last executing test programs: 57.613800859s ago: executing program 2 (id=968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000640)={0x10000, 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000001480)={{0x8, 0x4}, 0x100, './bus\x00'}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x3}]}}}}}}}}, 0x0) 57.48764312s ago: executing program 4 (id=970): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000000000000000000000000000057180738067f37d90aa1e990ee2c689cfdd135531e4bca90d535c59527d8c839443cfb5eefba5a164cb3640a897b660ac08ed6985e28e1e093b2a9d78683836bd40afa1c6dfcc32473b3dcf01432b592a42cdfc230654372b12ac55efb57e13930ceb0ae36af647cad1e71de8d8380be20f93651b05b29702f440992b68b40bf51d82d512eadfd7e1fe2186ce460489484ed3190332adce40e22a5a5a87f676909af530cb7100d3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x98}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000033a80)=""/102370, 0xffffffb1}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000040)=""/22, 0x19}, {&(0x7f0000001a40)=""/4089, 0x1000}], 0x4, 0x0, 0x0) setns(0xffffffffffffffff, 0x3c020000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000003c0)={0x40000000, 0x0, "0a1f511f900700427ff44fba1abc61019d30fd87819aba0a3fb25f2167d30b0e", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x5d95]}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)={0xfffeffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x2) 55.002469007s ago: executing program 4 (id=971): r0 = socket(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4e8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000280)) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002a000900e4ff1000000000000400002c410011803cca935e56c61a30c6b6607f08fa86edc2bae6327cd7c70b7da0ceb943027c2b0269152f038733a772553d464c52f2ad8d3826362062ce174f160f6fb82027a05244a8b0371d122b60a501d4ccb2611ac163f027abea11946697a55e3020b3e0e770935c448e2661574e"], 0x58}}, 0x8040010) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) flock(0xffffffffffffffff, 0x1) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x204, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) creat(&(0x7f0000000080)='./bus\x00', 0x0) 53.505570723s ago: executing program 2 (id=974): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4624, 0x409, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2000001}}, 0x0, 0x2, 0x3, 0x800, 0xc2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9}, 0x14}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 50.747755148s ago: executing program 2 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000280), r0, 0x0, 0x800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a004000008a47e6c71f"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c11000000000067aa44e7804bc32200000000"], 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0], 0x3b) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) unlink(&(0x7f0000000440)='./file0/file1/file0\x00') socket(0x1, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1, 0x2f, 0x0) getpid() 49.952522953s ago: executing program 4 (id=977): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x0, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 49.554057999s ago: executing program 2 (id=982): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x4}]}, 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x10) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001980)=ANY=[@ANYBLOB="14000000100001000000000090d60ab529f98c7576521ad10000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000028100000000000000797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x4c801) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000b40)={0x0, 'dummy0\x00', {0x2}, 0xc7e5}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4048844}, 0x20000813) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x6, 0x7, 0x8}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 48.046185508s ago: executing program 2 (id=985): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x10}) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='openpromfs\x00', 0x1018000, &(0x7f0000000240)='b\xb1Fs\t\xb5\xda\xec,\xdb\xe0\xb0\xe0\xe8*\xd4\x00\x00\x00\x00\x00\x00\x00\x00F*\x0f\xdd\xe3\rb\xf9,\x196\xb2\x92\x9d\x94\xd4\x96\xbc9))\xef\xdeW\x86\xf4\xd8(\x13\x81') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}, {@subsystem='cpuacct'}]}) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000080de4bc32670ff59000c9b001801000020696c250000", @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES8=r5, @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r6}, 0x10) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYRES32=r7], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 46.85968232s ago: executing program 4 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150040000000090002"], 0x5c}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x0, 0x0, 'sed\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x80100fc, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0xffffffffffffffff, r7) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 42.741021602s ago: executing program 4 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x200058, 0x7c000000, 0x0, 0xffffffffffffffe8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), 0x4) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f00000003c0)={0xffffff92, 0x7d, 0x0, {{0x500, 0x16b, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evbox%\xff\xff\xff\x81\x04\x00\x00\x00\x00\x00\x00\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x8c, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00g{bb\x8b\xfb?)l\x7f\xc8\xab*\xc8\xbbd\xb4\xcb\xf2\xefJi.\x92\xc9\xfe\xa1\f\x91\xe7\xc1\xb2\xff\x1eH3\xe4\x97\x83\xd6f\xa5qv/t\xd1\xacME\xa2\xafr\xab&L\x84p\xa0\x18E\xe2\x90\xf2\x85G\xc2v\xd0\xc5\x9b \x8c\x03\xe8\x82\x10\x97~G}\xd2\xba/\xd2\x8e\x8d\x05\a\xc4\x9d\x9e\xa8\xa6\xeb\xe2\x80C\x04ji<\xd3r\xc8&\x8b\xa9i\xc7\xac\xa4\x90\'\xba$\'3\x8d3\x84<', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x134, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xfd\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\xf3\xbbJ\x03\x13\xec\x98\b\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/308}}, 0x2b4) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001418) fcntl$setlease(r6, 0x400, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x7c1080, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r5, 0x5427) socket$kcm(0x10, 0x2, 0x0) 41.416820031s ago: executing program 4 (id=989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019080)='net/dev_mcast\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x80}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x0) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x80) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 41.381372386s ago: executing program 2 (id=990): r0 = socket(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4e8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000280)) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000002a000900e4ff1000000000000400002c410011803cca935e56c61a30c6b6607f08fa86edc2bae6327cd7c70b7da0ceb943027c2b0269152f038733a772553d464c52f2ad8d3826362062ce174f160f6fb82027a05244a8b0371d122b60a501d4ccb2611ac163f027abea11946697a55e3020b3e0e770935c448e2661574e"], 0x58}}, 0x8040010) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) flock(0xffffffffffffffff, 0x1) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x204, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) creat(&(0x7f0000000080)='./bus\x00', 0x0) 22.284668012s ago: executing program 1 (id=1013): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x534, 0x2001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000010c00000000000000000a140000000000010000845169612145c6f70000c97e17694b68b6eaff030000bda8d949160ed42bdbade150769e4a380e570c3d55e37a0303ad7734688cd118c594bbe6d20f96e1cc82c9759bbb3b4a417d00"], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) flock(r3, 0x6) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {0x200}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4], [0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82ef]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, r9, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b498f7d5cb857e519400ea00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) close_range(r5, r4, 0x0) r10 = dup(r3) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_dev$tty20(0xc, 0x4, 0x0) 20.126324443s ago: executing program 1 (id=1016): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="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", 0x1d8}], 0x1) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a1", 0xc7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000015ff4305b73c8b30f9a60f885068e297bc2b8364cb9a0b28800d3ad22fcf9f4abd808a1a7614414b597afc6a4b74b67514e3eca85b8cb2794b603c557eff52c14769cc18047a31d0f7d5a867e96f5fd21482334e0bf668da248e82059d0d24db007b7225bee814398f319797dcf946fde8e2f"], 0x64}}, 0x0) 18.023884921s ago: executing program 1 (id=1018): r0 = socket(0xa, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @link_local}, 0x2, {0x2, 0x0, @loopback}, 'veth0_to_bond\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$getregs(0xe, r4, 0x3, &(0x7f0000000400)=""/4096) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000000201000000800000002000000000000004000280054979d0de26d56ff6ba7d395d6bf54b5f3added70a5c3be0e2a8dc8c22e6a9ad82b07d5843163aae8e468a27597d94757d2"], 0x18}}, 0x24046004) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000380)='./bus\x00', r7, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_open_dev$dri(0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000000c0)) setresgid(0x0, 0x0, 0x0) 14.844888167s ago: executing program 0 (id=1022): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 14.522245895s ago: executing program 0 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x1d7d, &(0x7f00000003c0)={0x0, 0x1528}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(0x0, 0x80) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x1a, 0x0, 0x1, 0x4}}, 0x48) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)=r4}, 0x20) ioctl$EXT4_IOC_GETSTATE(r11, 0x40046629, &(0x7f0000000380)) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r10, 0x40047435, &(0x7f0000000280)) close_range(r5, 0xffffffffffffffff, 0x0) 13.295678759s ago: executing program 0 (id=1024): syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x1, 0xfffffffe}, 0x0, &(0x7f0000000140)) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000001b080)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000002c0)={"942600", 0x0, 0x5, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a11", "70d214b7", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978145c38df4d", "79f56ca74227234da829edb7"]}) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x23b) io_setup(0x3, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f00004a6000/0x3000)=nil, 0x3000, 0x300000a, 0x1010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 10.204667709s ago: executing program 3 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_bt_hci(r3, 0x400448c8, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000007e4aaf7d000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000780900010073797a3000000000080003400000000514000000110001000000000000000000000000e99cf8869830bdad21047dd77e07e8596f7db11c6723a4c0f6e44a6d0e215ef36c816ca0d7773734fa954c5d25c61824bfbee1b6d9ca95b6cd7783817b133a3a5328cb78b82b7fd1e5760000"], 0x64}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x28) syz_io_uring_setup(0x26c6, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1}) 10.13541847s ago: executing program 1 (id=1027): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0xff, 0x2}, 0x20) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r7]}}], 0x18}, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0xcc29, 0x5, 0x5) 9.972991016s ago: executing program 0 (id=1028): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x2) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0xffffffffffffff92, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r8 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 7.120708949s ago: executing program 1 (id=1029): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000100c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000010200)={&(0x7f00000102c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000010040)=ANY=[@ANYBLOB="180000000000000000800000000000006112040000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000010100)={0x0, 0xe5f0, 0x100, 0x0, 0xffffffff}, &(0x7f0000ff0000), &(0x7f0000010080)) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x3, 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$evdev(0x0, 0x0, 0x8081) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) writev(r4, &(0x7f0000000180), 0x10000000000000f9) 6.65109226s ago: executing program 3 (id=1030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="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", 0x1d8}], 0x1) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a1", 0xc7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000015ff4305b73c8b30f9a60f885068e297bc2b8364cb9a0b28800d3ad22fcf9f4abd808a1a7614414b597afc6a4b74b67514e3eca85b8cb2794b603c557eff52c14769cc18047a31d0f7d5a867e96f5fd21482334e0bf668da248e82059d0d24db007b7225bee814398f319797dcf946fde8e2f"], 0x64}}, 0x0) 5.862044633s ago: executing program 0 (id=1031): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000000000000000000000000000057180738067f37d90aa1e990ee2c689cfdd135531e4bca90d535c59527d8c839443cfb5eefba5a164cb3640a897b660ac08ed6985e28e1e093b2a9d78683836bd40afa1c6dfcc32473b3dcf01432b592a42cdfc230654372b12ac55efb57e13930ceb0ae36af647cad1e71de8d8380be20f93651b05b29702f440992b68b40bf51d82d512eadfd7e1fe2186ce460489484ed3190332adce40e22a5a5a87f676909af530cb7100d3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x98}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000033a80)=""/102370, 0xffffffb1}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000040)=""/22, 0x19}, {&(0x7f0000001a40)=""/4089, 0x1000}], 0x4, 0x0, 0x0) setns(0xffffffffffffffff, 0x3c020000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000003c0)={0x40000000, 0x0, "0a1f511f900700427ff44fba1abc61019d30fd87819aba0a3fb25f2167d30b0e", 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x5d95]}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)={0xfffeffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 5.262608099s ago: executing program 3 (id=1032): socket$kcm(0x1e, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000c00)="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", 0xfb}, {&(0x7f0000000a80)="63d58ab13798ebd32d00c8327ab36817e719f789d1d3ce5f22d5af591d90720118fc9c6b709ef171d975dbb95a27755dc1a7dd6d1ec22a9cc8ceff6b171bf7ac9f7d2e8267adafa29ac60f28cbd9b4476e2c625bd212d81da9b399d1a3f0d7b9e600f75f1a5c129c4f7b42fed08c", 0x6e}, {&(0x7f0000000d00)="e05f73308df95fe1df55eebbc4ae818cff99ee692fa95e7e5688deacf5d32f778aed208367fba0ed22d8cdc6d9e1d06d776e128c57a1481ada28e20ca077bb0b6eb7f0d17c3990e737390253cf020704d0c5ada287b196f9378308fa469bbee5c662dae9d0d1f85d98bd376fb8941bcd1575c4262c3d49406fbc93595f522f83b4cfa159f822ed378f567b119e50f7f9ed589d74773e88308e87609c5f3080f3dc975c573941b260eb0b3014790e9c439fc440591b986906da380a7469a63025f3fca7bb16cd7ec892e7e5e50427f01468ac3b83a16a4632b88eff63", 0xdc}, {&(0x7f0000000e80)="0547b20b7b0e67726bb07be578fbf6249af7da143171e5a0a15aa4670475c35eb38fcc0009c067dfa4", 0x29}, {&(0x7f0000000f00)="b53b299613277abb3fb534569be76abf2dc25e6d46ad88a6f3a34b420d5b61e898f2d6cbfeae3e32143123a51b5a96a1fc40432b6e010b8127865bfa60b110af269d93265e24bb6ad2aff0b14db2b33dc2346ef494bea62f34afc4b5954c6849f1f4f718ad0c813131541583b5f3e9cc7a31c51526c04f7a4775576d61b161f2de20b63cc66c8c9af21514945fb9735af12e0cd861c8be60c1897cdbe735b09546bc517ec1497671750ea8d697bc63f410f6f4b0e2b5da8dbdfa4a5d70b9a7738012bb7a4210d15e07786e217e48d5e23accc61b23a152da420786267e9aa792b554c00781ffa2309ccda0b7623579cd385c4f9899", 0xf5}, {&(0x7f0000000380)="16f80147f882d1f35ab858779fc73b6a076f5f8d3e78975e", 0x18}, {&(0x7f0000001000)="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", 0xff}, {&(0x7f0000001100)="11acdc0b6114c792b33cf5129af7005983b8505f44d96d7b3b35b3bda90229c9aecd2e5f9adc52cfaac5e8fccb026c7f601cac670d4e78d312de32070a6391de711e66948ab89beb0465048e7880f014bcb2cd777a61554c85b3109b8f2c23d7930831120c5fa2051ba5d56f88692e29f74967e50e656ed403576e3ad0696019898f484c08705c064552d138be58ca2896f35d51aab2c0a141f33ee6d7c0", 