045][ T67] Bluetooth: hci0: command tx timeout [ 302.293673][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 302.799396][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 302.799406][ T40] audit: type=1326 audit(627140390.911:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.0.2397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 302.808473][ T40] audit: type=1326 audit(627140390.921:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.0.2397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 302.815802][ T40] audit: type=1326 audit(627140390.921:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.0.2397" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 302.822832][ T40] audit: type=1326 audit(627140390.921:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.0.2397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 302.829392][ T40] audit: type=1326 audit(627140390.921:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.0.2397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 302.837379][ T40] audit: type=1326 audit(627140390.921:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.0.2397" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 303.166914][T14017] ubi: mtd0 is already attached to ubi31 [ 303.340570][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 303.753315][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 303.922217][T14046] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.926612][T14046] bond0: (slave lo): Error: Device can not be enslaved while up [ 304.066128][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.068642][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.170148][T14052] bridge_slave_0: left allmulticast mode [ 304.172225][T14052] bridge_slave_0: left promiscuous mode [ 304.180706][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.193850][T14052] bridge_slave_1: left allmulticast mode [ 304.195647][T14052] bridge_slave_1: left promiscuous mode [ 304.197486][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.223100][T14052] bond0: (slave bond_slave_0): Releasing backup interface [ 304.235620][T14052] bond0: (slave bond_slave_1): Releasing backup interface [ 304.258369][T14052] team0: Port device team_slave_0 removed [ 304.277992][T14052] team0: Port device team_slave_1 removed [ 304.285618][T14052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.291016][T14052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.298748][T14052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.306458][T14052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.369421][T14055] fuse: Unknown parameter '' [ 304.371019][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 304.409422][T14052] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.412733][T14052] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.415583][T14052] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.418399][T14052] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.518755][T14057] ubi: mtd0 is already attached to ubi31 [ 304.524396][T14052] syz.1.2409 (14052) used greatest stack depth: 18984 bytes left [ 304.860776][T14069] ipt_REJECT: TCP_RESET invalid for non-tcp [ 304.915555][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 304.971019][T14080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 304.974001][T14080] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 305.163277][T14092] fuse: Bad value for 'user_id' [ 305.165455][T14092] fuse: Bad value for 'user_id' [ 305.420571][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 306.136542][T14108] ubi: mtd0 is already attached to ubi31 [ 306.451074][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 306.910624][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 306.953824][ T67] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 306.956289][ T67] Bluetooth: hci4: Unable to find connection for dst 00:00:01:80:00:00 sid 0x00 [ 307.060622][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 307.064309][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.068204][T14120] lo speed is unknown, defaulting to 1000 [ 307.075906][ T64] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.079907][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.085060][ T64] usb 7-1: config 0 descriptor?? [ 307.145565][T14127] dvmrp1: entered allmulticast mode [ 307.208240][T14131] ubi: mtd0 is already