last executing test programs: 12m15.478228744s ago: executing program 32 (id=4707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x29, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff5000000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x40, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x24048014}, 0x20040040) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 8m7.295759369s ago: executing program 33 (id=8633): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000009, 0x4) recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}, 0x804}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m47.003124494s ago: executing program 2 (id=8901): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 7m46.280491944s ago: executing program 2 (id=8908): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 7m45.868248155s ago: executing program 2 (id=8913): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r2, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) 7m45.477869094s ago: executing program 2 (id=8916): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 7m45.095622814s ago: executing program 2 (id=8919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x2, 0x8, 0xffff, 0x1, 0x0, 0x9]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 7m42.633334977s ago: executing program 2 (id=8940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}]}, &(0x7f0000000140)=0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 7m42.035237538s ago: executing program 34 (id=8940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}]}, &(0x7f0000000140)=0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 6m22.426245888s ago: executing program 0 (id=9976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 6m21.474189769s ago: executing program 0 (id=9994): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000003dc7000002"], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 6m21.233901222s ago: executing program 0 (id=9998): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x842, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) close(r0) 6m21.034518083s ago: executing program 0 (id=10000): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 6m20.50854183s ago: executing program 0 (id=10005): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 6m18.665925337s ago: executing program 0 (id=10015): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@random, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x36, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x19, 0x4, "51689209c05602c38ea65a59a8d20cf10f4721a02aeae8ba6124599c49203dbc"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 6m17.773318684s ago: executing program 35 (id=10015): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@random, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x36, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x19, 0x4, "51689209c05602c38ea65a59a8d20cf10f4721a02aeae8ba6124599c49203dbc"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 3m47.381545309s ago: executing program 7 (id=11677): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9, 0x0) 3m45.000972492s ago: executing program 7 (id=11696): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) 3m41.899757571s ago: executing program 7 (id=11734): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)) 3m40.845923852s ago: executing program 7 (id=11744): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m40.446316631s ago: executing program 7 (id=11750): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m39.363313155s ago: executing program 8 (id=11763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xffffffff, @loopback, 0xa}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 3m39.328980157s ago: executing program 7 (id=11764): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x28, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 3m38.633593706s ago: executing program 36 (id=11764): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x28, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 3m38.590584866s ago: executing program 8 (id=11768): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 3m38.113950268s ago: executing program 8 (id=11775): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x0) accept(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m36.901862299s ago: executing program 8 (id=11781): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x212d883, 0x0) io_uring_enter(0xffffffffffffffff, 0x21, 0x21, 0x1, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x40) 3m36.649483949s ago: executing program 8 (id=11784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) 3m34.541329436s ago: executing program 8 (id=11795): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3m34.034446106s ago: executing program 37 (id=11795): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m57.597848366s ago: executing program 3 (id=12198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 2m56.651433129s ago: executing program 3 (id=12207): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2m56.441629501s ago: executing program 3 (id=12211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001cc0)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@align=0x6, {0xb, 0x7, 0xffffff81, 0xffffffffffffc05c}}, 0x9, 0x0, 0x0}, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m55.14482291s ago: executing program 3 (id=12216): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) move_mount(r1, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2m54.594518863s ago: executing program 3 (id=12220): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m49.924995065s ago: executing program 3 (id=12255): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 2m49.142903732s ago: executing program 38 (id=12255): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 2m3.97536554s ago: executing program 6 (id=12489): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$kcm(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_mreq(r0, 0x29, 0x19, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 2m2.694721083s ago: executing program 6 (id=12494): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) fcntl$notify(r0, 0x402, 0x23) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m59.513511224s ago: executing program 6 (id=12505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902270001"], 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004048, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r1, 0x6) sendfile(r0, r1, 0x0, 0x7ffff004) 1m56.105656254s ago: executing program 6 (id=12516): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m54.724240117s ago: executing program 6 (id=12524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000700001002abd7000fbdb0700", @ANYRES32=0x0, @ANYBLOB="0c0001800800010021000100"], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ad000000200000000000"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m54.571011134s ago: executing program 6 (id=12525): waitid(0x11, 0x0, 0x0, 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) sendmsg$AUDIT_USER(r0, 0x0, 0x48000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) r4 = syz_open_dev$sg(0x0, 0x1, 0x40002) readv(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r3) 1m39.443090622s ago: executing program 39 (id=12525): waitid(0x11, 0x0, 0x0, 0x8, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) sendmsg$AUDIT_USER(r0, 0x0, 0x48000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) r4 = syz_open_dev$sg(0x0, 0x1, 0x40002) readv(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r3) 8.720150433s ago: executing program 9 (id=12827): syz_emit_ethernet(0xfae, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0xf78, 0x3a, 0x1, @remote, @mcast2, {[@dstopts={0x2f, 0x1ec, '\x00', [@generic={0x2, 0xbe, "00b6631f6a119e129b13097b00098c57dda6f898ef05c308cdcc3dc110b3b8b8900597fb8a3817c89eacd551a75286cc5ec318720ec83a48b313b4864bf52a84a50f1ccd516331dc56d78d0f9b3c6072499e76049e4ae0cf621df4667d665477ba62e4223f1319aa8993cfde6636e457e02590c719f5204491e7b00f36ca2744778230efb806d3cc3afb2c6c01d09419efde656a97835da4d9a41527b5a3f8b7ceab8adf41b6bc155afcd20c5eb7b07a16043504c19d3930b38b2d6138ae"}, @padn, @pad1, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7448}, @pad1, @generic={0x3, 0xe84, "0ac85b40ab81f2e157eee3744ea60c380966e04dc6527b0cf2da3c86d3c785a38e0d717cc10f553aef36208bd57b5f61d4a49d091108df96c5ccd74031afdd2cb33e2821afc7ba3a2759cd06c18f52c47660322593c54203ba2bc04cd9e770da880d7d65e6b230e6a9cf36967e0d5dd9b6670ad491b37e7380e7f7ac7dcbf46f152de6cd79de165433e6a2fecf800769bfc6fc6455b42a5b10cec7b497ed6d7705bb970c79e61171322ef361f5ce3db627fb3592fe549b06c4a4721fdcfef5c64f0cf7fe6ab77b1e2bc6fe927bf130d21b9dbc1b5eabbaea738e37da44b59a4378aa803dfb9a6a53a1c5bce002006f6d4aadb7d0086af96e1e6cd8869d9066c810a4946a27cb3a8d405c4f5e2c9afb8df22417aac55b035f4969f55f8f94481ed0eb7dfd9ebfbc6f2e4e26804d916ea99f5e25daeb575d055213bda084db428932cc6167bf00fef89c5e409bd926edbc6ab4b1675123045f078014f7e4e1a53acc30b82faa1031cfab2ee684b9ee8dbcd86c4a0ea1f8ba5158ad6a51baca4e230f8ee8f995916ae193ebf995be19defeea1637722556850fec23eb65079d4c442bcf7ab51ce5bac2569a07de7c359942c8ac0d1ed9d8a92ae341f72daaa9e2f13d73f06016a363b8d31507a3fc32d683d6ea485870b455f122c910de62dd0f243899041193180e9f0db2a25085cd496a21dee06494dbbffb1bbabbdd2494e8207c8077de1580ec295ed773ab53d78c93341175298416aa9ff8d8e0ad02063e10b5a7c8106294078e3e8b1fb274ea901a2b2fa32e78b4c4f274f0eb5fb1011d9c0bd80c998f4121943f80ba9b74f93d92d6484fff96e151f2c473605d816423f785c6f55de844055c4debf4629df019aea0ac7d7f82261d23aae8b5ba4c3e911bca4ae90b1ef633a987783840cc192b23c8ac97fa0274282fae6b2b2a459c45923c1337e639e091ac69ba29acf45a61c2a45ef50d7b5fe974ed16e7e0c6ec1021504512f4d00abe53f91ad7763b07829959474781139517e49fcbc2856ff1a2ecb0bcb7c136870988d7c5c8e05f6947ceeb35fd5ac6be731e6dd467393ef2444e25b9eb5a4ba64cf22a0e1cb0ab614b101bb2137532b187b1cdd0f74faa499edb9f2c0fe0e0ff35d666f66b5c9e32d95aae72c326bb1c7f7a1c756663670f2d08c5ac6c9fc8e30865b731d0ee60206e6849c2a9150488b040011707582cdbc14d366ab376cbd06f914f14d18df87df1151c9c70bab9eba34ec5434a84f6e60fea9a1eaa1b3e3f964c72d069024bbae83179f024d4627bfc85bd4519bc1b0ea35eef291456fb016dc58eee0605503258b046ee7a89093e3f982c7eb20d8d99942df35d8e9f1ead2e94a3d49ba0cf53a9e88e9a53b3ed8a5c1701636b9140892b92274241dc137d77abcf9961819f4def8c02e72edd18bc97f5abc22ad07dabae739e65eb193f8080cab974b3e36fd7340cfb33d7c533f5d03033213cc65a8e5388830b122a1995695ac7d573f38280cc74c5e885809536f0579f77d5cd3aad5612f3b384563ecabb8c2dbec6eb31b17a4fe6a610017a88de2420720ff4824940eae8c0a0be96f1b20e1875c35a2fb86ef65fac94378d7570676a30c1d493378ea7bde4add24fc079e1d9e4f5bf6e86013a1a3e4c23d002320a3c5e2f1a046856f4098689b31684103b0678e18eb659a179a73e29aa374cf43238ee4b876a742add763b4b62ce0f9a8d8321e14ffea74835da70dc11c63cd1d97d588ee7df616e743277a571aa2034e49039a337ab6cacf43ebe3c43513bad2616fbc3a61de5df2c9f3ace68bdaa6901b0d56f1f2ade6e53d29473667929f46ee0a05579cf7ff985520d27a8d0f248ca4a0b9778cedd27add0ca8d26c031790926895be2e5246d7c307daabb089ebec71d68573537827c4147f10d4a14b2e8296194f804dd75ff9f08d2015ca7c77b09333c23bb56cd595b9cfc36d3701da280de0fc56da3cd940e236e8c7436c24bd65ed58c60066d913d19810a68efce3b96573f485dce9c8fc6e687dd1506d968ea3c0c4c903b72d09fb6b39c8e3cc6c512530dd00d6977a7d7e45ab5f47aa7dd4346097b44045b8a467ae7f6044d715d5fd0cea5d8360d92e354858c1a505c8843a9e65bdaa1c892e764574c08eda7a6f229a9f6bf464ecb9c1e53153744be003b141c0014d87695261a19c3d8a6fd42967f62e2fdb9bf0c61b060349113a7be98427b4025cd7968871fa6c114322c09492db59cd802fa6f4fef11a7a0a437dc48a2870afb30d4b16f645e5bc378a0946a8a4738d5e1e5f51ba7330b4dcb957ca19e157768db1282fbd2df97345178f8af2a70037e49aa56dc67af265069d9776956520347ee6f415af7a8ef21aa271aeb4d33a3c70d5d7f85f09ed74932ab5a68551d2b790e48eb766cf788589ee5fd885c4b01cfd97c5db9605772327feed4dd87166700c6d86d07847891436aeb0e487408de0f7b9203482b27ba45c5c7533744c68d145f3748ac21a0a85c1d8267c4a1d9015f42f8bc9c6eee0a628dfee3ac6b0a37ac19e7c872db47fd4d8338f1382a60a46a8803530c62667c91e7418ac6b761b2e0a502f5e7d28c71facde4803bf0d16220863bed9bfec5186c3467109a83d1ed4745afeeae0d2c54f8db515df243652d28e0100051a933c7186de1a1443ff96763b34f38c8af1a998476c0045d42f48f47e7d498d509f98768269a4243bac2e8d25c715826a7f4d5e681e3e29ef3b235e96c5bec72d8a164f7bf69ee3754a568da498a9fc776fee9ecfb1bd5bcfc4d2109ef0ee8f3486d54301f1aee30c58006589d32d8f9b6972be24f216fb2ed4d840bcd5be7907610ecc805b6c16c1d0168e47d0dcf1cc93590a914005daa778c235cb0eefe2f34feb6af36856ca3d1ee693cd21397734f0a7c4728531036ba3b18a124c1bfaccc913b78f4617c3742a6a4a9c6134acef3596bca0345a05b955d39e8ee37e5496c5ea7c25656282a214cab04e8192351f24bce0613db5a3a447a913396104b0c02226399b7dc8d720f447a069e76371b6b6d0b6d15b07821a622f72023c0b1e928e3abad2b345846d882195cc0505cb87bca0dba9430e470f9579beaccccc048384e94791e5d2b8525fdad66bd1ecb51d13365dc9753d4787f8c7a4abf3fa547fa814cb48277bd73d174b6fc1c7109bad3e0a2a6a818ca19a1c8ff5003f30f3fa9dce794bcc78bc505f195737a0fb5de38653297ef1fa20fa0c0c87642fc92c0bba17ec3556e68b3c8a30632a59b656a27bd575594330dc9efd3be43b82fcdf8cbc13cfb36fc31984d213bde7a91c843245ed4a66303a9f14020b6203cc95b75f5ad9f3091577ce5212371981f37e406ea15bbc445bd1bca0322abeefca5b5913ffcad5c04f687c5457c27aa1a5e822653ff70e7d2a914b7d3b3af0309f2829981e7fef2aea0772f8259039c2218a883759add7991ac7049183ba3a097aeeb5b7e93374222a5ca6742e69ee099ba7bcd748d4770cb7c4f6feb53258e76be6f7484984cd2be39981472e6f02e99f80755619406c37586d5ff6760bb9ed1b44612b45b49c840eb5b84db899a5bc15b1ab6337ec368779e657e773ada01cf67818d809c5df101de57f6b4099b1100e2c409bfa48e7ade2a2b6500e9acf5408d8faed87bed76708364d24af62c5b7690298390f6a48b1da5af1ee5d22c093961223e531127d95c246fc7f2a905332d0ce624aa8657b330ef02f472457f22871d671805a0c4f249b261ecb96d5f7e029419059cbc44d5af152d41015e1d4b6bd90a4fb78f7764484fe0575d785d761654c076f3ecb202374ffc0c8dbb41f1d4076115e21d5d34cfbad79195c3408bb9bb00dda64c9a4b1d7de00ee2d31934f0e5c67df0d826ff4c58ee5eb4655ac304aed9dae18f056282365a3f366a0614ef4be130380d4132f7cdcdae8281bc7cee2d6cc2ddc215ddf9245b54db7773672781a35205c8f8e2c6a3248b7c25a198209ab852c1e579f545d557d6822f535b51a629be8b0b5810f29c9efcd9b6e6c8664a48628e7a21968f3a9c059b49462f4f85d0d260778b6053a86bb4107a45a719ef3f5ba385a817f9fe341088bb1f482fbfcda1c52949ad2199a2ca97787725bdec888ed65df65925577c51c077b017adcf8de4c7d9b77ad2e0ad7b633d3c97dd331c2eae8b36db67f24021781398994071c9b623921d4459b4351d2ffe546129b90e4b2a9ee2a2f2ea84dab441b13c316f4d3fda53a89e42a543258a097e3492730b1a7c60bff9a86110c212646864b586475bc2e081b402f966dd983a06292c97cf57ca1687d3de6717e5ea2522542bd988eb5614043883c38c9e3b7a570d21a24f18df4d38c35e15130fdfa1b317568f0f3deb0db8372eddeacabd735ded5358fb8b5391cecd96c79b065c9554b77dad5cfcbed7436282eabe788f36a5078a6a3c045124e003ffb827e3efeb7c140e9b7dc0f80177aaf551f4e81923cd202af4c98c4653a428d84dfea3b3446db7b34d9a610ac3d366dc8a2ac647ecd327a8d7531ddb6b65d52081ff934d904776f800717040d5659200d7b933ca7d46c5a62795743c7b454d335ca8a763af20db7f90d214ecef902c5454d73d4813bfb3d14a75e9fb1e2957b46fe74483a855e90e9dc3c3aaf4c5084889b86d3a6fdb7eb876fd3b4774e3b904fe06f398da2bdb318dacb174284b568db6f9aca92ab1dc102bb72e37f06021b563d26f7155af48f2e81f40f0064c841c4d74c7743965b7c6306af1ccf16f3b6d891d2134c3874c383588349894c3c69b64751e88191243e5ea7039bed3b53c87de3f9aef039dcd892ebc42cc4907a6a62344a30890849cafc7ee3ea571f6bd804c2777186d7e1ec654b354979e6396c47749d85a9a0cd401fbaf29dc2c5a62a07990c6108e1b23ad79a9b49567ccb87d8b360f0e93376066385b15f6e9ec5f9134e741eee9c6768573c85a9e852867e7d626401fdad4dec7081fa871e248b683d0a597b5f92b6d835e2e3cc3b398fb3862ea4a82c03f331d2bcc724fe0d02dfb88ab3081d2091bf0812c20cd64b83d6d391c35f1ed3c559440d9d75056ca3d411290adee5a67e24b5d6a9182e08fa2c7f9895c78ef8942bcfe029ca1b0fff5e52c0f872cdd9d1b3e0d8b2dd24ea57234d366b55b3aedb3e4078c534b2067a22eb2495f43aa6e3d1c6ed5c64ec30c3800147c7a154710bf70d8469c8f040d65bcb9322345bba8db2cbe04d94c5ea924"}]}], @mlv2_report={0x8f, 0x0, 0x0, 0x9}}}}}}, 0x0) 8.470355582s ago: executing program 9 (id=12828): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 6.416974287s ago: executing program 9 (id=12836): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020e00000524"], 0x0) 5.248580106s ago: executing program 5 (id=12847): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000d5e8"], 0x50) 5.103430924s ago: executing program 5 (id=12848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff000043000280050001"], 0xc0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x432300, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r6) 4.78369626s ago: executing program 9 (id=12853): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000007f000000660000000900000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x50, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb81914f088a807e0ffff022060000002000aac14140ce000006a49e83262", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="38010000", @ANYRES16, @ANYBLOB="080026bd7000ffdbdf2513000000980006804a00040067636d286165732900000000000000000000000000000000000000000000000022000000d6818ee90d2639e227fe634f1f06e93e19afd57b07e75c8ee270b9ba37f9ed316dbc00004300040067636d28616573290000000000000000000000000000000000000000000000001b000000eebf11dfbe2fefdb154eb32bca023c125cb40e136394f0cc4e554c0004000200040006807800018038000400200001000a004e2000000001fe8000000000000000000000000000aaf8ffffff1400020002004e230a010102000000000000000008000300ff00000034000280080001001d00d227579397a51a432272fec6657ac80000080003000700000008000200010000000800020001000000080004000b000000080004004600000010"], 