0x9e}, {&(0x7f00000011c0)="1098e873c617fbff8c1ca8262c3ea8591eb8a3fb5be592f3c280d4a7ced96621d5dce371266a8e48649db2f8c55f7a518a4eb27afe6989c6814600549399cd47c1c1824a5a95830a6993", 0x4a}], 0x9}, 0x4080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x1415}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r11, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x15, &(0x7f0000000b40)=ANY=[@ANYRES16=r8, @ANYRES16=r5, @ANYBLOB="0000004000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f84977ffffffb703000008000000b7040000010010008500000082000000180100002020692500000000002020207b1af8ff00000000bfa1008edbe3a40007010000f8ffffffb702000008000000b7030000710c0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f0000000180)={r9}) 3.862229344s ago: executing program 3 (id=1033): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000400)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809ce3c954f8a9618ebe5c3253e888feae6cc381ecb4a64085e24c48cf5ae9c5125d58d78ab2b70ec9216b42cf69b0cd34aa9a9b8e32e1841f19a7d38ce8de4d6d24b1a239ccfbb0935e4db5f50c9b8ebdf158eb582b914857522de035110521a268d3fa0888ebd65ab9b382f0d66bd42713338b2fa1029851d62af03f2bcf6034cf0287f10c84c967bae32a79fbf90122d41a622c0fa8a0fae4ffa55df5ec7ebb0708dbb6148f2cde6d128018a0efa8598fa29ac80c6642d52c6f6b979e8fe5e1fbe7615ca1bc31f2bc541b3f67f129a490900000004ab65b661139a2d66fbe14888b28fb681b11cd33e07a04cee7fa461932185531acd971e41d0eaed454f6b4520963c5d21b889764986530174051ddeca7547b3aeb0ed720e20099fbeec90859a9f22b9229f72fb45e62fb2c7048099eb484eda", 0x1d8}], 0x1) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a1", 0xc7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00'}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000015ff4305b73c8b30f9a60f885068e297bc2b8364cb9a0b28800d3ad22fcf9f4abd808a1a7614414b597afc6a4b74b67514e3eca85b8cb2794b603c557eff52c14769cc18047a31d0f7d5a867e96f5fd21482334e0bf668da248e82059d0d24db007b7225bee814398f319797dcf946fde8e2f"], 0x64}}, 0x0) 3.541013051s ago: executing program 0 (id=1034): gettid() r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000", @ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_clone(0x58060200, &(0x7f0000000080)="91105cff112598770c", 0x9, &(0x7f0000000240), 0x0, &(0x7f0000000480)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) dup2(r6, r6) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000005c) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c017936", 0x3e}, {&(0x7f0000000640)="0d58fa00a4a25557616d6ad626d271bcc615561efebc4402c751263a6048a6cc870c57", 0x23}], 0x2}, 0x8010) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) close(r7) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@remote}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.42236049s ago: executing program 1 (id=1035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@mcast1}, {@in=@remote, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "b0b0e7f3dc5f121624ca7e8d6c8299f420"}}]}, 0x150}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r10, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0) r11 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(r11) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.016496109s ago: executing program 3 (id=1036): syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x1, 0xfffffffe}, 0x0, &(0x7f0000000140)) socket$inet6_dccp(0xa, 0x6, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000001b080)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000002c0)={"942600", 0x0, 0x5, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a11", "70d214b7", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x0, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978145c38df4d", "79f56ca74227234da829edb7"]}) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x23b) io_setup(0x3, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f00004a6000/0x3000)=nil, 0x3000, 0x300000a, 0x1010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 0s ago: executing program 3 (id=1037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x80089203, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1a8}, @l2cap_cid_signaling={{0x1a4}, [@l2cap_conf_req={{0x4, 0x7, 0x33}, {0xa, 0x8, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x10, 0xd, 0x1b, 0x101, 0x3}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x3, 0x0, 0xaa9, 0x299}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x80, 0x2, 0x3a, 0x9, 0x3fa7}}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xff00, 0x9}}, @l2cap_info_rsp={{0xb, 0x5, 0xc1}, {0x3ff, 0x1, "fd9ae59d9a44d4ba3c737771f4f58b9a91f18640c827f0063d2c5adb46a9cb7dbb43758740cd3af028b539e11c73e629888afffd09146751c8350c1f1b177d7ad93a4327b74ace4d58ae5121df2fb618bf63b3f5b9d6f0c50b4f336167c3c7233c8a3644d70f4b3702c7abe2d6782d87a95b76cffa82b5d996a3dd539ab4589027401ad083f9c4ea06df0dd5a33dfd0a9c9017b34f0b7d580bf1f0e394f2542f99c415c7122b8567cfcf6dc695ca4d5dfb654eb45bb66c46ebbf6d4cf4"}}, @l2cap_info_rsp={{0xb, 0x6e, 0x97}, {0x200, 0x0, "d1f62aeb5c5d4f154b716328e3f71d6ee69125386e68e9f6dcaa20752a56ab6b3f49973d7a1b350cbf828732edb250c9cd78949b7e16646657b430e753a63ad2af4ee546239f69cf4271c296088e7e564ffe230effc7d2895f27608a50df35b0e0bf2de2c6c6cf6f660cc09ab146e3296b609727dc06773e4182c879bed2d531998ec96b004b68b1b5cbd544354000bfc906fd"}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x2}}]}}, 0x1ad) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000006c0)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x36, 0x36, 0x78, 0x36, 0x25, 0x78]}}, {@huge_advise}, {@huge_advise}, {@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@huge_always}], [{@uid_lt}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000280)="a1e05b667c038711d2a63dcfa2267415013170ec4c4674021f07d9c39fc1b780c0e0daab040b9ccadc02c9519fdda7a639774643beb7ab9e55e84f7f85ba476f91700cc0ff4cfa4bf84452d1d4b27913ceabd1a3ef0e255b2678541c38793520df053b17dd5b9daf29acbd8bffc3b01828b45d47335839d156aef8b1e49c9b7a76add487e08847312f3e3f61fdcb1ccfad045555d3b94579307edef6382f5b8637f533bd6e3fa3ecc043fbd816cded5a2e699b8280be535305efcf37409100c1e12aabdac3a9c13cc1dd52c788117ffd31f65fc1fb21a5", &(0x7f0000000040)=@udp, 0x4}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001100)={'nat\x00', 0x0, 0xfffffffd, 0xdb, [], 0x2, 0x0, 0x0}, &(0x7f0000001180)=0x108) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local, @in6=@mcast1, 0x0, 0x643ea41f35e974b6}]}, 0x38}}, 0x0) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x3c5a82, 0x0) copy_file_range(r8, &(0x7f0000000000)=0x9, r8, 0x0, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x0, 0x3, 0x32, @local, @loopback, 0x20, 0x80, 0x7fffffff, 0xd5c}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000024000103000001000000000001000000"], 0x14}}, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r10) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ()d-Ry^v+AI [ 964.344310][T10807] block nbd4: shutting down sockets [ 964.484190][ T5228] Bluetooth: hci4: command 0x0406 tx timeout [ 965.044079][ T5235] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 965.506876][T10818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.548224][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 965.894026][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 965.964177][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 966.060504][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 966.084011][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.141389][ T9] usb 2-1: Product: syz [ 966.168342][ T9] usb 2-1: Manufacturer: syz [ 966.183079][ T9] usb 2-1: SerialNumber: syz [ 966.216290][ T9] usb 2-1: config 0 descriptor?? [ 966.309104][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 966.588955][ T52] usb 2-1: Failed to submit usb control message: -71 [ 966.606387][ T9] usb 2-1: USB disconnect, device number 15 [ 966.626578][ T52] usb 2-1: unable to send the bmi data to the device: -71 [ 966.694188][ T52] usb 2-1: unable to get target info from device [ 966.700614][ T52] usb 2-1: could not get target info (-71) [ 966.729195][ T30] audit: type=1400 audit(1726780306.142:663): avc: denied { ioctl } for pid=10825 comm="syz.4.796" path="socket:[41303]" dev="sockfs" ino=41303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 966.811089][ T52] usb 2-1: could not probe fw (-71) [ 968.703972][T10844] netlink: 'syz.3.799': attribute type 16 has an invalid length. [ 968.712033][T10844] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.799'. [ 971.207020][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 973.696987][ T5228] Bluetooth: hci4: unexpected event 0x01 length: 3 > 1 [ 974.564148][ T5276] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 977.272112][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 977.747086][ T5276] usb 2-1: device descriptor read/all, error -71 [ 978.444197][ T8364] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 978.711195][ T8364] usb 4-1: Using ep0 maxpacket: 32 [ 978.775233][ T8364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 978.883790][ T8364] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 979.691071][ T8364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.701493][ T8364] usb 4-1: Product: syz [ 979.711900][ T8364] usb 4-1: Manufacturer: syz [ 979.716790][ T8364] usb 4-1: SerialNumber: syz [ 979.735586][ T8364] usb 4-1: config 0 descriptor?? [ 979.886351][ T8364] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 980.975749][ T2465] usb 4-1: Failed to submit usb control message: -110 [ 981.039340][ T2465] usb 4-1: unable to send the bmi data to the device: -110 [ 981.061222][ T2465] usb 4-1: unable to get target info from device [ 981.108022][ T2465] usb 4-1: could not get target info (-110) [ 981.152016][ T2465] usb 4-1: could not probe fw (-110) [ 981.249524][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 981.262136][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 981.271435][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 981.281504][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 981.301141][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 981.314958][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 981.902691][ T8364] usb 4-1: USB disconnect, device number 7 [ 982.824983][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 982.844386][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 982.855795][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 982.865536][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 982.873637][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 982.881369][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 982.970558][T10911] dlm: no locking on control device [ 983.018180][T10911] netlink: 292 bytes leftover after parsing attributes in process `syz.3.814'. [ 983.444539][ T5228] Bluetooth: hci1: command tx timeout [ 983.834155][ T5228] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 984.329952][T10900] chnl_net:caif_netlink_parms(): no params data found [ 984.400992][T10928] binder: 10923:10928 unknown command 536871296 [ 984.464560][T10928] binder: 10923:10928 ioctl c0306201 20000480 returned -22 [ 984.565366][ T5228] Bluetooth: hci2: command 0x0406 tx timeout [ 984.776393][ T5444] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.969369][ T5228] Bluetooth: hci5: command tx timeout [ 985.183821][ T5444] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.554334][ T5228] Bluetooth: hci1: command tx timeout [ 986.654074][ T5228] Bluetooth: hci2: command 0x0406 tx timeout [ 987.044104][ T5228] Bluetooth: hci5: command tx timeout [ 987.433796][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 987.604603][ T5228] Bluetooth: hci1: command tx timeout [ 987.664211][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 987.672039][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 987.681766][ T25] usb 2-1: config 0 has no interface number 0 [ 987.689368][ T25] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 987.701823][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.747886][ T25] usb 2-1: config 0 descriptor?? [ 987.927407][ T25] usb 2-1: can't set config #0, error -71 [ 987.950959][ T25] usb 2-1: USB disconnect, device number 18 [ 988.081791][ T5444] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.693100][ T5444] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.127831][ T5228] Bluetooth: hci5: command tx timeout [ 989.369901][T10915] chnl_net:caif_netlink_parms(): no params data found [ 989.420411][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.451273][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.464480][T10900] bridge_slave_0: entered allmulticast mode [ 989.491085][T10900] bridge_slave_0: entered promiscuous mode [ 989.592576][T10900] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.603046][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.634467][T10900] bridge_slave_1: entered allmulticast mode [ 989.674044][T10900] bridge_slave_1: entered promiscuous mode [ 989.692524][ T5228] Bluetooth: hci1: command tx timeout [ 990.171443][T10900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.347477][T10900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.374375][ T5359] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 990.567028][ T5359] usb 4-1: Using ep0 maxpacket: 32 [ 990.581766][ T5359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 990.606905][ T5359] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 990.627536][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.639928][ T5359] usb 4-1: Product: syz [ 990.646100][ T5359] usb 4-1: Manufacturer: syz [ 990.651155][ T5359] usb 4-1: SerialNumber: syz [ 990.670072][ T5359] usb 4-1: config 0 descriptor?? [ 990.678410][T10900] team0: Port device team_slave_0 added [ 990.754926][ T5359] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 990.957187][T10900] team0: Port device team_slave_1 added [ 991.086904][ T5444] bridge_slave_1: left allmulticast mode [ 991.106889][ T5444] bridge_slave_1: left promiscuous mode [ 991.139084][ T5444] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.204244][ T5228] Bluetooth: hci5: command tx timeout [ 991.210320][ T5444] bridge_slave_0: left allmulticast mode [ 991.256177][ T5444] bridge_slave_0: left promiscuous mode [ 991.320782][ T5444] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.816452][ T12] usb 4-1: Failed to submit usb control message: -110 [ 991.886453][ T12] usb 4-1: unable to send the bmi data to the device: -110 [ 991.921979][ T12] usb 4-1: unable to get target info from device [ 991.947497][ T12] usb 4-1: could not get target info (-110) [ 991.988196][ T12] usb 4-1: could not probe fw (-110) [ 992.165364][ T5228] Bluetooth: hci2: command 0x0406 tx timeout [ 992.925015][T10996] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 993.034590][ T25] usb 4-1: USB disconnect, device number 8 [ 993.594578][ T5228] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 996.199395][ T5228] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 996.229535][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 996.667113][ T5444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.796896][ T5444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.872157][ T5444] bond0 (unregistering): Released all slaves [ 997.150288][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.190068][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.203174][T10915] bridge_slave_0: entered allmulticast mode [ 997.217249][T10915] bridge_slave_0: entered promiscuous mode [ 997.405076][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 997.586307][T10900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.600222][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.650952][T10900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.650949][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 997.674788][ T46] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 997.701282][ T46] usb 4-1: config 0 has no interface number 0 [ 997.714405][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.732020][ T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 997.745779][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.755727][T10915] bridge_slave_1: entered allmulticast mode [ 997.765453][T10915] bridge_slave_1: entered promiscuous mode [ 997.766624][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.833446][ T46] usb 4-1: config 0 descriptor?? [ 