attached to ubi31 [ 307.490743][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 307.491617][ T64] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 307.497786][ T64] usb 7-1: USB disconnect, device number 5 [ 308.007351][T14149] tmpfs: Bad value for 'mpol' [ 308.012742][T14149] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2447'. [ 308.015696][T14149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2447'. [ 308.045967][T14155] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 308.530630][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 308.647004][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'. [ 308.794350][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'. [ 308.797672][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 308.801500][T14187] netlink: 'syz.2.2463': attribute type 14 has an invalid length. [ 308.803915][T14187] netlink: 'syz.2.2463': attribute type 13 has an invalid length. [ 308.868150][T14193] fuse: Bad value for 'fd' [ 308.954278][T14199] SET target dimension over the limit! [ 308.971678][T14199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2467'. [ 308.974573][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 308.981875][T14199] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2467'. [ 309.580562][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 309.940126][T14233] syz.0.2479 (14233): drop_caches: 2 [ 309.946067][T14233] syz.0.2479 (14233): drop_caches: 2 [ 310.166728][T14241] syz.1.2482 (14241): drop_caches: 2 [ 310.458343][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 310.535746][T14257] ubi: mtd0 is already attached to ubi31 [ 310.576617][ T40] audit: type=1326 audit(627140398.691:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.583569][ T40] audit: type=1326 audit(627140398.691:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.590136][ T40] audit: type=1326 audit(627140398.691:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.597094][ T40] audit: type=1326 audit(627140398.691:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.603945][ T40] audit: type=1326 audit(627140398.691:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.610490][ T40] audit: type=1326 audit(627140398.691:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.610631][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 310.619447][ T40] audit: type=1326 audit(627140398.691:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.626308][ T40] audit: type=1326 audit(627140398.691:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.633359][ T40] audit: type=1326 audit(627140398.691:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 310.639850][ T40] audit: type=1326 audit(627140398.691:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14259 comm="syz.0.2488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 311.650613][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 311.979174][T14299] syz.2.2500 (14299): drop_caches: 2 [ 312.000213][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2502'. [ 312.217671][T14308] mkiss: ax0: crc mode is auto. [ 312.291075][T14310] ubi: mtd0 is already attached to ubi31 [ 312.690657][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 312.854072][T14316] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2506'. [ 312.996962][T14317] loop9: detected capacity change from 0 to 7 [ 313.004959][T13555] Dev loop9: unable to read RDB block 7 [ 313.006740][T13555] loop9: AHDI p2 [ 313.007917][T13555] loop9: partition table partially beyond EOD, truncated [ 313.021966][T14317] Dev loop9: unable to read RDB block 7 [ 313.024262][T14317] loop9: AHDI p2 [ 313.025728][T14317] loop9: partition table partially beyond EOD, truncated [ 313.730611][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 313.825951][T14334] Bluetooth: MGMT ver 1.23 [ 313.834319][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 313.838121][T14333] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 313.841394][T14333] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 313.844514][T14333] bridge0: port 3(netdevsim0) entered disabled state [ 313.850373][T14333] bridge_slave_1: left allmulticast mode [ 313.852911][T14333] bridge_slave_1: left promiscuous mode [ 313.855380][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.861414][T14333] bridge_slave_0: left allmulticast mode [ 313.863295][T14333] bridge_slave_0: left promiscuous mode [ 313.866353][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.617208][T14347] input: syz1 as /devices/virtual/input/input10 [ 314.744538][T14349] ubi: mtd0 is already attached to ubi31 [ 314.780570][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 315.389507][T14373] overlayfs: overlapping lowerdir path [ 315.464940][T14374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 315.468515][T14374] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 315.820570][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.377892][T14397] ubi: mtd0 is already attached to ubi31 [ 316.631015][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.670694][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 316.860573][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.956409][T14425] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 316.956782][T14426] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 316.972226][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 316.984865][T14425] bond0: entered promiscuous mode [ 316.986484][T14425] bond_slave_0: entered promiscuous mode [ 316.988348][T14425] bond_slave_1: entered promiscuous mode [ 316.991115][T14425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 316.995594][T14425] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 317.051607][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2538'. [ 317.051828][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2538'. [ 317.144351][T14435] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20004 [ 317.163797][T14435] veth1_to_bond: entered allmulticast mode [ 317.441165][T14448] ubi: mtd0 is already attached to ubi31 [ 317.900691][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 317.978778][T14434] veth1_to_bond: left allmulticast mode [ 318.137983][T14465] netlink: 'syz.0.2551': attribute type 1 has an invalid length. [ 318.141568][T14465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2551'. [ 318.408848][T14479] ubi: mtd0 is already attached to ubi31 [ 318.630582][ T5980] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.800649][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 318.803884][ T5980] usb 5-1: config 0 has no interfaces? [ 318.805647][ T5980] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 318.813558][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.837450][ T5980] usb 5-1: config 0 descriptor?? [ 318.940577][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 319.004602][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 319.019911][T14502] vlan2: entered allmulticast mode [ 319.022154][T14502] bridge0: entered allmulticast mode [ 319.023966][T14502] bridge0: port 1(vlan2) entered blocking state [ 319.026049][T14502] bridge0: port 1(vlan2) entered disabled state [ 319.047879][T14477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.051975][T14477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.087501][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2555'. [ 319.090387][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2555'. [ 319.095184][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 319.095193][ T40] audit: type=1326 audit(627140663.210:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.109720][ T40] audit: type=1326 audit(627140663.220:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.126759][ T5980] usb 5-1: USB disconnect, device number 21 [ 319.131004][ T40] audit: type=1326 audit(627140663.220:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.146145][ T40] audit: type=1326 audit(627140663.220:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.153679][ T40] audit: type=1326 audit(627140663.220:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.161219][ T40] audit: type=1326 audit(627140663.220:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.174516][ T40] audit: type=1326 audit(627140663.220:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.193414][ T40] audit: type=1326 audit(627140663.220:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.203257][ T40] audit: type=1326 audit(627140663.220:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.211370][ T40] audit: type=1326 audit(627140663.220:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.0.2555" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 319.668044][T14524] ubi: mtd0 is already attached to ubi31 [ 