last executing test programs: 5.770274841s ago: executing program 2 (id=226): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') syz_usb_ep_read(r2, 0x6, 0xb8, &(0x7f00000003c0)=""/184) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000840000000400000001000000000000009da098a80302933dc64fc1759e23221738722017a2cd67ab32e6dc25789b5211d8b7a18fbae5e0e38ab10d61c16d00a7c84423a340666d1b5a1b369c0a45824bbd6e9f7d5359ce3ea3689ae60157762d2fe106f6f587b3ef56154d2dc1dbc42ebe6aecf129fd47763e76668ec2f7897ab2f08b28f3e287543774a36d323546cdb2480658aab1ced98e9dbeb895637b257376f883029f18ff28d6726067bf1dc42bab4d884a087cfc32b06cc6bb18d7d92b5115689b47ed2363e169768781fa6a359342f400"/237, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000480)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xfffffffffffffe04, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r7 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sync_file_range(r7, 0x1, 0x2, 0x6) close(0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r6}, 0xc) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000180)="0887ea53d16ab850fea43ef39af39372eff1fe7cb07c1f00d32457fd25193df5065a587e449c09cb36b351606f26e904b2f7e06ad936b47af0ebe03cb7a94dcb728ec3cdf2239674f17b903d121f2d0d1fe829a9ace62a8fb2f474783d794c2351f1a9e0dd7a07d208e87f1c3f6aa090b9ca8b2b7a34e15caafb530872cee89e577b369d399c5c4ca4aca19c9e02ea2a6b6e9c38a2b3429b4539d2c5072621c6cbe9415869493ef8d83bc2842fcd61ea4fd9456c4b1263049ca5e917a074ad0660e568ce35ef86e46f9a18e83267b0c51050aa7458b9ad022f7166798484422110e83f7a8a3b1eae6dbc81b41bf0f724750b6d1853ba268c5b17fe59d4d42e05") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 4.169272862s ago: executing program 2 (id=234): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x20008084) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5e, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}], 0xa, "5e037837145166e9296bc74b3fb99ee475ecf21e096c487c14c14fdfba8e98b9497b5c1272e7f0cba4d0f54f3fdd6ec6843502974aac7fc6ffc8fcb9b98ec00d88abb774969f7dfc805f8523e25fd9ddeb82ff21f7b9fb154ce47e075375bc85b29f92447e8f42dae1830c6eda"}, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) r6 = semget$private(0x0, 0x4000, 0x764) r7 = socket$inet6(0xa, 0x6, 0x9) semctl$IPC_STAT(r6, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x7e, {{0x29, 0xfffd, 0x0, @local, 0xfbbe}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}], 0x1, 0x7c9ce320e16db15) sendfile(r2, r0, 0x0, 0x4000000000010046) 4.002323996s ago: executing program 1 (id=235): r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r1, 0xe9c}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0xff80}, 0x0) 3.949940581s ago: executing program 1 (id=236): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000e0000000000000000000000000000000c0000000007000000000000850001000000fbff0000000009000000000000"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_dev$MSR(&(0x7f0000000380), 0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102360, 0x18fd8) (async) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r4, 0x0, 0x0) (async) r5 = socket$kcm(0x29, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) write$binfmt_script(r5, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 3.740523136s ago: executing program 2 (id=237): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8341) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@fwd={0x7}, @func_proto, @func={0x10}, @union={0xb, 0x5, 0x0, 0x5, 0x1, 0x100, [{0x804010, 0x8, 0x807f}, {0xa, 0x0, 0x6}, {0x1, 0x3, 0x7}, {0xe, 0x1, 0x1}, {0x1, 0x5, 0xa1}]}, @enum64={0x9, 0x0, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x8, 0x1}, {0x4, 0x1ff, 0x9}]}]}}, 0x0, 0x92, 0xffffffffffffffd9, 0x0, 0xfffffffc, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './bus\x00'}) r3 = openat$vsock(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xc, 0x0, 0x0, 0xb, 0x5}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}, @TCA_RATE={0x6, 0x5, {0xff, 0x8b}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000006c0)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x1c8, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "47be73342c8e4973f526446245552e8b4a4bc21aff06d4702e250961d8348ff67414bdf80b3c994745eedfd621d23a847ffca238b2e7cde56d20c7b8372a1f6b3777fcba46bf7afadd"}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "a546430c18effa34c36c3e7b69a07ae7f71cf4e58e3510f0385cbcb723aec8e1c2c62b6aab0694ed7d1b802a45ca0b8c88accc642c5c8192fed38b"}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vsock\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{/C+::\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "c141495ccb2a9a0cd69632166e518015a476fb7ea66e9dfc5168671451ebcade5fff7599ce434e9884e8e42a6e5dfceaccee0f7ff51d1efaa4a9361bee4e88d3ac2051355fc9b84b249138c433ddd273d7fb50ceb1aa6fb6624b"}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x51}, 0x1) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000480), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r11, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) write$binfmt_script(r10, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) 3.733817528s ago: executing program 0 (id=245): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x560ef}], 0x1) close(r3) close(r1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b", 0x5a, 0x840, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ff0600"], 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.732551501s ago: executing program 1 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0xfffffffd, 0x0) read$msr(r2, &(0x7f0000019680)=""/102377, 0x18fe9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f00000005c0)=ANY=[], 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18003a0000000000", @ANYRES8=r3, @ANYRES8=r0, @ANYRES16=r3], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r4, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e000000100006558001843c8e7d3ea13b66d96a82aa2efc29078040000000000000086ddffff000000004784066b36ea55351d9aa59e346aef79"], 0xfdef) socket(0x0, 0x80808, 0x4) io_setup(0x3, 0x0) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (fail_nth: 39) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000000)=""/176) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.104653789s ago: executing program 0 (id=242): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') syz_usb_ep_read(r2, 0x6, 0xb8, &(0x7f00000003c0)=""/184) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000840000000400000001000000000000009da098a80302933dc64fc1759e23221738722017a2cd67ab32e6dc25789b5211d8b7a18fbae5e0e38ab10d61c16d00a7c84423a340666d1b5a1b369c0a45824bbd6e9f7d5359ce3ea3689ae60157762d2fe106f6f587b3ef56154d2dc1dbc42ebe6aecf129fd47763e76668ec2f7897ab2f08b28f3e287543774a36d323546cdb2480658aab1ced98e9dbeb895637b257376f883029f18ff28d6726067bf1dc42bab4d884a087cfc32b06cc6bb18d7d92b5115689b47ed2363e169768781fa6a359342f400"/237, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000480)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xfffffffffffffe04, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r7 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sync_file_range(r7, 0x1, 0x2, 0x6) close(0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r6}, 0xc) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000180)="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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 2.854571504s ago: executing program 2 (id=243): socket$nl_generic(0x10, 0x3, 0x10) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000778dcb20977476f44a10fd8af94b6d00000000000000000000000000000000000000000000000029090ecd68a08f113d816d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0x0, 0x148, 0xc4, 0x148, 0x154, 0x240, 0x240, 0x154, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xa0, 0xc4, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1ff}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x244) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 2.747979293s ago: executing program 2 (id=244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000200)=[{0x80, 0x3, 0x7, 0x2}, {0xffc0, 0x1, 0xff, 0xfffffff7}, {0x6dcf, 0x15, 0xf6, 0x4}, {0xa, 0x7, 0xf8, 0x7}]}) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f0000000300)) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r5, 0xc0245629, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYRESDEC=r4], 0x1d) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r6, &(0x7f0000000980)=[{{&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000e40)=""/163, 0xa3}, {&(0x7f00000020c0)=""/226, 0xe2}], 0x4, &(0x7f0000000580)=""/173, 0xad}, 0x1}, {{&(0x7f0000000640)=@tipc, 0x80, &(0x7f0000000d00)}, 0x80}, {{&(0x7f0000000500)=@caif, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/153, 0x99}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000f00)=""/142, 0x8e}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000006700)=""/4111, 0x100f}, {&(0x7f0000000a80)=""/171, 0xab}], 0x6, &(0x7f0000000b80)=""/232, 0xe8}, 0x3}, {{&(0x7f0000000c80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000004100)=""/244, 0xf4}, 0xb6}, {{&(0x7f0000004200)=@tipc=@name, 0x80, &(0x7f0000004380)=[{&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000d80)=""/144, 0x90}, {&(0x7f0000004440)=""/4086, 0xff6}], 0x3, &(0x7f00000006c0)=""/134, 0x86}, 0x7}], 0x5, 0xc0000020, &(0x7f0000000040)) r7 = open(&(0x7f0000000100)='./bus\x00', 0x35b005, 0x1a4) fcntl$notify(r7, 0x402, 0x8000003d) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000004c0)=[r1, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6) fcntl$setsig(r7, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) openat(r7, &(0x7f0000004400)='./bus\x00', 0x6b942, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x498680, 0x0) 2.725288921s ago: executing program 3 (id=246): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x20008084) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5e, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}], 0xa, "5e037837145166e9296bc74b3fb99ee475ecf21e096c487c14c14fdfba8e98b9497b5c1272e7f0cba4d0f54f3fdd6ec6843502974aac7fc6ffc8fcb9b98ec00d88abb774969f7dfc805f8523e25fd9ddeb82ff21f7b9fb154ce47e075375bc85b29f92447e8f42dae1830c6eda"}, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) r6 = semget$private(0x0, 0x4000, 0x764) r7 = socket$inet6(0xa, 0x6, 0x9) semctl$IPC_STAT(r6, 0x0, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x7e, {{0x29, 0xfffd, 0x0, @local, 0xfbbe}}}, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}], 0x1, 0x7c9ce320e16db15) sendfile(r2, r0, 0x0, 0x4000000000010046) 2.35707406s ago: executing program 3 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0xd, {{0x14, 0x4, 0x0, 0x11, 0x50, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @local, {[@generic={0x86, 0xe, "5f3fe163c9a28df4b019ce40"}, @rr={0x7, 0xf, 0xe6, [@multicast1, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0xe6, 0x1, 0x6, [{@private=0xa010101, 0x51e8}, {@multicast1, 0x6}, {@loopback, 0x5}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000007000c7d900030000000000", @ANYRES32=r1], 0x18}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f00000002c0)='1', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000080c0)=@newtaction={0x14, 0x31, 0x0, 