997.883547][ T46] hso 4-1:0.1: Failed to find BULK IN ep [ 998.015614][T10900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.080946][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.166296][T10900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.249680][ T46] usb 4-1: USB disconnect, device number 9 [ 998.487088][T10915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.650053][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.657402][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.724862][T10915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.175435][T10900] hsr_slave_0: entered promiscuous mode [ 999.222374][T10900] hsr_slave_1: entered promiscuous mode [ 999.244546][T10900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.294173][T10900] Cannot create hsr debugfs directory [ 999.759332][T11039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1000.154941][ T5444] hsr_slave_0: left promiscuous mode [ 1000.195749][ T5444] hsr_slave_1: left promiscuous mode [ 1000.315622][ T5444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.336921][ T5444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.359392][ T5444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.378796][ T5444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.588759][ T5444] veth1_macvtap: left promiscuous mode [ 1000.654385][ T5444] veth1_vlan: left promiscuous mode [ 1000.672588][ T5444] veth0_vlan: left promiscuous mode [ 1000.713784][T11043] block nbd3: shutting down sockets [ 1000.944978][T11055] [U] v3f"S/4:XTzWtlW= [ 1001.043695][T11055] [U] J"e:" [ 1001.532024][T11048] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1002.514394][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1002.812876][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1002.822604][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1002.881130][ T46] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1002.900337][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.910200][ T46] usb 2-1: Product: syz [ 1002.934379][ T46] usb 2-1: Manufacturer: syz [ 1002.944725][ T46] usb 2-1: SerialNumber: syz [ 1002.971251][ T46] usb 2-1: config 0 descriptor?? [ 1003.011623][ T46] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1003.753078][ T5444] team0 (unregistering): Port device team_slave_1 removed [ 1003.869055][ T5444] team0 (unregistering): Port device team_slave_0 removed [ 1004.097786][ T52] usb 2-1: Failed to submit usb control message: -110 [ 1004.108920][ T52] usb 2-1: unable to send the bmi data to the device: -110 [ 1004.117290][ T52] usb 2-1: unable to get target info from device [ 1004.150758][ T52] usb 2-1: could not get target info (-110) [ 1004.189812][ T52] usb 2-1: could not probe fw (-110) [ 1005.099055][ T46] usb 2-1: USB disconnect, device number 19 [ 1005.256366][T10915] team0: Port device team_slave_0 added [ 1005.386495][T11062] : renamed from syztnl0 [ 1005.451366][T10915] team0: Port device team_slave_1 added [ 1006.017808][T11085] [U] v3f"S/4:XTzWtlW= [ 1006.023970][T11085] [U] J"e:" [ 1006.693570][T10915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.700827][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.767235][T11079] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1006.778894][T10915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.851332][T11086] tipc: Started in network mode [ 1006.858455][T11086] tipc: Node identity 4, cluster identity 4711 [ 1006.879766][T11086] tipc: Node number set to 4 [ 1006.888489][T10915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.925154][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.004125][T10915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.666969][T10915] hsr_slave_0: entered promiscuous mode [ 1007.680738][T10915] hsr_slave_1: entered promiscuous mode [ 1007.734404][T10915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1007.783136][T10915] Cannot create hsr debugfs directory [ 1008.064437][ T5444] IPVS: stop unused estimator thread 0... [ 1008.324332][T11108] Bluetooth: MGMT ver 1.23 [ 1008.520895][ T30] audit: type=1400 audit(1726780347.932:664): avc: denied { ioctl } for pid=11107 comm="syz.1.841" path="socket:[42818]" dev="sockfs" ino=42818 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1008.864742][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1009.059238][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.093044][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.133750][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1009.147204][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1009.156874][ T9] usb 2-1: SerialNumber: syz [ 1009.530523][ T9] usb 2-1: 0:2 : does not exist [ 1009.586936][T11128] [U] v3f"S/4:XTzWtlW= [ 1009.615463][T11128] [U] J"e:" [ 1009.877597][ T9] usb 2-1: USB disconnect, device number 20 [ 1010.123063][T10866] udevd[10866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.160379][T11122] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1010.380145][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1010.593442][T10915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.624890][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 1010.652147][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1010.709315][ T46] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1010.744040][T10900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1010.755129][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.771836][T10900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1010.791939][ T46] usb 1-1: Product: syz [ 1010.818745][ T46] usb 1-1: Manufacturer: syz [ 1011.010487][ T46] usb 1-1: SerialNumber: syz [ 1011.022254][T10900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1011.064691][ T46] usb 1-1: config 0 descriptor?? [ 1011.159976][ T46] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1011.248773][T11136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.411771][T10915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.544557][T10900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1011.844579][T10915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.174914][ T29] usb 1-1: Failed to submit usb control message: -110 [ 1012.182432][ T29] usb 1-1: unable to send the bmi data to the device: -110 [ 1012.262598][ T29] usb 1-1: unable to get target info from device [ 1012.283005][T10915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.304022][ T29] usb 1-1: could not get target info (-110) [ 1012.336245][ T29] usb 1-1: could not probe fw (-110) [ 1013.179428][ T5276] usb 1-1: USB disconnect, device number 10 [ 1013.582926][T10900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.019501][T10915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1014.105917][T10915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1014.245138][T10900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.350140][T10915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1014.419033][T10915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.505357][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.512879][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.664873][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.672117][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.465756][T10900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.764342][T10915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.871195][T10915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.001615][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.008882][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.105222][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.112631][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.573081][T10900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.428694][T10915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.448849][ T30] audit: type=1400 audit(1726780358.812:665): avc: denied { write } for pid=11218 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1019.638437][T11225] workqueue: name exceeds WQ_NAME_LEN. Truncating to: <ʓ^V0ƶ`º2| }ιC| [ 1028.769788][T10915] veth0_vlan: entered promiscuous mode [ 1029.007052][T10915] veth1_vlan: entered promiscuous mode [ 1029.064613][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1030.768640][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1030.787202][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1030.811589][ T30] audit: type=1400 audit(1726780370.202:666): avc: denied { unmount } for pid=9349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1030.896343][ T46] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1030.907243][T10900] veth0_vlan: entered promiscuous mode [ 1030.977652][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.009012][T10900] veth1_vlan: entered promiscuous mode [ 1031.055062][ T46] usb 2-1: Product: syz [ 1031.104751][ T46] usb 2-1: Manufacturer: syz [ 1031.136177][ T46] usb 2-1: SerialNumber: syz [ 1031.179204][ T46] usb 2-1: config 0 descriptor?? [ 1031.352022][T10915] veth0_macvtap: entered promiscuous mode [ 1031.376900][ T46] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1031.548023][T10915] veth1_macvtap: entered promiscuous mode [ 1031.728611][T10900] veth0_macvtap: entered promiscuous mode [ 1031.865247][T10900] veth1_macvtap: entered promiscuous mode [ 1031.967467][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.060157][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.101089][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.195320][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.257757][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.322099][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.378554][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.411903][ T2465] usb 2-1: Failed to submit usb control message: -110 [ 1032.458468][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.474714][ T2465] usb 2-1: unable to send the bmi data to the device: -110 [ 1032.557961][ T30] audit: type=1326 audit(1726780371.972:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.3.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f479297def9 code=0x0 [ 1032.583138][ T2465] usb 2-1: unable to get target info from device [ 1032.597734][T10915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.614140][ T2465] usb 2-1: could not get target info (-110) [ 1032.643809][ T2465] usb 2-1: could not probe fw (-110) [ 1032.775134][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.824163][ T939] usb 2-1: USB disconnect, device number 21 [ 1032.893979][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.924033][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.991689][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.044064][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.084010][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.110300][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.159487][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.185105][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1033.186508][T10915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.200347][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1033.210568][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1033.223256][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1033.234666][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1033.247259][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1033.329254][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.424778][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.454134][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.494128][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.511427][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.555982][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.576199][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.607291][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.646856][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.663816][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.808154][T10900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.842136][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.903559][ T30] audit: type=1326 audit(1726780373.312:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x0 [ 1033.970960][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.995761][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.024025][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.167563][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.434619][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.446760][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.457644][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.468078][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.479610][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.543598][T10900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.665032][T10915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.705252][T10915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.736277][T10915] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.763629][T10915] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.972980][T10900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.985394][T10900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.557515][ T5235] Bluetooth: hci3: command tx timeout [ 1035.618488][T10900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.646426][T10900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.547754][ T2460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.604917][ T2460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.887707][ T2460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.905067][ T2460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.196536][ T2460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.207144][ T2460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.570359][ T2460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.614049][ T5235] Bluetooth: hci3: command tx timeout [ 1037.622362][ T2460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.776714][ T2465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.865328][ T2465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.983138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.996275][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.784986][ T2460] bridge_slave_1: left allmulticast mode [ 1038.790792][ T2460] bridge_slave_1: left promiscuous mode [ 1038.794104][ T5444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.826803][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.834288][ T5444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.245579][ T2460] bridge_slave_0: left allmulticast mode [ 1039.251403][ T2460] bridge_slave_0: left promiscuous mode [ 1039.321479][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.576684][T11326] usb usb8: usbfs: process 11326 (syz.3.864) did not claim interface 0 before use [ 1039.754038][ T5235] Bluetooth: hci3: command tx timeout [ 1040.547372][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1040.564728][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1040.574708][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1040.588092][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1040.596671][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1040.605904][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1041.075724][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1041.092558][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1041.117112][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1041.164300][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1041.172820][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1041.180788][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1041.805025][ T5228] Bluetooth: hci3: command tx timeout [ 1042.730272][ T5228] Bluetooth: hci4: command tx timeout [ 1042.773520][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.808639][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.821437][ T2460] bond0 (unregistering): Released all slaves [ 1042.914343][T11323] sch_tbf: peakrate 6 is lower than or equals to rate 37092 ! [ 1043.229550][T11343] [U] v3f"S/4:XTzWtlW= [ 1043.235547][T11343] [U] J"e:" [ 1043.374005][ T5228] Bluetooth: hci1: command tx timeout [ 