0x138}, 0x1, 0x0, 0x0, 0xa1}, 0x4048050) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4.701442419s ago: executing program 1 (id=12854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r2, 0x29, 0xce, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000680)={{}, "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"}) 3.981839122s ago: executing program 4 (id=12856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="850000008d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.813553958s ago: executing program 5 (id=12857): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e130100", @ANYRES64], 0x16) 3.689865985s ago: executing program 4 (id=12858): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x48, 0x0, 0x0, &(0x7f0000004040)}, 0x1}], 0x1, 0x40010002, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.689730804s ago: executing program 5 (id=12859): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)={0x8000, 0x0, 0x2d}, 0x18) 1.830543334s ago: executing program 4 (id=12860): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0xffff, 0x1, 0x0, 0x1}, 0x50) 1.790233666s ago: executing program 9 (id=12861): mount$bind(&(0x7f000000d000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4400, 0x0) 1.663152124s ago: executing program 5 (id=12862): getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) 1.606647036s ago: executing program 1 (id=12863): uname(0xfffffffffffffffe) 1.528531077s ago: executing program 4 (id=12864): futex_waitv(&(0x7f0000000d40)=[{0x100000000, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001180), 0x2) 1.434604959s ago: executing program 9 (id=12865): syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x141080, 0x6e3c7fb499808db0) fcntl$notify(r2, 0x402, 0x8000003d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1404, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004800}, 0x60000800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) 1.395755213s ago: executing program 5 (id=12866): syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) 1.269518105s ago: executing program 4 (id=12867): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) 1.269414073s ago: executing program 1 (id=12868): futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) 1.219795851s ago: executing program 1 (id=12869): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0xff}}}}, 0x9) 923.554177ms ago: executing program 1 (id=12870): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 44.958288ms ago: executing program 4 (id=12871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000020800410073697700140033006c6f000000000000000000000000000073d2fe3f54359b4286f1b73223ef1629c2f01b7e5d45d39aafb856cf994b881d79dbcf63b6364d378cd8ecbffbb5d8ab103f13112ba07a99719ca7255c366361519196330a9b1ff1c26be47718327ffde0d8332c"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/mnt\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0xb701, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) 0s ago: executing program 1 (id=12872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r2, 0x29, 0xce, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000680)={{}, "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"}) kernel console output (not intermixed with test programs): , idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 823.193758][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.193780][ T5812] usb 1-1: Product: syz [ 823.193813][ T5812] usb 1-1: Manufacturer: syz [ 823.193830][ T5812] usb 1-1: SerialNumber: syz [ 823.239256][ T5812] usb 1-1: config 0 descriptor?? [ 823.245236][ T5812] gspca_main: se401-2.14.0 probing 047d:5003 [ 823.716096][ T5812] gspca_se401: ExtraFeatures: 48 [ 823.716119][ T5812] gspca_se401: Frame size: 65520x65535 bayer [ 823.716133][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716147][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716161][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716175][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716188][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716201][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716215][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716228][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.716249][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 823.904735][ T5812] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 823.956439][T27615] usbtmc 8-1:16.0: simple usb_control_msg returned 0 [ 824.006676][ T5812] usb 1-1: USB disconnect, device number 49 [ 824.178827][T12391] usb 8-1: USB disconnect, device number 4 [ 826.383754][T27699] sctp: [Deprecated]: syz.7.9791 (pid 27699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.383754][T27699] Use struct sctp_sack_info instead [ 827.898498][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 828.050790][ T31] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 828.050824][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.077719][ T31] usb 7-1: config 0 descriptor?? [ 829.386646][ T31] ath6kl: Failed to submit usb control message: -110 [ 829.386779][ T31] ath6kl: unable to send the bmi data to the device: -110 [ 829.386805][ T31] ath6kl: Unable to send get target info: -110 [ 829.433177][ T31] ath6kl: Failed to init ath6kl core: -110 [ 829.434648][ T31] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 830.446787][ T6000] usb 7-1: USB disconnect, device number 10 [ 830.751085][T27829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9849'. [ 832.320290][T19383] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 832.585960][T19383] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 832.585989][T19383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.684317][T19383] usb 1-1: config 0 descriptor?? [ 833.939123][T19383] ath6kl: Failed to submit usb control message: -110 [ 833.939615][T19383] ath6kl: unable to send the bmi data to the device: -110 [ 833.939642][T19383] ath6kl: Unable to send get target info: -110 [ 834.062962][T19383] ath6kl: Failed to init ath6kl core: -110 [ 834.111437][T19383] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 835.040151][T12391] usb 1-1: USB disconnect, device number 50 [ 836.848639][ T31] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 837.027609][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 837.027641][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.027661][ T31] usb 4-1: Product: syz [ 837.027676][ T31] usb 4-1: Manufacturer: syz [ 837.027690][ T31] usb 4-1: SerialNumber: syz [ 837.077895][ T31] usb 4-1: config 0 descriptor?? [ 837.323659][ T31] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 837.933308][T27987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9918'. [ 837.933830][T27987] netem: invalid attributes len -23 [ 837.934246][T27987] netem: change failed [ 838.133694][ T31] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 838.150191][ T31] usb 4-1: USB disconnect, device number 48 [ 841.230406][T28083] netlink: 'syz.3.9962': attribute type 4 has an invalid length. [ 843.190726][T28159] loop8: detected capacity change from 0 to 8 [ 843.284284][T28159] Dev loop8: unable to read RDB block 8 [ 843.284366][T28159] loop8: unable to read partition table [ 843.284518][T28159] loop8: partition table beyond EOD, truncated [ 843.284568][T28159] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 843.672722][T28169] random: crng reseeded on system resumption [ 844.048493][T19383] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 844.102908][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 844.230580][T19383] usb 4-1: Using ep0 maxpacket: 8 [ 844.234333][T19383] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 844.234356][T19383] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 844.234373][T19383] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 844.234391][T19383] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.234420][T19383] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 844.234437][T19383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.716951][T19383] usb 4-1: GET_CAPABILITIES returned 0 [ 844.716997][T19383] usbtmc 4-1:16.0: can't read capabilities [ 845.012850][T26875] bridge0: port 3(syz_tun) entered disabled state [ 845.057041][ T808] usb 4-1: USB disconnect, device number 49 [ 845.256295][T26875] syz_tun (unregistering): left allmulticast mode [ 845.256323][T26875] syz_tun (unregistering): left promiscuous mode [ 845.256548][T26875] bridge0: port 3(syz_tun) entered disabled state [ 846.645582][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10019'. [ 847.174614][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 847.219969][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 847.250875][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 847.258034][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 847.263732][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 848.913064][T28270] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10048'. [ 848.917237][T28217] chnl_net:caif_netlink_parms(): no params data found [ 849.403949][T28217] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.405582][T28217] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.405824][T28217] bridge_slave_0: entered allmulticast mode [ 849.422754][T28217] bridge_slave_0: entered promiscuous mode [ 849.433252][T28217] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.438518][T28217] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.438839][T28217] bridge_slave_1: entered allmulticast mode [ 849.469618][T28217] bridge_slave_1: entered promiscuous mode [ 849.593564][T28217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.597783][T28217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.621484][ T5816] Bluetooth: hci0: command tx timeout [ 849.841827][T28217] team0: Port device team_slave_0 added [ 849.846059][T28217] team0: Port device team_slave_1 added [ 849.949851][T28217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.949869][T28217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.949897][T28217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.962411][T28217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.962464][T28217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.962551][T28217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.077651][T28306] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10063'. [ 850.381975][T28217] hsr_slave_0: entered promiscuous mode [ 850.393690][T28217] hsr_slave_1: entered promiscuous mode [ 850.455219][T28217] debugfs: 'hsr0' already exists in 'hsr' [ 850.455250][T28217] Cannot create hsr debugfs directory [ 851.698467][ T5816] Bluetooth: hci0: command tx timeout [ 852.193810][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803cb39c00: rx timeout, send abort [ 852.527133][T28363] bond3: entered allmulticast mode [ 852.693878][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803cb39c00: abort rx timeout. Force session deactivation [ 852.698617][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880621fa000: rx timeout, send abort [ 852.980567][T12391] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 853.128493][T12391] usb 7-1: Using ep0 maxpacket: 32 [ 853.136491][T12391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.136526][T12391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.136566][T12391] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 853.136589][T12391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.198704][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880621fa000: abort rx timeout. Force session deactivation [ 853.205455][T12391] usb 7-1: config 0 descriptor?? [ 853.229530][T12391] hub 7-1:0.0: USB hub found [ 853.482941][T12391] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 853.499753][T28217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 853.778572][ T5816] Bluetooth: hci0: command tx timeout [ 853.794930][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.795869][T28217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 853.944355][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.945908][T28217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 853.997857][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.010560][T28217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 854.171586][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.347847][T28422] loop8: detected capacity change from 0 to 8 [ 854.528628][T28422] Dev loop8: unable to read RDB block 8 [ 854.528673][T28422] loop8: unable to read partition table [ 854.528912][T28422] loop8: partition table beyond EOD, truncated [ 854.528933][T28422] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 854.839108][T12391] hid-generic 0003:046D:C31C.0031: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 854.908869][T12391] usb 7-1: USB disconnect, device number 11 [ 855.049307][T28438] fido_id[28438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 855.175174][T28443] sctp: [Deprecated]: syz.6.10122 (pid 28443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 855.175174][T28443] Use struct sctp_sack_info instead [ 855.205755][T28217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.393998][T28217] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.441026][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.441256][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.494769][T25420] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.495039][T25420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.858590][ T5816] Bluetooth: hci0: command tx timeout [ 855.926547][T28460] netlink: 'syz.7.10130': attribute type 11 has an invalid length. [ 857.359481][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10152'. [ 857.658604][T19384] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 857.851541][T19384] usb 7-1: unable to get BOS descriptor or descriptor too short [ 857.855844][T19384] usb 7-1: config 1 interface 0 has no altsetting 0 [ 857.876021][T19384] usb 7-1: string descriptor 0 read error: -22 [ 857.876167][T19384] usb 7-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40 [ 857.876194][T19384] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.424432][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.424473][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.424500][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.424539][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.424564][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.424590][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.424616][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.479757][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.479792][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.479820][T19384] elecom 0003:056E:010C.0032: unknown main item tag 0x0 [ 858.571804][T19384] elecom 0003:056E:010C.0032: hidraw0: USB HID v2.00 Device [HID 056e:010c] on usb-dummy_hcd.6-1/input0 [ 858.597112][T28217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.785911][T12391] usb 7-1: USB disconnect, device number 12 [ 859.106800][T28546] fido_id[28546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 859.625479][T28217] veth0_vlan: entered promiscuous mode [ 859.661967][T28217] veth1_vlan: entered promiscuous mode [ 859.775638][T28217] veth0_macvtap: entered promiscuous mode [ 859.793855][T28217] veth1_macvtap: entered promiscuous mode [ 859.857790][T28217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.906578][T28217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.937628][T25431] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.937910][T25431] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.937986][T25431] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.938054][T25431] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.330955][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.330989][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.168230][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.168254][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.179994][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 864.604128][T28677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.604284][T28677] batadv_slave_0: entered promiscuous mode [ 864.684241][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 864.684261][ T36] audit: type=1326 audit(2000001530.135:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.692550][ T36] audit: type=1326 audit(2000001530.145:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.746932][ T36] audit: type=1326 audit(2000001530.205:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.747082][ T36] audit: type=1326 audit(2000001530.205:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.748777][ T808] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 864.752162][ T36] audit: type=1326 audit(2000001530.205:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.752389][ T36] audit: type=1326 audit(2000001530.205:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.753256][ T36] audit: type=1326 audit(2000001530.205:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.753464][ T36] audit: type=1326 audit(2000001530.205:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.761290][ T36] audit: type=1326 audit(2000001530.215:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 864.951690][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 864.952209][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 864.953363][ T808] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 864.953392][ T808] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 864.953417][ T808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 864.957992][ T808] usb 4-1: string descriptor 0 read error: -22 [ 864.958139][ T808] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.40 [ 864.958163][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.037804][T28668] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 865.220415][ T36] audit: type=1326 audit(2000001530.675:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28678 comm="syz.7.10220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f85cc819 code=0x7ffc0000 [ 865.566630][ T808] uclogic 0003:2179:0077.0033: interface is invalid, ignoring [ 865.743140][T12391] usb 4-1: USB disconnect, device number 50 [ 867.980461][T28733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10242'. [ 867.980489][T28733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10242'. [ 868.682436][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10253'. [ 868.682463][T28758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10253'. [ 868.682489][T28758] netlink: 'syz.7.10253': attribute type 19 has an invalid length. [ 868.682504][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10253'. [ 868.778631][T19384] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 868.827024][ T1409] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.827419][ T1409] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.827465][ T1409] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.827504][ T1409] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.942900][T19384] usb 9-1: unable to get BOS descriptor or descriptor too short [ 868.945188][T19384] usb 9-1: config 1 interface 0 has no altsetting 0 [ 868.966731][T19384] usb 9-1: string descriptor 0 read error: -22 [ 868.966883][T19384] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 868.966910][T19384] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.305815][T28767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10259'. [ 869.305925][T28767] block nbd3: Unsupported socket: should be TCP or UNIX. [ 869.465678][T19384] hid_parser_main: 4007 callbacks suppressed [ 869.465704][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465737][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465764][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465792][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465820][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465846][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465874][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465901][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465928][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.465955][T19384] logitech 0003:046D:C50C.0034: unknown main item tag 0x0 [ 869.587417][T19384] logitech 0003:046D:C50C.0034: hidraw0: USB HID vff.7f Device [HID 046d:c50c] on usb-dummy_hcd.8-1/input0 [ 869.760398][T12391] usb 9-1: USB disconnect, device number 2 [ 870.053769][T28784] IPv6: sit1: Disabled Multicast RS [ 872.026278][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10289'. [ 873.148483][T12391] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 873.276339][T28878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10307'. [ 873.310403][T12391] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 873.310453][T12391] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.310474][T12391] usb 8-1: Product: syz [ 873.310489][T12391] usb 8-1: Manufacturer: syz [ 873.310505][T12391] usb 8-1: SerialNumber: syz [ 873.405093][T28881] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.10308'. [ 873.804233][T12391] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 873.804300][T12391] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 874.215471][T28896] "syz.6.10318" (28896) uses obsolete ecb(arc4) skcipher [ 874.420168][T12391] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 874.420232][T12391] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 874.421129][T12391] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 874.472597][T12391] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 874.501134][T12391] usb 8-1: USB disconnect, device number 5 [ 875.564639][T28949] netlink: 'syz.6.10338': attribute type 9 has an invalid length. [ 875.564663][T28949] netlink: 186364 bytes leftover after parsing attributes in process `syz.6.10338'. [ 876.173525][T19383] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 876.331349][T19383] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.334785][T19383] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 876.334816][T19383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.334837][T19383] usb 8-1: Product: syz [ 876.334852][T19383] usb 8-1: Manufacturer: syz [ 876.334868][T19383] usb 8-1: SerialNumber: syz [ 876.391443][T19383] usb 8-1: config 0 descriptor?? [ 876.406256][T19383] CoreChips 8-1:0.0: probe with driver CoreChips failed with error -22 [ 877.302919][T28983] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 877.538796][T19384] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 877.700871][T19384] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 877.700903][T19384] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 877.700924][T19384] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 877.700976][T19384] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 877.701004][T19384] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 877.706390][T19384] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 877.706424][T19384] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 877.706445][T19384] usb 9-1: Product: syz [ 877.706459][T19384] usb 9-1: Manufacturer: syz [ 877.802838][T19384] cdc_wdm 9-1:1.0: skipping garbage [ 877.802862][T19384] cdc_wdm 9-1:1.0: skipping garbage [ 877.823305][T19384] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 877.823327][T19384] cdc_wdm 9-1:1.0: Unknown control protocol [ 878.312939][T19384] usb 9-1: USB disconnect, device number 3 [ 878.407442][T28989] cdc_wdm 9-1:1.0: Error submitting int urb - -19 [ 879.002284][ T808] usb 8-1: USB disconnect, device number 6 [ 879.687917][T29048] Bluetooth: MGMT ver 1.23 [ 880.788882][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 880.949939][ T31] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.949976][ T31] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.950000][ T31] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.950027][ T31] usb 9-1: config 1 interface 0 has no altsetting 0 [ 880.954045][ T31] usb 9-1: string descriptor 0 read error: -22 [ 880.954150][ T31] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 880.954175][ T31] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 881.128446][T12391] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 881.285459][T12391] usb 8-1: Using ep0 maxpacket: 8 [ 881.312299][T12391] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 881.312424][T12391] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.312449][T12391] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.312475][T12391] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 881.312507][T12391] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.312782][T12391] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 881.312808][T12391] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.503841][ T31] lenovo 0003:17EF:6047.0035: collection stack underflow [ 881.503868][ T31] lenovo 0003:17EF:6047.0035: item 0 0 0 12 parsing failed [ 881.504435][ T31] lenovo 0003:17EF:6047.0035: hid_parse failed [ 881.504506][ T31] lenovo 0003:17EF:6047.0035: probe with driver lenovo failed with error -22 [ 881.709585][T19383] usb 9-1: USB disconnect, device number 4 [ 881.712657][T12391] usb 8-1: usb_control_msg returned -32 [ 881.712706][T12391] usbtmc 8-1:16.0: can't read capabilities [ 881.781471][ T5816] Bluetooth: hci0: command 0x1407 tx timeout [ 881.836800][ T5814] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 882.518945][T29111] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 882.745974][ T5812] usb 8-1: USB disconnect, device number 7 [ 883.392852][T29130] binder: 29129:29130 ioctl c0306201 200000000640 returned -22 [ 883.629288][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10420'. [ 883.629315][T29137] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10420'. [ 883.705808][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10420'. [ 883.705837][T29137] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10420'. [ 883.707649][T25428] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.725671][T25428] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.726353][T25428] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.726510][T25428] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.196390][T29185] loop2: detected capacity change from 0 to 7 [ 886.258653][T29185] Dev loop2: unable to read RDB block 7 [ 886.258707][T29185] loop2: unable to read partition table [ 886.258899][T29185] loop2: partition table beyond EOD, truncated [ 886.258943][T29185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 887.342090][T29221] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 887.364937][T29221] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 888.094685][T29253] loop5: detected capacity change from 0 to 7 [ 888.105976][T29253] Dev loop5: unable to read RDB block 7 [ 888.106022][T29253] loop5: unable to read partition table [ 888.106367][T29253] loop5: partition table beyond EOD, truncated [ 888.107900][T29253] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 889.705426][T29302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10490'. [ 889.851451][T29302] bond4: Invalid ad_actor_system MAC address. [ 889.851481][T29302] bond4: option ad_actor_system: invalid value (3303287) [ 889.888238][T29302] bond4 (unregistering): Released all slaves [ 890.623388][T29335] netlink: 'syz.8.10505': attribute type 1 has an invalid length. [ 890.623439][T29335] netlink: 'syz.8.10505': attribute type 1 has an invalid length. [ 890.623455][T29335] netlink: 192 bytes leftover after parsing attributes in process `syz.8.10505'. [ 890.937366][T29345] sctp: [Deprecated]: syz.3.10509 (pid 29345) Use of int in max_burst socket option. [ 890.937366][T29345] Use struct sctp_assoc_value instead [ 890.970385][ T31] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 891.118420][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 891.123811][ T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 891.140021][ T31] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 891.140052][ T31] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 891.140073][ T31] usb 8-1: Product: syz [ 891.140088][ T31] usb 8-1: Manufacturer: syz [ 891.140103][ T31] usb 8-1: SerialNumber: syz [ 891.197090][ T31] usb 8-1: config 0 descriptor?? [ 891.210683][T29333] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 891.226014][ T31] hub 8-1:0.0: bad descriptor, ignoring hub [ 891.226053][ T31] hub 8-1:0.0: probe with driver hub failed with error -5 [ 891.689560][ T808] usb 8-1: USB disconnect, device number 8 [ 893.170749][T29388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10525'. [ 893.188499][T29388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10525'. [ 893.429861][T29392] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10527'. [ 894.315414][T19383] IPv4: Oversized IP packet from 127.0.0.1 [ 894.375021][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 894.403228][T19383] IPv4: Oversized IP packet from 127.0.0.1 [ 894.418975][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 894.419881][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 895.145903][ T3574] Bluetooth: hci4: Frame reassembly failed (-84) [ 895.844210][T29460] ptrace attach of ""[29468] was attempted by ""[29460] [ 897.138536][ T5816] Bluetooth: hci4: command 0x1003 tx timeout [ 897.149609][ T5814] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 900.334930][T29593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10605'. [ 900.448631][T29593] hsr_slave_0: left promiscuous mode [ 900.499923][T29593] hsr_slave_1: left promiscuous mode [ 900.621011][T29593] hsr0 (unregistering): left allmulticast mode [ 900.621042][T29593] hsr0 (unregistering): left promiscuous mode [ 901.195968][T29623] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.10617'. [ 901.660770][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10622'. [ 901.660797][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10622'. [ 904.020762][T29713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10658'. [ 904.558538][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 904.728431][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 904.731007][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 904.731033][ T9] usb 7-1: config 0 has no interface number 0 [ 904.731074][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 904.735951][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 904.735980][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.736001][ T9] usb 7-1: Product: syz [ 904.736016][ T9] usb 7-1: Manufacturer: syz [ 904.736030][ T9] usb 7-1: SerialNumber: syz [ 904.832134][ T9] usb 7-1: config 0 descriptor?? [ 905.809843][T29752] netlink: 'syz.8.10677': attribute type 3 has an invalid length. [ 906.079864][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 906.079899][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 906.082192][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 906.082222][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 906.082244][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 906.082266][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 906.082578][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 906.173024][ T9] usb 7-1: USB disconnect, device number 13 [ 906.178602][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 906.452419][T29763] random: crng reseeded on system resumption [ 906.798487][ T807] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 906.958584][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 906.962090][ T807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 906.962121][ T807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 906.962148][ T807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 906.962175][ T807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.962220][ T807] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 906.962246][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.260202][ T807] usb 4-1: GET_CAPABILITIES returned 0 [ 907.260264][ T807] usbtmc 4-1:16.0: can't read capabilities [ 907.515659][ T808] usb 4-1: USB disconnect, device number 51 [ 909.528495][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 909.742393][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 909.743515][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 909.743551][ T9] usb 8-1: can't read configurations, error -71 [ 910.763524][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10734'. [ 911.431918][T29904] netlink: 'syz.7.10742': attribute type 4 has an invalid length. [ 911.477315][T29904] netlink: 'syz.7.10742': attribute type 4 has an invalid length. [ 911.803021][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10745'. [ 911.922432][T29910] gtp0: entered promiscuous mode [ 911.922460][T29910] gtp0: entered allmulticast mode [ 912.118592][ T5812] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 912.292564][ T5812] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 912.292600][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.292623][ T5812] usb 4-1: Product: syz [ 912.292638][ T5812] usb 4-1: Manufacturer: syz [ 912.292653][ T5812] usb 