319.981044][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 320.291873][T14533] infiniband syz0: set down [ 320.293369][T14533] infiniband syz0: added veth0_macvtap [ 320.345386][T14533] RDS/IB: syz0: added [ 320.346778][T14533] smc: adding ib device syz0 with port count 1 [ 320.348746][T14533] smc: ib device syz0 port 1 has pnetid [ 321.020575][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 321.217836][T14552] vlan2: entered allmulticast mode [ 321.219536][T14552] bond0: entered allmulticast mode [ 321.221455][T14552] bond_slave_0: entered allmulticast mode [ 321.223410][T14552] bond_slave_1: entered allmulticast mode [ 321.226254][T14552] bridge0: port 4(vlan2) entered blocking state [ 321.228369][T14552] bridge0: port 4(vlan2) entered disabled state [ 321.233585][T14552] vlan2: entered promiscuous mode [ 321.235856][T14552] bridge0: port 4(vlan2) entered blocking state [ 321.237942][T14552] bridge0: port 4(vlan2) entered forwarding state [ 321.514065][T14563] ubi: mtd0 is already attached to ubi31 [ 322.060577][ C3] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 322.613122][T14588] netlink: 'syz.1.2585': attribute type 4 has an invalid length. [ 322.733538][T14592] ================================================================== [ 322.736640][T14592] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 322.739082][T14592] Write of size 4064 at addr ffffc9000110e020 by task syz.3.2586/14592 [ 322.742613][T14592] [ 322.743597][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.3.2586 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 322.743611][T14592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.743617][T14592] Call Trace: [ 322.743621][T14592] [ 322.743626][T14592] dump_stack_lvl+0x116/0x1f0 [ 322.743641][T14592] print_report+0xc3/0x670 [ 322.743652][T14592] ? __virt_addr_valid+0x5e/0x590 [ 322.743667][T14592] ? vrealloc_noprof+0x132/0x320 [ 322.743681][T14592] kasan_report+0xe0/0x110 [ 322.743692][T14592] ? vrealloc_noprof+0x132/0x320 [ 322.743708][T14592] kasan_check_range+0xef/0x1a0 [ 322.743721][T14592] __asan_memset+0x23/0x50 [ 322.743736][T14592] vrealloc_noprof+0x132/0x320 [ 322.743751][T14592] push_insn_history+0x2ae/0x6c0 [ 322.743763][T14592] check_mem_access+0x3edc/0x5fb0 [ 322.743780][T14592] ? __pfx_check_mem_access+0x10/0x10 [ 322.743794][T14592] ? reg_bounds_sanity_check+0x4db/0xf30 [ 322.743806][T14592] ? mark_reg_read+0x205/0x320 [ 322.743814][T14592] ? is_reg64.constprop.0+0x120/0x380 [ 322.743827][T14592] check_store_reg+0x2ef/0x470 [ 322.743836][T14592] do_check_common+0x4618/0xc2a0 [ 322.743852][T14592] ? __pfx_do_check_common+0x10/0x10 [ 322.743861][T14592] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 322.743877][T14592] ? kfree+0x2b6/0x4d0 [ 322.743890][T14592] ? bpf_check+0x6c86/0xb460 [ 322.743899][T14592] ? bpf_check+0x7b2f/0xb460 [ 322.743909][T14592] bpf_check+0x7f51/0xb460 [ 322.743922][T14592] ? __pfx_bpf_check+0x10/0x10 [ 322.743931][T14592] ? pcpu_alloc_noprof+0x949/0x1470 [ 322.743944][T14592] ? __lock_acquire+0xaa4/0x1ba0 [ 322.743959][T14592] ? find_held_lock+0x2b/0x80 [ 322.743969][T14592] ? __asan_memset+0x23/0x50 [ 322.743983][T14592] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 322.743996][T14592] bpf_prog_load+0xe41/0x2490 [ 322.744009][T14592] ? __pfx_bpf_prog_load+0x10/0x10 [ 322.744021][T14592] ? __pfx___futex_wait+0x10/0x10 [ 322.744038][T14592] ? bpf_lsm_bpf+0x9/0x10 [ 322.744048][T14592] __sys_bpf+0x433c/0x4d80 [ 322.744061][T14592] ? __pfx___sys_bpf+0x10/0x10 [ 322.744073][T14592] ? __sched_setaffinity+0x173/0x280 [ 322.744085][T14592] ? do_futex+0x122/0x350 [ 322.744094][T14592] ? __pfx_do_futex+0x10/0x10 [ 322.744106][T14592] ? xfd_validate_state+0x5d/0x180 [ 322.744121][T14592] ? rcu_is_watching+0x12/0xc0 [ 322.744131][T14592] __ia32_sys_bpf+0x76/0xe0 [ 322.744145][T14592] __do_fast_syscall_32+0x73/0x120 [ 322.744158][T14592] do_fast_syscall_32+0x32/0x80 [ 322.744170][T14592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.744182][T14592] RIP: 0023:0xf70ae579 [ 322.744190][T14592] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 322.744200][T14592] RSP: 002b:00000000f505c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 322.744225][T14592] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 322.744233][T14592] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.744238][T14592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.744244][T14592] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 