0x70bd27}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) ptrace$setregset(0x3, r3, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r8, 0x722, 0x0, 0x20000000}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00') 1.902245106s ago: executing program 0 (id=248): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') syz_usb_ep_read(r2, 0x6, 0xb8, &(0x7f00000003c0)=""/184) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000840000000400000001000000000000009da098a80302933dc64fc1759e23221738722017a2cd67ab32e6dc25789b5211d8b7a18fbae5e0e38ab10d61c16d00a7c84423a340666d1b5a1b369c0a45824bbd6e9f7d5359ce3ea3689ae60157762d2fe106f6f587b3ef56154d2dc1dbc42ebe6aecf129fd47763e76668ec2f7897ab2f08b28f3e287543774a36d323546cdb2480658aab1ced98e9dbeb895637b257376f883029f18ff28d6726067bf1dc42bab4d884a087cfc32b06cc6bb18d7d92b5115689b47ed2363e169768781fa6a359342f400"/237, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000480)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xfffffffffffffe04, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r7 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sync_file_range(r7, 0x1, 0x2, 0x6) close(0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r6}, 0xc) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000180)="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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 1.901939765s ago: executing program 3 (id=249): socket$nl_generic(0x10, 0x3, 0x10) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000778dcb20977476f44a10fd8af94b6d00000000000000000000000000000000000000000000000029090ecd68a08f113d816d"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0x0, 0x148, 0xc4, 0x148, 0x154, 0x240, 0x240, 0x154, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xa0, 0xc4, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1ff}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x244) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 1.817489653s ago: executing program 3 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00"], &(0x7f0000000000)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, r6) 888.404435ms ago: executing program 3 (id=251): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x440000, 0x0) read$proc_mixer(r1, &(0x7f0000000080)=""/52, 0x34) getpriority(0x2, 0xffffffffffffffff) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x19}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_io_uring_setup(0x7e38, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000005000000000000020000009500000000000000eb99f133e17da922c55d0fe20e86183b6e8d"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4006, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x1], &(0x7f0000000340)=[{0x3, 0x2, 0xf, 0x2}, {0x0, 0x1, 0xb, 0x9}, {0x3, 0x5, 0xe, 0xa}, {0x4, 0x2, 0x3, 0x8}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000006900000000000001000000940fa7c7326ae0367600000007070000b28a4533503319"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 539.838425ms ago: executing program 2 (id=252): socket$kcm(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x5}, 0x50) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) accept4(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ffffffc}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lx}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x94}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) accept4$x25(r8, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) 429.828527ms ago: executing program 1 (id=253): socket$nl_generic(0x10, 0x3, 0x10) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000778dcb20977476f44a10fd8af94b6d00000000000000000000000000000000000000000000000029090ecd68a08f113d816d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0x0, 0x148, 0xc4, 0x148, 0x154, 0x240, 0x240, 0x154, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xa0, 0xc4, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1ff}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x244) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 369.843593ms ago: executing program 1 (id=254): socket$nl_generic(0x10, 0x3, 0x10) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00080000778dcb20977476f44a10fd8af94b6d00000000000000000000000000000000000000000000000029090ecd68a08f113d816d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0x0, 0x148, 0xc4, 0x148, 0x154, 0x240, 0x240, 0x154, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xa0, 0xc4, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1ff}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x244) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendto$packet(r6, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 310.302834ms ago: executing program 0 (id=255): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0xf000000}, 0x0) 294.084716ms ago: executing program 1 (id=256): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') syz_usb_ep_read(r2, 0x6, 0xb8, &(0x7f00000003c0)=""/184) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000840000000400000001000000000000009da098a80302933dc64fc1759e23221738722017a2cd67ab32e6dc25789b5211d8b7a18fbae5e0e38ab10d61c16d00a7c84423a340666d1b5a1b369c0a45824bbd6e9f7d5359ce3ea3689ae60157762d2fe106f6f587b3ef56154d2dc1dbc42ebe6aecf129fd47763e76668ec2f7897ab2f08b28f3e287543774a36d323546cdb2480658aab1ced98e9dbeb895637b257376f883029f18ff28d6726067bf1dc42bab4d884a087cfc32b06cc6bb18d7d92b5115689b47ed2363e169768781fa6a359342f400"/237, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000480)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xfffffffffffffe04, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r7 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sync_file_range(r7, 0x1, 0x2, 0x6) close(0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r6}, 0xc) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000180)="0887ea53d16ab850fea43ef39af39372eff1fe7cb07c1f00d32457fd25193df5065a587e449c09cb36b351606f26e904b2f7e06ad936b47af0ebe03cb7a94dcb728ec3cdf2239674f17b903d121f2d0d1fe829a9ace62a8fb2f474783d794c2351f1a9e0dd7a07d208e87f1c3f6aa090b9ca8b2b7a34e15caafb530872cee89e577b369d399c5c4ca4aca19c9e02ea2a6b6e9c38a2b3429b4539d2c5072621c6cbe9415869493ef8d83bc2842fcd61ea4fd9456c4b1263049ca5e917a074ad0660e568ce35ef86e46f9a18e83267b0c51050aa7458b9ad022f7166798484422110e83f7a8a3b1eae6dbc81b41bf0f724750b6d1853ba268c5b17fe59d4d42e05") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 250.234214ms ago: executing program 0 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x10, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) io_uring_setup(0x30d6, &(0x7f0000000000)) syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) 60.168781ms ago: executing program 0 (id=258): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) unshare(0x400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0xa01f}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8042, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) 0s ago: executing program 3 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000002380)=""/102389, 0x18ff5}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0), 0x10) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DVD_AUTH(r8, 0x5390, &(0x7f00000000c0)=@lsk={0x0, 0x0, "dd86b2d709"}) keyctl$link(0x8, r6, 0x0) r9 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) fchdir(r7) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$restrict_keyring(0x1d, r10, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r10, 0x0) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$BLKTRACESETUP(r11, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x8000000000000004}) ioctl$BLKTRACESTART(r11, 0x1274, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x401, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0xfffff000, 0x0, 0x4090}, 0x4040080) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15968' (ED25519) to the list of known hosts. [ 33.273333][ T5335] cgroup: Unknown subsys name 'net' [ 33.418116][ T5335] cgroup: Unknown subsys name 'cpuset' [ 33.421150][ T5335] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.090030][ T5335] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.072074][ T5359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.074419][ T5359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.076990][ T5359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.080151][ T5359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.082707][ T5359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.084734][ T5359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.086849][ T5359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.089652][ T5359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.092151][ T5359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.094209][ T5359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.096201][ T5359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.098421][ T5359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.101131][ T5366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.101509][ T5359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.103786][ T5368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.104010][ T4794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.105141][ T5359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.108673][ T5368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.109794][ T5366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.110050][ T5366] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.110173][ T5366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.110548][ T5359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.112476][ T5368] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.126294][ T5368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.283801][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 37.290822][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 37.316446][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 37.319633][ T5351] chnl_net:caif_netlink_parms(): no params data found [ 37.483610][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.485719][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.488137][ T5354] bridge_slave_0: entered allmulticast mode [ 37.490154][ T5354] bridge_slave_0: entered promiscuous mode [ 37.492780][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.494637][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.496563][ T5352] bridge_slave_0: entered allmulticast mode [ 37.498508][ T5352] bridge_slave_0: entered promiscuous mode [ 37.502800][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.504639][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.508300][ T5352] bridge_slave_1: entered allmulticast mode [ 37.510387][ T5352] bridge_slave_1: entered promiscuous mode [ 37.526656][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.528541][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.530425][ T5354] bridge_slave_1: entered allmulticast mode [ 37.532374][ T5354] bridge_slave_1: entered promiscuous mode [ 37.566319][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.568353][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.570369][ T5362] bridge_slave_0: entered allmulticast mode [ 37.572298][ T5362] bridge_slave_0: entered