4-1: SerialNumber: syz [ 912.608791][ T5812] usb 4-1: config 0 descriptor?? [ 912.869604][ T5812] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 913.378507][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 913.883624][ T5812] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 913.930226][ T36] kauditd_printk_skb: 129 callbacks suppressed [ 913.930242][ T36] audit: type=1800 audit(2000001579.385:1066): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.10770" name="file1" dev="tmpfs" ino=484 res=0 errno=0 [ 913.960025][ T5812] usb 4-1: USB disconnect, device number 52 [ 914.328916][T29974] netlink: 'syz.7.10774': attribute type 8 has an invalid length. [ 914.328939][T29974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10774'. [ 914.466644][T29974] erspan0: entered promiscuous mode [ 914.484858][T29974] gretap0: entered promiscuous mode [ 914.539900][T29974] erspan0: left promiscuous mode [ 914.700711][T29974] gretap0: left promiscuous mode [ 915.558016][T30023] syzkaller1: entered promiscuous mode [ 915.558061][T30023] syzkaller1: entered allmulticast mode [ 916.442099][T30054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10812'. [ 916.988470][ T5812] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 917.022995][T30075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10821'. [ 917.081605][T30076] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10821'. [ 917.157942][ T5812] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.157990][ T5812] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.158067][ T5812] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 917.158094][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.452033][ T5812] usb 9-1: usb_control_msg returned -32 [ 917.452084][ T5812] usbtmc 9-1:16.0: can't read capabilities [ 917.680036][ T807] usb 9-1: USB disconnect, device number 5 [ 917.686571][T30093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.197380][T30113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.926660][T30132] netlink: 'syz.7.10846': attribute type 7 has an invalid length. [ 918.926677][T30132] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10846'. [ 920.715887][T30190] binder: 30189:30190 ioctl c0306201 2000000004c0 returned -14 [ 920.716145][T30190] binder: 30189:30190 ioctl c0306201 0 returned -14 [ 922.378417][T12391] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 922.548394][T12391] usb 8-1: Using ep0 maxpacket: 16 [ 922.585347][T12391] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.585377][T12391] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.609340][T12391] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.609373][T12391] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.609394][T12391] usb 8-1: Product: syz [ 922.609409][T12391] usb 8-1: Manufacturer: syz [ 922.609425][T12391] usb 8-1: SerialNumber: syz [ 922.668608][T30238] netlink: 'syz.6.10891': attribute type 6 has an invalid length. [ 922.668637][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10891'. [ 922.744011][T12391] usb 8-1: 0:2 : does not exist [ 922.744074][T12391] usb 8-1: unit 6 not found! [ 923.166888][T12391] usb 8-1: USB disconnect, device number 11 [ 923.316122][T30254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.456652][T25743] udevd[25743]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.724882][T30265] loop2: detected capacity change from 0 to 7 [ 923.764375][T30265] loop2: [ 923.764412][T30265] loop2: partition table partially beyond EOD, truncated [ 923.768734][T12391] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 923.939519][T12391] usb 9-1: Using ep0 maxpacket: 16 [ 923.966902][T12391] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.966955][T12391] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.967000][T12391] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 923.967024][T12391] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.097295][T12391] usb 9-1: config 0 descriptor?? [ 924.482309][T30286] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0) [ 924.625307][T12391] HID 045e:07da: Invalid code 65791 type 1 [ 924.736711][T12391] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0036/input/input36 [ 925.135155][T12391] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 925.553128][T19383] usb 9-1: USB disconnect, device number 6 [ 927.847466][T30371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10950'. [ 929.688842][T30373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10950'. [ 929.696090][T30373] nbd: nbd64 already in use [ 930.145140][ T36] audit: type=1326 audit(2000001595.475:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.146805][ T36] audit: type=1326 audit(2000001595.525:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.146857][ T36] audit: type=1326 audit(2000001595.595:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.146902][ T36] audit: type=1326 audit(2000001595.595:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.146954][ T36] audit: type=1326 audit(2000001595.595:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.147000][ T36] audit: type=1326 audit(2000001595.595:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.262794][ T36] audit: type=1326 audit(2000001595.705:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.262964][ T36] audit: type=1326 audit(2000001595.715:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.263056][ T36] audit: type=1326 audit(2000001595.715:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 930.263169][ T36] audit: type=1326 audit(2000001595.715:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30418 comm="syz.3.10970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9acac819 code=0x7ffc0000 [ 932.071911][T30454] macvlan2: entered promiscuous mode [ 932.071935][T30454] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 935.959254][T30582] netlink: 'syz.6.11041': attribute type 10 has an invalid length. [ 936.502678][T30585] team0 (unregistering): Port device team_slave_0 removed [ 936.575757][T30585] team0 (unregistering): Port device team_slave_1 removed [ 936.786381][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 936.786404][ T36] audit: type=1326 audit(2000001602.235:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4437d8c819 code=0x7ffc0000 [ 936.786973][ T36] audit: type=1326 audit(2000001602.235:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.803274][ T36] audit: type=1326 audit(2000001602.235:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.809131][ T36] audit: type=1326 audit(2000001602.255:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.840772][ T36] audit: type=1326 audit(2000001602.255:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.840825][ T36] audit: type=1326 audit(2000001602.295:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4437d8c819 code=0x7ffc0000 [ 936.845225][ T36] audit: type=1326 audit(2000001602.295:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.848395][ T36] audit: type=1326 audit(2000001602.295:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.869190][ T36] audit: type=1326 audit(2000001602.325:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 936.877340][ T36] audit: type=1326 audit(2000001602.325:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30607 comm="syz.6.11052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4437d2db99 code=0x7ffc0000 [ 937.505656][T30624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11058'. [ 937.962983][T30636] trusted_key: syz.6.11063 sent an empty control message without MSG_MORE. [ 940.239679][T30702] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.11093'. [ 941.585551][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11110'. [ 941.637584][T30741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11110'. [ 941.748662][T30740] erspan0: entered promiscuous mode [ 941.749020][T30740] macvtap0: entered promiscuous mode [ 941.749196][T30740] macvtap0: entered allmulticast mode [ 941.749223][T30740] erspan0: entered allmulticast mode [ 941.919831][T30745] netlink: 'syz.6.11111': attribute type 1 has an invalid length. [ 942.080906][T30741] erspan0: left allmulticast mode [ 942.081126][T30741] erspan0: left promiscuous mode [ 942.610797][T30745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.358539][ T5812] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 944.528400][ T5812] usb 7-1: Using ep0 maxpacket: 16 [ 944.537990][ T5812] usb 7-1: config index 0 descriptor too short (expected 46593, got 71) [ 944.538024][ T5812] usb 7-1: config 0 has too many interfaces: 158, using maximum allowed: 32 [ 944.538048][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.538070][ T5812] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 158 [ 944.538094][ T5812] usb 7-1: config 0 has no interface number 0 [ 944.616574][ T5812] usb 7-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 944.616605][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.616629][ T5812] usb 7-1: Product: syz [ 944.616644][ T5812] usb 7-1: Manufacturer: syz [ 944.616660][ T5812] usb 7-1: SerialNumber: syz [ 944.712800][ T5812] usb 7-1: config 0 descriptor?? [ 944.875098][ T5812] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 944.875153][ T5812] uvcvideo 7-1:0.105: No valid video chain found. [ 944.964663][T19383] usb 7-1: USB disconnect, device number 14 [ 945.372234][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11149'. [ 945.434453][T30839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11149'. [ 945.554459][T30839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11149'. [ 945.568841][T19383] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 945.654985][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11149'. [ 945.740279][T19383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.740316][T19383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.740356][T19383] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 945.740381][T19383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.791783][T19383] usb 4-1: config 0 descriptor?? [ 945.912936][T30839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11149'. [ 946.150919][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11149'. [ 946.246279][T19383] hid_parser_main: 2862 callbacks suppressed [ 946.246307][T19383] razer 0003:1532:010E.0037: unknown main item tag 0x0 [ 946.246338][T19383] razer 0003:1532:010E.0037: unknown main item tag 0x0 [ 946.246365][T19383] razer 0003:1532:010E.0037: unknown main item tag 0x0 [ 946.246391][T19383] razer 0003:1532:010E.0037: unknown main item tag 0x0 [ 946.246417][T19383] razer 0003:1532:010E.0037: unknown main item tag 0x0 [ 946.474235][T19383] razer 0003:1532:010E.0037: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 946.668323][T19383] usb 4-1: USB disconnect, device number 53 [ 946.914572][T30869] fido_id[30869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 947.718847][T30902] loop5: detected capacity change from 0 to 7 [ 947.784505][ T11] blk_print_req_error: 138 callbacks suppressed [ 947.784526][ T11] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.784572][ T11] buffer_io_error: 138 callbacks suppressed [ 947.784586][ T11] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.844630][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.844670][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.845040][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.845071][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.845199][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.845226][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.845493][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.845522][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.845676][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.845703][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.845830][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.855104][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.855690][T30902] ldm_validate_partition_table(): Disk read failed. [ 947.855947][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.856023][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.856650][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.856719][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.865516][T30902] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 947.865616][T30902] Buffer I/O error on dev loop5, logical block 0, async page read [ 947.866184][T30902] Dev loop5: unable to read RDB block 0 [ 948.040865][T30902] loop5: unable to read partition table [ 948.041108][T30902] loop5: partition table beyond EOD, truncated [ 948.041147][T30902] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 951.489800][T30967] bridge0: left allmulticast mode [ 952.634395][T30967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.680042][T30967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.243084][T31059] netlink: 'syz.6.11245': attribute type 21 has an invalid length. [ 954.240892][T30967] ip6gre1: left promiscuous mode [ 954.240921][T30967] ip6gre1: left allmulticast mode [ 954.457612][T31108] loop2: detected capacity change from 0 to 7 [ 954.487666][T31108] Dev loop2: unable to read RDB block 7 [ 954.487715][T31108] loop2: unable to read partition table [ 954.487950][T31108] loop2: partition table beyond EOD, truncated [ 954.488007][T31108] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 954.717324][T31059] netlink: 'syz.6.11245': attribute type 6 has an invalid length. [ 954.717347][T31059] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11245'. [ 954.756902][ T1165] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.756944][ T1165] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.334249][ T1165] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.334287][ T1165] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.364261][ T1165] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.364299][ T1165] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.417996][ T1165] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.467644][ T1165] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.207197][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.296307][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 956.322528][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 956.341549][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 956.344633][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 958.454822][ T808] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 958.611063][ T808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 958.611096][ T808] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 958.611123][ T808] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.613651][ T808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 958.613680][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 958.613702][ T808] usb 4-1: Product: syz [ 958.613718][ T808] usb 4-1: Manufacturer: syz [ 958.613734][ T808] usb 4-1: SerialNumber: syz [ 958.625787][T31168] loop7: detected capacity change from 0 to 16384 [ 958.744795][ T5816] Bluetooth: hci0: command tx timeout [ 959.016588][ T808] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 959.159278][ T808] usb 4-1: USB disconnect, device number 54 [ 959.165596][ C1] blk_print_req_error: 5 callbacks suppressed [ 959.165616][ C1] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 959.199628][ T808] usblp0: removed [ 959.342737][ T729] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.342778][ T729] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.371997][T31168] loop7: detected capacity change from 16384 to 0 [ 959.489301][ C0] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 959.489342][ C0] buffer_io_error: 5 callbacks suppressed [ 959.489353][ C0] Buffer I/O error on dev loop7, logical block 2046, async page read [ 959.492801][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 960.255534][T19383] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 960.428496][T19383] usb 4-1: Using ep0 maxpacket: 32 [ 960.430776][T19383] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 960.430805][T19383] usb 4-1: config 0 has no interface number 0 [ 960.430852][T19383] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 960.484989][T19383] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 960.485019][T19383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.485038][T19383] usb 4-1: Product: syz [ 960.485052][T19383] usb 4-1: Manufacturer: syz [ 960.485066][T19383] usb 4-1: SerialNumber: syz [ 960.522420][T19383] usb 4-1: config 0 descriptor?? [ 960.526156][T31193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 960.702295][ T729] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.702337][ T729] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.762165][T31193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 