last executing test programs: 10m3.402761291s ago: executing program 32 (id=5): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x2, 0x24048880) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) clock_settime(0xa, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000580)={0xaa, 0x2, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x482080) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000040)={0x30, r3, 0x0, 0x0, 0x7, 0x6, 0xffffffff, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap$IORING_OFF_SQ_RING(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1000000, 0x13, 0xffffffffffffffff, 0x0) 9m35.658553128s ago: executing program 2 (id=79): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-(\xb94\xf1\x9c\x83\nbo<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<>\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m31.255961332s ago: executing program 2 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 9m29.688622432s ago: executing program 2 (id=87): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, 0x0, 0x30004001) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 9m26.130668405s ago: executing program 2 (id=95): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-(\xb94\xf1\x9c\x83\nbo<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<>\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m22.893452849s ago: executing program 2 (id=98): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x70, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x35}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x80000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 9m21.861174746s ago: executing program 2 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="58020000", @ANYBLOB], 0x258}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xcac229faa96ee7df, 0x0, 0x400, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}}, 0x8004) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 9m5.820387679s ago: executing program 33 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="58020000", @ANYBLOB], 0x258}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xcac229faa96ee7df, 0x0, 0x400, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}}, 0x8004) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) 8m39.590555779s ago: executing program 3 (id=185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0xa5}, 0x20) 8m38.969272996s ago: executing program 3 (id=188): io_submit(0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 8m33.611457449s ago: executing program 3 (id=198): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 8m31.016534929s ago: executing program 3 (id=202): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 8m28.610296695s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r7, 0x0, 0x2002) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 8m26.959259035s ago: executing program 3 (id=208): readv(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000440)='./file0\x00', 0x101000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$read(0x0, &(0x7f0000000340)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000000c0), 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000d060108000000f4ff000000ee0000090500010007000000050005000200000016000300686173683a"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8c000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) 8m9.891815101s ago: executing program 34 (id=208): readv(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000440)='./file0\x00', 0x101000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$read(0x0, &(0x7f0000000340)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000000c0), 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000d060108000000f4ff000000ee0000090500010007000000050005000200000016000300686173683a"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8c000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) 6m10.842149929s ago: executing program 8 (id=236): r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000d40)={0x40, 0x5, 0x7, {0x7, 0x24, 'W\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m8.969277519s ago: executing program 8 (id=455): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 6m6.840604468s ago: executing program 8 (id=460): io_submit(0x0, 0x0, &(0x7f0000000080)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 6m4.684969261s ago: executing program 8 (id=462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) tkill(r0, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c0002800600014000010000"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x3, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 6m1.794852964s ago: executing program 8 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r7, 0x0, 0x2002) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00000000000000", 0x87}], 0x1}, 0x0) 5m59.316652706s ago: executing program 8 (id=474): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 5m42.337320522s ago: executing program 35 (id=474): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 3m34.440698196s ago: executing program 1 (id=714): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3m32.566624329s ago: executing program 1 (id=719): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe401fca108849217, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') creat(0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r0, 0x0) 3m30.386443688s ago: executing program 1 (id=722): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 3m28.169552773s ago: executing program 1 (id=726): timer_settime(0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 3m24.839924277s ago: executing program 1 (id=733): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {0x1}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) 3m21.163881742s ago: executing program 1 (id=737): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x90, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x35}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x0, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x0, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX]}, @MPTCP_PM_ATTR_ADDR={0x14}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x80000003}]}, 0x90}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3m5.131234773s ago: executing program 36 (id=737): r0 = open(&(0x7f0000000080)='./file0\x00', 0x61101, 0xc3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcea0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$notify(r0, 0x402, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0xdc, 0x9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x90, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x35}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x0, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1080}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf519}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x0, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX]}, @MPTCP_PM_ATTR_ADDR={0x14}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8461}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x80000003}]}, 0x90}, 0x1, 0x0, 0x0, 0x44856}, 0x4015) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 14.131034247s ago: executing program 9 (id=1231): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007912d80000000000c6000000000008009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0xfffffffffffffdfd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000010000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000640)) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) 10.859554278s ago: executing program 0 (id=1244): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 10.650743883s ago: executing program 0 (id=1247): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x12d, &(0x7f0000000140)={0x0, 0x5885, 0x1}, &(0x7f0000000340), &(0x7f0000000280)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) splice(r1, 0x0, r3, 0x0, 0x2000, 0x0) 9.413257964s ago: executing program 6 (id=1251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x4008800) 9.341080668s ago: executing program 0 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000032c0), 0x800) socket$packet(0x11, 0x2, 0x300) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="090d0000000000f0ff000700000008", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f"], 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}]}, 0x10) 9.330460324s ago: executing program 9 (id=1253): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x5, "813c4988f5"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 8.001310789s ago: executing program 6 (id=1255): write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52", 0x7e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 7.990722275s ago: executing program 0 (id=1256): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x96, 0x4) 7.932058411s ago: executing program 4 (id=1257): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a3200000000090001007379f6d07b669e1e9bb3054000000008740000000c0a010300000000000000000100000008000440000000000900010073797a300000000038000380"], 0xe4}}, 0x0) 7.397171619s ago: executing program 7 (id=1258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, 0x0, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 7.367733541s ago: executing program 4 (id=1259): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 7.339719295s ago: executing program 6 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000069106200000000000400000000000000950000000000000046a1106954caf9317ef0ec6cf5f9296f92e6d9fbaf8d628d5afd48ee755f33e7495dde895d9a2b8c8aa5ff9cafec3c01608c93122ee076b3b798618d6d6b6f391799a552c3a162939866b4767b8f113833ee26d6d2ad9ca26e9d26806cc4757f9660753259904f10096a64e155d3b392012db9c8211e6dc15c1e117ff7396fbe8cc4ecca198ef986ba4d4c54bab969528b49b60350e14a"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.229600782s ago: executing program 0 (id=1261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000500)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x7, 0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915"]) 6.332983764s ago: executing program 5 (id=1262): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='bridge0\x00', 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc01c7c02, &(0x7f0000000040)={0x80000000, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="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"/917, 0x395}, {&(0x7f00000004c0)="439e9c06fc666cf70af3a6aec0617798af5a5cf62fc0cccc2529193558277dab", 0x20}], 0x2}}], 0x2, 0x44000) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000440)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000080)={0x18}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x800) 5.800333237s ago: executing program 7 (id=1263): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) 5.800115775s ago: executing program 9 (id=1264): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x12d, &(0x7f0000000140)={0x0, 0x5885, 0x1}, &(0x7f0000000340), &(0x7f0000000280)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) splice(r1, 0x0, r3, 0x0, 0x2000, 0x0) 5.799570604s ago: executing program 6 (id=1265): r0 = openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001440)}, {0x0}], 0x2) 4.970708724s ago: executing program 5 (id=1266): r0 = gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) timer_delete(r1) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) 4.770853515s ago: executing program 9 (id=1267): socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 4.56149153s ago: executing program 4 (id=1268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000210000d9d40045a091a5e1b900000000"], 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x281, 0x0, 0x12, 0x14, 0x20, "95ad4489a25673b5a955f5f736ef1f1c033d36c0ee69107626f72875ceb9332cb79ea25534348f613b34a61a895ec716fbdbbfe992a25b1f2a25f36b0fad5d99", "4a1982d41c7c4e8f704adce76f19e1f6b54de1571daea73904d4af73e6f9d403919e5f74b51629df746181d1ffbfcd1d5b56e8615f129d343b1aec97cbd8d551", "1b5a0325815abc1c406400", [0x0, 0x7]}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.560890922s ago: executing program 6 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000032c0), 0x800) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="090d0000000000f0ff000700000008", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f"], 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}]}, 0x10) 4.437089597s ago: executing program 7 (id=1270): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xe401fca108849217, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = creat(0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x0) dup3(0xffffffffffffffff, r5, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 4.436623412s ago: executing program 5 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3.401227323s ago: executing program 5 (id=1272): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c1", 0x20}], 0x1}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 3.066106262s ago: executing program 4 (id=1273): write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0", 0x93) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 3.064969001s ago: executing program 6 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) listen(0xffffffffffffffff, 0x10001) shutdown(0xffffffffffffffff, 0x1) 2.559063301s ago: executing program 5 (id=1275): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) 2.436168312s ago: executing program 4 (id=1276): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000080000086dd6043009300383afffe880000000000000000000400000001ff"], 0x0) 2.34501898s ago: executing program 9 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, 0x0, 0x3000c041) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2.344667769s ago: executing program 7 (id=1278): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x2) 2.101311208s ago: executing program 7 (id=1279): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000009881162c165d6d3b1be9926776c0084dba0cc1e0e8f242df8f4968c7f56bbae55c92bad5dc0aafee81c63d97896e", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r5, 0x19f23}], 0x1, 0x0) 2.025072797s ago: executing program 5 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x10) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') writev(r7, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) 1.966120639s ago: executing program 4 (id=1281): write$binfmt_script(0xffffffffffffffff, &(0x7f0000012cc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0, 0x0) 945.106763ms ago: executing program 0 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000300), &(0x7f0000000240)}, 0x20) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) r6 = socket(0x1d, 0x2, 0xffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x2}, 0x18) close(r6) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 91.336737ms ago: executing program 9 (id=1283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5434, 0x0) 0s ago: executing program 7 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 603][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.966257][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.002136][ T7112] hsr_slave_0: entered promiscuous mode [ 248.008693][ T7112] hsr_slave_1: entered promiscuous mode [ 248.363281][ T7341] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.331854][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.798155][ T7075] hsr_slave_0: entered promiscuous mode [ 249.814103][ T7075] hsr_slave_1: entered promiscuous mode [ 249.831500][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.839627][ T7075] Cannot create hsr debugfs directory [ 