1043.657996][T11342] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1043.863971][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1044.094191][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1044.115522][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1044.150362][ T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1044.172618][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.211133][ T25] usb 4-1: Product: syz [ 1044.241629][ T25] usb 4-1: Manufacturer: syz [ 1044.271368][ T25] usb 4-1: SerialNumber: syz [ 1044.329940][ T25] usb 4-1: config 0 descriptor?? [ 1044.464050][ T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1044.560095][ T30] audit: type=1326 audit(1726780383.972:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11364 comm="syz.1.868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x0 [ 1044.811362][ T5228] Bluetooth: hci4: command tx timeout [ 1044.934864][T11278] chnl_net:caif_netlink_parms(): no params data found [ 1045.191130][ T2460] hsr_slave_0: left promiscuous mode [ 1045.219242][ T2460] hsr_slave_1: left promiscuous mode [ 1045.261489][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.281702][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.319144][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.345035][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.424142][ T2460] veth1_macvtap: left promiscuous mode [ 1045.431671][ T2460] veth0_macvtap: left promiscuous mode [ 1045.441297][ T2460] veth1_vlan: left promiscuous mode [ 1045.447295][ T2460] veth0_vlan: left promiscuous mode [ 1045.455488][ T5228] Bluetooth: hci1: command tx timeout [ 1045.524931][ T29] usb 4-1: Failed to submit usb control message: -110 [ 1045.555054][ T29] usb 4-1: unable to send the bmi data to the device: -110 [ 1045.562639][ T29] usb 4-1: unable to get target info from device [ 1045.572102][ T29] usb 4-1: could not get target info (-110) [ 1045.579369][ T29] usb 4-1: could not probe fw (-110) [ 1046.896233][ T5228] Bluetooth: hci4: command tx timeout [ 1047.332653][ T25] usb 4-1: USB disconnect, device number 10 [ 1047.542654][ T5228] Bluetooth: hci1: command tx timeout [ 1048.970512][ T5228] Bluetooth: hci4: command tx timeout [ 1049.179861][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1049.283032][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1049.614057][ T5228] Bluetooth: hci1: command tx timeout [ 1051.429763][T11403] [U] v3f"S/4:XTzWtlW= [ 1051.448311][T11403] [U] J"e:" [ 1051.631938][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.648008][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.677581][T11278] bridge_slave_0: entered allmulticast mode [ 1051.702144][T11278] bridge_slave_0: entered promiscuous mode [ 1051.821550][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.878211][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.905903][T11278] bridge_slave_1: entered allmulticast mode [ 1051.934981][T11278] bridge_slave_1: entered promiscuous mode [ 1051.971176][T11396] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1052.506897][T11278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.579374][T11423] [U] v3f"S/4:XTzWtlW= [ 1052.585364][T11423] [U] J"e:" [ 1052.742380][T11278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.189364][T11416] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1054.391954][ T2460] IPVS: stop unused estimator thread 0... [ 1054.406456][T11278] team0: Port device team_slave_0 added [ 1054.467612][T11278] team0: Port device team_slave_1 added [ 1054.495358][T11334] chnl_net:caif_netlink_parms(): no params data found [ 1054.773821][T11278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.781758][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.811621][T11278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.839802][T11278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.847198][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.413717][T11278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.258517][ T30] audit: type=1400 audit(1726780395.672:670): avc: denied { map } for pid=11442 comm="syz.1.878" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1056.330332][ T30] audit: type=1400 audit(1726780395.672:671): avc: denied { execute } for pid=11442 comm="syz.1.878" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1056.379899][T11332] chnl_net:caif_netlink_parms(): no params data found [ 1056.647197][ T30] audit: type=1400 audit(1726780396.062:672): avc: denied { mounton } for pid=11442 comm="syz.1.878" path="/77/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1056.744376][ T30] audit: type=1400 audit(1726780396.082:673): avc: denied { getattr } for pid=11442 comm="syz.1.878" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1056.770455][T11444] overlayfs: statfs failed on './file0' [ 1057.427457][ T2460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.505082][ T30] audit: type=1400 audit(1726780396.912:674): avc: denied { unmount } for pid=9452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1057.619358][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.634276][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.649191][T11334] bridge_slave_0: entered allmulticast mode [ 1057.674393][T11334] bridge_slave_0: entered promiscuous mode [ 1057.750572][T11278] hsr_slave_0: entered promiscuous mode [ 1058.009047][T11278] hsr_slave_1: entered promiscuous mode [ 1058.244731][T11458] Cannot find add_set index 0 as target [ 1058.393941][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.880'. [ 1058.601558][ T2460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.998308][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.026357][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.033742][T11334] bridge_slave_1: entered allmulticast mode [ 1059.069566][T11334] bridge_slave_1: entered promiscuous mode [ 1059.320800][ T2460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.898561][ T2460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.158509][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.165878][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.610487][ T30] audit: type=1400 audit(1726780399.692:675): avc: denied { mount } for pid=11470 comm="syz.3.882" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1060.940548][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.335257][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.585525][ T30] audit: type=1326 audit(1726780401.002:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11489 comm="syz.3.884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f479297def9 code=0x0 [ 1061.719458][T11495] [U] v3f"S/4:XTzWtlW= [ 1061.725434][T11495] [U] J"e:" [ 1062.019801][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.153773][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.174680][T11332] bridge_slave_0: entered allmulticast mode [ 1062.199268][T11332] bridge_slave_0: entered promiscuous mode [ 1062.373051][T11485] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1062.482437][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.514329][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.531976][T11332] bridge_slave_1: entered allmulticast mode [ 1062.550676][T11332] bridge_slave_1: entered promiscuous mode [ 1062.735814][T11334] team0: Port device team_slave_0 added [ 1062.852406][T11332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.165849][T11334] team0: Port device team_slave_1 added [ 1063.181999][T11332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.358854][T11332] team0: Port device team_slave_0 added [ 1063.471330][T11332] team0: Port device team_slave_1 added [ 1063.746731][ T2460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.815267][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.844360][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.875312][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.029786][T11509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.074634][ T30] audit: type=1400 audit(1726780403.372:677): avc: denied { setopt } for pid=11506 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1064.410686][ T30] audit: type=1400 audit(1726780403.392:678): avc: denied { create } for pid=11506 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1064.529287][ T30] audit: type=1400 audit(1726780403.412:679): avc: denied { connect } for pid=11506 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1064.632786][ T30] audit: type=1400 audit(1726780403.482:680): avc: denied { map } for pid=11506 comm="syz.1.886" path="socket:[45027]" dev="sockfs" ino=45027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1064.757800][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.773967][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.833499][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.083628][ T2460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.182265][T11332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.194340][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.247068][T11332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.278041][T11332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.289608][T11332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.315896][T11332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.372758][T11514] use of bytesused == 0 is deprecated and will be removed in the future, [ 1065.391824][T11514] use the actual size instead. [ 1065.557321][ T2460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.888334][ T2460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.937809][T11334] hsr_slave_0: entered promiscuous mode [ 1065.966296][T11334] hsr_slave_1: entered promiscuous mode [ 1065.983443][T11334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1065.995892][T11334] Cannot create hsr debugfs directory [ 1069.645675][ T30] audit: type=1326 audit(1726780407.502:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1069.964052][ T30] audit: type=1326 audit(1726780407.512:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1069.989955][ T9] IPVS: starting estimator thread 0... [ 1070.101099][T11520] IPVS: using max 14 ests per chain, 33600 per kthread [ 1070.129509][ T30] audit: type=1326 audit(1726780407.642:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.221514][ T30] audit: type=1326 audit(1726780407.672:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.236298][T11332] hsr_slave_0: entered promiscuous mode [ 1070.251276][ T30] audit: type=1326 audit(1726780407.682:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.277090][ T30] audit: type=1326 audit(1726780407.702:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.304361][T11332] hsr_slave_1: entered promiscuous mode [ 1070.315786][T11332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.323342][ T30] audit: type=1326 audit(1726780407.712:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.323465][T11332] Cannot create hsr debugfs directory [ 1070.357316][ T30] audit: type=1326 audit(1726780407.732:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.414064][ T30] audit: type=1326 audit(1726780407.802:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1070.447486][ T30] audit: type=1326 audit(1726780407.812:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.1.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62e37def9 code=0x7ffc0000 [ 1071.522447][ T2460] bridge_slave_1: left allmulticast mode [ 1071.531153][ T2460] bridge_slave_1: left promiscuous mode [ 1071.544916][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.585341][ T2460] bridge_slave_0: left allmulticast mode [ 1071.591925][ T2460] bridge_slave_0: left promiscuous mode [ 1071.614118][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.640780][ T2460] bridge_slave_1: left allmulticast mode [ 1071.658261][ T2460] bridge_slave_1: left promiscuous mode [ 1071.676570][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.709030][ T2460] bridge_slave_0: left allmulticast mode [ 1071.723278][ T2460] bridge_slave_0: left promiscuous mode [ 1071.737369][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.165615][T11535] [U] v3f"S/4:XTzWtlW= [ 1073.171619][T11535] [U] J"e:" [ 1073.742977][T11534] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1074.795230][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.836671][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.866715][ T2460] bond0 (unregistering): Released all slaves [ 1074.901096][T11547] xt_l2tp: v2 tid > 0xffff: 262144 [ 1074.997102][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1074.997136][ T30] audit: type=1400 audit(1726780414.392:712): avc: denied { read } for pid=11546 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1076.530033][T11553] syz.1.896: attempt to access beyond end of device [ 1076.530033][T11553] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1076.672729][T11553] syz.1.896: attempt to access beyond end of device [ 1076.672729][T11553] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1076.693903][T11553] Mount JFS Failure: -5 [ 1076.700025][T11553] jfs_mount failed w/return code = -5 [ 1077.059073][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.085306][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.241932][ T2460] bond0 (unregistering): Released all slaves [ 1078.123194][T11278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1078.260055][T11278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1078.422053][T11278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1078.486981][T11278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1079.402436][ T2460] hsr_slave_0: left promiscuous mode [ 1079.417272][ T2460] hsr_slave_1: left promiscuous mode [ 1079.439913][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.462117][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.480133][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.494233][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.577770][ T2460] hsr_slave_0: left promiscuous mode [ 1079.614814][ T2460] hsr_slave_1: left promiscuous mode [ 1079.665296][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.706399][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.725557][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.733152][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.932599][ T2460] veth1_macvtap: left promiscuous mode [ 1079.946095][ T2460] veth0_macvtap: left promiscuous mode [ 1079.963656][ T2460] veth1_vlan: left promiscuous mode [ 1079.977334][ T2460] veth0_vlan: left promiscuous mode [ 1079.990658][ T2460] veth1_macvtap: left promiscuous mode [ 1080.004818][ T2460] veth0_macvtap: left promiscuous mode [ 1080.018568][ T2460] veth1_vlan: left promiscuous mode [ 1080.029542][ T2460] veth0_vlan: left promiscuous mode [ 1080.306848][ T46] IPVS: starting estimator thread 0... [ 1080.413995][T11571] IPVS: using max 21 ests per chain, 50400 per kthread [ 1080.479634][T11569] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 1081.780602][T11581] [U] v3f"S/4:XTzWtlW= [ 1081.786577][T11581] [U] J"e:" [ 1082.268013][T11583] sctp: [Deprecated]: syz.3.902 (pid 11583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1082.268013][T11583] Use struct sctp_sack_info instead [ 1082.439644][T11574] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1083.290108][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1083.504253][T11590] [U] v3f"S/4:XTzWtlW= [ 1083.510227][T11590] [U] J"e:" [ 1083.664382][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1084.023496][T11585] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1086.351725][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1086.505180][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1087.855134][T11600] cgroup: noprefix used incorrectly [ 1088.195651][ T5228] Bluetooth: hci2: unexpected event for opcode 0x080f [ 1091.335598][T11608] [U] v3f"S/4:XTzWtlW= [ 1091.341603][T11608] [U] J"e:" [ 1091.579842][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 1091.615225][T11583] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1091.669105][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1091.710596][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1091.724274][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1091.767961][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1091.779920][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1091.794737][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1092.015725][T11603] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1092.244108][ T5228] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1092.254794][ T5228] Bluetooth: hci2: Injecting HCI hardware error event [ 1092.265481][ T5228] Bluetooth: hci2: hardware error 0x00 [ 1092.641762][T11334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1092.778725][T11334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1093.197360][T11334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1093.288886][ T9073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1093.315962][ T9073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1093.326223][ T9073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1093.385836][ T9073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1093.396824][ T9073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1093.407045][ T9073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1093.454314][ T939] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1093.620346][T11334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1093.677544][ T939] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1093.708620][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.749854][ T939] usb 2-1: config 0 descriptor?? [ 1093.860546][ T9073] Bluetooth: hci5: command tx timeout [ 1094.417175][ T5228] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1094.694747][T11609] chnl_net:caif_netlink_parms(): no params data found [ 1094.853262][ T939] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 1095.018492][T11332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1095.140886][T11332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1095.351776][T11332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1095.376219][T11332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1095.527145][ T5228] Bluetooth: hci0: command tx timeout [ 1095.676406][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.683756][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.699883][T11609] bridge_slave_0: entered allmulticast mode [ 1095.731612][T11609] bridge_slave_0: entered promiscuous mode [ 1095.746070][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.753338][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.773082][T11609] bridge_slave_1: entered allmulticast mode [ 1095.793268][T11609] bridge_slave_1: entered promiscuous mode [ 1095.817315][T11621] chnl_net:caif_netlink_parms(): no params data found [ 1095.926003][ T5228] Bluetooth: hci5: command tx timeout [ 1096.035539][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.215644][T11609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.327966][T11609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.502284][T11609] team0: Port device team_slave_0 added [ 1096.597807][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.676453][T11609] team0: Port device team_slave_1 added [ 1096.692727][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.704717][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.717052][T11621] bridge_slave_0: entered allmulticast mode [ 1096.726319][T11621] bridge_slave_0: entered promiscuous mode [ 1096.858750][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.887503][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.900415][T11621] bridge_slave_1: entered allmulticast mode [ 1096.909415][T11621] bridge_slave_1: entered promiscuous mode [ 1097.004344][T11609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.011652][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.039082][T11609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.190656][T11609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.223929][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.269170][ T5209] usb 2-1: USB disconnect, device number 22 [ 1097.275536][T11609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.360996][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.368420][ T5444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.460111][T11621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.487955][ T2460] bridge_slave_1: left allmulticast mode [ 1097.493685][ T2460] bridge_slave_1: left promiscuous mode [ 1097.512514][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.529677][ T2460] bridge_slave_0: left allmulticast mode [ 1097.551105][ T2460] bridge_slave_0: left promiscuous mode [ 1097.560543][T11693] [U] v3f"S/4:XTzWtlW= [ 1097.566487][T11693] [U] J"e:" [ 1097.580295][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.604245][ T5228] Bluetooth: hci0: command tx timeout [ 1097.767477][T11690] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1097.793811][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1098.004025][ T5228] Bluetooth: hci5: command tx timeout [ 1098.841237][ T939] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1099.496881][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.545759][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.680636][ T2460] bond0 (unregistering): Released all slaves [ 1099.684374][ T5228] Bluetooth: hci0: command tx timeout [ 1100.048183][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.055545][ T2475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.085993][ T5228] Bluetooth: hci5: command tx timeout [ 1100.181041][T11621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.375620][ T2460] hsr_slave_0: left promiscuous mode [ 1100.546659][ T2460] hsr_slave_1: left promiscuous mode [ 1100.554551][ T9073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1100.569631][ T9073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1100.586704][ T9073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1100.601408][ T9073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1100.613512][ T9073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1100.624521][ T9073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1100.689783][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.795560][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.946950][ T5228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1100.965918][ T5228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1100.991227][ T5228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1101.023358][ T5228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1101.036676][ T5228] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1101.060200][ T5228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1101.784644][ T9073] Bluetooth: hci0: command tx timeout [ 1102.015296][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1102.133406][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1102.868414][ T30] audit: type=1400 audit(1726780442.242:713): avc: denied { shutdown } for pid=11726 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1102.926649][ T9073] Bluetooth: hci3: command tx timeout [ 1103.193565][ T30] audit: type=1400 audit(1726780442.252:714): avc: denied { accept } for pid=11726 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1103.227387][ T9073] Bluetooth: hci6: command tx timeout [ 1103.361159][T11609] hsr_slave_0: entered promiscuous mode [ 1103.376228][T11609] hsr_slave_1: entered promiscuous mode [ 1103.770849][T11621] team0: Port device team_slave_0 added [ 1103.806882][T11621] team0: Port device team_slave_1 added [ 1104.224964][T11621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.232841][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.293459][T11739] [U] v3f"S/4:XTzWtlW= [ 1104.299437][T11739] [U] J"e:" [ 1104.385218][T11621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.428310][T11621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.448529][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.484365][T11621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.798989][T11732] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1104.964068][ T9073] Bluetooth: hci3: command tx timeout [ 1105.295306][ T9073] Bluetooth: hci6: command tx timeout [ 1105.341883][T11621] hsr_slave_0: entered promiscuous mode [ 1105.394837][T11621] hsr_slave_1: entered promiscuous mode [ 1105.419826][T11621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.439554][T11621] Cannot create hsr debugfs directory [ 1108.474279][ T9073] Bluetooth: hci3: command tx timeout [ 1108.479873][ T5228] Bluetooth: hci6: command tx timeout [ 1109.272631][ T30] audit: type=1400 audit(1726780448.682:715): avc: denied { sqpoll } for pid=11766 comm="syz.1.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1109.455060][ T30] audit: type=1400 audit(1726780448.702:716): avc: denied { watch } for pid=11766 comm="syz.1.917" path="/107/net_prio.prioidx" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1109.479326][ T30] audit: type=1400 audit(1726780448.702:717): avc: denied { watch_sb } for pid=11766 comm="syz.1.917" path="/107/net_prio.prioidx" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1111.353936][ T5228] Bluetooth: hci6: command tx timeout [ 1111.354027][ T5235] Bluetooth: hci3: command tx timeout [ 1111.490007][T11723] chnl_net:caif_netlink_parms(): no params data found [ 1111.857762][T11718] chnl_net:caif_netlink_parms(): no params data found [ 1113.291392][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.299024][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.307510][T11723] bridge_slave_0: entered allmulticast mode [ 1113.341917][T11723] bridge_slave_0: entered promiscuous mode [ 1113.441609][T11723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.465588][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.472958][T11723] bridge_slave_1: entered allmulticast mode [ 1113.495326][T11723] bridge_slave_1: entered promiscuous mode [ 1113.745441][T11621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.809279][T11609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1114.012069][T11723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.030985][T11609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1114.079605][T11609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1114.156842][T11621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.190496][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.204457][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.211760][T11718] bridge_slave_0: entered allmulticast mode [ 1114.235998][T11718] bridge_slave_0: entered promiscuous mode [ 1114.252285][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.261004][T11718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.271636][T11718] bridge_slave_1: entered allmulticast mode [ 1114.299933][T11718] bridge_slave_1: entered promiscuous mode [ 1114.329328][T11723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.347360][T11609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1114.420146][T11621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.798280][T11621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.915943][T11718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.948186][T11718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.137122][T11723] team0: Port device team_slave_0 added [ 1115.160749][T11723] team0: Port device team_slave_1 added [ 1115.188521][T11794] [U] v3f"S/4:XTzWtlW= [ 1115.194496][T11794] [U] J"e:" [ 1115.837795][T11793] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1115.859350][T11718] team0: Port device team_slave_0 added [ 1115.874351][ T2460] bridge_slave_1: left allmulticast mode [ 1115.880082][ T2460] bridge_slave_1: left promiscuous mode [ 1115.901394][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.928180][ T2460] bridge_slave_0: left allmulticast mode [ 1115.954025][ T2460] bridge_slave_0: left promiscuous mode [ 1115.959994][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.029708][ T2460] bridge_slave_1: left allmulticast mode [ 1116.035528][ T2460] bridge_slave_1: left promiscuous mode [ 1116.041418][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.068601][ T2460] bridge_slave_0: left allmulticast mode [ 1116.084389][ T2460] bridge_slave_0: left promiscuous mode [ 1116.115374][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.397211][ T5276] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1116.675867][T11809] [U] v3f"S/4:XTzWtlW= [ 1116.681841][T11809] [U] J"e:" [ 1117.245725][T11808] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1117.325285][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.365018][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.396239][ T2460] bond0 (unregistering): Released all slaves [ 1117.838557][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.868896][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.888592][ T2460] bond0 (unregistering): Released all slaves [ 1117.930428][T11723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.937845][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.999338][T11723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.069882][T11718] team0: Port device team_slave_1 added [ 1118.269457][T11723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.323330][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.399716][T11723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.586552][T11718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.593574][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.639925][T11718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.676203][T11718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.683316][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.721076][T11718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.795896][T11827] [U] v3f"S/4:XTzWtlW= [ 1118.801855][T11827] [U] J"e:" [ 1118.868792][ T2460] hsr_slave_0: left promiscuous mode [ 1118.878189][ T2460] hsr_slave_1: left promiscuous mode [ 1118.892019][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.910813][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.932868][T11823] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1118.946740][ T2460] hsr_slave_0: left promiscuous mode [ 1118.962735][ T2460] hsr_slave_1: left promiscuous mode [ 1118.986435][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.009862][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.781282][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1119.849834][T11835] ipt_ECN: cannot use operation on non-tcp rule [ 1119.887284][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1120.936261][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1121.010184][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1121.014009][ T5276] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1121.253977][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 1121.261942][ T5276] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1121.280104][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1121.304076][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1121.327412][ T5276] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1121.336604][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1121.348378][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1121.389760][ T5276] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1121.399380][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1121.423348][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1121.440449][ T5276] usb 2-1: string descriptor 0 read error: -22 [ 1121.448317][ T5276] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1121.457644][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.495825][ T5276] adutux 2-1:168.0: interrupt endpoints not found [ 1121.536191][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.542600][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.875632][ T9] usb 2-1: USB disconnect, device number 23 [ 1122.126875][T11723] hsr_slave_0: entered promiscuous mode [ 1122.134353][T11723] hsr_slave_1: entered promiscuous mode [ 1122.141276][T11723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.164646][T11723] Cannot create hsr debugfs directory [ 1122.464021][ T5276] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 1122.519333][T11718] hsr_slave_0: entered promiscuous mode [ 1122.535250][T11718] hsr_slave_1: entered promiscuous mode [ 1122.543392][T11718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.555341][T11718] Cannot create hsr debugfs directory [ 1122.696253][ T5276] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1122.707551][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1122.721761][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1122.762815][ T5276] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1122.772685][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1122.793910][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1122.816011][ T5276] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1122.823545][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1122.846181][T11621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1122.860994][T11621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1122.873761][ T5276] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1122.887607][T11621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1123.030531][T11621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1123.686877][ T5276] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1123.697183][T11609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.715523][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.769003][ T5276] usb 2-1: can't set config #168, error -71 [ 1123.795260][ T5276] usb 2-1: USB disconnect, device number 24 [ 1124.203333][T11609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.399048][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.406343][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.493679][ T2460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.500949][ T2460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.853023][T11621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.265758][T11621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.385473][ T2460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.392807][ T2460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.801267][T11723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1126.125503][T11723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1126.161834][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.169179][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.303527][T11723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1126.465612][T11723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1126.686034][T11609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.425958][T11609] veth0_vlan: entered promiscuous mode [ 1127.499225][T11609] veth1_vlan: entered promiscuous mode [ 1127.547777][T11723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.568144][T11718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1127.643109][T11718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1127.660967][T11718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1127.685970][T11718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1127.731375][T11723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.817666][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.825033][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.928190][T11621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.952881][ T2460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.960190][ T2460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.022174][T11609] veth0_macvtap: entered promiscuous mode [ 1128.136231][T11609] veth1_macvtap: entered promiscuous mode [ 1128.316382][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.339962][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.356446][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.376745][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.393517][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.415474][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.428106][T11609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.463055][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.482169][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.493330][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.505656][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.515605][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.527668][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.539976][T11609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.580798][T11609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.590919][T11609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.601541][T11609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.610522][T11609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.736826][T11621] veth0_vlan: entered promiscuous mode [ 1128.847071][T11718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.936146][T11621] veth1_vlan: entered promiscuous mode [ 1128.992587][T11718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.030591][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.037895][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.173069][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.201726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.232124][ T2460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.239487][ T2460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.333333][ T2460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.356583][ T2460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.379785][T11621] veth0_macvtap: entered promiscuous mode [ 1129.401806][T11723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.455809][T11621] veth1_macvtap: entered promiscuous mode [ 1130.024894][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.037829][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.048622][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.060297][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.068845][T11914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1130.071123][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.092842][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.103744][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.114697][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.158559][T11621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.325534][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.369851][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.383575][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.458655][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.472746][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.493926][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.506839][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.521626][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.558401][T11621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.677979][T11621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.689971][T11621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.699084][T11621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.708350][T11621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.916217][T11723] veth0_vlan: entered promiscuous mode [ 1131.010290][T11723] veth1_vlan: entered promiscuous mode [ 1131.403733][T11723] veth0_macvtap: entered promiscuous mode [ 1131.442259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.472671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.483264][T11723] veth1_macvtap: entered promiscuous mode [ 1131.718833][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.738442][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.751364][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.789814][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.803967][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.814652][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.824701][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.836650][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.849459][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.860621][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.907334][T11723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.945181][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.990611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.009525][T11718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.080666][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.334022][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.367632][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.391015][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.408638][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.419745][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.483407][ T30] audit: type=1326 audit(1726780471.852:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.0.928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x0 [ 1132.561439][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.962608][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.984330][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.007981][T11935] [U] v3f"S/4:XTzWtlW= [ 1133.014012][T11935] [U] J"e:" [ 1133.020402][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.062204][T11723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.140071][T11723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.155372][T11723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.172983][T11723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.210487][T11723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.391912][T11923] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1134.086446][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.139236][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.638413][T11947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1136.095740][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.122397][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.160009][T11718] veth0_vlan: entered promiscuous mode [ 1136.355229][T11718] veth1_vlan: entered promiscuous mode [ 1136.596026][T11952] [U] v3f"S/4:XTzWtlW= [ 1136.602012][T11952] [U] J"e:" [ 1136.816773][T11718] veth0_macvtap: entered promiscuous mode [ 1136.871319][T11718] veth1_macvtap: entered promiscuous mode [ 1137.265368][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.328397][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.379974][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.433336][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.466697][T11948] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1137.491130][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.530537][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.580793][T11957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.639624][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.693940][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.770111][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.832849][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.895429][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.959804][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.031963][T11718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.092554][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.194042][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.240080][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.555216][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.578643][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.510762][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.591999][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.771059][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.144656][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.241916][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.247697][T11976] overlayfs: statfs failed on './file0' [ 1140.326473][T11718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.374782][T11718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.455587][T11975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.492525][T11718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.737937][T11718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.738086][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.814644][T11718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.823738][T11718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.834330][T11718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.241899][ T2460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.291903][ T2460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.343302][ T1125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.388418][ T1125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.651758][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.850910][ T2460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.868481][ T2460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.999985][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.735436][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.132258][T11996] [U] v3f"S/4:XTzWtlW= [ 1143.138250][T11996] [U] J"e:" [ 1143.566997][T12000] trusted_key: encrypted_key: insufficient parameters specified [ 1143.776617][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.042503][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.374679][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.657358][T11985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.849988][T11983] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1145.848000][ T5304] net_ratelimit: 4 callbacks suppressed [ 1145.848019][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.001640][T12014] Bluetooth: MGMT ver 1.23 [ 1146.028587][T12014] Bluetooth: hci0: load_link_keys: too big key_count value 31744 [ 1146.118961][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.347889][T12023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.357420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.470858][T12018] [U] v3f"S/4:XTzWtlW= [ 1146.476836][T12018] [U] J"e:" [ 1146.574124][ T5274] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1146.606107][T12018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.614853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.891762][T12015] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1146.903414][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 1146.928189][ T5274] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1146.982539][ T5274] usb 5-1: config 0 has no interface number 0 [ 1147.000656][ T5274] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1147.060113][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.066733][ T30] audit: type=1400 audit(1726780486.472:719): avc: denied { read } for pid=12027 comm="syz.2.946" path="socket:[50369]" dev="sockfs" ino=50369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1147.156389][ T5274] usb 5-1: config 0 descriptor?? [ 1147.165619][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.173883][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.287439][ T5274] hso 5-1:0.1: Failed to find BULK IN ep [ 1147.599581][ T5274] usb 5-1: USB disconnect, device number 22 [ 1147.972684][ T30] audit: type=1400 audit(1726780487.382:720): avc: denied { watch_reads } for pid=12032 comm="syz.0.948" path="/6/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1148.297528][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.382804][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.419398][ T30] audit: type=1326 audit(1726780488.452:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1150.131404][ T4634] IPVS: starting estimator thread 0... [ 1150.162826][ T30] audit: type=1326 audit(1726780488.452:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1150.234064][T12053] IPVS: using max 22 ests per chain, 52800 per kthread [ 1150.449775][ T30] audit: type=1326 audit(1726780488.472:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1150.610213][ T30] audit: type=1326 audit(1726780488.472:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1150.774658][ T30] audit: type=1326 audit(1726780488.512:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1150.954057][ T30] audit: type=1326 audit(1726780488.532:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1151.074715][ T30] audit: type=1326 audit(1726780488.532:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1151.168766][ T30] audit: type=1326 audit(1726780488.542:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.3.