promiscuous mode [ 37.574908][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.576976][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.578832][ T5362] bridge_slave_1: entered allmulticast mode [ 37.580734][ T5362] bridge_slave_1: entered promiscuous mode [ 37.624537][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.627026][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.629033][ T5351] bridge_slave_0: entered allmulticast mode [ 37.630999][ T5351] bridge_slave_0: entered promiscuous mode [ 37.634227][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.644915][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.648490][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.650352][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.652204][ T5351] bridge_slave_1: entered allmulticast mode [ 37.654218][ T5351] bridge_slave_1: entered promiscuous mode [ 37.657612][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.669349][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.672764][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.700616][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.743346][ T5362] team0: Port device team_slave_0 added [ 37.746315][ T5354] team0: Port device team_slave_0 added [ 37.748732][ T5351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.752261][ T5352] team0: Port device team_slave_0 added [ 37.754548][ T5362] team0: Port device team_slave_1 added [ 37.764185][ T5354] team0: Port device team_slave_1 added [ 37.776167][ T5351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.780139][ T5352] team0: Port device team_slave_1 added [ 37.829541][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.831384][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.838039][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.841694][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.843528][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.850172][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.853439][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.855276][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.862544][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.866889][ T5351] team0: Port device team_slave_0 added [ 37.868989][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.870808][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.877464][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.880716][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.882569][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.889300][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.892682][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.894493][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.901115][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.905281][ T5351] team0: Port device team_slave_1 added [ 37.939161][ T5352] hsr_slave_0: entered promiscuous mode [ 37.942320][ T5352] hsr_slave_1: entered promiscuous mode [ 37.953502][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.955364][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.962089][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.982476][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.984319][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.991152][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.005343][ T5362] hsr_slave_0: entered promiscuous mode [ 38.008012][ T5362] hsr_slave_1: entered promiscuous mode [ 38.010143][ T5362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.012207][ T5362] Cannot create hsr debugfs directory [ 38.025929][ T5354] hsr_slave_0: entered promiscuous mode [ 38.027863][ T5354] hsr_slave_1: entered promiscuous mode [ 38.030717][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.032676][ T5354] Cannot create hsr debugfs directory [ 38.113587][ T5351] hsr_slave_0: entered promiscuous mode [ 38.115600][ T5351] hsr_slave_1: entered promiscuous mode [ 38.118436][ T5351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.120391][ T5351] Cannot create hsr debugfs directory [ 38.254261][ T5352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.258424][ T5352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.262579][ T5352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.274800][ T5352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.310748][ T5354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.314060][ T5354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.319546][ T5354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.322984][ T5354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.341907][ T5362] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.358780][ T5362] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.362350][ T5362] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.366286][ T5362] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.397615][ T5351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.400726][ T5351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.414694][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.418528][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.430807][ T5351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.434538][ T5351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.443296][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.447676][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.457676][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.459688][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.464104][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.466023][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.471675][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.473495][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.488523][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.490408][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.516884][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.520756][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.531942][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.540517][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.545778][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.547629][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.551114][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.552914][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.558513][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.560366][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.568431][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.570297][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.597814][ T5362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.608504][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.627805][ T5352] veth0_vlan: entered promiscuous mode [ 38.632041][ T5352] veth1_vlan: entered promiscuous mode [ 38.642469][ T5352] veth0_macvtap: entered promiscuous mode [ 38.649121][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.658840][ T5352] veth1_macvtap: entered promiscuous mode [ 38.667993][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.677022][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.679322][ T5354] veth0_vlan: entered promiscuous mode [ 38.684294][ T5354] veth1_vlan: entered promiscuous mode [ 38.688318][ T5352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.690659][ T5352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.692894][ T5352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.695121][ T5352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.708502][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.733301][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.736485][ T5354] veth0_macvtap: entered promiscuous mode [ 38.742421][ T5354] veth1_macvtap: entered promiscuous mode [ 38.752152][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.754245][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.755462][ T5362] veth0_vlan: entered promiscuous mode [ 38.769071][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.771802][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.774847][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.777857][ T5362] veth1_vlan: entered promiscuous mode [ 38.780982][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.783023][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.787962][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.790646][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.794005][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.798532][ T5354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.800689][ T5354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.802901][ T5354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.805037][ T5354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.811606][ T5352] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.814023][ T5351] veth0_vlan: entered promiscuous mode [ 38.838228][ T5351] veth1_vlan: entered promiscuous mode [ 38.852032][ T5362] veth0_macvtap: entered promiscuous mode [ 38.859532][ T5362] veth1_macvtap: entered promiscuous mode [ 38.870716][ T5351] veth0_macvtap: entered promiscuous mode [ 38.876890][ T5351] veth1_macvtap: entered promiscuous mode [ 38.881098][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.883690][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.886378][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.888881][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.891771][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.899343][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.901963][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.904348][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.907173][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.910101][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.914495][ T5362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.915168][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.917070][ T5362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.918892][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.920809][ T5362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.924792][ T5362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.939438][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.942152][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.944642][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.948094][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.950598][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.953244][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.956791][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.970540][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.974188][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.979456][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.982126][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.984470][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.987559][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.990077][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.992750][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.996681][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.000243][ T5351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.003085][ T5351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.005425][ T5351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.007877][ T5351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.014875][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.018048][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.044208][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.047499][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.049481][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.049525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.059939][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.062484][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.105314][ T5422] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 39.136537][ T5360] Bluetooth: hci2: command tx timeout [ 39.139544][ T5360] Bluetooth: hci3: command tx timeout [ 39.141386][ T5360] Bluetooth: hci1: command tx timeout [ 39.238830][ T5368] Bluetooth: hci0: command tx timeout [ 39.284157][ T5432] 9pnet_fd: Insufficient options for proto=fd [ 39.463396][ T5438] fuse: Unknown parameter 'grou00000000000000000000' [ 40.005873][ T1285] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.052410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 40.078503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.087069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.115945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.118273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.120432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.122590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.124726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.136116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.138409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.168402][ T1285] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 40.171453][ T1285] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 40.174038][ T1285] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 40.176740][ T1285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.198489][ T5440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.210485][ T1285] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 40.424755][ T5450] dccp_close: ABORT with 1236 bytes unread [ 40.447695][ T30] usb 6-1: USB disconnect, device number 2 [ 40.887174][ T5458] xt_TCPMSS: Only works on TCP SYN packets [ 41.215684][ T5368] Bluetooth: hci1: command tx timeout [ 41.217133][ T5368] Bluetooth: hci3: command tx timeout [ 41.218537][ T5368] Bluetooth: hci2: command tx timeout [ 41.295872][ T5360] Bluetooth: hci0: command tx timeout [ 41.530202][ T5464] syz.1.14 (5464): drop_caches: 2 [ 41.560118][ T5464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.568040][ T5464] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 41.769040][ T5470] Illegal XDP return value 4294967294 on prog (id 8) dev N/A, expect packet loss! [ 42.708273][ T5488] TCP: TCP_TX_DELAY enabled [ 42.739066][ T5483] syz.0.19 (5483): drop_caches: 2 [ 42.760488][ T5483] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 42.977048][ T5498] capability: warning: `syz.0.25' uses 32-bit capabilities (legacy support in use) [ 42.985901][ T5499] fuse: Unknown parameter 'group_i00000000000000000000' [ 43.205614][ T5414] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.232036][ T5502] tipc: Started in network mode [ 43.235115][ T5502] tipc: Node identity ac1414aa, cluster identity 4711 [ 43.259204][ T5502] tipc: Enabled bearer , priority 10 [ 43.296016][ T5360] Bluetooth: hci2: command tx timeout [ 43.297449][ T5360] Bluetooth: hci3: command tx timeout [ 43.298807][ T5360] Bluetooth: hci1: command tx timeout [ 43.357289][ T5414] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 43.360122][ T5414] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 43.362647][ T5414] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 43.364963][ T5414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.369596][ T5486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.373060][ T5414] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 43.375707][ T5368] Bluetooth: hci0: command tx timeout [ 43.587555][ T5506] usb 6-1: USB disconnect, device number 3 [ 43.758440][ T5510] syz.2.27 (5510): drop_caches: 2 [ 43.762284][ T5510] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 43.902580][ T5513] syz.2.28 (5513): drop_caches: 2 [ 43.915970][ T5513] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 44.396821][ T5478] tipc: Node number set to 2886997162 [ 44.436499][ T5519] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 44.689251][ T5530] fuse: Unknown parameter 'grou00000000000000000000' [ 44.735983][ T5478] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 44.890853][ T5478] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 44.894155][ T5478] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 44.902638][ T5478] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 44.905142][ T5478] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.921877][ T5528] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 44.929629][ T5478] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 45.144810][ T5478] usb 8-1: USB disconnect, device number 2 [ 45.375612][ T5368] Bluetooth: hci1: command tx timeout [ 45.378157][ T5368] Bluetooth: hci3: command tx timeout [ 45.379752][ T5360] Bluetooth: hci2: command tx timeout [ 45.455921][ T5369] Bluetooth: hci0: command tx timeout [ 47.467307][ T5591] dccp_close: ABORT with 1123 bytes unread [ 47.668617][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.847659][ T5600] dccp_close: ABORT with 1224 bytes unread [ 47.857141][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 48.059954][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.062395][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.065245][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.068559][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.076018][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.078828][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.081920][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.084228][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.087402][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.092962][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.096187][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.099745][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.102721][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.105061][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.108175][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.110863][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.113194][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.116179][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.119031][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.121375][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.124204][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.127224][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.129533][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.132336][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.135942][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 48.138318][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 48.140426][ T9] usb 5-1: Product: syz [ 48.141624][ T9] usb 5-1: Manufacturer: syz [ 48.142882][ T9] usb 5-1: SerialNumber: syz [ 48.150598][ T9] usb 5-1: config 0 descriptor?? [ 48.170254][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 48.236370][ T5606] syz.1.48 (5606): drop_caches: 2 [ 48.247163][ T5606] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 48.461052][ T5590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.474602][ T5590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.659867][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 48.662679][ T9] usb 5-1: USB disconnect, device number 2 [ 48.666464][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 48.917383][ T5618] syz.3.51 (5618): drop_caches: 2 [ 48.929686][ T5618] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 48.966040][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.128966][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 49.131810][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 49.134275][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 49.137194][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.141054][ T5614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.144520][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.350839][ T9] usb 7-1: USB disconnect, device number 2 [ 49.570901][ T5614] evm: overlay not supported [ 49.618740][ T5369] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 49.621780][ T5369] Bluetooth: hci1: Injecting HCI hardware error event [ 49.624890][ T5369] Bluetooth: hci1: hardware error 0x00 [ 50.205585][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.393086][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.400620][ T9] usb 5-1: config 0 has no interfaces? [ 50.407400][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.414834][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.424287][ T9] usb 5-1: config 0 descriptor?? [ 50.891509][ T9] usb 5-1: string descriptor 0 read error: -71 [ 50.898851][ T9] usb 5-1: USB disconnect, device number 3 [ 51.335644][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 51.686253][ T5661] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.705675][ T5369] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 51.796062][ T5662] fuse: Bad value for 'group_id' [ 51.797459][ T5662] fuse: Bad value for 'group_id' [ 52.231566][ T5665] Zero length message leads to an empty skb [ 52.937629][ T5682] fuse: Bad value for 'group_id' [ 52.939095][ T5682] fuse: Bad value for 'group_id' [ 52.940530][ T5683] fuse: Bad value for 'group_id' [ 52.941921][ T5683] fuse: Bad value for 'group_id' [ 53.955754][ T5400] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.127393][ T5400] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 54.132036][ T5400] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 54.134478][ T5400] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.137847][ T5400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.141705][ T5698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.153041][ T5400] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 54.359551][ T5400] usb 8-1: USB disconnect, device number 3 [ 54.656334][ T5713] fuse: Bad value for 'group_id' [ 54.657666][ T5713] fuse: Bad value for 'group_id' [ 55.382951][ T5721] syz.0.76 (5721): drop_caches: 2 [ 55.386835][ T5721] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 55.440985][ T5718] syz.3.75 (5718): drop_caches: 2 [ 55.452801][ T5718] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 55.619070][ T5728] syz.1.78 (5728): drop_caches: 2 [ 55.675995][ T5724] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 55.773674][ T5734] fuse: Bad value for 'group_id' [ 55.775149][ T5734] fuse: Bad value for 'group_id' [ 56.920019][ T5741] xt_connbytes: Forcing CT accounting to be enabled [ 57.626183][ T5761] syz.1.86 (5761): drop_caches: 2 [ 