249.899435][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.910556][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.951835][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.616967][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.032825][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.941925][ T7055] hsr_slave_0: entered promiscuous mode [ 252.988518][ T7055] hsr_slave_1: entered promiscuous mode [ 253.012125][ T7055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.020690][ T7055] Cannot create hsr debugfs directory [ 254.350870][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 254.608952][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 254.696321][ T25] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 254.793265][ T25] usb 2-1: config 0 has no interface number 0 [ 254.876469][ T25] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 254.969538][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.058963][ T25] usb 2-1: Product: syz [ 255.070569][ T25] usb 2-1: Manufacturer: syz [ 255.075223][ T25] usb 2-1: SerialNumber: syz [ 255.102810][ T25] usb 2-1: config 0 descriptor?? [ 255.113717][ T25] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 255.226499][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.232945][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.454080][ T11] bridge_slave_1: left allmulticast mode [ 255.459811][ T11] bridge_slave_1: left promiscuous mode [ 255.467395][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.477613][ T25] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 255.558686][ T11] bridge_slave_0: left allmulticast mode [ 255.565050][ T11] bridge_slave_0: left promiscuous mode [ 255.565269][ T25] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 255.584057][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.645096][ T11] bridge_slave_1: left allmulticast mode [ 255.667151][ T11] bridge_slave_1: left promiscuous mode [ 255.834204][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.120741][ T11] bridge_slave_0: left allmulticast mode [ 256.160978][ T11] bridge_slave_0: left promiscuous mode [ 256.166738][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.191470][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 256.207484][ T25] usb 2-1: USB disconnect, device number 5 [ 256.227312][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 256.243299][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 256.255422][ T25] quatech2 2-1:0.51: device disconnected [ 256.344505][ T11] bridge_slave_1: left allmulticast mode [ 256.350397][ T11] bridge_slave_1: left promiscuous mode [ 256.398356][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.543954][ T11] bridge_slave_0: left allmulticast mode [ 256.549773][ T11] bridge_slave_0: left promiscuous mode [ 256.561178][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.686798][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.709481][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.730661][ T11] bond0 (unregistering): Released all slaves [ 259.753252][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.791957][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.808308][ T11] bond0 (unregistering): Released all slaves [ 260.026566][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.064188][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.099518][ T11] bond0 (unregistering): Released all slaves [ 263.767683][ T11] hsr_slave_0: left promiscuous mode [ 264.182188][ T11] hsr_slave_1: left promiscuous mode [ 264.235777][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.264099][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.340855][ T11] hsr_slave_0: left promiscuous mode [ 264.346855][ T11] hsr_slave_1: left promiscuous mode [ 264.377723][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.395111][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.475862][ T11] hsr_slave_0: left promiscuous mode [ 264.491551][ T11] hsr_slave_1: left promiscuous mode [ 264.524340][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.665777][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.046315][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.080882][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.129817][ T11] veth1_macvtap: left promiscuous mode [ 265.137965][ T11] veth0_macvtap: left promiscuous mode [ 265.145843][ T11] veth1_vlan: left promiscuous mode [ 265.151405][ T11] veth0_vlan: left promiscuous mode [ 266.641856][ T11] team0 (unregistering): Port device team_slave_1 removed [ 266.731126][ T11] team0 (unregistering): Port device team_slave_0 removed [ 268.109461][ T7496] slcan: can't register candev [ 268.437776][ T11] team0 (unregistering): Port device team_slave_1 removed [ 268.611287][ T11] team0 (unregistering): Port device team_slave_0 removed [ 268.900973][ T5892] IPVS: starting estimator thread 0... [ 269.002396][ T7505] IPVS: using max 18 ests per chain, 43200 per kthread [ 272.836159][ T11] team0 (unregistering): Port device team_slave_1 removed [ 273.098321][ T11] team0 (unregistering): Port device team_slave_0 removed [ 273.321366][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.331191][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.341721][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.355880][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.369917][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.377780][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.397191][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.406332][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.414043][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.421990][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.429588][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.437196][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.090894][ T7075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.151731][ T7075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.213017][ T7075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.372215][ T7075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.717814][ T7112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.753887][ T7112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.834821][ T7112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.899885][ T7112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.972409][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 275.542393][ T5843] Bluetooth: hci2: command tx timeout [ 275.774146][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.818167][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.825707][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.833433][ T7533] bridge_slave_0: entered allmulticast mode [ 275.840602][ T7533] bridge_slave_0: entered promiscuous mode [ 275.848354][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.855533][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.862836][ T7533] bridge_slave_1: entered allmulticast mode [ 275.869858][ T7533] bridge_slave_1: entered promiscuous mode [ 275.889756][ T7112] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.947855][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.997985][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.010840][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.078840][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.086123][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.262772][ T7533] team0: Port device team_slave_0 added [ 276.394649][ T7533] team0: Port device team_slave_1 added [ 276.456674][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.463882][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.654125][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.680487][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.776200][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.800908][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.811971][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.820094][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.859651][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.879488][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.885954][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.895121][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.950425][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.049887][ T7533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.645760][ T53] Bluetooth: hci2: command tx timeout [ 279.481509][ T53] Bluetooth: hci5: command tx timeout [ 279.866381][ T5843] Bluetooth: hci2: command tx timeout [ 280.606956][ T7625] netlink: 'syz.0.357': attribute type 11 has an invalid length. [ 281.255213][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.356'. [ 281.531685][ T5843] Bluetooth: hci5: command tx timeout [ 281.834468][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.884629][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.930635][ T53] Bluetooth: hci2: command tx timeout [ 281.951058][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.009470][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.030853][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.039862][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.914628][ T7533] hsr_slave_0: entered promiscuous mode [ 282.988230][ T7533] hsr_slave_1: entered promiscuous mode [ 283.031524][ T7533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.049454][ T7533] Cannot create hsr debugfs directory [ 283.610816][ T53] Bluetooth: hci5: command tx timeout [ 284.813195][ T53] Bluetooth: hci3: command tx timeout [ 285.780367][ T53] Bluetooth: hci5: command tx timeout [ 286.139588][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'. [ 286.630918][ T7679] ======================================================= [ 286.630918][ T7679] WARNING: The mand mount option has been deprecated and [ 286.630918][ T7679] and is ignored by this kernel. Remove the mand [ 286.630918][ T7679] option from the mount to silence this warning. [ 286.630918][ T7679] ======================================================= [ 286.891137][ T53] Bluetooth: hci3: command tx timeout [ 287.100604][ T7629] chnl_net:caif_netlink_parms(): no params data found [ 287.193001][ T7589] chnl_net:caif_netlink_parms(): no params data found [ 287.283722][ T11] bridge_slave_1: left allmulticast mode [ 287.296053][ T11] bridge_slave_1: left promiscuous mode [ 287.314531][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.343877][ T11] bridge_slave_0: left allmulticast mode [ 287.364962][ T11] bridge_slave_0: left promiscuous mode [ 287.387096][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.441493][ T11] bridge_slave_1: left allmulticast mode [ 287.469767][ T11] bridge_slave_1: left promiscuous mode [ 287.488730][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.531364][ T11] bridge_slave_0: left allmulticast mode [ 287.537078][ T11] bridge_slave_0: left promiscuous mode [ 287.551908][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.385382][ T7692] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 289.573005][ T5843] Bluetooth: hci3: command tx timeout [ 289.974269][ T7720] Bluetooth: MGMT ver 1.23 [ 291.613233][ T53] Bluetooth: hci3: command tx timeout [ 292.494259][ T7744] blktrace: Concurrent blktraces are not allowed on sg0 [ 292.508255][ T7744] netlink: 84 bytes leftover after parsing attributes in process `syz.0.384'. [ 292.768048][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.049778][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.120727][ T11] bond0 (unregistering): Released all slaves [ 293.675812][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.798817][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.964229][ T11] bond0 (unregistering): Released all slaves [ 294.133871][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 295.245463][ T11] hsr_slave_0: left promiscuous mode [ 295.251918][ T11] hsr_slave_1: left promiscuous mode [ 295.375623][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.537589][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.721507][ T11] hsr_slave_0: left promiscuous mode [ 295.732552][ T11] hsr_slave_1: left promiscuous mode [ 295.742320][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.778692][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.548752][ T11] team0 (unregistering): Port device team_slave_1 removed [ 296.832857][ T11] team0 (unregistering): Port device team_slave_0 removed [ 297.481680][ T11] team0 (unregistering): Port device team_slave_1 removed [ 297.541043][ T11] team0 (unregistering): Port device team_slave_0 removed [ 298.151610][ T7793] blktrace: Concurrent blktraces are not allowed on sg0 [ 298.166447][ T7793] netlink: 84 bytes leftover after parsing attributes in process `syz.1.397'. [ 298.931953][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.939298][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.957219][ T7589] bridge_slave_0: entered allmulticast mode [ 299.004425][ T7589] bridge_slave_0: entered promiscuous mode [ 300.308366][ T7533] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 300.378240][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.389658][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.423516][ T7589] bridge_slave_1: entered allmulticast mode [ 300.441371][ T7589] bridge_slave_1: entered promiscuous mode [ 300.594127][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.318985][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.365757][ T7629] bridge_slave_0: entered allmulticast mode [ 301.518397][ T7629] bridge_slave_0: entered promiscuous mode [ 301.584042][ T7533] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.659392][ T7533] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 301.878770][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.891665][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.898885][ T7629] bridge_slave_1: entered allmulticast mode [ 301.908081][ T7629] bridge_slave_1: entered promiscuous mode [ 302.204872][ T7533] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.291192][ T7830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.117519][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.143662][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.357004][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.608312][ T7837] blktrace: Concurrent blktraces are not allowed on sg0 [ 304.616439][ T7837] netlink: 84 bytes leftover after parsing attributes in process `syz.1.407'. [ 305.276229][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.125508][ T7589] team0: Port device team_slave_0 added [ 306.199851][ T7629] team0: Port device team_slave_0 added [ 306.263839][ T7629] team0: Port device team_slave_1 added [ 306.419727][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.743077][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.912918][ T7533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.923570][ T7533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.082183][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.089401][ T6387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.394192][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.401404][ T6387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.462273][ T7589] team0: Port device team_slave_1 added [ 307.837137][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.853398][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.887400][ T7629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.923548][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.941406][ T7877] tmpfs: Invalid uid '0x00000000ffffffff' [ 307.947400][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.988091][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.000677][ T7875] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 