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a257def9 code=0x7ffc0000 [ 1151.581091][ T5274] net_ratelimit: 2 callbacks suppressed [ 1151.581115][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.898352][T12072] 9pnet_virtio: no channels available for device syz [ 1152.532600][T12075] [U] v3f"S/4:XTzWtlW= [ 1152.538581][T12075] [U] J"e:" [ 1152.700130][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.951895][T12066] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1153.134067][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.993463][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.175465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.524781][T12093] [U] v3f"S/4:XTzWtlW= [ 1154.530764][T12093] [U] J"e:" [ 1154.594522][ T5235] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1155.044920][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.862144][T12085] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1156.088595][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.097192][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.556662][T12112] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 1156.565970][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 1156.643941][ T5235] Bluetooth: hci5: command tx timeout [ 1157.338395][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.380958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.658063][T12120] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1157.764019][ T5235] Bluetooth: hci0: command tx timeout [ 1158.016979][T12119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.412776][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.084659][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1159.084712][ T30] audit: type=1400 audit(1726780498.442:752): avc: denied { write } for pid=12128 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1159.651868][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.760133][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.569907][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.804893][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.215500][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.287144][T12146] debugfs: Directory '<ʓ^V0ƶ`º2| }ιC|+i!3rU=FLR8&6 bOo' with parent 'ieee80211' already present! [ 1161.951039][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.820142][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.828555][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.045332][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.277412][ T5235] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 1165.304939][T12158] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:0 [ 1165.862507][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.333005][T12179] [U] v3f"S/4:XTzWtlW= [ 1166.338994][T12179] [U] J"e:" [ 1166.760851][T12169] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1166.885179][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.284465][ T5235] Bluetooth: hci6: command tx timeout [ 1167.914738][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.928003][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.118602][T12199] cgroup: noprefix used incorrectly [ 1168.973166][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.295486][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 1171.444626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.461259][ T30] audit: type=1326 audit(1726780510.132:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1172.764327][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.779284][ T5235] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1172.788707][ T5235] Bluetooth: hci6: Injecting HCI hardware error event [ 1172.800214][ T5228] Bluetooth: hci6: hardware error 0x00 [ 1172.810827][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.836365][ T942] IPVS: starting estimator thread 0... [ 1172.952586][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.035578][T12213] IPVS: using max 16 ests per chain, 38400 per kthread [ 1173.055538][ T30] audit: type=1326 audit(1726780510.142:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1173.070739][T12203] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1173.253075][ T30] audit: type=1326 audit(1726780510.222:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1173.396418][ T30] audit: type=1326 audit(1726780510.222:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1173.933445][ T30] audit: type=1326 audit(1726780510.222:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1173.935159][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.015062][ T30] audit: type=1326 audit(1726780510.302:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1174.201430][ T30] audit: type=1326 audit(1726780510.302:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1174.231055][ T30] audit: type=1326 audit(1726780510.312:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1174.379194][ T30] audit: type=1326 audit(1726780510.412:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1174.454368][ T30] audit: type=1326 audit(1726780510.432:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7afb7def9 code=0x7ffc0000 [ 1174.663594][T12226] debugfs: Directory '<ʓ^V0ƶ`º2| }ιC|+i!3rU=FLR8&6 bOo' with parent 'ieee80211' already present! [ 1174.698696][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.857195][ T5235] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1174.952348][T12227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.967004][ T5228] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1175.053243][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.114424][T12236] bridge_slave_1: left allmulticast mode [ 1175.179802][T12236] bridge_slave_1: left promiscuous mode [ 1175.231728][T12236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.209765][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.218011][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.266023][ T5228] Bluetooth: hci5: command tx timeout [ 1181.272842][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.545354][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.444911][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.219768][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.250872][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.525335][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.080668][T12265] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1184.309927][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.564590][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.572769][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.606250][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.657464][T12281] [U] v3f"S/4:XTzWtlW= [ 1185.663561][T12281] [U] J"e:" [ 1185.904381][T12278] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1188.178103][T12289] delete_channel: no stack [ 1189.327177][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1189.327204][ T30] audit: type=1400 audit(1726780527.762:784): avc: denied { write } for pid=12283 comm="syz.1.1006" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1189.356743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.375965][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.586348][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.113575][ T9073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1190.132154][ T9073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1190.154377][ T9073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1190.186567][ T9073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1190.249757][ T9073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1190.261048][ T9073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1190.273208][T11626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1190.276538][ T9073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1190.290622][ T9073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1190.304953][ T9073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1190.319567][ T9073] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1190.352437][ T9073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1190.436592][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.646602][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.220505][T12312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.229467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.459557][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.464055][T12312] [U] v3f"S/4:XTzWtlW= [ 1191.473701][T12312] [U] J"e:" [ 1191.658788][ T2460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.674276][T12309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.682958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.956186][T12307] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1192.184468][ T2460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.307706][T12320] [U] v3f"S/4:XTzWtlW= [ 1192.313700][T12320] [U] J"e:" [ 1192.324175][ T9073] Bluetooth: hci1: command tx timeout [ 1192.404295][ T9073] Bluetooth: hci4: command tx timeout [ 1192.484879][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.606052][ T2460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.082011][T12316] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1193.339041][ T2460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.770766][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 1193.904039][ T942] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1194.026648][ T30] audit: type=1400 audit(1726780533.442:785): avc: denied { lock } for pid=12329 comm="syz.1.1013" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1194.124311][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 1194.151675][ T942] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.174380][ T942] usb 1-1: config 0 has no interface number 0 [ 1194.180614][ T942] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1194.232068][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.264334][T12331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1013'. [ 1194.299454][ T942] usb 1-1: config 0 descriptor?? [ 1194.404275][ T9073] Bluetooth: hci1: command tx timeout [ 1194.428329][ T2460] bridge_slave_1: left allmulticast mode [ 1194.429166][ T942] hso 1-1:0.1: Failed to find BULK IN ep [ 1194.467333][ T2460] bridge_slave_1: left promiscuous mode [ 1194.477653][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.486747][ T9073] Bluetooth: hci4: command tx timeout [ 1194.573831][ T942] net_ratelimit: 3 callbacks suppressed [ 1194.573866][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.595335][ T2460] bridge_slave_0: left allmulticast mode [ 1194.602600][ T2460] bridge_slave_0: left promiscuous mode [ 1194.610203][T12331] input: syz1 as /devices/virtual/input/input14 [ 1194.611466][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.676486][ T4634] usb 1-1: USB disconnect, device number 11 [ 1195.604489][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.295450][ T30] audit: type=1326 audit(1726780535.552:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1196.725648][ T9073] Bluetooth: hci1: command tx timeout [ 1196.731147][ T9073] Bluetooth: hci4: command tx timeout [ 1197.080670][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.092696][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.110793][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.144748][ T30] audit: type=1326 audit(1726780535.552:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1197.174529][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.183728][T11556] IPVS: starting estimator thread 0... [ 1197.184991][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.219472][T12346] [U] v3f"S/4:XTzWtlW= [ 1197.226150][T12346] [U] J"e:" [ 1197.270369][T12351] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1197.281907][T12351] [U] J"e:" [ 1197.294174][ T30] audit: type=1326 audit(1726780535.562:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1197.314064][T12350] IPVS: using max 15 ests per chain, 36000 per kthread [ 1197.401225][T12338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.421029][ T30] audit: type=1326 audit(1726780535.562:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1197.453186][T12338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.541409][ T30] audit: type=1326 audit(1726780535.562:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1197.705008][T12359] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1197.716725][T12359] [U] J"e:" [ 1197.727241][ T30] audit: type=1326 audit(1726780535.572:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1197.829203][ T30] audit: type=1326 audit(1726780535.572:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1197.878181][T12337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.924106][ T30] audit: type=1326 audit(1726780535.572:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1198.008846][ T30] audit: type=1326 audit(1726780535.582:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1198.128480][ T30] audit: type=1326 audit(1726780535.582:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.0.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea1b7def9 code=0x7ffc0000 [ 1198.193948][T11556] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1198.219771][T12354] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1198.423928][T11556] usb 2-1: Using ep0 maxpacket: 32 [ 1198.460090][T11556] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1198.468598][T11556] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1198.543057][T11556] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1198.593953][T11556] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1198.627837][T11556] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1198.649157][T11556] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1198.673583][T11556] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1198.682196][T11556] usb 2-1: Product: syz [ 1198.719761][T11556] usb 2-1: Manufacturer: syz [ 1198.729914][T11556] usb 2-1: SerialNumber: syz [ 1198.761996][T11556] usb 2-1: config 0 descriptor?? [ 1198.804957][ T9073] Bluetooth: hci1: command tx timeout [ 1198.808932][T11556] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1198.810479][ T5228] Bluetooth: hci4: command tx timeout [ 1198.884282][T12368] [U] v3f"S/4:XTzWtlW= [ 1198.890228][T12368] [U] J"e:" [ 1198.903161][T11556] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1199.197324][T12375] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1199.208959][T12375] [U] J"e:" [ 1199.323626][ T2460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.531609][ T2460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.584322][ T2460] bond0 (unregistering): Released all slaves [ 1199.839091][T12369] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1200.017037][ T942] usb 2-1: USB disconnect, device number 25 [ 1200.017093][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1200.046911][ T942] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1200.122780][T12384] net_ratelimit: 10 callbacks suppressed [ 1200.122807][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.142550][T12293] chnl_net:caif_netlink_parms(): no params data found [ 1200.151647][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.241374][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.264481][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.306813][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.324500][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.528378][T12379] [U] v3f"S/4:XTzWtlW= [ 1200.534352][T12379] [U] J"e:" [ 1200.797885][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.815152][T12384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.824165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.904088][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.032699][T12378] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1202.360909][T12294] chnl_net:caif_netlink_parms(): no params data found [ 1204.901775][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1204.901800][ T30] audit: type=1400 audit(1726780544.032:818): avc: denied { map } for pid=12411 comm="syz.3.1025" path="/dev/video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1205.284145][T11556] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1205.287588][ T9] net_ratelimit: 6 callbacks suppressed [ 1205.287613][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.365482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.378887][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.623961][T11556] usb 1-1: Using ep0 maxpacket: 8 [ 1205.653554][T11556] usb 1-1: device