960.823318][ T5816] Bluetooth: hci0: command tx timeout [ 961.383344][T31225] netlink: 'syz.6.11320': attribute type 1 has an invalid length. [ 961.483716][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11320'. [ 961.587208][ T729] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.587247][ T729] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.852761][T31228] bond2: (slave bridge2): making interface the new active one [ 961.873294][T31228] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 961.994445][T19383] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 961.994480][T19383] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 962.028829][T19383] asix 4-1:0.188: probe with driver asix failed with error -71 [ 962.060081][T19383] usb 4-1: USB disconnect, device number 55 [ 962.087301][T26370] udevd[26370]: setting owner of /dev/bus/usb/004/055 to uid=0, gid=0 failed: No such file or directory [ 962.390985][T31248] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11329'. [ 962.471307][ T729] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.471336][ T729] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.900675][ T5816] Bluetooth: hci0: command tx timeout [ 963.766307][T31137] chnl_net:caif_netlink_parms(): no params data found [ 964.938455][T12391] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 964.978418][ T5816] Bluetooth: hci0: command tx timeout [ 965.092170][T12391] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 965.092224][T12391] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 965.092250][T12391] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.125302][T12391] usb 8-1: config 0 descriptor?? [ 965.135993][T31314] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 965.312345][ T729] bridge_slave_1: left allmulticast mode [ 965.312378][ T729] bridge_slave_1: left promiscuous mode [ 965.312740][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.452148][ T729] bridge_slave_0: left allmulticast mode [ 965.452180][ T729] bridge_slave_0: left promiscuous mode [ 965.452419][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.628015][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.628054][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.628080][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.628106][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.628133][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.628160][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.628238][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.630237][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.630269][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.630297][T12391] logitech-djreceiver 0003:046D:C71F.0038: unknown main item tag 0x0 [ 965.670389][T12391] logitech-djreceiver 0003:046D:C71F.0038: reserved main item tag 0xd [ 965.840022][T12391] logitech-djreceiver 0003:046D:C71F.0038: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.7-1/input0 [ 965.947916][T12391] usb 8-1: USB disconnect, device number 12 [ 967.119541][ T729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.211768][ T729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.264923][ T729] bond0 (unregistering): Released all slaves [ 967.471998][T31352] bridge_slave_0: left allmulticast mode [ 967.472028][T31352] bridge_slave_0: left promiscuous mode [ 967.472395][T31352] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.600912][T31352] bridge_slave_1: left allmulticast mode [ 967.600934][T31352] bridge_slave_1: left promiscuous mode [ 967.601084][T31352] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.689579][T31352] bond0: (slave bond_slave_0): Releasing backup interface [ 967.949770][T31352] bond0: (slave bond_slave_1): Releasing backup interface [ 968.036884][T31352] team0: Port device team_slave_0 removed [ 968.114731][T31352] team0: Port device team_slave_1 removed [ 968.116795][T31352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.151203][T31352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.151234][T31352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.203549][T31352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 968.316380][T31358] vlan0: entered promiscuous mode [ 968.374868][T31358] team0: Port device vlan0 added [ 968.387148][T31137] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.387335][T31137] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.387551][T31137] bridge_slave_0: entered allmulticast mode [ 968.390557][T31137] bridge_slave_0: entered promiscuous mode [ 968.800718][T31137] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.800834][T31137] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.801040][T31137] bridge_slave_1: entered allmulticast mode [ 968.802996][T31137] bridge_slave_1: entered promiscuous mode [ 969.795596][T31137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.829944][T31477] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 969.831044][T31137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.424904][T31137] team0: Port device team_slave_0 added [ 970.445752][T31137] team0: Port device team_slave_1 added [ 972.348513][ T729] hsr_slave_0: left promiscuous mode [ 972.391540][ T729] hsr_slave_1: left promiscuous mode [ 972.428105][ T729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.428137][ T729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.505265][ T729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.505293][ T729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.726078][ T729] veth1_macvtap: left promiscuous mode [ 972.726189][ T729] veth0_macvtap: left promiscuous mode [ 972.726463][ T729] veth1_vlan: left promiscuous mode [ 972.726646][ T729] veth0_vlan: left promiscuous mode [ 974.690563][T31137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.690583][T31137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.690614][T31137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.719195][T31514] netlink: 'syz.7.11441': attribute type 5 has an invalid length. [ 974.772609][ T5462] 8021q: adding VLAN 0 to HW filter on device eth9 [ 974.787840][T31137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.787860][T31137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.787891][T31137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.148579][T31601] bridge0: port 1(syz_tun) entered blocking state [ 975.150382][T31601] bridge0: port 1(syz_tun) entered disabled state [ 975.150649][T31601] syz_tun: entered allmulticast mode [ 975.332354][T31601] syz_tun: entered promiscuous mode [ 975.397723][T31601] bridge0: port 1(syz_tun) entered blocking state [ 975.397846][T31601] bridge0: port 1(syz_tun) entered forwarding state [ 975.612756][T31137] hsr_slave_0: entered promiscuous mode [ 975.616470][T31137] hsr_slave_1: entered promiscuous mode [ 975.619311][T31137] debugfs: 'hsr0' already exists in 'hsr' [ 975.619352][T31137] Cannot create hsr debugfs directory [ 976.398490][T19383] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 976.555967][T19383] usb 8-1: Using ep0 maxpacket: 32 [ 976.557940][T19383] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 976.557972][T19383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 976.557999][T19383] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 976.558051][T19383] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 976.558075][T19383] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.681450][T19383] usb 8-1: config 0 descriptor?? [ 976.689365][T31626] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 976.700243][T19383] hub 8-1:0.0: USB hub found [ 976.895604][T19383] hub 8-1:0.0: 2 ports detected [ 977.134780][T19383] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 977.134810][T19383] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 977.172012][T19383] usbhid 8-1:0.0: can't add hid device: -71 [ 977.172238][T19383] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 977.232018][T19383] usb 8-1: USB disconnect, device number 13 [ 978.390255][T31677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 978.887075][T31699] loop2: detected capacity change from 0 to 7 [ 978.938058][T31699] loop2: [ 978.938089][T31699] loop2: partition table partially beyond EOD, truncated [ 979.435607][ T5462] 8021q: adding VLAN 0 to HW filter on device eth10 [ 979.906114][T31728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11521'. [ 981.527835][T31784] loop2: detected capacity change from 0 to 7 [ 981.546840][T31784] Dev loop2: unable to read RDB block 7 [ 981.546873][T31784] loop2: AHDI p1 p2 p3 [ 981.546903][T31784] loop2: partition table partially beyond EOD, truncated [ 981.547162][T31784] loop2: p1 start 1818582900 is beyond EOD, truncated [ 981.547184][T31784] loop2: p3 start 335544320 is beyond EOD, truncated [ 983.636561][T31839] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 985.578273][T31137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 985.734680][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 986.192771][T31137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 986.242260][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.245038][T31137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 986.406772][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.407799][T31137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 986.685578][T31137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.922572][T31941] netlink: 'syz.7.11590': attribute type 83 has an invalid length. [ 987.491486][T31137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.591113][T31137] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.642299][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.642395][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.707565][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.707978][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.694468][T31137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.588618][T12391] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 989.757022][T12391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.757088][T12391] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 989.757118][T12391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 989.757147][T12391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 989.757171][T12391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 989.823118][T12391] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 989.823151][T12391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 989.823173][T12391] usb 4-1: Product: syz [ 989.823189][T12391] usb 4-1: Manufacturer: syz [ 989.823218][T12391] usb 4-1: SerialNumber: syz [ 989.906584][T12391] usb 4-1: config 0 descriptor?? [ 990.125776][T12391] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 990.125816][T12391] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 990.126308][T32034] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11617'. [ 990.290014][T31137] veth0_vlan: entered promiscuous mode [ 990.331277][T12391] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 990.331315][T12391] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 990.331338][T12391] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 990.376994][T31137] veth1_vlan: entered promiscuous mode [ 990.543339][T12391] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 990.816125][T31137] veth0_macvtap: entered promiscuous mode [ 990.874976][T31137] veth1_macvtap: entered promiscuous mode [ 991.158191][T31137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.235779][T31137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.349856][T25423] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.377498][T25423] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.383003][T25423] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.393556][T25423] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.563196][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 991.643485][T12391] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 991.666032][T12391] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 992.198410][T12391] usb 4-1: USB disconnect, device number 56 [ 993.123830][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.123855][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.859497][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.859525][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.681913][T32127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11650'. [ 997.310420][T32083] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 997.481175][T32083] usb 8-1: Using ep0 maxpacket: 32 [ 997.485747][T32083] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 997.485775][T32083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.529050][T32083] usb 8-1: config 0 descriptor?? [ 997.565256][T32083] gspca_main: sq930x-2.14.0 probing 041e:403c [ 998.585617][T32083] gspca_sq930x: ucbus_write failed -71 [ 998.585728][T32083] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 998.619314][T32083] usb 8-1: USB disconnect, device number 14 [ 998.881811][T32236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11691'. [ 1001.078441][T32083] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1001.248405][T32083] usb 7-1: Using ep0 maxpacket: 16 [ 1001.250721][T32083] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.250747][T32083] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1001.253790][T32083] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1001.253820][T32083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.253843][T32083] usb 7-1: Product: syz [ 1001.253859][T32083] usb 7-1: Manufacturer: syz [ 1001.253875][T32083] usb 7-1: SerialNumber: syz [ 1001.351496][T32083] usb 7-1: 0:2 : does not exist [ 1001.535185][T32083] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1001.767236][T32083] usb 7-1: USB disconnect, device number 15 [ 1001.961955][T25743] udevd[25743]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.548157][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11743'. [ 1005.083252][T32083] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1005.258495][T32083] usb 7-1: Using ep0 maxpacket: 16 [ 1005.260956][T32083] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.260983][T32083] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.264006][T32083] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1005.264033][T32083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.264053][T32083] usb 7-1: Product: syz [ 1005.264068][T32083] usb 7-1: Manufacturer: syz [ 1005.264083][T32083] usb 7-1: SerialNumber: syz [ 1005.418457][T32083] usb 7-1: 0:2 : does not exist [ 1005.650753][T32083] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1005.747892][T32083] usb 7-1: USB disconnect, device number 16 [ 1005.881731][T25743] udevd[25743]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.858949][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.975144][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.988574][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1007.012169][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1007.040330][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.338564][ T5816] Bluetooth: hci1: command tx timeout [ 1010.747987][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1010.835469][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1010.869955][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1010.888756][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1010.892496][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1011.379303][ T5816] Bluetooth: hci1: command tx timeout [ 1011.452381][T32422] chnl_net:caif_netlink_parms(): no params data found [ 1012.789017][ T36] kauditd_printk_skb: 224 callbacks suppressed [ 1012.789040][ T36] audit: type=1800 audit(2000001678.175:1333): pid=32513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.11816" name="bus" dev="ramfs" ino=109080 res=0 errno=0 [ 1012.855114][T32422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.855281][T32422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.855451][T32422] bridge_slave_0: entered allmulticast mode [ 1012.880285][T32422] bridge_slave_0: entered promiscuous mode [ 1012.982608][ T3515] bridge_slave_1: left allmulticast mode [ 1012.982638][ T3515] bridge_slave_1: left promiscuous mode [ 1012.982877][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.094449][ T3515] bridge_slave_0: left allmulticast mode [ 1013.094480][ T3515] bridge_slave_0: left promiscuous mode [ 1013.094725][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.140789][ T5816] Bluetooth: hci0: command tx timeout [ 1013.474195][ T5816] Bluetooth: hci1: command tx timeout [ 1014.914500][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.989298][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.030764][ T3515] bond0 (unregistering): Released