308.045418][ T7875] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[7875] [ 308.184033][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.532720][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.911888][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.996041][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.019017][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.076163][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.151469][ T7629] hsr_slave_0: entered promiscuous mode [ 309.174193][ T7629] hsr_slave_1: entered promiscuous mode [ 309.189441][ T7629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.208182][ T7629] Cannot create hsr debugfs directory [ 309.444297][ T7589] hsr_slave_0: entered promiscuous mode [ 309.456046][ T7589] hsr_slave_1: entered promiscuous mode [ 309.462870][ T7589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.471995][ T7589] Cannot create hsr debugfs directory [ 309.568788][ T7903] blktrace: Concurrent blktraces are not allowed on sg0 [ 309.582122][ T7903] netlink: 84 bytes leftover after parsing attributes in process `syz.0.418'. [ 310.589431][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.701481][ T11] bridge_slave_1: left allmulticast mode [ 313.707356][ T11] bridge_slave_1: left promiscuous mode [ 313.740691][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.782160][ T11] bridge_slave_0: left allmulticast mode [ 313.787872][ T11] bridge_slave_0: left promiscuous mode [ 313.819749][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.773973][ T7973] netlink: 84 bytes leftover after parsing attributes in process `syz.5.429'. [ 317.239465][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.245866][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.417064][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.807326][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.833045][ T11] bond0 (unregistering): Released all slaves [ 318.024620][ T7533] veth0_vlan: entered promiscuous mode [ 318.040062][ T7533] veth1_vlan: entered promiscuous mode [ 318.063548][ T7533] veth0_macvtap: entered promiscuous mode [ 318.077568][ T7533] veth1_macvtap: entered promiscuous mode [ 318.093479][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.104596][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.115822][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.126649][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.224161][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.234776][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.246176][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.164408][ T7999] 9pnet_virtio: no channels available for device syz [ 320.755209][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.779648][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.809083][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.839924][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.869119][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.909071][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.941623][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.083676][ T11] hsr_slave_0: left promiscuous mode [ 321.098873][ T11] hsr_slave_1: left promiscuous mode [ 321.137982][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.146590][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.594340][ T11] team0 (unregistering): Port device team_slave_1 removed [ 321.644510][ T11] team0 (unregistering): Port device team_slave_0 removed [ 322.778409][ T8014] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.790736][ T8014] netlink: 84 bytes leftover after parsing attributes in process `syz.1.440'. [ 324.977691][ T7533] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.027099][ T7533] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.072031][ T7533] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.098223][ T7533] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.273397][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.402343][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.290067][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.359050][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.497348][ T7589] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.647107][ T7589] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.682994][ T7589] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 330.006701][ T7589] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 330.119253][ T8049] 9pnet_virtio: no channels available for device syz [ 330.827103][ T7629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.864838][ T7629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.888924][ T8050] netlink: 'syz.1.449': attribute type 2 has an invalid length. [ 331.158232][ T7629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.180697][ T7629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.416116][ T8058] netlink: 84 bytes leftover after parsing attributes in process `syz.5.450'. [ 333.354335][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.399836][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.432011][ T7629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.442470][ T7629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.503310][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.510511][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.599734][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.606906][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.699422][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.518503][ T7589] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.374387][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.381887][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.302234][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.309450][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.372202][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.232700][ T8117] blktrace: Concurrent blktraces are not allowed on sg0 [ 338.240817][ T8117] netlink: 84 bytes leftover after parsing attributes in process `syz.8.462'. [ 338.253299][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.335108][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.344433][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.365728][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.373949][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.384842][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.977101][ T8128] fuse: Bad value for 'user_id' [ 338.982109][ T8128] fuse: Bad value for 'user_id' [ 340.472165][ T8137] kernel profiling enabled (shift: 9) [ 340.500750][ T5849] Bluetooth: hci6: command tx timeout [ 342.633889][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'. [ 342.650939][ T5849] Bluetooth: hci6: command tx timeout [ 344.192668][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.215768][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.236372][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.342448][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 345.140281][ T5849] Bluetooth: hci6: command tx timeout [ 345.472380][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.484452][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.494771][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.663893][ T8105] chnl_net:caif_netlink_parms(): no params data found [ 346.653134][ T8186] fuse: Bad value for 'user_id' [ 346.658055][ T8186] fuse: Bad value for 'user_id' [ 347.245948][ T8191] blktrace: Concurrent blktraces are not allowed on sg0 [ 347.258945][ T8191] netlink: 84 bytes leftover after parsing attributes in process `syz.0.481'. [ 347.951765][ T53] Bluetooth: hci3: command tx timeout [ 347.958005][ T5843] Bluetooth: hci6: command tx timeout [ 347.959404][ T6165] bridge_slave_1: left allmulticast mode [ 348.056024][ T6165] bridge_slave_1: left promiscuous mode [ 348.076404][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.099725][ T6165] bridge_slave_0: left allmulticast mode [ 348.363716][ T6165] bridge_slave_0: left promiscuous mode [ 348.479778][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.542761][ T8200] slcan: can't register candev [ 350.018333][ T5843] Bluetooth: hci3: command tx timeout [ 350.417889][ T8213] netlink: 84 bytes leftover after parsing attributes in process `syz.5.488'. [ 352.183260][ T5843] Bluetooth: hci3: command tx timeout [ 352.614261][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.492'. [ 354.320534][ T8233] fuse: Bad value for 'user_id' [ 354.328155][ T8233] fuse: Bad value for 'user_id' [ 354.451122][ T5843] Bluetooth: hci3: command tx timeout [ 355.249336][ T8236] blktrace: Concurrent blktraces are not allowed on sg0 [ 355.260859][ T8236] netlink: 84 bytes leftover after parsing attributes in process `syz.1.494'. [ 355.472334][ T8238] syz.0.495[8238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.472454][ T8238] syz.0.495[8238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.484217][ T8238] syz.0.495[8238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.308980][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 361.337737][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.366839][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.376092][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.412029][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.422438][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 361.429925][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.455410][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.467560][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.544389][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 361.642010][ T5834] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 362.349495][ T6165] bond0 (unregistering): Released all slaves [ 362.703530][ T6165] hsr_slave_0: left promiscuous mode [ 362.709932][ T6165] hsr_slave_1: left promiscuous mode [ 362.724133][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.761662][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.772645][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 362.784694][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50424, setting to 1024 [ 363.540608][ T5849] Bluetooth: hci5: command tx timeout [ 363.581509][ T5834] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 363.610832][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.702439][ T5834] usb 2-1: config 0 descriptor?? [ 363.709037][ T8274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.618595][ T5849] Bluetooth: hci5: command tx timeout [ 366.045485][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 366.051715][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 366.067987][ T5834] usb 2-1: USB disconnect, device number 6 [ 366.560176][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 366.678250][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 367.690930][ T5849] Bluetooth: hci5: command tx timeout [ 370.020956][ T5849] Bluetooth: hci5: command tx timeout [ 370.041807][ T8339] netlink: 68 bytes leftover after parsing attributes in process `syz.5.521'. [ 371.622252][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.853549][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 371.872788][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50424, setting to 1024 [ 371.900311][ T5892] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 371.924638][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.968723][ T5892] usb 2-1: config 0 descriptor?? [ 371.996036][ T8342] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.431984][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 373.438147][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 373.496927][ T5892] usb 2-1: USB disconnect, device number 7 [ 375.756562][ T8374] netlink: 'syz.1.529': attribute type 2 has an invalid length. [ 377.193410][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.214395][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.982345][ T8105] bridge_slave_0: entered allmulticast mode [ 377.993105][ T8105] bridge_slave_0: entered promiscuous mode [ 378.071611][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.082015][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.089240][ T8105] bridge_slave_1: entered allmulticast mode [ 378.095654][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.095739][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.206385][ T8105] bridge_slave_1: entered promiscuous mode [ 378.438480][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 380.028917][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.165560][ T8269] chnl_net:caif_netlink_parms(): no params data found [ 380.518288][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.899436][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.939059][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.950796][ T8166] bridge_slave_0: entered allmulticast mode [ 380.972906][ T8166] bridge_slave_0: entered promiscuous mode [ 380.989890][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.014465][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.033590][ T8166] bridge_slave_1: entered allmulticast mode [ 381.117799][ T8166] bridge_slave_1: entered promiscuous mode [ 381.147523][ T8105] team0: Port device team_slave_0 added [ 381.156246][ T8105] team0: Port device team_slave_1 added [ 381.895022][ T8423] syz.0.536: attempt to access beyond end of device [ 381.895022][ T8423] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 381.952120][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.959219][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.052560][ T8423] qnx4: unable to read the superblock [ 382.101166][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.330986][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.357050][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.385067][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.470451][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.565002][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.646560][ T6165] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.693471][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.708326][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.727441][ T8269] bridge_slave_0: entered allmulticast mode [ 382.744174][ T8269] bridge_slave_0: entered promiscuous mode [ 382.875143][ T6165] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.904189][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.916451][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.933622][ T8269] bridge_slave_1: entered allmulticast mode [ 382.949307][ T8269] bridge_slave_1: entered promiscuous mode [ 383.046214][ T8166] team0: Port device team_slave_0 added [ 383.073712][ T8166] team0: Port device team_slave_1 added [ 383.147992][ T6165] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.181318][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 384.674132][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.759497][ T6165] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.174430][ T8105] hsr_slave_0: entered promiscuous mode [ 385.299183][ T8105] hsr_slave_1: entered promiscuous mode [ 385.428375][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.612330][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.652620][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.739618][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.172724][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.179841][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.340951][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.677329][ T8269] team0: Port device team_slave_0 added [ 386.824914][ T8269] team0: Port device team_slave_1 added [ 387.411390][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.447301][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.473774][ T8463] ceph: No mds server is up or the cluster is laggy [ 387.621251][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.662787][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.670062][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.770669][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.793738][ T8166] hsr_slave_0: entered promiscuous mode [ 387.831260][ T8166] hsr_slave_1: entered promiscuous mode [ 387.838366][ T8166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.860733][ T8166] Cannot create hsr debugfs directory [ 388.161680][ T8269] hsr_slave_0: entered promiscuous mode [ 388.198556][ T8269] hsr_slave_1: entered promiscuous mode [ 388.205632][ T8269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.230020][ T8269] Cannot create hsr debugfs directory [ 389.767117][ T6165] bridge_slave_1: left allmulticast mode [ 389.781365][ T6165] bridge_slave_1: left promiscuous mode [ 389.820964][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.881114][ T6165] bridge_slave_0: left allmulticast mode [ 389.886933][ T6165] bridge_slave_0: left promiscuous mode [ 389.907378][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.982589][ T6165] bridge_slave_1: left allmulticast mode [ 389.990475][ T6165] bridge_slave_1: left promiscuous mode [ 390.020782][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.041178][ T6165] bridge_slave_0: left allmulticast mode [ 390.046878][ T6165] bridge_slave_0: left promiscuous mode [ 390.354675][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.027334][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.043043][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.064316][ T6165] bond0 (unregistering): Released all slaves [ 394.205150][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.216953][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.235681][ T6165] bond0 (unregistering): Released all slaves [ 395.705541][ T8530] 9pnet_virtio: no channels available for device syz [ 395.706585][ T8105] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.271001][ T8105] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.492945][ T8532] netlink: 'syz.0.569': attribute type 4 has an invalid length. [ 398.098702][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.114262][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.128366][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.150685][ T6165] hsr_slave_0: left promiscuous mode [ 398.179151][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.188478][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.197644][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.229552][ T6165] hsr_slave_1: left promiscuous mode [ 398.237286][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.244928][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.312725][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.339744][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.369287][ T6165] hsr_slave_0: left promiscuous mode [ 398.397315][ T6165] hsr_slave_1: left promiscuous mode [ 398.421261][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.423312][ T8560] syz.0.574[8560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.448711][ T8560] syz.0.574[8560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.462483][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.486707][ T8560] syz.0.574[8560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.280578][ T5849] Bluetooth: hci2: command tx timeout [ 400.394135][ T6165] veth1_macvtap: left promiscuous mode [ 400.410585][ T6165] veth0_macvtap: left promiscuous mode [ 400.416236][ T6165] veth1_vlan: left promiscuous mode [ 400.429544][ T6165] veth0_vlan: left promiscuous mode [ 401.678217][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 401.725587][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 402.211395][ T8588] 9pnet_virtio: no channels available for device syz [ 402.353408][ T8591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.181210][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 403.316960][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 403.326020][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 403.334806][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 403.343043][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 403.351741][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 403.390514][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 405.218788][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 405.510559][ T5849] Bluetooth: hci6: command tx timeout [ 406.067381][ T8615] syz.1.589[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.067500][ T8615] syz.1.589[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.079282][ T8615] syz.1.589[8615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.775726][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 407.031465][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 407.300666][ T53] Bluetooth: hci2: command 0x041b tx timeout [ 407.530687][ T53] Bluetooth: hci6: command tx timeout [ 409.533036][ T53] Bluetooth: hci2: command 0x041b tx timeout [ 409.611568][ T53] Bluetooth: hci6: command 0x040f tx timeout [ 410.261199][ T8643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.725980][ T5849] Bluetooth: hci6: command 0x040f tx timeout [ 411.782945][ T8645] slcan: can't register candev [ 412.706968][ T8269] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 412.943784][ T8668] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 413.106495][ T8269] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 413.218794][ T8662] fuse: Invalid rootmode [ 413.302058][ T8674] overlayfs: failed to clone upperpath [ 413.770514][ T5849] Bluetooth: hci6: command 0x040f tx timeout [ 414.012606][ T8269] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 414.112387][ T8269] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 415.617163][ T8269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.634411][ T8269] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.670633][ T8269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.681267][ T8269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.699208][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.706416][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.715721][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.722882][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.820130][ T8594] chnl_net:caif_netlink_parms(): no params data found [ 415.886328][ T8695] syz.0.605[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.886432][ T8695] syz.0.605[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.898206][ T8695] syz.0.605[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.162882][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 416.382113][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.434627][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.477968][ T8594] bridge_slave_0: entered allmulticast mode [ 416.517334][ T8594] bridge_slave_0: entered promiscuous mode [ 417.190642][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.198000][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.230741][ T8594] bridge_slave_1: entered allmulticast mode [ 417.270747][ T8594] bridge_slave_1: entered promiscuous mode [ 417.298652][ T8715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.606'. [ 417.478975][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.597745][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.678379][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.801674][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.851975][ T8709] slcan: can't register candev [ 417.872953][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.910846][ T8553] bridge_slave_0: entered allmulticast mode [ 417.935281][ T8553] bridge_slave_0: entered promiscuous mode [ 418.210737][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.290809][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.322071][ T8553] bridge_slave_1: entered allmulticast mode [ 418.950729][ T53] Bluetooth: hci6: command 0x040f tx timeout [ 419.285948][ T8553] bridge_slave_1: entered promiscuous mode [ 419.642889][ T8594] team0: Port device team_slave_0 added [ 420.296777][ T8594] team0: Port device team_slave_1 added [ 420.414631][ T8740] netlink: 68 bytes leftover after parsing attributes in process `syz.0.609'. [ 422.089879][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.104844][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.114371][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.225094][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.379705][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.466654][ T8766] fuse: Invalid rootmode [ 424.510904][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.518601][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 424.531179][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 425.364088][ T8768] slcan: can't register candev [ 425.443597][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 425.561271][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.568837][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.606438][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.619081][ T8783] syz.5.621[8783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.619186][ T8783] syz.5.621[8783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.620848][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.631277][ T8783] syz.5.621[8783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.642373][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.689408][ T8773] slcan: can't register candev [ 425.690871][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.932638][ T8553] team0: Port device team_slave_0 added [ 426.015079][ T8594] hsr_slave_0: entered promiscuous mode [ 426.025341][ T8594] hsr_slave_1: entered promiscuous mode [ 426.711067][ T5843] Bluetooth: hci3: command tx timeout [ 426.766047][ T8594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.778692][ T8594] Cannot create hsr debugfs directory [ 426.980458][ T8788] overlayfs: failed to resolve './file0': -2 [ 427.162555][ T8553] team0: Port device team_slave_1 added [ 427.863435][ T8797] netlink: 68 bytes leftover after parsing attributes in process `syz.5.623'. [ 428.083636][ T8796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.481649][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.540802][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.625952][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.730661][ T5843] Bluetooth: hci3: command tx timeout [ 428.749416][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.759839][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.794619][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.838103][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 430.265939][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 430.306263][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 430.405627][ T8817] fuse: Bad value for 'rootmode' [ 430.812807][ T5843] Bluetooth: hci3: command tx timeout [ 431.054363][ T8813] vxcan3: entered promiscuous mode [ 431.446976][ T8826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.628'. [ 431.478133][ T8553] hsr_slave_0: entered promiscuous mode [ 431.494668][ T8553] hsr_slave_1: entered promiscuous mode [ 431.515612][ T8553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.533831][ T8553] Cannot create hsr debugfs directory [ 431.580993][ T6165] bridge_slave_1: left allmulticast mode [ 431.587288][ T6165] bridge_slave_1: left promiscuous mode [ 431.618035][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.660231][ T6165] bridge_slave_0: left allmulticast mode [ 431.666316][ T6165] bridge_slave_0: left promiscuous mode [ 431.684282][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.686933][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'. [ 431.725924][ T6165] bridge_slave_1: left allmulticast mode [ 431.732059][ T6165] bridge_slave_1: left promiscuous mode [ 431.739652][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.758029][ T6165] bridge_slave_0: left allmulticast mode [ 431.767746][ T6165] bridge_slave_0: left promiscuous mode [ 431.779547][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.080848][ T8822] slcan: can't register candev [ 432.745541][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.592344][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.603743][ T6165] bond0 (unregistering): Released all slaves [ 433.631944][ T5843] Bluetooth: hci3: command tx timeout [ 433.798028][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.042753][ T8849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.701473][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.713449][ T6165] bond0 (unregistering): Released all slaves [ 435.055210][ T8856] fuse: Bad value for 'rootmode' [ 436.348683][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 436.486396][ T8594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.848617][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 437.452285][ T8594] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 437.463570][ T8594] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 437.518085][ T6165] hsr_slave_0: left promiscuous mode [ 437.524892][ T6165] hsr_slave_1: left promiscuous mode [ 437.574720][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.613490][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.687198][ T6165] hsr_slave_0: left promiscuous mode [ 437.739264][ T6165] hsr_slave_1: left promiscuous mode [ 437.792600][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.853690][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.337929][ T8878] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 439.165402][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 439.232848][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 439.655339][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.661965][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.779851][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 440.807441][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 441.086359][ T8594] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.579714][ T8925] fuse: Bad value for 'rootmode' [ 442.331977][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.351106][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.428369][ T8752] bridge_slave_0: entered allmulticast mode [ 442.461841][ T8752] bridge_slave_0: entered promiscuous mode [ 442.720773][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.727934][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.598292][ T8752] bridge_slave_1: entered allmulticast mode [ 443.621717][ T8752] bridge_slave_1: entered promiscuous mode [ 444.081459][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.105250][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.315059][ T8951] can0: slcan on ttyS3. [ 444.409155][ T8752] team0: Port device team_slave_0 added [ 444.451745][ T8950] can0 (unregistered): slcan off ttyS3. [ 444.454436][ T8752] team0: Port device team_slave_1 added [ 444.518459][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 444.985060][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.033716][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.493980][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.819756][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.827210][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.911074][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.317634][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.406435][ T8752] hsr_slave_0: entered promiscuous mode [ 447.421674][ T8752] hsr_slave_1: entered promiscuous mode [ 447.580949][ T8994] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 447.608414][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.758551][ T8553] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.794666][ T8553] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.844299][ T8553] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.902710][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.909987][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.627616][ T8553] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 448.803353][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.810610][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.950460][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.967417][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.010218][ T9053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'. [ 454.582205][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.589440][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.599557][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.606705][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.632729][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.739386][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'. [ 455.138893][ T9069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.084007][ T6165] bridge_slave_1: left allmulticast mode [ 456.089874][ T6165] bridge_slave_1: left promiscuous mode [ 456.096532][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.116461][ T6165] bridge_slave_0: left allmulticast mode [ 457.122370][ T6165] bridge_slave_0: left promiscuous mode [ 457.128147][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.256534][ T9100] slcan: can't register candev [ 462.596623][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.977431][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.986855][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.995672][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.003619][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.022239][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.222795][ T9126] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 463.373058][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.399616][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.424415][ T6165] bond0 (unregistering): Released all slaves [ 464.087979][ T6165] hsr_slave_0: left promiscuous mode [ 464.166181][ T6165] hsr_slave_1: left promiscuous mode [ 464.199956][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.241364][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.927479][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.969736][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.980305][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.988699][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.996901][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 465.005492][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.130569][ T5843] Bluetooth: hci5: command tx timeout [ 465.521958][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 465.671039][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 466.173797][ T9154] 9pnet_virtio: no channels available for device syz [ 466.319930][ T9156] netlink: 68 bytes leftover after parsing attributes in process `syz.5.681'. [ 467.131315][ T5843] Bluetooth: hci2: command tx timeout [ 467.210509][ T5843] Bluetooth: hci5: command tx timeout [ 468.277555][ T8752] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 468.329807][ T8752] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.363515][ T8752] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.558837][ T9190] netlink: 120 bytes leftover after parsing attributes in process `syz.5.687'. [ 468.781051][ T8752] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 469.210686][ T5843] Bluetooth: hci2: command tx timeout [ 469.228765][ T9197] can0: slcan on ttyS3. [ 469.294576][ T5843] Bluetooth: hci5: command tx timeout [ 470.894378][ T9112] chnl_net:caif_netlink_parms(): no params data found [ 470.911347][ T9185] can0 (unregistered): slcan off ttyS3. [ 470.995689][ T9146] chnl_net:caif_netlink_parms(): no params data found [ 471.290709][ T5843] Bluetooth: hci2: command tx timeout [ 471.371071][ T5843] Bluetooth: hci5: command tx timeout [ 472.378776][ T9240] 9pnet_virtio: no channels available for device syz [ 472.657938][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.680711][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.688096][ T9112] bridge_slave_0: entered allmulticast mode [ 472.696311][ T9112] bridge_slave_0: entered promiscuous mode [ 472.704244][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.711729][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.719007][ T9112] bridge_slave_1: entered allmulticast mode [ 472.726285][ T9112] bridge_slave_1: entered promiscuous mode [ 472.753555][ T9146] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.762324][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.778547][ T9146] bridge_slave_0: entered allmulticast mode [ 472.789755][ T9146] bridge_slave_0: entered promiscuous mode [ 472.805783][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.846411][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.871582][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.892775][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.908889][ T9146] bridge_slave_1: entered allmulticast mode [ 472.917709][ T9146] bridge_slave_1: entered promiscuous mode [ 473.114602][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.377288][ T9252] netlink: 68 bytes leftover after parsing attributes in process `syz.5.693'. [ 473.402839][ T5843] Bluetooth: hci2: command tx timeout [ 473.518796][ T9254] fuse: Unknown parameter 'user_i00000000000000000000' [ 474.880346][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.947695][ T9146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.987248][ T9146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.231627][ T9112] team0: Port device team_slave_0 added [ 475.254735][ T9112] team0: Port device team_slave_1 added [ 475.378528][ T9286] syz.5.697[9286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.378622][ T9286] syz.5.697[9286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.390072][ T9286] syz.5.697[9286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.001148][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.019601][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.413105][ T9146] team0: Port device team_slave_0 added [ 477.438163][ T9146] team0: Port device team_slave_1 added [ 477.571044][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.627298][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.156305][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.410892][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.418076][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.517695][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.556830][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.597688][ T9146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.624909][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.635235][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.669098][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.800896][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.807902][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.881003][ T9146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.088653][ T8752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.119601][ T8752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.085560][ T9146] hsr_slave_0: entered promiscuous mode [ 480.113601][ T9146] hsr_slave_1: entered promiscuous mode [ 480.131809][ T9146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.149774][ T9146] Cannot create hsr debugfs directory [ 480.281690][ T9112] hsr_slave_0: entered promiscuous mode [ 480.296428][ T9112] hsr_slave_1: entered promiscuous mode [ 480.321567][ T9112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.330879][ T9112] Cannot create hsr debugfs directory [ 480.849410][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.484243][ T9327] netlink: 68 bytes leftover after parsing attributes in process `syz.5.706'. [ 482.298621][ T6165] bridge_slave_1: left allmulticast mode [ 482.330637][ T6165] bridge_slave_1: left promiscuous mode [ 482.336452][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.381555][ T6165] bridge_slave_0: left allmulticast mode [ 482.400947][ T6165] bridge_slave_0: left promiscuous mode [ 482.407352][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.421341][ T9335] syz.5.708[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.421427][ T9335] syz.5.708[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.432992][ T9335] syz.5.708[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.664324][ T6165] bridge_slave_1: left allmulticast mode [ 483.094493][ T6165] bridge_slave_1: left promiscuous mode [ 483.270667][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.366070][ T6165] bridge_slave_0: left allmulticast mode [ 483.402918][ T6165] bridge_slave_0: left promiscuous mode [ 483.408714][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.737289][ T9341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.709'. [ 485.511439][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 486.002933][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.031942][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.101227][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.109031][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.119203][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 486.127027][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.157363][ T9369] slcan: can't register candev [ 488.426279][ T5843] Bluetooth: hci3: command tx timeout [ 488.924514][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.947680][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.958982][ T6165] bond0 (unregistering): Released all slaves [ 489.067946][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.078278][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.717'. [ 489.175570][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.252892][ T6165] bond0 (unregistering): Released all slaves [ 489.317075][ T9386] syz.1.719[9386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.317258][ T9386] syz.1.719[9386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.328731][ T9386] syz.1.719[9386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.582833][ T9388] netlink: 68 bytes leftover after parsing attributes in process `syz.5.720'. [ 490.578201][ T5843] Bluetooth: hci3: command tx timeout [ 492.656442][ T5849] Bluetooth: hci3: command tx timeout [ 493.463121][ T6165] hsr_slave_0: left promiscuous mode [ 493.478534][ T6165] hsr_slave_1: left promiscuous mode [ 493.601001][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.608962][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.746014][ T6165] hsr_slave_0: left promiscuous mode [ 493.781515][ T6165] hsr_slave_1: left promiscuous mode [ 493.792485][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.807786][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.997489][ T5892] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 494.140662][ T5892] usb 2-1: device descriptor read/64, error -71 [ 494.738708][ T5849] Bluetooth: hci3: command 0x0419 tx timeout [ 495.289012][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 495.372791][ T9428] fuse: Unknown parameter 'group_i00000000000000000000' [ 496.118527][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 496.389363][ T9429] slcan: can't register candev [ 496.699418][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 496.800522][ T5892] usb 2-1: device descriptor read/64, error -71 [ 496.838113][ T5843] Bluetooth: hci3: command 0x0419 tx timeout [ 497.804489][ T5892] usb usb2-port1: attempt power cycle [ 499.112385][ T9445] netlink: 68 bytes leftover after parsing attributes in process `syz.1.733'. [ 500.973460][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.979848][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.968103][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 502.059216][ T9470] 9pnet_virtio: no channels available for device syz [ 502.693351][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 503.580807][ T9476] fuse: Unknown parameter 'group_id00000000000000000000' [ 504.459833][ T9478] slcan: can't register candev [ 505.088769][ T9488] fuse: Unknown parameter 'user_id00000000000000000000' [ 506.427561][ T9496] netlink: 68 bytes leftover after parsing attributes in process `syz.5.746'. [ 506.484863][ T9499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.867384][ T9514] can0: slcan on ttyS3. [ 511.052980][ T9509] can0 (unregistered): slcan off ttyS3. [ 513.616796][ T9351] chnl_net:caif_netlink_parms(): no params data found [ 514.198436][ T9540] fuse: Unknown parameter 'user_id00000000000000000000' [ 515.254463][ T9546] netlink: 'syz.0.755': attribute type 2 has an invalid length. [ 515.511160][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.518272][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.537820][ T9351] bridge_slave_0: entered allmulticast mode [ 516.091306][ T9550] netlink: 68 bytes leftover after parsing attributes in process `syz.5.756'. [ 516.520068][ T9351] bridge_slave_0: entered promiscuous mode [ 517.397987][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.407117][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.445847][ T9351] bridge_slave_1: entered allmulticast mode [ 517.486533][ T9351] bridge_slave_1: entered promiscuous mode [ 517.516880][ T9146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.771447][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 518.122455][ T9559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.580082][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 518.660905][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 518.691417][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 518.699184][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 518.715089][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 519.068027][ T9567] fuse: Unknown parameter 'group_id00000000000000000000' [ 520.051673][ T9146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 520.313845][ T9568] can0: slcan on ttyS3. [ 520.336804][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.390793][ T9146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 520.504862][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.515486][ T9568] can0 (unregistered): slcan off ttyS3. [ 520.577758][ T9146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 520.666376][ T9351] team0: Port device team_slave_0 added [ 520.739133][ T9351] team0: Port device team_slave_1 added [ 520.810571][ T5849] Bluetooth: hci6: command tx timeout [ 520.820138][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.831953][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.870609][ T9351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.031393][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.038369][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.342024][ T9351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.918357][ T5849] Bluetooth: hci6: command tx timeout [ 523.159582][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.179022][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.188810][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.197942][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.211798][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 