descriptor read/all, error -71 [ 1208.487923][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.791087][T12293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.834189][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.863716][T12293] bridge_slave_0: entered allmulticast mode [ 1208.941589][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.967689][T12293] bridge_slave_0: entered promiscuous mode [ 1209.096718][T12438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.245726][T12293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.255655][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.300183][T12443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.314435][T12293] bridge_slave_1: entered allmulticast mode [ 1209.320853][T12443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.342862][T12293] bridge_slave_1: entered promiscuous mode [ 1209.425122][T12443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.525788][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.576698][T12443] [U] v3f"S/4:XTzWtlW= [ 1209.582773][T12443] [U] J"e:" [ 1209.645753][T12447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.669737][ T2460] hsr_slave_0: left promiscuous mode [ 1209.841713][ T2460] hsr_slave_1: left promiscuous mode [ 1209.871790][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.902968][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.967735][ T2460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.991197][ T2460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.000120][T12440] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1210.126820][ T2460] veth1_macvtap: left promiscuous mode [ 1210.173488][ T2460] veth0_macvtap: left promiscuous mode [ 1210.189244][ T2460] veth1_vlan: left promiscuous mode [ 1210.237539][ T2460] veth0_vlan: left promiscuous mode [ 1210.484320][ T5209] net_ratelimit: 4 callbacks suppressed [ 1210.484346][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.708640][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.776374][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.009277][ T5209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.135385][T12463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.175555][T12463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.252400][T12463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.386161][T12460] [U] v3f"S/4:XTzWtlW= [ 1212.392141][T12460] [U] J"e:" [ 1212.398548][T12460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.412515][T12460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.429491][T12460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.921419][T12459] [U] fBq38)bL(L{2-A"OU^paH()d-Ry^v+AI [ 1213.316567][T12480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1213.330747][ T30] audit: type=1400 audit(1726780552.722:819): avc: denied { write } for pid=12465 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1214.311783][ T5209] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1214.543412][ T5209] usb 4-1: Using ep0 maxpacket: 8 [ 1214.558884][ T5209] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.587803][ T5209] usb 4-1: config 0 has no interface number 0 [ 1214.594654][ T5209] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1214.603744][ T5209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.650418][ T5209] usb 4-1: config 0 descriptor?? [ 1214.734307][ T5209] hso 4-1:0.1: Failed to find BULK IN ep [ 1214.807199][ T2460] team0 (unregistering): Port device team_slave_1 removed [ 1214.901706][ T2460] team0 (unregistering): Port device team_slave_0 removed [ 1214.992034][T11556] usb 4-1: USB disconnect, device number 11 [ 1215.780176][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.812704][T11626] ================================================================== [ 1215.820848][T11626] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x882/0x920 [ 1215.828546][T11626] Read of size 8 at addr ffff888028b7e000 by task kworker/u9:3/11626 [ 1215.836657][T11626] [ 1215.839008][T11626] CPU: 1 UID: 0 PID: 11626 Comm: kworker/u9:3 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1215.849624][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1215.859708][T11626] Workqueue: hci0 hci_rx_work [ 1215.864418][T11626] Call Trace: [ 1215.867715][T11626] [ 1215.870661][T11626] dump_stack_lvl+0x116/0x1f0 [ 1215.875382][T11626] print_report+0xc3/0x620 [ 1215.879824][T11626] ? __virt_addr_valid+0x5e/0x590 [ 1215.884875][T11626] ? __phys_addr+0xc6/0x150 [ 1215.889408][T11626] kasan_report+0xd9/0x110 [ 1215.893852][T11626] ? l2cap_send_cmd+0x882/0x920 [ 1215.898738][T11626] ? l2cap_send_cmd+0x882/0x920 [ 1215.903621][T11626] l2cap_send_cmd+0x882/0x920 [ 1215.908421][T11626] l2cap_config_req+0x90b/0xe30 [ 1215.913325][T11626] ? rcu_is_watching+0x12/0xc0 [ 1215.918147][T11626] ? trace_contention_end+0xea/0x140 [ 1215.923491][T11626] ? __pfx_l2cap_config_req+0x10/0x10 [ 1215.928907][T11626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1215.934917][T11626] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1215.940156][T11626] l2cap_recv_frame+0x23b9/0x8eb0 [ 1215.945231][T11626] ? hci_rx_work+0xa87/0x1610 [ 1215.949934][T11626] ? __pfx_lock_release+0x10/0x10 [ 1215.955004][T11626] ? __pfx___lock_acquire+0x10/0x10 [ 1215.960245][T11626] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 1215.965661][T11626] ? trace_contention_end+0xea/0x140 [ 1215.971077][T11626] ? __mutex_unlock_slowpath+0x164/0x650 [ 1215.976739][T11626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1215.982744][T11626] ? hci_rx_work+0xa73/0x1610 [ 1215.987444][T11626] ? hci_conn_enter_active_mode+0x219/0x360 [ 1215.993364][T11626] ? __pfx_lock_release+0x10/0x10 [ 1215.998426][T11626] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 1216.004702][T11626] l2cap_recv_acldata+0x9b4/0xb70 [ 1216.009770][T11626] hci_rx_work+0xaab/0x1610 [ 1216.014304][T11626] process_one_work+0x9c5/0x1b40 [ 1216.019309][T11626] ? __pfx_lock_acquire+0x10/0x10 [ 1216.024391][T11626] ? __pfx_process_one_work+0x10/0x10 [ 1216.029865][T11626] ? assign_work+0x1a0/0x250 [ 1216.034509][T11626] worker_thread+0x6c8/0xf00 [ 1216.039134][T11626] ? __kthread_parkme+0x148/0x220 [ 1216.044310][T11626] ? __pfx_worker_thread+0x10/0x10 [ 1216.049446][T11626] kthread+0x2c1/0x3a0 [ 1216.053565][T11626] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.058851][T11626] ? __pfx_kthread+0x10/0x10 [ 1216.063482][T11626] ret_from_fork+0x45/0x80 [ 1216.067940][T11626] ? __pfx_kthread+0x10/0x10 [ 1216.072565][T11626] ret_from_fork_asm+0x1a/0x30 [ 1216.077376][T11626] [ 1216.080410][T11626] [ 1216.082741][T11626] Allocated by task 5235: [ 1216.087080][T11626] kasan_save_stack+0x33/0x60 [ 1216.091794][T11626] kasan_save_track+0x14/0x30 [ 1216.096507][T11626] __kasan_kmalloc+0xaa/0xb0 [ 1216.101142][T11626] l2cap_conn_add.part.0+0x60/0xa60 [ 1216.106387][T11626] l2cap_connect_cfm+0x428/0xf80 [ 1216.111379][T11626] hci_remote_features_evt+0x548/0x9e0 [ 1216.116882][T11626] hci_event_packet+0x9eb/0x1180 [ 1216.121859][T11626] hci_rx_work+0x2c6/0x1610 [ 1216.126383][T11626] process_one_work+0x9c5/0x1b40 [ 1216.131337][T11626] worker_thread+0x6c8/0xf00 [ 1216.135981][T11626] kthread+0x2c1/0x3a0 [ 1216.140079][T11626] ret_from_fork+0x45/0x80 [ 1216.144538][T11626] ret_from_fork_asm+0x1a/0x30 [ 1216.149371][T11626] [ 1216.151704][T11626] Freed by task 5228: [ 1216.155727][T11626] kasan_save_stack+0x33/0x60 [ 1216.160455][T11626] kasan_save_track+0x14/0x30 [ 1216.165199][T11626] kasan_save_free_info+0x3b/0x60 [ 1216.170260][T11626] poison_slab_object+0xf7/0x160 [ 1216.175237][T11626] __kasan_slab_free+0x32/0x50 [ 1216.180106][T11626] kfree+0x12a/0x3b0 [ 1216.184032][T11626] l2cap_conn_del+0x59d/0x730 [ 1216.188738][T11626] l2cap_connect_cfm+0x9e6/0xf80 [ 1216.193726][T11626] hci_conn_failed+0x1c3/0x340 [ 1216.198976][T11626] hci_abort_conn_sync+0x75a/0xb50 [ 1216.204127][T11626] abort_conn_sync+0x197/0x360 [ 1216.208918][T11626] hci_cmd_sync_work+0x1a4/0x410 [ 1216.213892][T11626] process_one_work+0x9c5/0x1b40 [ 1216.218939][T11626] worker_thread+0x6c8/0xf00 [ 1216.223570][T11626] kthread+0x2c1/0x3a0 [ 1216.227682][T11626] ret_from_fork+0x45/0x80 [ 1216.232142][T11626] ret_from_fork_asm+0x1a/0x30 [ 1216.236966][T11626] [ 1216.239303][T11626] Last potentially related work creation: [ 1216.245029][T11626] kasan_save_stack+0x33/0x60 [ 1216.249745][T11626] __kasan_record_aux_stack+0xba/0xd0 [ 1216.255149][T11626] insert_work+0x36/0x230 [ 1216.259532][T11626] __queue_work+0x97e/0x1070 [ 1216.264148][T11626] call_timer_fn+0x1a0/0x610 [ 1216.268789][T11626] __run_timers+0x567/0xaf0 [ 1216.273329][T11626] run_timer_base+0x111/0x190 [ 1216.278041][T11626] run_timer_softirq+0x1a/0x40 [ 1216.282840][T11626] handle_softirqs+0x216/0x8f0 [ 1216.287628][T11626] irq_exit_rcu+0xbb/0x120 [ 1216.292064][T11626] sysvec_apic_timer_interrupt+0x95/0xb0 [ 1216.297728][T11626] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1216.303746][T11626] [ 1216.306087][T11626] Second to last potentially related work creation: [ 1216.312764][T11626] kasan_save_stack+0x33/0x60 [ 1216.317476][T11626] __kasan_record_aux_stack+0xba/0xd0 [ 1216.322894][T11626] insert_work+0x36/0x230 [ 1216.327280][T11626] __queue_work+0x3f8/0x1070 [ 1216.331897][T11626] queue_work_on+0x11a/0x140 [ 1216.336507][T11626] l2cap_connect_cfm+0x9c9/0xf80 [ 1216.341500][T11626] hci_remote_features_evt+0x548/0x9e0 [ 1216.347016][T11626] hci_event_packet+0x9eb/0x1180 [ 1216.351993][T11626] hci_rx_work+0x2c6/0x1610 [ 1216.356546][T11626] process_one_work+0x9c5/0x1b40 [ 1216.361507][T11626] worker_thread+0x6c8/0xf00 [ 1216.366122][T11626] kthread+0x2c1/0x3a0 [ 1216.370221][T11626] ret_from_fork+0x45/0x80 [ 1216.374673][T11626] ret_from_fork_asm+0x1a/0x30 [ 1216.379479][T11626] [ 1216.381844][T11626] The buggy address belongs to the object at ffff888028b7e000 [ 1216.381844][T11626] which belongs to the cache kmalloc-1k of size 1024 [ 1216.395965][T11626] The buggy address is located 0 bytes inside of [ 1216.395965][T11626] freed 1024-byte region [ffff888028b7e000, ffff888028b7e400) [ 1216.409803][T11626] [ 1216.412138][T11626] The buggy address belongs to the physical page: [ 1216.418574][T11626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28b78 [ 1216.427371][T11626] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1216.435885][T11626] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1216.443888][T11626] page_type: 0xfdffffff(slab) [ 1216.448587][T11626] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 1216.457217][T11626] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 1216.465924][T11626] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 1216.474615][T11626] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 1216.483304][T11626] head: 00fff00000000003 ffffea0000a2de01 ffffffffffffffff 0000000000000000 [ 1216.491996][T11626] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1216.500674][T11626] page dumped because: kasan: bad access detected [ 1216.507102][T11626] page_owner tracks the page as allocated [ 1216.512822][T11626] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1099, tgid 1099 (kworker/u8:5), ts 570849078653, free_ts 570610589393 [ 1216.533692][T11626] post_alloc_hook+0x2d1/0x350 [ 1216.538517][T11626] get_page_from_freelist+0x1351/0x2e50 [ 1216.544084][T11626] __alloc_pages_noprof+0x22b/0x2460 [ 1216.549387][T11626] alloc_slab_page+0x4e/0xf0 [ 1216.554089][T11626] new_slab+0x84/0x260 [ 1216.558194][T11626] ___slab_alloc+0xdac/0x1870 [ 1216.562911][T11626] __slab_alloc.constprop.0+0x56/0xb0 [ 1216.568333][T11626] __kmalloc_noprof+0x367/0x400 [ 1216.573203][T11626] ieee802_11_parse_elems_full+0xea/0x1680 [ 1216.579128][T11626] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f40 [ 1216.585313][T11626] ieee80211_iface_work+0xc0b/0xf00 [ 1216.590536][T11626] cfg80211_wiphy_work+0x445/0x760 [ 1216.595670][T11626] process_one_work+0x9c5/0x1b40 [ 1216.600736][T11626] worker_thread+0x6c8/0xf00 [ 1216.605353][T11626] kthread+0x2c1/0x3a0 [ 1216.609443][T11626] ret_from_fork+0x45/0x80 [ 1216.613901][T11626] page last free pid 5359 tgid 5359 stack trace: [ 1216.620411][T11626] free_unref_page+0x64a/0xe40 [ 1216.625219][T11626] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 1216.630981][T11626] __apply_to_page_range+0x795/0xdd0 [ 1216.636286][T11626] kasan_release_vmalloc+0xac/0xc0 [ 1216.641468][T11626] purge_vmap_node+0x3ec/0x920 [ 1216.646267][T11626] __purge_vmap_area_lazy+0x9ca/0xc10 [ 1216.651665][T11626] drain_vmap_area_work+0x27/0x40 [ 1216.656707][T11626] process_one_work+0x9c5/0x1b40 [ 1216.661691][T11626] worker_thread+0x6c8/0xf00 [ 1216.666304][T11626] kthread+0x2c1/0x3a0 [ 1216.670400][T11626] ret_from_fork+0x45/0x80 [ 1216.674864][T11626] ret_from_fork_asm+0x1a/0x30 [ 1216.679678][T11626] [ 1216.682012][T11626] Memory state around the buggy address: [ 1216.687655][T11626] ffff888028b7df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1216.695735][T11626] ffff888028b7df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1216.703816][T11626] >ffff888028b7e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1216.711902][T11626] ^ [ 1216.715981][T11626] ffff888028b7e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1216.724079][T11626] ffff888028b7e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1216.732162][T11626] ================================================================== [ 1216.740309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.763873][T11626] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1216.771142][T11626] CPU: 1 UID: 0 PID: 11626 Comm: kworker/u9:3 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1216.781779][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1216.791882][T11626] Workqueue: hci0 hci_rx_work [ 1216.796609][T11626] Call Trace: [ 1216.799918][T11626] [ 1216.802880][T11626] dump_stack_lvl+0x3d/0x1f0 [ 1216.807532][T11626] panic+0x6dc/0x7c0 [ 1216.811493][T11626] ? __pfx_panic+0x10/0x10 [ 1216.815969][T11626] ? irqentry_exit+0x3b/0x90 [ 1216.820596][T11626] ? lockdep_hardirqs_on+0x7c/0x110 [ 1216.825857][T11626] ? preempt_schedule_thunk+0x1a/0x30 [ 1216.831282][T11626] ? preempt_schedule_common+0x44/0xc0 [ 1216.836824][T11626] check_panic_on_warn+0xab/0xb0 [ 1216.841836][T11626] end_report+0x117/0x180 [ 1216.846221][T11626] kasan_report+0xe9/0x110 [ 1216.850725][T11626] ? l2cap_send_cmd+0x882/0x920 [ 1216.855733][T11626] ? l2cap_send_cmd+0x882/0x920 [ 1216.860647][T11626] l2cap_send_cmd+0x882/0x920 [ 1216.865403][T11626] l2cap_config_req+0x90b/0xe30 [ 1216.870344][T11626] ? rcu_is_watching+0x12/0xc0 [ 1216.875174][T11626] ? trace_contention_end+0xea/0x140 [ 1216.880533][T11626] ? __pfx_l2cap_config_req+0x10/0x10 [ 1216.885994][T11626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1216.892030][T11626] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1216.897389][T11626] l2cap_recv_frame+0x23b9/0x8eb0 [ 1216.902589][T11626] ? hci_rx_work+0xa87/0x1610 [ 1216.907453][T11626] ? __pfx_lock_release+0x10/0x10 [ 1216.912552][T11626] ? __pfx___lock_acquire+0x10/0x10 [ 1216.917828][T11626] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 1216.923275][T11626] ? trace_contention_end+0xea/0x140 [ 1216.928646][T11626] ? __mutex_unlock_slowpath+0x164/0x650 [ 1216.934353][T11626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1216.940399][T11626] ? hci_rx_work+0xa73/0x1610 [ 1216.945138][T11626] ? hci_conn_enter_active_mode+0x219/0x360 [ 1216.951125][T11626] ? __pfx_lock_release+0x10/0x10 [ 1216.956227][T11626] ? __pfx_hci_conn_enter_active_mode+0x10/0x10 [ 1216.962655][T11626] l2cap_recv_acldata+0x9b4/0xb70 [ 1216.967737][T11626] hci_rx_work+0xaab/0x1610 [ 1216.972285][T11626] process_one_work+0x9c5/0x1b40 [ 1216.977357][T11626] ? __pfx_lock_acquire+0x10/0x10 [ 1216.982433][T11626] ? __pfx_process_one_work+0x10/0x10 [ 1216.987852][T11626] ? assign_work+0x1a0/0x250 [ 1216.992509][T11626] worker_thread+0x6c8/0xf00 [ 1216.997129][T11626] ? __kthread_parkme+0x148/0x220 [ 1217.002189][T11626] ? __pfx_worker_thread+0x10/0x10 [ 1217.007323][T11626] kthread+0x2c1/0x3a0 [ 1217.011424][T11626] ? _raw_spin_unlock_irq+0x23/0x50 [ 1217.016688][T11626] ? __pfx_kthread+0x10/0x10 [ 1217.021325][T11626] ret_from_fork+0x45/0x80 [ 1217.025778][T11626] ? __pfx_kthread+0x10/0x10 [ 1217.030409][T11626] ret_from_fork_asm+0x1a/0x30 [ 1217.035239][T11626] [ 1217.038545][T11626] Kernel Offset: disabled [ 1217.042876][T11626] Rebooting in 86400 seconds..