all slaves [ 1015.148971][T32422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.149112][T32422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.149391][T32422] bridge_slave_1: entered allmulticast mode [ 1015.153392][T32422] bridge_slave_1: entered promiscuous mode [ 1015.218353][ T5816] Bluetooth: hci0: command tx timeout [ 1015.538423][ T5816] Bluetooth: hci1: command tx timeout [ 1015.972261][T32422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.016543][T32422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.062663][T32605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11855'. [ 1016.066471][T32605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11855'. [ 1016.116753][T32422] team0: Port device team_slave_0 added [ 1016.127722][T32422] team0: Port device team_slave_1 added [ 1016.647882][T32422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.647901][T32422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.647930][T32422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.764977][T32422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.764996][T32422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.765027][T32422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.298435][ T5816] Bluetooth: hci0: command tx timeout [ 1017.784948][T32422] hsr_slave_0: entered promiscuous mode [ 1017.787710][T32422] hsr_slave_1: entered promiscuous mode [ 1017.803999][T32422] debugfs: 'hsr0' already exists in 'hsr' [ 1017.804178][T32422] Cannot create hsr debugfs directory [ 1018.085980][T32480] chnl_net:caif_netlink_parms(): no params data found [ 1018.609970][ T5462] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1019.412119][ T5816] Bluetooth: hci0: command tx timeout [ 1019.572535][T32682] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11880'. [ 1020.534618][T32480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.534722][T32480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.534935][T32480] bridge_slave_0: entered allmulticast mode [ 1020.565557][T32480] bridge_slave_0: entered promiscuous mode [ 1020.610246][T32480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.610416][T32480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.610646][T32480] bridge_slave_1: entered allmulticast mode [ 1020.613472][T32480] bridge_slave_1: entered promiscuous mode [ 1021.056774][T32480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.084567][T32480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.474548][ T3515] hsr_slave_0: left promiscuous mode [ 1021.518777][ T3515] hsr_slave_1: left promiscuous mode [ 1021.520043][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.557546][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.099056][T32724] binder_alloc: 32723: binder_alloc_buf, no vma [ 1022.284881][T32727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11901'. [ 1022.284911][T32727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11901'. [ 1023.204172][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 1023.352547][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 1024.071477][T32480] team0: Port device team_slave_0 added [ 1024.089845][T32480] team0: Port device team_slave_1 added [ 1024.313214][ T318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11925'. [ 1024.463664][ T318] vlan2: entered promiscuous mode [ 1025.480157][T32480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.480176][T32480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.480207][T32480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.546412][ T5462] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1025.576797][T32480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.576811][T32480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.576832][T32480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.219985][T32480] hsr_slave_0: entered promiscuous mode [ 1027.221588][T32480] hsr_slave_1: entered promiscuous mode [ 1027.222745][T32480] debugfs: 'hsr0' already exists in 'hsr' [ 1027.222773][T32480] Cannot create hsr debugfs directory [ 1027.417239][T32422] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1027.472653][T32422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.507159][T32422] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1027.732558][T32422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.799149][T32422] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1027.852615][T32422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.890313][T32422] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1028.314834][T32422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.413535][ T5816] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1029.413580][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1029.413611][ T5816] Tainted: [L]=SOFTLOCKUP [ 1029.413619][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1029.413634][ T5816] Workqueue: hci5 hci_rx_work [ 1029.413702][ T5816] Call Trace: [ 1029.413716][ T5816] [ 1029.413726][ T5816] dump_stack_lvl+0xe8/0x150 [ 1029.413765][ T5816] sysfs_create_dir_ns+0x271/0x2a0 [ 1029.413801][ T5816] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1029.413829][ T5816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1029.413868][ T5816] ? rt_spin_unlock+0x160/0x200 [ 1029.413896][ T5816] kobject_add_internal+0x631/0xd10 [ 1029.413929][ T5816] kobject_add+0x163/0x240 [ 1029.413953][ T5816] ? __pfx_kobject_add+0x10/0x10 [ 1029.413984][ T5816] ? get_device_parent+0x370/0x3a0 [ 1029.414021][ T5816] device_add+0x408/0xb80 [ 1029.414059][ T5816] hci_conn_add_sysfs+0xd5/0x210 [ 1029.414095][ T5816] le_conn_complete_evt+0x10e6/0x16b0 [ 1029.414132][ T5816] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1029.414161][ T5816] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1029.414192][ T5816] ? lockdep_hardirqs_on+0x7a/0x110 [ 1029.414226][ T5816] ? skb_pull_data+0xfb/0x200 [ 1029.414263][ T5816] hci_le_conn_complete_evt+0x187/0x470 [ 1029.414297][ T5816] hci_event_packet+0x659/0xef0 [ 1029.414345][ T5816] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1029.414370][ T5816] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1029.414395][ T5816] ? __pfx_hci_event_packet+0x10/0x10 [ 1029.414429][ T5816] ? rt_spin_unlock+0x14f/0x200 [ 1029.414465][ T5816] ? hci_send_to_monitor+0xe2/0x590 [ 1029.414498][ T5816] hci_rx_work+0x3ee/0x1040 [ 1029.414541][ T5816] ? process_scheduled_works+0xa70/0x1860 [ 1029.414574][ T5816] process_scheduled_works+0xb5d/0x1860 [ 1029.414641][ T5816] ? __pfx_process_scheduled_works+0x10/0x10 [ 1029.414680][ T5816] ? assign_work+0x3d5/0x5e0 [ 1029.414716][ T5816] worker_thread+0xa53/0xfc0 [ 1029.414778][ T5816] kthread+0x388/0x470 [ 1029.414801][ T5816] ? __pfx_worker_thread+0x10/0x10 [ 1029.414831][ T5816] ? __pfx_kthread+0x10/0x10 [ 1029.414855][ T5816] ret_from_fork+0x514/0xb70 [ 1029.414891][ T5816] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.414924][ T5816] ? __switch_to+0xc79/0x1410 [ 1029.414957][ T5816] ? __pfx_kthread+0x10/0x10 [ 1029.414981][ T5816] ret_from_fork_asm+0x1a/0x30 [ 1029.415022][ T5816] [ 1029.415055][ T5816] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1029.415096][ T5816] Bluetooth: hci5: failed to register connection device [ 1030.004912][ T1165] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.007339][ T464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11973'. [ 1030.222576][ T5462] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1034.906490][ T684] loop2: detected capacity change from 0 to 7 [ 1034.926710][ T684] Dev loop2: unable to read RDB block 7 [ 1034.926745][ T684] loop2: AHDI p1 p2 p3 [ 1034.926773][ T684] loop2: partition table partially beyond EOD, truncated [ 1034.927071][ T684] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1034.927093][ T684] loop2: p3 start 335544320 is beyond EOD, truncated [ 1034.971388][ T1165] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.571302][ T1165] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.938901][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 1036.637606][ T737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.449334][ T1165] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.496375][ T753] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1037.507699][ T753] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 1037.526908][ T753] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 1037.544137][ T753] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 1037.544447][ T753] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1038.135529][ T777] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.135544][ T777] binder: 776:777 ioctl 4018620d 200000004a80 returned -16 [ 1038.904621][T32422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.138177][ T5462] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1040.350143][T32422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.576329][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.576535][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.884785][T25423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.969750][T25423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.405297][ T1165] bridge_slave_1: left allmulticast mode [ 1041.405327][ T1165] bridge_slave_1: left promiscuous mode [ 1041.405551][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.513980][ T1165] bridge_slave_0: left allmulticast mode [ 1041.514018][ T1165] bridge_slave_0: left promiscuous mode [ 1041.514262][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.228101][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.329230][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.382458][ T1165] bond0 (unregistering): Released all slaves [ 1049.350011][T32480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1049.532493][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.752878][T32480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1049.907723][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.953108][T32480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1050.052465][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.059862][T32480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1050.181547][T32480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.479790][ T1165] hsr_slave_0: left promiscuous mode [ 1050.533535][ T1165] hsr_slave_1: left promiscuous mode [ 1050.549617][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.549661][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.623624][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.623656][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.118492][ T1165] veth1_macvtap: left promiscuous mode [ 1051.118591][ T1165] veth0_macvtap: left promiscuous mode [ 1051.118831][ T1165] veth1_vlan: left promiscuous mode [ 1051.119014][ T1165] veth0_vlan: left promiscuous mode [ 1053.417444][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 1053.510402][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 1054.492870][T32422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.342390][T32480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.392000][T32480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.536458][T25420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.536690][T25420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.770256][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.770386][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.051415][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1056.112361][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1056.115766][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1056.122599][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1056.186418][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1056.780990][T32422] veth0_vlan: entered promiscuous mode [ 1056.833169][T32422] veth1_vlan: entered promiscuous mode [ 1057.099141][T32422] veth0_macvtap: entered promiscuous mode [ 1057.201194][T32422] veth1_macvtap: entered promiscuous mode [ 1057.425582][T32422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.532107][T32422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.625789][ T3574] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.626338][ T3574] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.626790][ T3574] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.754470][T32480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.765945][ T3574] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.504059][ T5814] Bluetooth: hci3: command tx timeout [ 1059.458690][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.458710][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.639563][T32480] veth0_vlan: entered promiscuous mode [ 1059.823168][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.823191][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.992799][T32480] veth1_vlan: entered promiscuous mode [ 1060.584079][ T5814] Bluetooth: hci3: command tx timeout [ 1060.630300][T32480] veth0_macvtap: entered promiscuous mode [ 1060.723547][ T1248] chnl_net:caif_netlink_parms(): no params data found [ 1060.781292][T32480] veth1_macvtap: entered promiscuous mode [ 1061.075024][ T1377] loop2: detected capacity change from 0 to 7 [ 1061.101891][ T1377] Dev loop2: unable to read RDB block 7 [ 1061.101934][ T1377] loop2: unable to read partition table [ 1061.102180][ T1377] loop2: partition table beyond EOD, truncated [ 1061.102201][ T1377] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1061.457160][T32480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.570820][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.571007][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.571264][ T1248] bridge_slave_0: entered allmulticast mode [ 1061.595045][ T1248] bridge_slave_0: entered promiscuous mode [ 1061.650182][T32480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.650413][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.650541][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.650750][ T1248] bridge_slave_1: entered allmulticast mode [ 1061.687692][ T1248] bridge_slave_1: entered promiscuous mode [ 1061.740607][ T5814] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1061.968999][ T1248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.979042][ T3574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.076166][ T1248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.083745][ T3515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.108961][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1062.259131][ T3515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.267809][ T3515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.293476][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1062.296736][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1062.296768][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1062.296794][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1062.296849][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1062.296871][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.387410][ T10] usb 10-1: config 0 descriptor?? [ 1062.388174][ T1397] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1062.426963][ T10] hub 10-1:0.0: USB hub found [ 1062.453296][ T1248] team0: Port device team_slave_0 added [ 1062.537471][ T1248] team0: Port device team_slave_1 added [ 1062.626757][ T10] hub 10-1:0.0: 2 ports detected [ 1062.658705][ T5814] Bluetooth: hci3: command tx timeout [ 1062.837844][ T10] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 1062.837888][ T10] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 1062.891041][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1062.891190][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1063.104300][ T1248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.104316][ T1248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.104337][ T1248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.231976][ T10] usb 10-1: USB disconnect, device number 2 [ 1063.464613][ T1248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.464633][ T1248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.464664][ T1248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.671400][ T1464] netlink: 'syz.6.12316': attribute type 1 has an invalid length. [ 1064.740611][ T5814] Bluetooth: hci3: command tx timeout [ 1064.851537][ T1248] hsr_slave_0: entered promiscuous mode [ 1064.855390][ T1248] hsr_slave_1: entered promiscuous mode [ 1064.857039][ T1248] debugfs: 'hsr0' already exists in 'hsr' [ 1064.857063][ T1248] Cannot create hsr debugfs directory [ 1064.938681][ T1464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.025188][ T1467] vlan2: entered allmulticast mode [ 1065.025212][ T1467] bond3: entered allmulticast mode [ 1065.130846][ T1470] bond3: (slave geneve0): making interface