523.221170][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.410006][ T9146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.058623][ T9351] hsr_slave_0: entered promiscuous mode [ 524.081342][ T9351] hsr_slave_1: entered promiscuous mode [ 524.105918][ T9351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.114692][ T9351] Cannot create hsr debugfs directory [ 524.173918][ T6165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.319751][ T6165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.501532][ T6165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.556636][ T6165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.588178][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 524.728245][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.735703][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.751292][ T9556] bridge_slave_0: entered allmulticast mode [ 524.758673][ T9556] bridge_slave_0: entered promiscuous mode [ 524.971110][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.978508][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.987551][ T5843] Bluetooth: hci6: command tx timeout [ 525.000890][ T9556] bridge_slave_1: entered allmulticast mode [ 525.022025][ T9556] bridge_slave_1: entered promiscuous mode [ 525.292566][ T5843] Bluetooth: hci1: command tx timeout [ 525.839781][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.980140][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.992933][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.184516][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.201626][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.211220][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.294740][ T9615] netlink: 68 bytes leftover after parsing attributes in process `syz.0.768'. [ 526.428937][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 527.050631][ T5843] Bluetooth: hci6: command tx timeout [ 527.083229][ T9607] netlink: 16 bytes leftover after parsing attributes in process `syz.5.767'. [ 527.090827][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.259533][ T9556] team0: Port device team_slave_0 added [ 527.431084][ T53] Bluetooth: hci1: command tx timeout [ 527.723016][ T9556] team0: Port device team_slave_1 added [ 528.355279][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.406554][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.655188][ T9631] slcan: can't register candev [ 528.729787][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.913283][ T6165] bridge_slave_1: left allmulticast mode [ 528.919181][ T6165] bridge_slave_1: left promiscuous mode [ 528.934334][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.011887][ T6165] bridge_slave_0: left allmulticast mode [ 529.024108][ T6165] bridge_slave_0: left promiscuous mode [ 529.036248][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.068955][ T6165] bridge_slave_1: left allmulticast mode [ 529.094959][ T6165] bridge_slave_1: left promiscuous mode [ 529.133229][ T53] Bluetooth: hci2: command tx timeout [ 529.139820][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.171009][ T6165] bridge_slave_0: left allmulticast mode [ 529.176722][ T6165] bridge_slave_0: left promiscuous mode [ 529.209543][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.453940][ T53] Bluetooth: hci1: command tx timeout [ 531.140501][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.163517][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.186665][ T6165] bond0 (unregistering): Released all slaves [ 531.216699][ T53] Bluetooth: hci2: command tx timeout [ 531.398170][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.412620][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.423642][ T6165] bond0 (unregistering): Released all slaves [ 531.443131][ T9584] chnl_net:caif_netlink_parms(): no params data found [ 531.485215][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.493171][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.521088][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.540508][ T53] Bluetooth: hci1: command tx timeout [ 533.194157][ T9556] hsr_slave_0: entered promiscuous mode [ 533.215053][ T9556] hsr_slave_1: entered promiscuous mode [ 533.245862][ T9556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.266045][ T9556] Cannot create hsr debugfs directory [ 533.292831][ T53] Bluetooth: hci2: command tx timeout [ 533.353471][ T9608] chnl_net:caif_netlink_parms(): no params data found [ 533.528688][ T9351] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 533.543634][ T9351] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 533.733500][ T9351] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 534.261555][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.277793][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.301627][ T9584] bridge_slave_0: entered allmulticast mode [ 534.315702][ T9584] bridge_slave_0: entered promiscuous mode [ 534.375759][ T9351] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 534.423059][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.434892][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.460879][ T9584] bridge_slave_1: entered allmulticast mode [ 534.469549][ T9584] bridge_slave_1: entered promiscuous mode [ 534.644257][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.661580][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.669773][ T9608] bridge_slave_0: entered allmulticast mode [ 534.688847][ T9608] bridge_slave_0: entered promiscuous mode [ 534.702220][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.730719][ T6165] hsr_slave_0: left promiscuous mode [ 534.736945][ T6165] hsr_slave_1: left promiscuous mode [ 534.746602][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.755004][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.772028][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.779648][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.796589][ T6165] hsr_slave_0: left promiscuous mode [ 534.820790][ T6165] hsr_slave_1: left promiscuous mode [ 534.835915][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.901229][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.105997][ T6165] veth1_macvtap: left promiscuous mode [ 535.111705][ T6165] veth0_macvtap: left promiscuous mode [ 535.120705][ T6165] veth1_vlan: left promiscuous mode [ 535.130665][ T6165] veth0_vlan: left promiscuous mode [ 535.371370][ T53] Bluetooth: hci2: command tx timeout [ 536.807119][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 536.856650][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 538.096812][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 538.179307][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 538.665971][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.681507][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.701826][ T9608] bridge_slave_1: entered allmulticast mode [ 538.710051][ T9608] bridge_slave_1: entered promiscuous mode [ 538.732241][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.921661][ T9584] team0: Port device team_slave_0 added [ 539.059448][ T9608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.126556][ T9584] team0: Port device team_slave_1 added [ 540.616092][ T9713] netlink: 68 bytes leftover after parsing attributes in process `syz.5.793'. [ 541.233540][ T9608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.442645][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.449662][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.483017][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.624275][ T9722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.525653][ T9608] team0: Port device team_slave_0 added [ 542.691461][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.699096][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.768628][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.061836][ T9727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 543.067878][ T9727] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 543.654460][ T9727] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 543.662143][ T9727] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 543.685099][ T9727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.692074][ T9727] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 543.705109][ T9727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 543.711350][ T9727] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 543.999816][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 544.244165][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.040824][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.069600][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.090557][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 545.098291][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.123534][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.132057][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.139541][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.152762][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.161042][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 545.169382][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.181613][ T9608] team0: Port device team_slave_1 added [ 545.277919][ T9584] hsr_slave_0: entered promiscuous mode [ 545.309055][ T9584] hsr_slave_1: entered promiscuous mode [ 545.363348][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.373264][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.399941][ T9608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.412764][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.419743][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.446659][ T9608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.504030][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 545.660579][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 545.670984][ T5910] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 545.679361][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.691682][ T5910] usb 1-1: config 0 has no interface number 0 [ 545.697807][ T5910] usb 1-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.713894][ T5910] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 545.731243][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.741568][ T5910] usb 1-1: Product: syz [ 545.745943][ T5910] usb 1-1: Manufacturer: syz [ 545.751330][ T5910] usb 1-1: SerialNumber: syz [ 545.768499][ T5910] usb 1-1: config 0 descriptor?? [ 545.785628][ T5910] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 545.945413][ T9608] hsr_slave_0: entered promiscuous mode [ 545.966178][ T9608] hsr_slave_1: entered promiscuous mode [ 545.974439][ T9608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.982363][ T9608] Cannot create hsr debugfs directory [ 545.996566][ T5894] usb 1-1: USB disconnect, device number 3 [ 548.000610][ T53] Bluetooth: hci5: command tx timeout [ 548.908328][ T6165] IPVS: stop unused estimator thread 0... [ 550.010610][ T5843] Bluetooth: hci5: command tx timeout [ 550.744615][ T9556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 550.774775][ T9556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 550.828551][ T9556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 550.961618][ T9556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 551.017631][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 551.163370][ T9584] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.181422][ T9584] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 551.188242][ T9777] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 551.194660][ T9777] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 551.227777][ T9584] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 551.244033][ T9584] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 551.442823][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.450075][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.467558][ T9732] bridge_slave_0: entered allmulticast mode [ 551.478250][ T9732] bridge_slave_0: entered promiscuous mode [ 551.554998][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.562447][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.569720][ T9732] bridge_slave_1: entered allmulticast mode [ 551.577278][ T9732] bridge_slave_1: entered promiscuous mode [ 551.620319][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.649526][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.816432][ T9732] team0: Port device team_slave_0 added [ 551.899532][ T9732] team0: Port device team_slave_1 added [ 552.888854][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.900962][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.954815][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.976266][ T6165] bridge_slave_1: left allmulticast mode [ 552.992036][ T6165] bridge_slave_1: left promiscuous mode [ 552.997826][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.018615][ T6165] bridge_slave_0: left allmulticast mode [ 553.028194][ T6165] bridge_slave_0: left promiscuous mode [ 553.040636][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.061471][ T6165] bridge_slave_1: left allmulticast mode [ 553.070674][ T6165] bridge_slave_1: left promiscuous mode [ 553.076413][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.135908][ T6165] bridge_slave_0: left allmulticast mode [ 553.160610][ T6165] bridge_slave_0: left promiscuous mode [ 553.166619][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.194005][ T6165] bridge_slave_1: left allmulticast mode [ 553.199774][ T6165] bridge_slave_1: left promiscuous mode [ 553.216557][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.368791][ T6165] bridge_slave_0: left allmulticast mode [ 553.397793][ T6165] bridge_slave_0: left promiscuous mode [ 553.421013][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.616396][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.640968][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.662708][ T6165] bond0 (unregistering): Released all slaves [ 554.788804][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.823692][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.835433][ T6165] bond0 (unregistering): Released all slaves [ 554.862374][ T6165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.874035][ T6165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.889394][ T6165] bond0 (unregistering): Released all slaves [ 554.919633][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.960551][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.007358][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.076949][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.212094][ T9608] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 555.299804][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.357030][ T6165] hsr_slave_0: left promiscuous mode [ 555.538170][ T9832] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 555.637447][ T6165] hsr_slave_1: left promiscuous mode [ 555.658909][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.732442][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.002766][ T6165] hsr_slave_0: left promiscuous mode [ 556.074924][ T6165] hsr_slave_1: left promiscuous mode [ 556.130807][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.159270][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.316257][ T6165] hsr_slave_0: left promiscuous mode [ 556.347669][ T6165] hsr_slave_1: left promiscuous mode [ 556.357330][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.321120][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.848755][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 