322.744250][T14592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.744258][T14592] [ 322.744262][T14592] [ 322.846104][T14592] The buggy address belongs to the virtual mapping at [ 322.846104][T14592] [ffffc90001106000, ffffc90001110000) created by: [ 322.846104][T14592] kvrealloc_noprof+0x7d/0xd0 [ 322.851459][T14592] [ 322.852384][T14592] The buggy address belongs to the physical page: [ 322.854336][T14592] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xc69 pfn:0x4f4d0 [ 322.857013][T14592] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 322.859226][T14592] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 322.861925][T14592] raw: 0000000000000c69 0000000000000000 00000001ffffffff 0000000000000000 [ 322.864830][T14592] page dumped because: kasan: bad access detected [ 322.866756][T14592] page_owner tracks the page as allocated [ 322.868464][T14592] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 14592, tgid 14589 (syz.3.2586), ts 322733450581, free_ts 319988564444 [ 322.873829][T14592] post_alloc_hook+0x181/0x1b0 [ 322.875279][T14592] get_page_from_freelist+0x135c/0x3920 [ 322.876964][T14592] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 322.878757][T14592] alloc_pages_mpol+0x1fb/0x550 [ 322.880223][T14592] alloc_pages_noprof+0x131/0x390 [ 322.881778][T14592] __vmalloc_node_range_noprof+0x732/0x1540 [ 322.883585][T14592] __kvmalloc_node_noprof+0x2ff/0x600 [ 322.885244][T14592] kvrealloc_noprof+0x7d/0xd0 [ 322.886759][T14592] push_insn_history+0x2ae/0x6c0 [ 322.888391][T14592] do_check_common+0xbd3/0xc2a0 [ 322.889993][T14592] bpf_check+0x7f51/0xb460 [ 322.891437][T14592] bpf_prog_load+0xe41/0x2490 [ 322.892960][T14592] __sys_bpf+0x433c/0x4d80 [ 322.894361][T14592] __ia32_sys_bpf+0x76/0xe0 [ 322.896086][T14592] __do_fast_syscall_32+0x73/0x120 [ 322.897778][T14592] do_fast_syscall_32+0x32/0x80 [ 322.899640][T14592] page last free pid 14495 tgid 14492 stack trace: [ 322.901956][T14592] __free_frozen_pages+0x69d/0xff0 [ 322.903616][T14592] vfree+0x176/0x960 [ 322.904919][T14592] __vmalloc_node_range_noprof+0x11d7/0x1540 [ 322.906889][T14592] vmalloc_user_noprof+0x6b/0x90 [ 322.908489][T14592] vb2_vmalloc_alloc+0x135/0x3f0 [ 322.910078][T14592] __vb2_queue_alloc+0x8c6/0x1280 [ 322.911655][T14592] vb2_core_reqbufs+0xa90/0xfe0 [ 322.913181][T14592] __vb2_init_fileio+0x3f1/0x1100 [ 322.914829][T14592] __vb2_perform_fileio+0x9c2/0x1660 [ 322.916496][T14592] vb2_fop_write+0x207/0x3f0 [ 322.918037][T14592] v4l2_write+0x226/0x360 [ 322.919422][T14592] vfs_writev+0x6c4/0xdc0 [ 322.920809][T14592] do_writev+0x132/0x330 [ 322.922130][T14592] __do_fast_syscall_32+0x73/0x120 [ 322.923759][T14592] do_fast_syscall_32+0x32/0x80 [ 322.925393][T14592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.927459][T14592] [ 322.928266][T14592] Memory state around the buggy address: [ 322.930437][T14592] ffffc9000110df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.933782][T14592] ffffc9000110df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.937145][T14592] >ffffc9000110e000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 322.940489][T14592] ^ [ 322.942657][T14592] ffffc9000110e080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 322.945957][T14592] ffffc9000110e100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 322.949077][T14592] ================================================================== [ 323.016822][T14592] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.019138][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.3.2586 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 323.022839][T14592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.026264][T14592] Call Trace: [ 323.027329][T14592] [ 323.028296][T14592] dump_stack_lvl+0x3d/0x1f0 [ 323.029784][T14592] panic+0x71c/0x800 [ 323.031022][T14592] ? __pfx_panic+0x10/0x10 [ 323.032432][T14592] ? rcu_is_watching+0x12/0xc0 [ 323.033947][T14592] ? irqentry_exit+0x3b/0x90 [ 323.035424][T14592] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.037060][T14592] ? preempt_schedule_thunk+0x16/0x30 [ 323.038759][T14592] ? vrealloc_noprof+0x132/0x320 [ 323.040346][T14592] ? preempt_schedule_common+0x44/0xc0 [ 323.042054][T14592] ? vrealloc_noprof+0x132/0x320 [ 323.043613][T14592] check_panic_on_warn+0xab/0xb0 [ 