the new active one [ 1065.130871][ T1470] geneve0: entered allmulticast mode [ 1065.316298][ T1470] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 1065.484040][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.484062][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.170945][ T1515] netlink: 'syz.9.12330': attribute type 4 has an invalid length. [ 1067.225393][ T1518] netlink: 'syz.9.12330': attribute type 4 has an invalid length. [ 1067.430759][T25417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.430782][T25417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.517690][ T1515] netlink: 'syz.9.12330': attribute type 4 has an invalid length. [ 1071.622527][ T5462] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1072.848372][ T5814] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1074.078792][T32084] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1074.208510][T32084] usb 2-1: device descriptor read/64, error -71 [ 1075.188433][T32084] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1075.318367][T32084] usb 2-1: device descriptor read/64, error -71 [ 1075.428940][T32084] usb usb2-port1: attempt power cycle [ 1075.716607][ T1689] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12391'. [ 1075.716647][ T1689] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12391'. [ 1075.918347][T32084] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1076.136818][T32084] usb 2-1: device not accepting address 24, error -71 [ 1076.608945][ T1689] bridge0: entered promiscuous mode [ 1076.610971][ T1689] syz_tun: entered promiscuous mode [ 1080.474630][ T5814] Bluetooth: hci5: Unknown advertising packet type: 0x14 [ 1080.678262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1080.698267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1080.708262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1080.718266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1080.728272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1080.738264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1080.748266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1085.389657][T32083] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1085.568417][T32083] usb 7-1: Using ep0 maxpacket: 32 [ 1085.571957][T32083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1085.572002][T32083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1085.586764][T32083] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1085.586844][T32083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.586906][T32083] usb 7-1: Product: syz [ 1085.586948][T32083] usb 7-1: Manufacturer: syz [ 1085.586989][T32083] usb 7-1: SerialNumber: syz [ 1085.684071][T32083] usb 7-1: config 0 descriptor?? [ 1085.844999][T32083] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1085.908886][ T1787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.910833][ T1787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.184129][T32083] usb 7-1: USB disconnect, device number 17 [ 1086.248942][ T1012] usb 7-1: Failed to submit usb control message: -71 [ 1086.248983][ T1012] usb 7-1: unable to send the bmi data to the device: -71 [ 1086.249003][ T1012] usb 7-1: unable to get target info from device [ 1086.249021][ T1012] usb 7-1: could not get target info (-71) [ 1086.249141][ T1012] usb 7-1: could not probe fw (-71) [ 1089.414238][ T1248] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1089.465250][ T1248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.478081][ T1248] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1089.576761][ T1248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1089.585830][ T5462] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1089.593813][ T1248] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1089.626553][ T1248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1089.636800][ T1248] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1089.682148][ T1248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.804589][ T1856] binder: 1855:1856 ioctl c0306201 2000000002c0 returned -14 [ 1091.093233][ T1886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12455'. [ 1091.759432][ T1248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.094729][ T1248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.191397][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.191621][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.320998][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.321324][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.396390][ T1929] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.396418][ T1929] binder: 1921:1929 ioctl 4018620d 200000004a80 returned -16 [ 1094.076638][ T1248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.568256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1096.588248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1096.598255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1098.581882][ T1248] veth0_vlan: entered promiscuous mode [ 1098.631662][ T1248] veth1_vlan: entered promiscuous mode [ 1098.784961][ T1248] veth0_macvtap: entered promiscuous mode [ 1098.861376][ T1248] veth1_macvtap: entered promiscuous mode [ 1100.289272][ T1248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.337616][ T1248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.526447][ T3528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.526496][ T3528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.526533][ T3528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.526569][ T3528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.946163][ T5462] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1105.465049][T25423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.465071][T25423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.758146][T32083] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1105.937965][T32083] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1105.937996][T32083] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.938016][T32083] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1105.998744][T32083] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1105.998778][T32083] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1105.998801][T32083] usb 7-1: Product: syz [ 1105.998817][T32083] usb 7-1: Manufacturer: syz [ 1105.998936][T32083] usb 7-1: SerialNumber: syz [ 1106.101489][T32083] usb 7-1: config 0 descriptor?? [ 1106.719586][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.719611][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.123199][ T10] usb 7-1: USB disconnect, device number 18 [ 1108.320271][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12516'. [ 1108.320302][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12516'. [ 1114.055298][ T2178] netlink: 'syz.5.12534': attribute type 5 has an invalid length. [ 1114.055323][ T2178] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12534'. [ 1116.189517][ T5462] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1122.752874][ T2230] netlink: 'syz.5.12550': attribute type 1 has an invalid length. [ 1122.752899][ T2230] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12550'. [ 1123.550078][ T2260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12552'. [ 1125.360265][ T2268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.390946][ T2271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.643818][ T5814] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1128.658192][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1128.883011][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1128.922087][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1128.925295][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1128.941932][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1128.978298][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1130.963457][T29243] bridge0: port 1(syz_tun) entered disabled state [ 1131.126689][ T5816] Bluetooth: hci4: command tx timeout [ 1131.146434][T32083] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1131.410745][T32083] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1131.410778][T32083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.410800][T32083] usb 10-1: Product: syz [ 1131.410816][T32083] usb 10-1: Manufacturer: syz [ 1131.410832][T32083] usb 10-1: SerialNumber: syz [ 1131.537173][T29243] syz_tun (unregistering): left allmulticast mode [ 1131.537290][T29243] bridge0: port 1(syz_tun) entered disabled state [ 1131.905029][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1131.905096][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1132.196319][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 1132.580513][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 1133.327542][ T5814] Bluetooth: hci4: command tx timeout [ 1133.893485][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1133.894245][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1133.894733][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1133.894789][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1133.895731][T32083] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1134.104119][T32083] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1134.916065][T32083] usb 10-1: USB disconnect, device number 3 [ 1135.241437][ T2289] Bluetooth: hci4: command tx timeout [ 1136.417721][ T1683] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.324017][ T2289] Bluetooth: hci4: command tx timeout [ 1137.883184][ T2382] kvm: kvm [2380]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4b66 [ 1137.942417][ T2382] kvm: kvm [2380]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe0 [ 1144.475394][ T1683] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.217297][ T1683] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.261617][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12606'. [ 1151.300945][ T2499] team0: Port device team_slave_0 removed [ 1151.980430][ T1683] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.238833][ T2276] chnl_net:caif_netlink_parms(): no params data found [ 1155.056577][ T2276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.057157][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.057364][ T2276] bridge_slave_0: entered allmulticast mode [ 1155.059951][ T2276] bridge_slave_0: entered promiscuous mode [ 1155.074396][ T2276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.076153][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.083424][ T2276] bridge_slave_1: entered allmulticast mode [ 1155.136887][ T2276] bridge_slave_1: entered promiscuous mode [ 1157.007417][ T2276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.012859][ T2276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.322438][ T2628] fuse: Invalid rootmode [ 1158.578579][ T2637] vivid-001: disconnect [ 1159.389741][ T2625] vivid-001: reconnect [ 1159.589293][ T2276] team0: Port device team_slave_0 added [ 1160.600935][ T2276] team0: Port device team_slave_1 added [ 1162.915747][ T2276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.915764][ T2276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.915789][ T2276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.503738][ T2276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.503758][ T2276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.503789][ T2276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.270310][ T2276] hsr_slave_0: entered promiscuous mode [ 1164.272345][ T2276] hsr_slave_1: entered promiscuous mode [ 1164.273458][ T2276] debugfs: 'hsr0' already exists in 'hsr' [ 1164.273483][ T2276] Cannot create hsr debugfs directory [ 1164.985125][ T2701] netlink: 216 bytes leftover after parsing attributes in process `syz.9.12653'. [ 1164.996862][ T2701] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12653'. [ 1165.938795][ T1683] dvmrp0: left allmulticast mode [ 1165.939049][ T1683] pimreg: left allmulticast mode [ 1172.186770][T32087] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1172.390655][ T2785] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1173.221003][T32087] usb 6-1: Using ep0 maxpacket: 16 [ 1173.702991][T32087] usb 6-1: device descriptor read/all, error -71 [ 1173.965495][ T1683] bond3 (unregistering): (slave geneve0): Releasing active interface [ 1173.965551][ T1683] geneve0 (unregistering): left allmulticast mode [ 1175.226138][ T2805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12686'. [ 1175.302539][ T1683] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1175.625080][ T1683] bond0 (unregistering): Released all slaves [ 1175.640206][ T1683] bond1 (unregistering): Released all slaves [ 1175.660582][ T1683] bond2 (unregistering): Released all slaves [ 1176.368135][ T2289] Bluetooth: hci3: command 0x0406 tx timeout [ 1176.483342][ T1683] bond3 (unregistering): Released all slaves [ 1182.097315][ T807] libceph: connect (1)[c::]:6789 error -101 [ 1182.186139][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 1183.543082][ T2847] ceph: No mds server is up or the cluster is laggy [ 1183.617910][ T807] libceph: connect (1)[c::]:6789 error -101 [ 1183.618107][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 1183.878839][ T807] libceph: connect (1)[c::]:6789 error -101 [ 1183.879033][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 1185.063494][T32084] libceph: connect (1)[c::]:6789 error -101 [ 1185.074553][T32084] libceph: mon0 (1)[c::]:6789 connect error [ 1185.205304][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.205427][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.207521][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.214211][ T2915] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1185.231469][ T2915] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1185.307352][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.310102][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.314653][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.317363][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.320177][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.322864][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.325650][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.328126][ T2915] lo speed is unknown, defaulting to 1000 [ 1185.330905][ T2915] lo speed is unknown, defaulting to 1000 [ 1186.564595][ T2289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1186.607049][T32084] libceph: connect (1)[c::]:6789 error -101 [ 1186.607242][T32084] libceph: mon0 (1)[c::]:6789 connect error [ 1186.612189][ T2289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1186.615626][ T2289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1186.679060][ T2289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1186.680370][ T2289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1186.855156][ T807] libceph: connect (1)[c::]:6789 error -101 [ 1186.864384][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 1188.089285][ T807] libceph: connect (1)[c::]:6789 error -101 [ 1188.310048][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 1188.514259][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.515039][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.276693][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.285015][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.408095][ T2289] Bluetooth: hci5: command tx timeout [ 1192.936722][ T2289] Bluetooth: hci5: command tx timeout [ 1194.902829][ T2289] Bluetooth: hci5: command tx timeout [ 1194.981278][ T2979] kthread_run failed with err -4 [ 1195.941517][ T3036] netlink: 120 bytes leftover after parsing attributes in process `syz.5.12742'. [ 1196.908270][ T2289] Bluetooth: hci5: command tx timeout [ 1197.922436][ T2350] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.110403][ T1409] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.218660][T25430] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.218745][T25430] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.263646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1198.355470][ T36] audit: type=1326 audit(2000002636.696:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3063 comm="syz.5.12753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac7275c819 code=0x0 [ 1202.941339][ T2930] lo speed is unknown, defaulting to 1000 [ 1206.998014][ T3154] random: crng reseeded on system resumption [ 1207.492080][ T1683] hsr_slave_0: left promiscuous mode [ 1208.413840][ T807] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1208.672653][ T1683] hsr_slave_1: left promiscuous mode [ 1208.786040][ T807] usb 10-1: config 0 has an invalid interface number: 127 but max is 1 [ 1208.786073][ T807] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 1208.786095][ T807] usb 10-1: config 0 has no interface number 1 [ 1208.786148][ T807] usb 10-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1208.786198][ T807] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1208.999372][ T807] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1208.999402][ T807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.999421][ T807] usb 10-1: Product: syz [ 1208.999447][ T807] usb 10-1: Manufacturer: syz [ 1208.999461][ T807] usb 10-1: SerialNumber: syz [ 1209.053162][ T807] usb 10-1: config 0 descriptor?? [ 1209.079650][ T1683] veth1_macvtap: left promiscuous mode [ 1209.079813][ T1683] veth0_macvtap: left promiscuous mode [ 1209.080189][ T1683] veth1_vlan: left promiscuous mode [ 1209.189125][ T807] usb-storage 10-1:0.127: USB Mass Storage device detected [ 1209.221304][ T807] usb-storage 10-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1209.408147][ T807] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1209.478940][ T807] usb-storage 10-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1209.522818][T32087] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1209.682842][ T807] usb 10-1: USB disconnect, device number 4 [ 1209.751366][T32087] usb 2-1: Using ep0 maxpacket: 16 [ 1209.754250][T32087] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1209.755567][T32087] usb 2-1: config 128 has an invalid interface number: 238 but max is 0 [ 1209.755592][T32087] usb 2-1: config 128 has no interface number 0 [ 1209.755635][T32087] usb 2-1: config 128 interface 238 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1209.755664][T32087] usb 2-1: config 128 interface 238 has no altsetting 0 [ 1209.758472][T32087] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=8d.48 [ 1209.758502][T32087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.758524][T32087] usb 2-1: Product: syz [ 1209.758540][T32087] usb 2-1: Manufacturer: syz [ 1209.758556][T32087] usb 2-1: SerialNumber: syz [ 1210.081461][T32087] usb 2-1: No union descriptors [ 1210.125164][T32087] usb 2-1: USB disconnect, device number 26 [ 1211.359348][ T3218] netlink: 'syz.9.12791': attribute type 21 has an invalid length. [ 1211.506346][ T3220] netlink: 72 bytes leftover after parsing attributes in process `syz.9.12791'. [ 1213.028726][ T1683] team0 (unregistering): Port device vlan0 removed [ 1213.428274][ T5914] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1213.591351][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 1213.593441][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 1213.593474][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.741612][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.0/input/input38 [ 1213.859035][ T5152] bcm5974 2-1:16.0: could not read from device [ 1213.919247][ T5152] bcm5974 2-1:16.0: could not read from device [ 1214.015955][ T5914] usb 2-1: USB disconnect, device number 27 [ 1214.025149][ T5152] bcm5974 2-1:16.0: could not read from device [ 1214.762246][ T3173] netlink: 136 bytes leftover after parsing attributes in process `syz.5.12776'. [ 1215.425027][ T2930] chnl_net:caif_netlink_parms(): no params data found [ 1216.987611][ T3329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1217.283236][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.283440][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.283673][ T2930] bridge_slave_0: entered allmulticast mode [ 1217.285856][ T2930] bridge_slave_0: entered promiscuous mode [ 1217.288805][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.289012][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.289215][ T2930] bridge_slave_1: entered allmulticast mode [ 1217.340734][ T2930] bridge_slave_1: entered promiscuous mode [ 1217.395522][ T2930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.416841][ T2930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.431800][ T5914] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1217.477719][ T2930] team0: Port device team_slave_0 added [ 1217.481047][ T2930] team0: Port device team_slave_1 added [ 1217.677793][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1217.678556][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 1217.683735][ T5914] usb 6-1: config 13 has an invalid interface number: 102 but max is 0 [ 1217.683762][ T5914] usb 6-1: config 13 has no interface number 0 [ 1217.716746][ T2930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.716761][ T2930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.716784][ T2930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.733840][ T5914] usb 6-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 1217.733869][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.733888][ T5914] usb 6-1: Product: syz [ 1217.733902][ T5914] usb 6-1: Manufacturer: syz [ 1217.733916][ T5914] usb 6-1: SerialNumber: syz [ 1217.847538][ T2930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.847556][ T2930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.847586][ T2930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.049375][ T5914] cdc_phonet 6-1:13.102: probe with driver cdc_phonet failed with error -22 [ 1218.092698][ T5914] usb 6-1: USB disconnect, device number 18 [ 1218.385312][T32087] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1218.544691][T32087] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.544748][T32087] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1218.546566][T32087] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.546596][T32087] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1218.546619][T32087] usb 10-1: SerialNumber: syz [ 1218.604284][T32087] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1218.604358][T32087] cdc_mbim 10-1:1.0: bind() failure [ 1218.712697][ T2930] hsr_slave_0: entered promiscuous mode [ 1218.714431][ T2930] hsr_slave_1: entered promiscuous mode [ 1218.715395][ T2930] debugfs: 'hsr0' already exists in 'hsr' [ 1218.715419][ T2930] Cannot create hsr debugfs directory [ 1218.837897][T32087] usb 10-1: USB disconnect, device number 5 [ 1219.041204][ T5462] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1219.574436][ T3392] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12848'. [ 1219.574534][ T3392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12848'. [ 1219.574596][ T3392] netlink: 55 bytes leftover after parsing attributes in process `syz.5.12848'. [ 1220.483961][ T2289] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 1222.849805][T25420] bridge_slave_1: left allmulticast mode [ 1222.849836][T25420] bridge_slave_1: left promiscuous mode [ 1222.850638][T25420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.342485][T25420] bridge_slave_0: left allmulticast mode [ 1223.342518][T25420] bridge_slave_0: left promiscuous mode [ 1223.342774][T25420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.502023][ T3453] smc: removing ib device syz1 [ 1224.174290][T32087] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1224.356483][T32087] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1224.356512][T32087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.356531][T32087] usb 6-1: Product: syz [ 1224.356545][T32087] usb 6-1: Manufacturer: syz [ 1224.356558][T32087] usb 6-1: SerialNumber: syz [ 1226.388926][ T3453] ------------[ cut here ]------------ [ 1226.388959][ T3453] !xa_empty(&pool->xa) [ 1226.388979][ T3453] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x4b/0x60, CPU#0: syz.9.12865/3453 [ 1226.389065][ T3453] Modules linked in: [ 1226.389090][ T3453] CPU: 0 UID: 0 PID: 3453 Comm: syz.9.12865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1226.389140][ T3453] Tainted: [L]=SOFTLOCKUP [ 1226.389146][ T3453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1226.389159][ T3453] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 1226.389182][ T3453] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 0d 49 ed f9 48 83 3b 00 75 0c e8 62 16 87 f9 5b c3 cc cc cc cc cc e8 56 16 87 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1226.389195][ T3453] RSP: 0018:ffffc90003e670c0 EFLAGS: 00010246 [ 1226.389210][ T3453] RAX: ffffffff883c957a RBX: ffff888061e396a8 RCX: 0000000000080000 [ 1226.389223][ T3453] RDX: ffffc90010b5d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1226.389234][ T3453] RBP: ffff888061e39318 R08: 0000000000000000 R09: 0000000000000000 [ 1226.389245][ T3453] R10: dffffc0000000000 R11: ffffffff883ad680 R12: ffff888061e38000 [ 1226.389258][ T3453] R13: dffffc0000000000 R14: ffffffff883ad680 R15: dffffc0000000000 [ 1226.389270][ T3453] FS: 00007f85cf4cc6c0(0000) GS:ffff888126124000(0000) knlGS:0000000000000000 [ 1226.389285][ T3453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1226.389296][ T3453] CR2: 00007f0a40fcc419 CR3: 00000000389e0000 CR4: 00000000003526f0 [ 1226.389322][ T3453] Call Trace: [ 1226.389328][ T3453] [ 1226.389335][ T3453] rxe_dealloc+0x25/0xc0 [ 1226.389352][ T3453] ib_dealloc_device+0x54/0x200 [ 1226.389378][ T3453] __ib_unregister_device+0x393/0x3f0 [ 1226.389406][ T3453] ? __ib_unregister_device+0x1/0x3f0 [ 1226.389431][ T3453] ib_unregister_device_and_put+0xb8/0xf0 [ 1226.389457][ T3453] nldev_dellink+0x288/0x320 [ 1226.389481][ T3453] ? __pfx_nldev_dellink+0x10/0x10 [ 1226.389563][ T3453] ? security_capable+0x42/0x2c0 [ 1226.389586][ T3453] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 1226.389607][ T3453] ? security_capable+0x7e/0x2c0 [ 1226.389648][ T3453] ? __pfx_nldev_dellink+0x10/0x10 [ 1226.389679][ T3453] rdma_nl_rcv+0x6d7/0xa10 [ 1226.389711][ T3453] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1226.389734][ T3453] ? lockdep_hardirqs_on+0x7a/0x110 [ 1226.389758][ T3453] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1226.389783][ T3453] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 1226.389822][ T3453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1226.389840][ T3453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1226.389863][ T3453] netlink_unicast+0x780/0x920 [ 1226.389897][ T3453] netlink_sendmsg+0x813/0xb40 [ 1226.389921][ T3453] ? irqentry_exit+0x218/0x730 [ 1226.389950][ T3453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.389979][ T3453] ____sys_sendmsg+0x94c/0x9c0 [ 1226.390005][ T3453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1226.390033][ T3453] ? import_iovec+0x73/0xa0 [ 1226.390053][ T3453] ___sys_sendmsg+0x2a5/0x360 [ 1226.390073][ T3453] ? __lock_acquire+0x6b5/0x2cf0 [ 1226.390112][ T3453] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.390148][ T3453] ? futex_wake+0x4af/0x580 [ 1226.390218][ T3453] ? __fget_files+0x2a/0x420 [ 1226.390246][ T3453] ? __fget_files+0x3a6/0x420 [ 1226.390269][ T3453] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1226.390293][ T3453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1226.390321][ T3453] ? rcu_is_watching+0x15/0xb0 [ 1226.390346][ T3453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.390365][ T3453] do_syscall_64+0x15f/0xf80 [ 1226.390389][ T3453] ? clear_bhb_loop+0x40/0x90 [ 1226.390410][ T3453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.390426][ T3453] RIP: 0033:0x7f85d12bc819 [ 1226.390441][ T3453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.390455][ T3453] RSP: 002b:00007f85cf4cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1226.390472][ T3453] RAX: ffffffffffffffda RBX: 00007f85d1536180 RCX: 00007f85d12bc819 [ 1226.390484][ T3453] RDX: 0000000060000800 RSI: 0000200000000180 RDI: 0000000000000009 [ 1226.390495][ T3453] RBP: 00007f85d1352c91 R08: 0000000000000000 R09: 0000000000000000 [ 1226.390506][ T3453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.390516][ T3453] R13: 00007f85d1536218 R14: 00007f85d1536180 R15: 00007ffd6de132d8 [ 1226.390542][ T3453] [ 1226.390556][ T3453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1226.390570][ T3453] CPU: 0 UID: 0 PID: 3453 Comm: syz.9.12865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1226.390592][ T3453] Tainted: [L]=SOFTLOCKUP [ 1226.390598][ T3453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1226.390608][ T3453] Call Trace: [ 1226.390615][ T3453] [ 1226.390621][ T3453] vpanic+0x56c/0xa60 [ 1226.390649][ T3453] ? __pfx__printk+0x10/0x10 [ 1226.390669][ T3453] ? __pfx_vpanic+0x10/0x10 [ 1226.390682][ T3453] ? is_bpf_text_address+0x292/0x2b0 [ 1226.390707][ T3453] ? is_bpf_text_address+0x26/0x2b0 [ 1226.390739][ T3453] panic+0xc5/0xd0 [ 1226.390752][ T3453] ? __pfx_panic+0x10/0x10 [ 1226.390780][ T3453] __warn+0x315/0x4c0 [ 1226.390793][ T3453] ? rxe_pool_cleanup+0x4b/0x60 [ 1226.390815][ T3453] ? rxe_pool_cleanup+0x4b/0x60 [ 1226.390836][ T3453] __report_bug+0x29a/0x540 [ 1226.390859][ T3453] ? lockdep_hardirqs_on+0x7a/0x110 [ 1226.390886][ T3453] ? rxe_pool_cleanup+0x4b/0x60 [ 1226.390914][ T3453] ? __pfx___report_bug+0x10/0x10 [ 1226.390945][ T3453] ? __flush_workqueue+0x12d3/0x14f0 [ 1226.390976][ T3453] ? rxe_pool_cleanup+0x4b/0x60 [ 1226.390996][ T3453] report_bug+0x16a/0x220 [ 1226.391019][ T3453] ? rxe_pool_cleanup+0x4b/0x60 [ 1226.391039][ T3453] ? rxe_pool_cleanup+0x4d/0x60 [ 1226.391058][ T3453] handle_bug+0x9c/0x200 [ 1226.391075][ T3453] exc_invalid_op+0x1a/0x50 [ 1226.391091][ T3453] asm_exc_invalid_op+0x1a/0x20 [ 1226.391106][ T3453] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 1226.391127][ T3453] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 0d 49 ed f9 48 83 3b 00 75 0c e8 62 16 87 f9 5b c3 cc cc cc cc cc e8 56 16 87 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1226.391141][ T3453] RSP: 0018:ffffc90003e670c0 EFLAGS: 00010246 [ 1226.391155][ T3453] RAX: ffffffff883c957a RBX: ffff888061e396a8 RCX: 0000000000080000 [ 1226.391167][ T3453] RDX: ffffc90010b5d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1226.391179][ T3453] RBP: ffff888061e39318 R08: 0000000000000000 R09: 0000000000000000 [ 1226.391190][ T3453] R10: dffffc0000000000 R11: ffffffff883ad680 R12: ffff888061e38000 [ 1226.391202][ T3453] R13: dffffc0000000000 R14: ffffffff883ad680 R15: dffffc0000000000 [ 1226.391236][ T3453] ? __pfx_rxe_dealloc+0x10/0x10 [ 1226.391265][ T3453] ? __pfx_rxe_dealloc+0x10/0x10 [ 1226.391302][ T3453] ? rxe_pool_cleanup+0x4a/0x60 [ 1226.391338][ T3453] rxe_dealloc+0x25/0xc0 [ 1226.391364][ T3453] ib_dealloc_device+0x54/0x200 [ 1226.391401][ T3453] __ib_unregister_device+0x393/0x3f0 [ 1226.391430][ T3453] ? __ib_unregister_device+0x1/0x3f0 [ 1226.391458][ T3453] ib_unregister_device_and_put+0xb8/0xf0 [ 1226.391486][ T3453] nldev_dellink+0x288/0x320 [ 1226.391511][ T3453] ? __pfx_nldev_dellink+0x10/0x10 [ 1226.391628][ T3453] ? security_capable+0x42/0x2c0 [ 1226.391654][ T3453] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 1226.391677][ T3453] ? security_capable+0x7e/0x2c0 [ 1226.391702][ T3453] ? __pfx_nldev_dellink+0x10/0x10 [ 1226.391726][ T3453] rdma_nl_rcv+0x6d7/0xa10 [ 1226.391758][ T3453] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1226.391785][ T3453] ? lockdep_hardirqs_on+0x7a/0x110 [ 1226.391809][ T3453] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1226.391834][ T3453] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 1226.391872][ T3453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1226.391890][ T3453] ? netlink_deliver_tap+0x2e/0x1b0 [ 1226.391917][ T3453] netlink_unicast+0x780/0x920 [ 1226.391952][ T3453] netlink_sendmsg+0x813/0xb40 [ 1226.391971][ T3453] ? irqentry_exit+0x218/0x730 [ 1226.391999][ T3453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.392029][ T3453] ____sys_sendmsg+0x94c/0x9c0 [ 1226.392054][ T3453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1226.392083][ T3453] ? import_iovec+0x73/0xa0 [ 1226.392103][ T3453] ___sys_sendmsg+0x2a5/0x360 [ 1226.392141][ T3453] ? __lock_acquire+0x6b5/0x2cf0 [ 1226.392161][ T3453] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.392188][ T3453] ? futex_wake+0x4af/0x580 [ 1226.392230][ T3453] ? __fget_files+0x2a/0x420 [ 1226.392245][ T3453] ? __fget_files+0x3a6/0x420 [ 1226.392269][ T3453] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1226.392293][ T3453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1226.392322][ T3453] ? rcu_is_watching+0x15/0xb0 [ 1226.392376][ T3453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.392396][ T3453] do_syscall_64+0x15f/0xf80 [ 1226.392445][ T3453] ? clear_bhb_loop+0x40/0x90 [ 1226.392477][ T3453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.392503][ T3453] RIP: 0033:0x7f85d12bc819 [ 1226.392518][ T3453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.392533][ T3453] RSP: 002b:00007f85cf4cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1226.392550][ T3453] RAX: ffffffffffffffda RBX: 00007f85d1536180 RCX: 00007f85d12bc819 [ 1226.392563][ T3453] RDX: 0000000060000800 RSI: 0000200000000180 RDI: 0000000000000009 [ 1226.392575][ T3453] RBP: 00007f85d1352c91 R08: 0000000000000000 R09: 0000000000000000 [ 1226.392585][ T3453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.392596][ T3453] R13: 00007f85d1536218 R14: 00007f85d1536180 R15: 00007ffd6de132d8 [ 1226.392623][ T3453] [ 1226.392793][ T3453] Kernel Offset: disabled