57.629703][ T5761] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 57.637481][ T5764] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 57.687796][ T5766] FAULT_INJECTION: forcing a failure. [ 57.687796][ T5766] name failslab, interval 1, probability 0, space 0, times 1 [ 57.691241][ T5766] CPU: 2 UID: 0 PID: 5766 Comm: syz.1.87 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 57.693919][ T5766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.696668][ T5766] Call Trace: [ 57.697528][ T5766] [ 57.698312][ T5766] dump_stack_lvl+0x16c/0x1f0 [ 57.699493][ T5766] should_fail_ex+0x497/0x5b0 [ 57.700728][ T5766] ? fs_reclaim_acquire+0xae/0x150 [ 57.702086][ T5766] should_failslab+0xc2/0x120 [ 57.703321][ T5766] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 57.704764][ T5766] ? __anon_vma_prepare+0x344/0x5e0 [ 57.706127][ T5766] __anon_vma_prepare+0x344/0x5e0 [ 57.707442][ T5766] ? __pfx___pte_alloc+0x10/0x10 [ 57.708739][ T5766] __vmf_anon_prepare+0x11c/0x240 [ 57.710061][ T5766] do_pte_missing+0x100b/0x3e50 [ 57.711344][ T5766] ? _raw_spin_unlock+0x28/0x50 [ 57.712625][ T5766] ? __pmd_alloc+0x359/0x810 [ 57.713906][ T5766] __handle_mm_fault+0x100a/0x2a10 [ 57.715247][ T5766] ? __pfx_mt_find+0x10/0x10 [ 57.716460][ T5766] ? __pfx___handle_mm_fault+0x10/0x10 [ 57.717899][ T5766] handle_mm_fault+0x3fa/0xaa0 [ 57.719152][ T5766] __get_user_pages+0x90f/0x3b90 [ 57.720455][ T5766] ? __pfx___get_user_pages+0x10/0x10 [ 57.721884][ T5766] get_user_pages_remote+0x25e/0xb30 [ 57.723263][ T5766] ? lock_acquire+0x2f/0xb0 [ 57.724497][ T5766] ? __pfx_get_user_pages_remote+0x10/0x10 [ 57.726021][ T5766] ? down_read+0xc9/0x330 [ 57.727161][ T5766] ? __might_fault+0x13b/0x190 [ 57.728410][ T5766] get_arg_page+0x13e/0x640 [ 57.729595][ T5766] ? __pfx_get_arg_page+0x10/0x10 [ 57.730917][ T5766] ? __might_fault+0xe3/0x190 [ 57.732149][ T5766] ? __might_fault+0xe3/0x190 [ 57.733381][ T5766] copy_string_kernel+0x165/0x210 [ 57.734698][ T5766] ? count.constprop.0.isra.0+0xf4/0x170 [ 57.736153][ T5766] do_execveat_common.isra.0+0x34e/0x630 [ 57.737608][ T5766] __ia32_compat_sys_execve+0x90/0xc0 [ 57.739006][ T5766] __do_fast_syscall_32+0x73/0x120 [ 57.740335][ T5766] do_fast_syscall_32+0x32/0x80 [ 57.741619][ T5766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.743262][ T5766] RIP: 0023:0xf7fe1579 [ 57.744386][ T5766] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 57.749290][ T5766] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 000000000000000b [ 57.751434][ T5766] RAX: ffffffffffffffda RBX: 0000000020001100 RCX: 0000000000000000 [ 57.753477][ T5766] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.755518][ T5766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.757549][ T5766] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 57.759493][ T5766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.761538][ T5766] [ 58.051092][ T5506] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.206160][ T5506] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 58.209417][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.211856][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.217279][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.222647][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.225223][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.230492][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.235516][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.238171][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.244776][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.249471][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.252001][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.257172][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.261517][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.263897][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.270227][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.275990][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.281054][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.288743][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.295706][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.298368][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.302427][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.308128][ T5506] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.310787][ T5506] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.314812][ T5506] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.320977][ T5506] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 58.323468][ T5506] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 58.328522][ T5506] usb 6-1: Product: syz [ 58.330954][ T5506] usb 6-1: Manufacturer: syz [ 58.333249][ T5506] usb 6-1: SerialNumber: syz [ 58.337109][ T5506] usb 6-1: config 0 descriptor?? [ 58.344922][ T5506] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 58.482734][ T5789] netlink: 344 bytes leftover after parsing attributes in process `syz.2.93'. [ 58.485467][ T5787] netlink: 344 bytes leftover after parsing attributes in process `syz.2.93'. [ 58.505724][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.552950][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.556701][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.650720][ C3] usb 6-1: yurex_control_callback - control failed: -71 [ 58.650836][ T30] usb 6-1: USB disconnect, device number 4 [ 58.654874][ T30] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 58.990431][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.996417][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.998818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.016963][ T5811] fuse: Bad value for 'user_id' [ 59.018382][ T5811] fuse: Bad value for 'user_id' [ 59.536140][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.918258][ T5823] fuse: Unknown parameter 'group_id00000000000000000000' [ 60.450183][ T5832] trusted_key: syz.1.104 sent an empty control message without MSG_MORE. [ 60.575722][ T5400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.579568][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.426259][ T5856] fuse: Bad value for 'fd' [ 61.520741][ T5859] netlink: 576 bytes leftover after parsing attributes in process `syz.1.109'. [ 61.616124][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.626883][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.629387][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.812085][ T5868] syz.2.113 (5868): drop_caches: 2 [ 61.816466][ T5868] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 61.835631][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.038017][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.041487][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.045339][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.048727][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.052906][ T5861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.056086][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.268584][ T30] usb 6-1: USB disconnect, device number 5 [ 62.296436][ T5885] FAULT_INJECTION: forcing a failure. [ 62.296436][ T5885] name failslab, interval 1, probability 0, space 0, times 0 [ 62.300749][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: syz.3.119 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 62.303493][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.306311][ T5885] Call Trace: [ 62.307189][ T5885] [ 62.307970][ T5885] dump_stack_lvl+0x16c/0x1f0 [ 62.309205][ T5885] should_fail_ex+0x497/0x5b0 [ 62.310450][ T5885] ? fs_reclaim_acquire+0xae/0x150 [ 62.311794][ T5885] should_failslab+0xc2/0x120 [ 62.313023][ T5885] __kmalloc_noprof+0xcb/0x410 [ 62.314279][ T5885] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 62.315742][ T5885] tomoyo_realpath_from_path+0xbf/0x710 [ 62.317178][ T5885] ? tomoyo_path_number_perm+0x232/0x5b0 [ 62.318642][ T5885] tomoyo_path_number_perm+0x245/0x5b0 [ 62.320079][ T5885] ? tomoyo_path_number_perm+0x232/0x5b0 [ 62.321625][ T5885] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.323202][ T5885] ? trace_lock_acquire+0x14a/0x1d0 [ 62.324558][ T5885] ? lock_acquire+0x2f/0xb0 [ 62.325767][ T5885] ? __fget_files+0x40/0x3f0 [ 62.326980][ T5885] ? __fget_files+0x244/0x3f0 [ 62.328213][ T5885] security_file_ioctl_compat+0x9b/0x240 [ 62.329682][ T5885] __do_compat_sys_ioctl+0x52/0x2b0 [ 62.331059][ T5885] __do_fast_syscall_32+0x73/0x120 [ 62.332399][ T5885] do_fast_syscall_32+0x32/0x80 [ 62.333672][ T5885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.335320][ T5885] RIP: 0023:0xf7faf579 [ 62.336395][ T5885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.341352][ T5885] RSP: 002b:00000000f571556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 62.343788][ T5885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 62.345848][ T5885] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.347891][ T5885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.349926][ T5885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.351930][ T5885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.353999][ T5885] [ 62.358933][ T5885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.689587][ T4565] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.843219][ T5891] syz.2.122 (5891): drop_caches: 2 [ 62.847756][ T4565] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.848971][ T5891] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 62.850574][ T4565] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.855047][ T4565] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.875620][ T4565] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.879553][ T5887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.882936][ T4565] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.089266][ T5400] usb 8-1: USB disconnect, device number 4 [ 63.175606][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.265032][ T5899] nft_compat: unsupported protocol 0 [ 63.269382][ T5899] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.271637][ T5899] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.273897][ T5899] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.276205][ T5899] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.278489][ T5899] vxlan0: entered promiscuous mode [ 63.279822][ T5899] vxlan0: entered allmulticast mode [ 63.283103][ T5899] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.285405][ T5899] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.288172][ T5899] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.290472][ T5899] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.327845][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.330729][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.333257][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.335697][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.342831][ T5894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 63.346013][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.554459][ T5353] usb 7-1: USB disconnect, device number 3 [ 63.697176][ T5506] net_ratelimit: 19 callbacks suppressed [ 63.697187][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.097672][ T5911] fuse: Bad value for 