323.045176][T14592] end_report+0x107/0x170 [ 323.046543][T14592] kasan_report+0xee/0x110 [ 323.047957][T14592] ? vrealloc_noprof+0x132/0x320 [ 323.049726][T14592] kasan_check_range+0xef/0x1a0 [ 323.051688][T14592] __asan_memset+0x23/0x50 [ 323.053276][T14592] vrealloc_noprof+0x132/0x320 [ 323.054837][T14592] push_insn_history+0x2ae/0x6c0 [ 323.056403][T14592] check_mem_access+0x3edc/0x5fb0 [ 323.057988][T14592] ? __pfx_check_mem_access+0x10/0x10 [ 323.059674][T14592] ? reg_bounds_sanity_check+0x4db/0xf30 [ 323.061440][T14592] ? mark_reg_read+0x205/0x320 [ 323.062941][T14592] ? is_reg64.constprop.0+0x120/0x380 [ 323.064630][T14592] check_store_reg+0x2ef/0x470 [ 323.066136][T14592] do_check_common+0x4618/0xc2a0 [ 323.067696][T14592] ? __pfx_do_check_common+0x10/0x10 [ 323.069364][T14592] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 323.071414][T14592] ? kfree+0x2b6/0x4d0 [ 323.072713][T14592] ? bpf_check+0x6c86/0xb460 [ 323.074175][T14592] ? bpf_check+0x7b2f/0xb460 [ 323.075650][T14592] bpf_check+0x7f51/0xb460 [ 323.077034][T14592] ? __pfx_bpf_check+0x10/0x10 [ 323.078540][T14592] ? pcpu_alloc_noprof+0x949/0x1470 [ 323.080170][T14592] ? __lock_acquire+0xaa4/0x1ba0 [ 323.081749][T14592] ? find_held_lock+0x2b/0x80 [ 323.083229][T14592] ? __asan_memset+0x23/0x50 [ 323.084714][T14592] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 323.086311][T14592] bpf_prog_load+0xe41/0x2490 [ 323.087770][T14592] ? __pfx_bpf_prog_load+0x10/0x10 [ 323.089324][T14592] ? __pfx___futex_wait+0x10/0x10 [ 323.090879][T14592] ? bpf_lsm_bpf+0x9/0x10 [ 323.092201][T14592] __sys_bpf+0x433c/0x4d80 [ 323.093608][T14592] ? __pfx___sys_bpf+0x10/0x10 [ 323.095097][T14592] ? __sched_setaffinity+0x173/0x280 [ 323.096746][T14592] ? do_futex+0x122/0x350 [ 323.098091][T14592] ? __pfx_do_futex+0x10/0x10 [ 323.099558][T14592] ? xfd_validate_state+0x5d/0x180 [ 323.101153][T14592] ? rcu_is_watching+0x12/0xc0 [ 323.102639][T14592] __ia32_sys_bpf+0x76/0xe0 [ 323.104055][T14592] __do_fast_syscall_32+0x73/0x120 [ 323.105658][T14592] do_fast_syscall_32+0x32/0x80 [ 323.107136][T14592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.109070][T14592] RIP: 0023:0xf70ae579 [ 323.110323][T14592] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 323.116051][T14592] RSP: 002b:00000000f505c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 323.118555][T14592] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 323.120945][T14592] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.123325][T14592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.125713][T14592] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 323.128046][T14592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.130449][T14592] [ 323.131916][T14592] Kernel Offset: disabled [ 323.133270][T14592] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:22:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b33f880 RCX=ffffffff81ae9c79 RDX=ffff888043e78000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900010cefd8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005667f11 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b23b180 RIP=ffffffff81baa4a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080072000 CR3=000000004b4a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf5f5 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc90002eaed28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9addcb40 R15=ffffffff854bf590 RIP=ffffffff854bf61f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7408e7c CR3=000000004b4a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341460 RCX=ffffffff81ae9c79 RDX=ffff8880210da440 RSI=ffffffff81ae9c53 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002ec6880 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100566828d R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b43b180 RIP=ffffffff81ae9c55 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2c33ce CR3=000000004f71b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b3414a0 RCX=ffffc9000c402000 RDX=0000000000080000 RSI=ffffffff81ae9c53 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90002f7e640 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005668295 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b53b180 RIP=ffffffff81ae9c72 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2fae73 CR3=000000004f71b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000