557.907382][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 557.983284][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 558.473798][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 558.509975][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 558.779794][ T6165] team0 (unregistering): Port device team_slave_1 removed [ 558.818080][ T6165] team0 (unregistering): Port device team_slave_0 removed [ 558.955244][ T9608] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 558.994600][ T9732] hsr_slave_0: entered promiscuous mode [ 559.013817][ T9732] hsr_slave_1: entered promiscuous mode [ 559.020184][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.029049][ T9732] Cannot create hsr debugfs directory [ 559.041774][ T9608] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 559.103109][ T9608] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.123098][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.149995][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.380720][ T9884] fuse: Bad value for 'fd' [ 561.099095][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.106323][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.152578][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.159763][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.521370][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.528570][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.690674][ T9893] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 561.892228][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.899443][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.136451][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.836'. [ 562.392976][ T9556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.403510][ T9556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.424389][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.430926][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.541058][ T9608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.557557][ T9608] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.573783][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.581063][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.613028][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.620267][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.845009][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.866971][ T9608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 563.877854][ T9608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.864343][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.177164][ T9732] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 565.370921][ T9732] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 565.561491][ T9732] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 565.615977][ T9732] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 565.811738][ T9960] fuse: Bad value for 'fd' [ 566.612843][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.629568][ T9608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.649320][ T9584] veth0_vlan: entered promiscuous mode [ 566.668007][ T9584] veth1_vlan: entered promiscuous mode [ 566.691542][ T9584] veth0_macvtap: entered promiscuous mode [ 566.700741][ T9584] veth1_macvtap: entered promiscuous mode [ 566.716063][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.726740][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.728266][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 566.736599][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.736626][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.737882][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.776067][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.786882][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.797036][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.807772][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.820983][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.858283][ T9584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.867888][ T9584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.890558][ T9584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.899363][ T9584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.966934][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.994896][ T9556] veth0_vlan: entered promiscuous mode [ 567.017224][ T9556] veth1_vlan: entered promiscuous mode [ 567.036272][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.043674][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.904740][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.912005][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.096081][ T9556] veth0_macvtap: entered promiscuous mode [ 568.177389][ T9556] veth1_macvtap: entered promiscuous mode [ 568.247688][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.261943][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.274510][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.285355][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.295568][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.311868][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.324408][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.334946][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.345851][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.356413][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.367529][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.377721][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.394985][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.406940][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.419003][ T9556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.429069][ T9556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.438130][ T9556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.447181][ T9556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.503498][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.530556][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.689572][ T9608] veth0_vlan: entered promiscuous mode [ 568.722815][ T6387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.757575][ T6387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.799448][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.822934][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.831569][ T9608] veth1_vlan: entered promiscuous mode [ 568.937271][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.963277][ T6387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.981989][ T6387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.064174][ T9608] veth0_macvtap: entered promiscuous mode [ 569.105011][ T9608] veth1_macvtap: entered promiscuous mode [ 569.262521][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.316630][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.355228][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.390209][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.412380][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.424502][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.387501][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.409603][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.421543][ T9608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.320451][T10008] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 572.465376][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.033897][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.129250][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.169553][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.216346][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.230494][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.246200][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.256783][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.274413][ T9608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.999097][ T9608] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.960814][ T9608] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.969768][ T9608] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.978714][ T9608] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.269136][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.315474][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.325865][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.334264][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.644495][ T9732] veth0_vlan: entered promiscuous mode [ 577.669809][ T9732] veth1_vlan: entered promiscuous mode [ 577.679150][ T8926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 578.712134][ T9732] veth0_macvtap: entered promiscuous mode [ 579.828377][T10072] can0: slcan on ttyS3. [ 579.929810][ T9732] veth1_macvtap: entered promiscuous mode [ 579.955033][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.965988][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.976173][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.986750][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.996695][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.007285][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.017575][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.028296][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.038208][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.048779][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.061182][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.073430][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.085077][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.095312][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.105930][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.116126][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.126867][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.136825][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.151986][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.172339][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.187482][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.199355][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.215227][ T9732] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.234254][ T9732] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.253396][ T9732] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.270580][ T9732] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.775260][ T8926] usb 8-1: device not accepting address 2, error -71 [ 581.660613][T10056] can0 (unregistered): slcan off ttyS3. [ 581.926559][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.986576][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.295777][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.343772][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.742260][T10117] netlink: 120 bytes leftover after parsing attributes in process `syz.0.868'. [ 584.751491][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031327000: rx timeout, send abort [ 584.770476][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031327000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 584.851382][ T5896] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 585.357231][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.379243][ T5896] usb 10-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 585.466041][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.414453][ T5896] usb 10-1: config 0 descriptor?? [ 588.033566][ T5896] usbhid 10-1:0.0: can't add hid device: -71 [ 588.058713][ T5896] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 588.210064][ T5896] usb 10-1: USB disconnect, device number 2 [ 591.199677][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 592.943032][T10223] netlink: 120 bytes leftover after parsing attributes in process `syz.6.895'. [ 595.121540][T10257] netlink: 'syz.6.907': attribute type 8 has an invalid length. [ 596.220289][T10283] syz.4.911[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.220589][T10283] syz.4.911[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.232342][T10283] syz.4.911[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.594046][T10292] overlayfs: failed to resolve './file0': -2 [ 597.278126][T10295] netlink: 68 bytes leftover after parsing attributes in process `syz.5.914'. [ 598.153280][T10318] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 599.738169][T10333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.222487][T10348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.664076][T10352] syz.5.928[10352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.664193][T10352] syz.5.928[10352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.675730][T10352] syz.5.928[10352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.036161][T10354] overlayfs: failed to resolve './file0': -2 [ 604.040767][T10366] loop9: detected capacity change from 0 to 6 [ 607.795630][T10421] netlink: 68 bytes leftover after parsing attributes in process `syz.9.948'. [ 608.455514][T10437] loop9: detected capacity change from 0 to 6 [ 611.289154][T10433] syz.4.950: attempt to access beyond end of device [ 611.289154][T10433] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 611.369633][T10433] qnx4: unable to read the superblock [ 614.310770][T10545] can0: slcan on ttyS3. [ 615.295151][T10535] can0 (unregistered): slcan off ttyS3. [ 615.324525][T10553] syz.6.977: attempt to access beyond end of device [ 615.324525][T10553] nbd6: rw=0, sector=1, nr_sectors = 1 limit=0 [ 615.337384][T10553] qnx4: unable to read the superblock [ 619.535822][T10607] overlayfs: failed to resolve './file0': -2 [ 620.859052][T10617] netlink: 'syz.7.993': attribute type 2 has an invalid length. [ 622.328266][T10636] 9pnet_virtio: no channels available for device syz [ 624.242414][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.249016][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.321578][T10638] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 625.059772][T10674] can0: slcan on ttyS3. [ 625.961507][T10663] can0 (unregistered): slcan off ttyS3. [ 626.872492][T10702] batadv_slave_1: entered promiscuous mode [ 627.919373][T10695] batadv_slave_1: left promiscuous mode [ 628.451033][T10710] 9pnet_virtio: no channels available for device syz [ 630.618618][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 631.180504][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 631.218163][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 631.234412][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.242909][ T8] usb 1-1: Product: syz [ 631.247394][ T8] usb 1-1: Manufacturer: syz [ 631.252282][ T8] usb 1-1: SerialNumber: syz [ 631.264094][ T8] usb 1-1: config 0 descriptor?? [ 633.166826][ T8] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 633.174503][ T8] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 633.187884][ T8] usb 1-1: USB disconnect, device number 4 [ 634.289665][T10776] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 640.367822][T10842] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 640.379239][T10844] 9pnet_virtio: no channels available for device syz [ 641.980592][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 641.980652][ T29] audit: type=1326 audit(1737258486.503:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.9.1055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f018a985d29 code=0x0 [ 643.101990][T10890] overlayfs: failed to resolve './file0': -2 [ 644.984818][T10912] 9pnet_virtio: no channels available for device syz [ 645.322494][T10905] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 646.530002][T10922] loop9: detected capacity change from 0 to 6 [ 