'user_id' [ 64.099165][ T5911] fuse: Bad value for 'user_id' [ 64.361879][ T5913] syz.2.131 (5913): drop_caches: 2 [ 64.364420][ T5913] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 64.547323][ T5920] FAULT_INJECTION: forcing a failure. [ 64.547323][ T5920] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.550744][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.2.133 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 64.553461][ T5920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.556270][ T5920] Call Trace: [ 64.557166][ T5920] [ 64.557986][ T5920] dump_stack_lvl+0x16c/0x1f0 [ 64.559228][ T5920] should_fail_ex+0x497/0x5b0 [ 64.559821][ T5925] autofs: Bad value for 'fd' [ 64.559841][ T5928] autofs: Bad value for 'fd' [ 64.560457][ T5920] _copy_from_user+0x30/0xf0 [ 64.560471][ T5920] do_compat_sigaltstack+0xf7/0x2f0 [ 64.565494][ T5920] ? __pfx_do_compat_sigaltstack+0x10/0x10 [ 64.567025][ T5920] ? ia32_restore_sigcontext+0x416/0x5d0 [ 64.568493][ T5920] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 64.570073][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.571440][ T5920] ? lockdep_hardirqs_on+0x7c/0x110 [ 64.572809][ T5920] compat_restore_altstack+0x17/0x40 [ 64.574202][ T5920] __do_compat_sys_rt_sigreturn+0x18c/0x1f0 [ 64.575743][ T5920] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 64.577451][ T5920] do_int80_emulation+0x104/0x200 [ 64.578792][ T5920] asm_int80_emulation+0x1a/0x20 [ 64.580096][ T5920] RIP: 0023:0xf7ff8577 [ 64.581176][ T5920] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 64.586176][ T5920] RSP: 002b:00000000f577656c EFLAGS: 00000296 [ 64.587761][ T5920] RAX: 000000000000016d RBX: 0000000000000005 RCX: 0000000000000084 [ 64.589827][ T5920] RDX: 000000000000006f RSI: 0000000020000000 RDI: 0000000020000180 [ 64.591883][ T5920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.593950][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.596006][ T5920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.598126][ T5920] [ 64.604670][ T5925] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 64.604948][ T5928] overlayfs: conflicting lowerdir path [ 64.735720][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.738264][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.491362][ T5949] syz.2.140 (5949): drop_caches: 2 [ 65.506606][ T5947] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 65.775807][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.785020][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.787328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.119793][ T5981] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 66.126691][ T5983] syz.3.149 (5983): drop_caches: 2 [ 66.700811][ T5994] FAULT_INJECTION: forcing a failure. [ 66.700811][ T5994] name failslab, interval 1, probability 0, space 0, times 0 [ 66.704290][ T5994] CPU: 0 UID: 0 PID: 5994 Comm: syz.3.155 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 66.708040][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.711901][ T5994] Call Trace: [ 66.712841][ T5994] [ 66.713966][ T5994] dump_stack_lvl+0x16c/0x1f0 [ 66.715292][ T5994] should_fail_ex+0x497/0x5b0 [ 66.716474][ T5994] should_failslab+0xc2/0x120 [ 66.717700][ T5994] __kmalloc_cache_noprof+0x6b/0x310 [ 66.719095][ T5994] ? sctp_add_bind_addr+0x9d/0x3e0 [ 66.720437][ T5994] sctp_add_bind_addr+0x9d/0x3e0 [ 66.721754][ T5994] sctp_copy_local_addr_list+0x39e/0x5a0 [ 66.723213][ T5994] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 66.724812][ T5994] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 66.726342][ T5994] ? sctp_bind_addr_copy+0x331/0x530 [ 66.727708][ T5994] sctp_bind_addr_copy+0x331/0x530 [ 66.729030][ T5994] sctp_connect_new_asoc+0x1d8/0x790 [ 66.730399][ T5994] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.731746][ T5994] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 66.733264][ T5994] sctp_sendmsg+0x162a/0x1f10 [ 66.734507][ T5994] ? __pfx___lock_acquire+0x10/0x10 [ 66.735870][ T5994] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.737181][ T5994] ? lock_acquire+0x2f/0xb0 [ 66.738370][ T5994] ? __pfx_aa_sk_perm+0x10/0x10 [ 66.739641][ T5994] ? __pfx_sctp_sendmsg+0x10/0x10 [ 66.740951][ T5994] inet_sendmsg+0x119/0x140 [ 66.742156][ T5994] __sys_sendto+0x426/0x4d0 [ 66.743347][ T5994] ? __pfx___sys_sendto+0x10/0x10 [ 66.744675][ T5994] ? ksys_write+0x1ad/0x260 [ 66.745909][ T5994] ? __pfx_ksys_write+0x10/0x10 [ 66.747182][ T5994] __ia32_sys_sendto+0xdd/0x1b0 [ 66.748451][ T5994] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.749811][ T5994] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 66.751466][ T5994] __do_fast_syscall_32+0x73/0x120 [ 66.752766][ T5994] do_fast_syscall_32+0x32/0x80 [ 66.753977][ T5994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.755606][ T5994] RIP: 0023:0xf7faf579 [ 66.756663][ T5994] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 66.761508][ T5994] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 66.763603][ T5994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 66.765632][ T5994] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000020000040 [ 66.767618][ T5994] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 66.769591][ T5994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 66.771628][ T5994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.773636][ T5994] [ 66.801896][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.804092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.823108][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.110582][ T6015] syz.2.161 (6015): drop_caches: 2 [ 67.114566][ T6015] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 67.163333][ T6020] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 67.171140][ T6020] bond1: entered promiscuous mode [ 67.188789][ T6020] bond1: (slave veth3): Enslaving as an active interface with a down link [ 67.193643][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 67.199070][ T6020] bond1 (unregistering): (slave veth3): Releasing active interface [ 67.203142][ T6020] bond1 (unregistering): Released all slaves [ 67.289212][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 67.335614][ T5414] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.455919][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.486785][ T5414] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.489638][ T5414] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.492164][ T5414] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.494830][ T5414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.502737][ T6017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.506128][ T5414] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.531020][ T6029] delete_channel: no stack [ 67.708662][ T5506] usb 6-1: USB disconnect, device number 6 [ 68.699150][ T6057] fuse: Bad value for 'fd' [ 68.749907][ T8] net_ratelimit: 2 callbacks suppressed [ 68.749917][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.897314][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.173092][ T6066] hsr0: entered allmulticast mode [ 69.174495][ T6066] hsr_slave_0: entered allmulticast mode [ 69.176342][ T6066] hsr_slave_1: entered allmulticast mode [ 69.789879][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 70.006909][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.027212][ T5414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.087703][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.495847][ T6105] syz.3.184 (6105): drop_caches: 2 [ 70.510573][ T6105] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 70.658253][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.860508][ T6109] syz.1.185 (6109): drop_caches: 2 [ 70.866965][ T6109] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 70.935893][ T6118] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 70.937971][ T6118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.188'. [ 71.055855][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.747037][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 71.776530][ T5400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.826804][ T6130] syz.0.193 (6130): drop_caches: 2 [ 71.829180][ T6130] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 71.925429][ T6137] FAULT_INJECTION: forcing a failure. [ 71.925429][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.929140][ T6137] CPU: 2 UID: 0 PID: 6137 Comm: syz.2.196 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 71.931936][ T6137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.934719][ T6137] Call Trace: [ 71.935601][ T6137] [ 71.936376][ T6137] dump_stack_lvl+0x16c/0x1f0 [ 71.937629][ T6137] should_fail_ex+0x497/0x5b0 [ 71.939025][ T6137] _copy_to_user+0x30/0xc0 [ 71.940225][ T6137] simple_read_from_buffer+0xd0/0x160 [ 71.941650][ T6137] proc_fail_nth_read+0x198/0x270 [ 71.942972][ T6137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.944398][ T6137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.945853][ T6137] vfs_read+0x1ce/0xbd0 [ 71.946951][ T6137] ? __fget_files+0x23a/0x3f0 [ 71.948186][ T6137] ? fdget_pos+0x24c/0x360 [ 71.949361][ T6137] ? __pfx_lock_release+0x10/0x10 [ 71.950714][ T6137] ? trace_lock_acquire+0x14a/0x1d0 [ 71.952071][ T6137] ? __pfx_vfs_read+0x10/0x10 [ 71.953302][ T6137] ? __pfx___mutex_lock+0x10/0x10 [ 71.954647][ T6137] ? __fget_files+0x244/0x3f0 [ 71.955894][ T6137] ksys_read+0x12f/0x260 [ 71.957020][ T6137] ? __pfx_ksys_read+0x10/0x10 [ 71.958316][ T6137] __do_fast_syscall_32+0x73/0x120 [ 71.959659][ T6137] do_fast_syscall_32+0x32/0x80 [ 71.960942][ T6137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.962621][ T6137] RIP: 0023:0xf7ff8579 [ 71.963688][ T6137] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.968638][ T6137] RSP: 002b:00000000f57765a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 71.970797][ T6137] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5776620 [ 71.972826][ T6137] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 71.974876][ T6137] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 71.976914][ T6137] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 71.978962][ T6137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.981013][ T6137] [ 72.087060][ T5353] IPVS: starting estimator thread 0... [ 72.095322][ T6144] pim6reg: entered allmulticast mode [ 72.099825][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.104598][ T6144] pim6reg: left allmulticast mode [ 72.155636][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.189424][ T6145] IPVS: using max 34 ests per chain, 81600 per kthread [ 72.321032][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.323847][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 72.330876][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 72.333182][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.342165][ T6135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.347506][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 72.425036][ T6158] fuse: Invalid rootmode [ 72.586269][ T30] usb 6-1: USB disconnect, device number 7 [ 72.797152][ T6135] overlayfs: failed to resolve './file0': -2 [ 72.995672][ T6167] fuse: Bad value for 'fd' [ 73.231490][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.306542][ T6169] syz.2.203 (6169): drop_caches: 2 [ 73.311126][ T6169] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 73.441272][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 73.802960][ T6188] pim6reg: entered allmulticast mode [ 73.809183][ T5506] IPVS: starting estimator thread 0... [ 73.811388][ T6188] pim6reg: left allmulticast mode [ 73.895652][ T6189] IPVS: using max 34 ests per chain, 81600 per kthread [ 73.971026][ T6191] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.065068][ T6199] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.107621][ T6196] syz.0.212 (6196): drop_caches: 2 [ 74.113164][ T6196] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 74.299377][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.821031][ T5400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.074772][ T6222] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 75.179054][ T6229] syz.1.222 (6229): drop_caches: 2 [ 75.181554][ T6229] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 75.242101][ T6232] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.248398][ T6232] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.253228][ T6232] tipc: Started in network mode [ 75.254470][ T6232] tipc: Node identity bf09, cluster identity 4711 [ 75.258070][ T6232] tipc: Enabling of bearer rejected, failed to enable media [ 75.288074][ T6234] FAULT_INJECTION: forcing a failure. [ 75.288074][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 75.291223][ T6234] CPU: 2 UID: 0 PID: 6234 Comm: syz.3.224 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 75.293867][ T6234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.296456][ T6234] Call Trace: [ 75.297285][ T6234] [ 75.298032][ T6234] dump_stack_lvl+0x16c/0x1f0 [ 75.299193][ T6234] should_fail_ex+0x497/0x5b0 [ 75.300405][ T6234] ? fs_reclaim_acquire+0xae/0x150 [ 75.301693][ T6234] should_failslab+0xc2/0x120 [ 75.302883][ T6234] __kmalloc_noprof+0xcb/0x410 [ 75.304132][ T6234] ? rcu_is_watching+0x12/0xc0 [ 75.305346][ T6234] tomoyo_encode2+0x100/0x3e0 [ 75.306511][ T6234] tomoyo_realpath_from_path+0x1a7/0x710 [ 75.307924][ T6234] ? tomoyo_path_number_perm+0x232/0x5b0 [ 75.309345][ T6234] tomoyo_path_number_perm+0x245/0x5b0 [ 75.310724][ T6234] ? tomoyo_path_number_perm+0x232/0x5b0 [ 75.312142][ T6234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.313682][ T6234] ? trace_lock_acquire+0x14a/0x1d0 [ 75.315017][ T6234] ? lock_acquire+0x2f/0xb0 [ 75.316299][ T6234] ? __fget_files+0x40/0x3f0 [ 75.317622][ T6234] ? __fget_files+0x244/0x3f0 [ 75.318829][ T6234] security_file_ioctl_compat+0x9b/0x240 [ 75.320223][ T6234] __do_compat_sys_ioctl+0x52/0x2b0 [ 75.321536][ T6234] __do_fast_syscall_32+0x73/0x120 [ 75.322838][ T6234] do_fast_syscall_32+0x32/0x80 [ 75.324061][ T6234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.325676][ T6234] RIP: 0023:0xf7faf579 [ 75.326775][ T6234] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.331613][ T6234] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 75.333758][ T6234] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 75.335786][ T6234] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.337827][ T6234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.339864][ T6234] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.341926][ T6234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.343963][ T6234] [ 75.355852][ T6234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.456612][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.792231][ T25] cfg80211: failed to load regulatory.db [ 75.845678][ T5506] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.848191][ T4565] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.008067][ T4565] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.011020][ T4565] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.013553][ T4565] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.016252][ T5506] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.019046][ T5506] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.021558][ T5506] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.023880][ T5506] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.026051][ T4565] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.030127][ T6239] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.032259][ T6241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.035239][ T5506] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.051064][ T4565] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.076832][ T6256] FAULT_INJECTION: forcing a failure. [ 76.076832][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 76.080122][ T6256] CPU: 1 UID: 0 PID: 6256 Comm: syz.0.230 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 76.082823][ T6256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.085566][ T6256] Call Trace: [ 76.086447][ T6256] [ 76.087217][ T6256] dump_stack_lvl+0x16c/0x1f0 [ 76.088447][ T6256] should_fail_ex+0x497/0x5b0 [ 76.089708][ T6256] ? fs_reclaim_acquire+0xae/0x150 [ 76.091141][ T6256] should_failslab+0xc2/0x120 [ 76.092382][ T6256] kmem_cache_alloc_node_noprof+0x71/0x310 [ 76.093898][ T6256] ? __alloc_skb+0x2b3/0x380 [ 76.095102][ T6256] __alloc_skb+0x2b3/0x380 [ 76.096270][ T6256] ? __pfx___alloc_skb+0x10/0x10 [ 76.097557][ T6256] ? lock_acquire+0x2f/0xb0 [ 76.098752][ T6256] netlink_alloc_large_skb+0x69/0x130 [ 76.100148][ T6256] netlink_sendmsg+0x689/0xd70 [ 76.101418][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.102810][ T6256] sock_write_iter+0x4fe/0x5b0 [ 76.104065][ T6256] ? __pfx_sock_write_iter+0x10/0x10 [ 76.105443][ T6256] ? bpf_lsm_file_permission+0x9/0x10 [ 76.106843][ T6256] ? security_file_permission+0x71/0x210 [ 76.108307][ T6256] vfs_write+0x6b5/0x1140 [ 76.109437][ T6256] ? __pfx_sock_write_iter+0x10/0x10 [ 76.110827][ T6256] ? trace_lock_acquire+0x14a/0x1d0 [ 76.112183][ T6256] ? __pfx_vfs_write+0x10/0x10 [ 76.113439][ T6256] ? __fget_files+0x40/0x3f0 [ 76.114670][ T6256] ksys_write+0x1fa/0x260 [ 76.115802][ T6256] ? __pfx_ksys_write+0x10/0x10 [ 76.117075][ T6256] __do_fast_syscall_32+0x73/0x120 [ 76.118437][ T6256] do_fast_syscall_32+0x32/0x80 [ 76.119760][ T6256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.121420][ T6256] RIP: 0023:0xf7fbf579 [ 76.122494][ T6256] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 76.127444][ T6256] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 76.129598][ T6256] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000000 [ 76.131636][ T6256] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 76.133677][ T6256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.135711][ T6256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 76.137745][ T6256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.139786][ T6256] [ 76.221146][ T6259] syz.0.231 (6259): drop_caches: 2 [ 76.223626][ T6259] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 76.234062][ T25] usb 7-1: USB disconnect, device number 4 [ 76.292734][ T5478] usb 8-1: USB disconnect, device number 5 [ 76.434291][ T6273] fuse: Invalid rootmode [ 76.516998][ T6239] overlayfs: failed to resolve './file1': -2 [ 76.950716][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.492476][ T6298] syz.3.239: attempt to access beyond end of device [ 77.492476][ T6298] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 77.497015][ T6298] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 77.781976][ T6312] fuse: Bad value for 'fd' [ 77.858620][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.966936][ T6292] FAULT_INJECTION: forcing a failure. [ 77.966936][ T6292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.978250][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.1.238 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 77.980954][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.983680][ T6292] Call Trace: [ 77.984562][ T6292] [ 77.985338][ T6292] dump_stack_lvl+0x16c/0x1f0 [ 77.986578][ T6292] should_fail_ex+0x497/0x5b0 [ 77.987787][ T6292] _copy_from_user+0x30/0xf0 [ 77.988994][ T6292] snd_pcm_oss_write2+0x1c6/0x3f0 [ 77.990312][ T6292] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 77.991748][ T6292] ? snd_pcm_kernel_ioctl+0x257/0x2d0 [ 77.993144][ T6292] ? snd_pcm_oss_prepare+0x11e/0x220 [ 77.994533][ T6292] snd_pcm_oss_write+0x727/0xa00 [ 77.995833][ T6292] ? rw_verify_area+0xd0/0x700 [ 77.997081][ T6292] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 77.998504][ T6292] vfs_write+0x28e/0x1140 [ 77.999637][ T6292] ? __fget_files+0x23a/0x3f0 [ 78.000872][ T6292] ? __pfx_lock_release+0x10/0x10 [ 78.002206][ T6292] ? trace_lock_acquire+0x14a/0x1d0 [ 78.003563][ T6292] ? __pfx_vfs_write+0x10/0x10 [ 78.004822][ T6292] ? lock_acquire+0x2f/0xb0 [ 78.006024][ T6292] ? __fget_files+0x40/0x3f0 [ 78.007229][ T6292] ? __fget_files+0x244/0x3f0 [ 78.008461][ T6292] ksys_write+0x12f/0x260 [ 78.009590][ T6292] ? __pfx_ksys_write+0x10/0x10 [ 78.010875][ T6292] __do_fast_syscall_32+0x73/0x120 [ 78.012215][ T6292] do_fast_syscall_32+0x32/0x80 [ 78.013490][ T6292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.015132][ T6292] RIP: 0023:0xf7fe1579 [ 78.015811][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.016192][ T6292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 78.023283][ T6292] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 78.025445][ T6292] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200012c0 [ 78.027492][ T6292] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.029529][ T6292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.031515][ T6292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 78.033548][ T6292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.035604][ T6292] [ 78.325880][ T4565] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.365686][ T6316] syz.2.243 (6316): drop_caches: 2 [ 78.368063][ T6316] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 78.476867][ T4565] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.479704][ T4565] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.482217][ T4565] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.484527][ T4565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.507573][ T6314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.510876][ T4565] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.715926][ T8] usb 5-1: USB disconnect, device number 4 [ 78.847161][ T6328] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 78.850924][ T6328] Error parsing options; rc = [-22] [ 78.924305][ T6314] overlayfs: failed to resolve './file1': -2 [ 78.986965][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.995865][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.005646][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.058754][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.061441][ T5414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.063874][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.230446][ T6320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.232255][ T6320] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.236756][ T6320] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.243966][ T6320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.245469][ T6320] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.248388][ T6320] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.250975][ T6320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.255715][ T6320] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.258243][ T6320] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.325829][ T6332] syz.3.249 (6332): drop_caches: 2 [ 79.333281][ T6332] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 79.617941][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.700805][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.703963][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.755646][ T5506] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.906807][ T5506] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.909662][ T5506] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.912222][ T5506] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.914567][ T5506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.918844][ T6335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.923066][ T5506] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.105745][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.127260][ T5506] usb 5-1: USB disconnect, device number 5 [ 80.575737][ T5360] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.578681][ T5369] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 80.670637][ T6345] fuse: Invalid rootmode [ 80.745006][ T6351] syz.1.253 (6351): drop_caches: 2 [ 80.748871][ T6351] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 80.834185][ T6356] syz.1.254 (6356): drop_caches: 2 [ 80.839123][ T6356] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 80.875641][ T6359] netlink: 'syz.0.255': attribute type 3 has an invalid length. [ 81.155729][ T5353] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.232494][ T6373] [ 81.233110][ T6373] ============================================ [ 81.234541][ T6373] WARNING: possible recursive locking detected [ 81.235994][ T6373] 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 Not tainted [ 81.238958][ T6373] -------------------------------------------- [ 81.240769][ T6373] dhcpcd/6373 is trying to acquire lock: [ 81.242086][ T6373] ffffc9002bf4b0d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.244345][ T6373] [ 81.244345][ T6373] but task is already holding lock: [ 81.246059][ T6373] ffffc9002be530d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.248274][ T6373] [ 81.248274][ T6373] other info that might help us debug this: [ 81.250127][ T6373] Possible unsafe locking scenario: [ 81.250127][ T6373] [ 81.251841][ T6373] CPU0 [ 81.252620][ T6373] ---- [ 81.253403][ T6373] lock(&rb->spinlock); [ 81.254402][ T6373] lock(&rb->spinlock); [ 81.255402][ T6373] [ 81.255402][ T6373] *** DEADLOCK *** [ 81.255402][ T6373] [ 81.257239][ T6373] May be due to missing lock nesting notation [ 81.257239][ T6373] [ 81.259153][ T6373] 3 locks held by dhcpcd/6373: [ 81.260271][ T6373] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x1d1/0x5a0 [ 81.262480][ T6373] #1: ffffc9002be530d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.264810][ T6373] #2: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 81.267022][ T6373] [ 81.267022][ T6373] stack backtrace: [ 81.268397][ T6373] CPU: 2 UID: 0 PID: 6373 Comm: dhcpcd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 81.270855][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.273364][ T6373] Call Trace: [ 81.274164][ T6373] [ 81.274875][ T6373] dump_stack_lvl+0x116/0x1f0 [ 81.276026][ T6373] print_deadlock_bug+0x2e3/0x410 [ 81.277283][ T6373] __lock_acquire+0x2185/0x3ce0 [ 81.278448][ T6373] ? __pfx___lock_acquire+0x10/0x10 [ 81.279676][ T6373] ? hlock_class+0x4e/0x130 [ 81.280757][ T6373] ? __lock_acquire+0xbdd/0x3ce0 [ 81.281941][ T6373] lock_acquire.part.0+0x11b/0x380 [ 81.283150][ T6373] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.284427][ T6373] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 81.285754][ T6373] ? rcu_is_watching+0x12/0xc0 [ 81.286856][ T6373] ? trace_lock_acquire+0x14a/0x1d0 [ 81.288011][ T6373] ? find_held_lock+0x2d/0x110 [ 81.289137][ T6373] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.290414][ T6373] ? lock_acquire+0x2f/0xb0 [ 81.291488][ T6373] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.292770][ T6373] _raw_spin_lock_irqsave+0x3a/0x60 [ 81.293996][ T6373] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.295270][ T6373] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.296509][ T6373] ? trace_lock_acquire+0x14a/0x1d0 [ 81.297734][ T6373] ? bpf_trace_run2+0x1c2/0x590 [ 81.298862][ T6373] bpf_ringbuf_reserve+0x57/0x90 [ 81.300040][ T6373] bpf_prog_0e153dac479590bf+0x35/0x70 [ 81.301313][ T6373] bpf_trace_run2+0x231/0x590 [ 81.302431][ T6373] ? __pfx_mark_lock+0x10/0x10 [ 81.303552][ T6373] ? __pfx_bpf_trace_run2+0x10/0x10 [ 81.304766][ T6373] ? hlock_class+0x4e/0x130 [ 81.305841][ T6373] trace_contention_begin.constprop.0+0xed/0x170 [ 81.307314][ T6373] __pv_queued_spin_lock_slowpath+0x10b/0xc90 [ 81.308736][ T6373] ? __pfx___lock_acquire+0x10/0x10 [ 81.309963][ T6373] ? __lock_acquire+0xbdd/0x3ce0 [ 81.311120][ T6373] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 81.312646][ T6373] do_raw_spin_lock+0x210/0x2c0 [ 81.313794][ T6373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.315041][ T6373] ? lock_acquire+0x2f/0xb0 [ 81.316109][ T6373] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.317383][ T6373] _raw_spin_lock_irqsave+0x42/0x60 [ 81.318617][ T6373] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.319894][ T6373] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 81.321136][ T6373] bpf_ringbuf_reserve+0x57/0x90 [ 81.322309][ T6373] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 81.323577][ T6373] bpf_trace_run3+0x240/0x5a0 [ 81.324683][ T6373] ? __pfx_bpf_trace_run3+0x10/0x10 [ 81.325907][ T6373] ? __fput+0x684/0xb60 [ 81.326893][ T6373] ? kasan_quarantine_put+0x10a/0x240 [ 81.328146][ T6373] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.329366][ T6373] ? __bpf_trace_kmem_cache_free+0x8e/0xc0 [ 81.330748][ T6373] kmem_cache_free+0x200/0x4b0 [ 81.331867][ T6373] ? percpu_counter_add_batch+0xb5/0x1e0 [ 81.333208][ T6373] __fput+0x684/0xb60 [ 81.334206][ T6373] __fput_sync+0x45/0x50 [ 81.335204][ T6373] __x64_sys_close+0x86/0x100 [ 81.336274][ T6373] do_syscall_64+0xcd/0x250 [ 81.337322][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.338672][ T6373] RIP: 0033:0x7f6d51ddf0a8 [ 81.339674][ T6373] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83 [ 81.343920][ T6373] RSP: 002b:00007fff32430338 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 81.345770][ T6373] RAX: ffffffffffffffda RBX: 000055f4011d1ca3 RCX: 00007f6d51ddf0a8 [ 81.347533][ T6373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 81.349287][ T6373] RBP: 0000000000000000 R08: 000055f4291f4050 R09: 0000000000010000 [ 81.351089][ T6373] R10: 000000000000006d R11: 0000000000000246 R12: 000055f4291f4050 [ 81.352851][ T6373] R13: 000055f4291f04c8 R14: 00007fff32450c2c R15: 000055f4291f0494 [ 81.354630][ T6373] [ 81.355874][ T5369] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.358004][ T5360] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.456879][ T5353] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.459546][ T5353] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.461943][ T5353] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.464197][ T5353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.471469][ T6361] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.478701][ T5353] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.683440][ T8] usb 6-1: USB disconnect, device number 8 [ 81.903652][ T6361] overlayfs: failed to resolve './file1': -2 [ 82.655642][ T5369] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.385662][ T5369] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.385675][ T5360] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.255723][ T5506] net_ratelimit: 4 callbacks suppressed [ 84.255735][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.735749][ T5369] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.056135][ T5400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.295736][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.455630][ T5360] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.457129][ T5369] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.335862][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.815627][ T5369] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.385730][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.095694][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.425660][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.215896][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.456003][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.496118][ T4565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.136692][ T5400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog VM DIAGNOSIS: 06:16:35 Registers: info registers vcpu 0 CPU#0 EAX=f6b4aa10 EBX=ffffffff ECX=ffffffff EDX=8442f16d ESI=8442f14a EDI=ffffffff EBP=f6b4a998 ESP=ff81a4f0 EIP=f716fbac EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56899440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003280fff8 CR3=000000005e82c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000003254b63098 RBX=ffff88802b5283c0 RCX=00000000000006e0 RDX=0000000000000032 RSI=ffff88802b5283c0 RDI=00000000018f0941 RBP=00000000018f0941 RSP=ffffc90000477c48 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffffff8b4f7c60 R12=0000000000000001 R13=0000000000000019 R14=0000000000000001 R15=ffff88802b52ca40 RIP=ffffffff813a78e5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032810ff8 CR3=0000000000e26000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85038f00 RDI=ffffffff9a63d220 RBP=ffffffff9a63d1e0 RSP=ffffc9002bf7f188 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff34c7a96 R15=dffffc0000000000 RIP=ffffffff85038f27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6d51d14740 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6d51decbd0 CR3=000000005c22e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000000006c RCX=ffffffff81dcdf7b RDX=ffff88801f93c880 RSI=ffffffff81dcdf37 RDI=0000000000000005 RBP=ffff88801ac66f90 RSP=ffffc90000e5f6c8 R8 =0000000000000005 R9 =0000000000000100 R10=000000000000006c R11=ffff88802b728a7c R12=0000000000000000 R13=ffff88801ac66560 R14=dffffc0000000000 R15=0000000000000004 RIP=ffffffff818cb951 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f4011fe680 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040003 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff32450290 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff32450290 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73616572003663 6974617473006575 6575715f6c6f7274 6e6f63203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a56444057001346 4c51445156004050 4050545f494a5751 4b4a46051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3435313230386565 65692f6d69737768 5f34353132303863 616d2f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000081 0000000000000000 00316e6170772f74 656e2f317968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020