647.272893][T10953] syz.4.1074[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.273011][T10953] syz.4.1074[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.286203][T10953] syz.4.1074[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.868256][T10968] syz.7.1079[10968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.880025][T10968] syz.7.1079[10968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.891873][T10968] syz.7.1079[10968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.197038][T10974] overlayfs: failed to resolve './file0': -2 [ 649.950428][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 650.011178][T11029] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 650.230936][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 650.359930][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.565026][ T25] usb 1-1: config 0 has no interfaces? [ 650.614783][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 650.658214][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.722407][ T25] usb 1-1: Product: syz [ 650.788831][ T25] usb 1-1: Manufacturer: syz [ 650.810450][ T25] usb 1-1: SerialNumber: syz [ 650.830705][ T25] usb 1-1: config 0 descriptor?? [ 651.231238][ T8] usb 1-1: USB disconnect, device number 5 [ 653.652133][T11056] loop9: detected capacity change from 0 to 6 [ 654.916765][T11074] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 656.452453][T11092] can0: slcan on ttyS3. [ 657.181715][T11078] can0 (unregistered): slcan off ttyS3. [ 659.055774][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1125'. [ 660.694742][T11138] fuse: Bad value for 'group_id' [ 660.699763][T11138] fuse: Bad value for 'group_id' [ 661.341136][T11134] overlayfs: failed to clone upperpath [ 662.170710][T11141] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 668.242320][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1140'. [ 668.687373][T11206] fuse: Bad value for 'group_id' [ 668.692644][T11206] fuse: Bad value for 'group_id' [ 670.180835][ T968] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 670.353717][ T968] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.365176][ T968] usb 10-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 670.397387][ T968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.423285][ T968] usb 10-1: config 0 descriptor?? [ 671.652729][ T968] usbhid 10-1:0.0: can't add hid device: -71 [ 671.659154][ T968] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 671.674774][ T968] usb 10-1: USB disconnect, device number 3 [ 671.969039][T11241] syz.7.1155: attempt to access beyond end of device [ 671.969039][T11241] nbd7: rw=0, sector=1, nr_sectors = 1 limit=0 [ 671.982326][T11241] qnx4: unable to read the superblock [ 672.224151][T11271] overlayfs: failed to clone upperpath [ 678.433355][T11345] netlink: 165 bytes leftover after parsing attributes in process `syz.9.1184'. [ 684.230014][T11403] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1202'. [ 684.975731][T11423] syz.4.1208: attempt to access beyond end of device [ 684.975731][T11423] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 684.993600][T11423] qnx4: unable to read the superblock [ 685.368133][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.404261][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.348643][T11493] syz.7.1229[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.348753][T11493] syz.7.1229[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.360753][T11493] syz.7.1229[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 687.773458][T11503] overlayfs: failed to resolve './file0': -2 [ 688.961883][T11517] Cannot find set identified by id 0 to match [ 690.036895][T11517] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 690.294619][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1240'. [ 690.826999][T11538] syz.9.1231: attempt to access beyond end of device [ 690.826999][T11538] nbd9: rw=0, sector=1, nr_sectors = 1 limit=0 [ 690.870517][T11538] qnx4: unable to read the superblock [ 691.059910][T11547] capability: warning: `syz.4.1243' uses deprecated v2 capabilities in a way that may be insecure [ 693.614477][ T5834] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 694.735610][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.825862][T11605] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 695.051818][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.430949][ T5834] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.515415][ T5834] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.577029][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.819872][ T5834] usb 10-1: config 0 descriptor?? [ 695.826915][ T5834] usb 10-1: can't set config #0, error -71 [ 695.850584][ T5834] usb 10-1: USB disconnect, device number 4 [ 697.037403][T11633] syz.9.1267 uses obsolete (PF_INET,SOCK_PACKET) [ 697.209905][T11633] macsec0: entered promiscuous mode [ 697.935962][T11633] veth1_macvtap: left promiscuous mode [ 698.259866][T11650] syz.7.1270[11650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.259981][T11650] syz.7.1270[11650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.541719][T11650] syz.7.1270[11650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 698.653047][T11658] overlayfs: failed to resolve './file0': -2 [ 700.030120][T11678] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 703.126866][T11688] ================================================================== [ 703.134984][T11688] BUG: KASAN: wild-memory-access in __lock_acquire+0xc94/0x2100 [ 703.142650][T11688] Read of size 8 at addr 1fffffff84dfe118 by task syz.5.1280/11688 [ 703.150557][T11688] [ 703.152890][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.5.1280 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 703.163685][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 703.173764][T11688] Call Trace: [ 703.177063][T11688] [ 703.180010][T11688] dump_stack_lvl+0x241/0x360 [ 703.184730][T11688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.189969][T11688] ? __pfx__printk+0x10/0x10 [ 703.194592][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.200275][T11688] ? _printk+0xd5/0x120 [ 703.204476][T11688] print_report+0xe8/0x550 [ 703.208925][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.214585][T11688] ? __virt_addr_valid+0x58/0x530 [ 703.219731][T11688] ? __lock_acquire+0xc94/0x2100 [ 703.224698][T11688] kasan_report+0x143/0x180 [ 703.229232][T11688] ? __lock_acquire+0xc94/0x2100 [ 703.234196][T11688] ? vlv_compute_watermarks+0x468/0x3620 [ 703.239853][T11688] kasan_check_range+0x282/0x290 [ 703.244818][T11688] ? vlv_compute_watermarks+0x468/0x3620 [ 703.250473][T11688] __lock_acquire+0xc94/0x2100 [ 703.255275][T11688] lock_acquire+0x1ed/0x550 [ 703.259802][T11688] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 703.265561][T11688] ? select_task_rq_rt+0x6a/0x320 [ 703.270618][T11688] ? __pfx_lock_acquire+0x10/0x10 [ 703.275666][T11688] ? __pfx_lock_acquire+0x10/0x10 [ 703.280831][T11688] ? select_task_rq_rt+0x6a/0x320 [ 703.285876][T11688] ? __pfx_lock_release+0x10/0x10 [ 703.291538][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.297211][T11688] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 703.302698][T11688] _raw_spin_lock_nested+0x31/0x40 [ 703.307850][T11688] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 703.313433][T11688] raw_spin_rq_lock_nested+0x2a/0x140 [ 703.318934][T11688] try_to_wake_up+0x7e2/0x1470 [ 703.323727][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.329387][T11688] ? __pfx_try_to_wake_up+0x10/0x10 [ 703.334615][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.340279][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.345936][T11688] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 703.351427][T11688] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 703.357356][T11688] autoremove_wake_function+0x16/0x110 [ 703.362846][T11688] __wake_up_common_lock+0x132/0x1e0 [ 703.368161][T11688] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 703.373479][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.379140][T11688] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 703.384879][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.390535][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.396188][T11688] ? iovec_from_user+0x61/0x240 [ 703.401091][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.406847][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.412502][T11688] ? unix_dgram_recvmsg+0xb6/0xe0 [ 703.417550][T11688] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 703.423126][T11688] sock_recvmsg_nosec+0x190/0x1d0 [ 703.428284][T11688] ____sys_recvmsg+0x3cd/0x480 [ 703.433095][T11688] ? __pfx_____sys_recvmsg+0x10/0x10 [ 703.438425][T11688] ? do_recvmmsg+0x44e/0xab0 [ 703.443057][T11688] ? __might_fault+0xaa/0x120 [ 703.447754][T11688] do_recvmmsg+0x426/0xab0 [ 703.452192][T11688] ? __pfx_do_recvmmsg+0x10/0x10 [ 703.457147][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.462792][T11688] ? finish_task_switch+0x1e5/0x870 [ 703.468322][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.473976][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.479623][T11688] ? __pfx___schedule+0x10/0x10 [ 703.484497][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.490139][T11688] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 703.496141][T11688] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 703.502478][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.508124][T11688] __x64_sys_recvmmsg+0x199/0x250 [ 703.513166][T11688] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 703.518730][T11688] do_syscall_64+0xf3/0x230 [ 703.523245][T11688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.529158][T11688] RIP: 0033:0x7f1aec385d29 [ 703.533689][T11688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.553492][T11688] RSP: 002b:00007f1aed0f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 703.562014][T11688] RAX: ffffffffffffffda RBX: 00007f1aec576080 RCX: 00007f1aec385d29 [ 703.570083][T11688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 703.578061][T11688] RBP: 00007f1aec401b08 R08: 0000000000000000 R09: 0000000000000000 [ 703.586039][T11688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 703.594561][T11688] R13: 0000000000000001 R14: 00007f1aec576080 R15: 00007ffea0fdf608 [ 703.602566][T11688] [ 703.605592][T11688] ================================================================== [ 703.613658][T11688] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 703.620881][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.5.1280 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 703.631747][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 703.641807][T11688] Call Trace: [ 703.645088][T11688] [ 703.648018][T11688] dump_stack_lvl+0x241/0x360 [ 703.652762][T11688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.657979][T11688] ? __pfx__printk+0x10/0x10 [ 703.662587][T11688] ? rcu_is_watching+0x15/0xb0 [ 703.667372][T11688] ? lock_release+0xbf/0xa30 [ 703.671990][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.677635][T11688] ? vscnprintf+0x5d/0x90 [ 703.681979][T11688] panic+0x349/0x880 [ 703.685886][T11688] ? check_panic_on_warn+0x21/0xb0 [ 703.691185][T11688] ? __pfx_panic+0x10/0x10 [ 703.695642][T11688] ? do_raw_spin_unlock+0x13c/0x8b0 [ 703.700852][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.706577][T11688] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 703.712495][T11688] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 703.718835][T11688] ? print_report+0xe8/0x550 [ 703.723445][T11688] check_panic_on_warn+0x86/0xb0 [ 703.728397][T11688] ? __lock_acquire+0xc94/0x2100 [ 703.733350][T11688] end_report+0x77/0x160 [ 703.737604][T11688] kasan_report+0x154/0x180 [ 703.742119][T11688] ? __lock_acquire+0xc94/0x2100 [ 703.747069][T11688] ? vlv_compute_watermarks+0x468/0x3620 [ 703.752886][T11688] kasan_check_range+0x282/0x290 [ 703.758010][T11688] ? vlv_compute_watermarks+0x468/0x3620 [ 703.763650][T11688] __lock_acquire+0xc94/0x2100 [ 703.768438][T11688] lock_acquire+0x1ed/0x550 [ 703.772963][T11688] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 703.778531][T11688] ? select_task_rq_rt+0x6a/0x320 [ 703.783566][T11688] ? __pfx_lock_acquire+0x10/0x10 [ 703.788684][T11688] ? __pfx_lock_acquire+0x10/0x10 [ 703.793806][T11688] ? select_task_rq_rt+0x6a/0x320 [ 703.798838][T11688] ? __pfx_lock_release+0x10/0x10 [ 703.803873][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.809599][T11688] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 703.815087][T11688] _raw_spin_lock_nested+0x31/0x40 [ 703.820219][T11688] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 703.825872][T11688] raw_spin_rq_lock_nested+0x2a/0x140 [ 703.831266][T11688] try_to_wake_up+0x7e2/0x1470 [ 703.836041][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.841776][T11688] ? __pfx_try_to_wake_up+0x10/0x10 [ 703.846989][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.852675][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.858339][T11688] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 703.863813][T11688] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 703.869730][T11688] autoremove_wake_function+0x16/0x110 [ 703.875215][T11688] __wake_up_common_lock+0x132/0x1e0 [ 703.880520][T11688] __unix_dgram_recvmsg+0x5f4/0x12f0 [ 703.885819][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.891464][T11688] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 703.897191][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.902838][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.908479][T11688] ? iovec_from_user+0x61/0x240 [ 703.913353][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.918993][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.924721][T11688] ? unix_dgram_recvmsg+0xb6/0xe0 [ 703.929758][T11688] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 703.935318][T11688] sock_recvmsg_nosec+0x190/0x1d0 [ 703.940370][T11688] ____sys_recvmsg+0x3cd/0x480 [ 703.945155][T11688] ? __pfx_____sys_recvmsg+0x10/0x10 [ 703.950462][T11688] ? do_recvmmsg+0x44e/0xab0 [ 703.955062][T11688] ? __might_fault+0xaa/0x120 [ 703.959745][T11688] do_recvmmsg+0x426/0xab0 [ 703.964178][T11688] ? __pfx_do_recvmmsg+0x10/0x10 [ 703.969129][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.974773][T11688] ? finish_task_switch+0x1e5/0x870 [ 703.979999][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.985649][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 703.991299][T11688] ? __pfx___schedule+0x10/0x10 [ 703.996165][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.001821][T11688] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 704.007822][T11688] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 704.014768][T11688] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.020417][T11688] __x64_sys_recvmmsg+0x199/0x250 [ 704.025465][T11688] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 704.031028][T11688] do_syscall_64+0xf3/0x230 [ 704.035540][T11688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.041456][T11688] RIP: 0033:0x7f1aec385d29 [ 704.045873][T11688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.065517][T11688] RSP: 002b:00007f1aed0f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 704.073944][T11688] RAX: ffffffffffffffda RBX: 00007f1aec576080 RCX: 00007f1aec385d29 [ 704.082012][T11688] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 704.090508][T11688] RBP: 00007f1aec401b08 R08: 0000000000000000 R09: 0000000000000000 [ 704.098479][T11688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 704.106545][T11688] R13: 0000000000000001 R14: 00007f1aec576080 R15: 00007ffea0fdf608 [ 704.114537][T11688] [ 704.117837][T11688] Kernel Offset: disabled [ 704.122156][T11688] Rebooting in 86400 seconds..