last executing test programs: 37.129543301s ago: executing program 2 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xce9e1000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) quotactl_fd$Q_SYNC(r2, 0x9f2e01b4da99bc97, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 36.156639143s ago: executing program 2 (id=1534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="de"]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r5}}]}) close_range(r3, 0xffffffffffffffff, 0x0) 35.636204372s ago: executing program 2 (id=1538): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="37000000202000c2"], 0x20) 33.978719197s ago: executing program 2 (id=1540): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (fail_nth: 1) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 31.26398443s ago: executing program 0 (id=1549): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 31.184145033s ago: executing program 2 (id=1550): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x220) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getuid() setfsuid(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x225008, &(0x7f00000001c0)={[{@noswap}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x3a, 0x36, 0x72, 0x3a, 0x31, 0x2c]}}}}, {@huge_never}, {@huge_never}], [{@measure}, {@hash}, {@subj_role={'subj_role', 0x3d, '#&*{)'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r7}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '@[^.*]{]'}}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x18, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d00000073080002"], 0x78}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r10 = syz_open_dev$video4linux(&(0x7f0000000440), 0x82, 0x40800) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000340)={0x7, @win={{0x5, 0xffff, 0x200, 0x870}, 0x2, 0x91bb, &(0x7f00000002c0)={{0x6, 0x6, 0x101, 0x3}, &(0x7f0000000280)={{0x3, 0x4, 0x10001, 0x3}, &(0x7f0000000140)={{0x3, 0xfffffffe, 0x2, 0x4}}}}, 0x1, &(0x7f0000000300)="43ef300521f6a2fd43e6928f97", 0x4}}) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008041}, 0x40004800) 30.965118938s ago: executing program 0 (id=1551): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x3ff, 0x0, {{0x2e, 0x4, 0x2, 0x16, 0xb8, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local, {[@cipso={0x86, 0x2d, 0x3, [{0x0, 0x5, "aca2f9"}, {0x6, 0x3, '<'}, {0x5, 0x11, "d2a700cc98214d55472c3fbf23a54a"}, {0x0, 0x5, "b29832"}, {0x5, 0x9, "c33eabdc3b7c08"}]}, @noop, @generic={0x88, 0xe, "887316df8cf34006d7a9b6d0"}, @end, @timestamp_prespec={0x44, 0x2c, 0x8, 0x3, 0x6, [{@multicast1, 0x4}, {@rand_addr=0x64010101, 0xd}, {@private=0xa010100, 0xe}, {@multicast1, 0x200}, {@broadcast, 0x400}]}, @ra={0x94, 0x4}, @generic={0x7, 0x12, "aef9be0e863762410c71200fe36eca05"}, @lsrr={0x83, 0x23, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @remote]}]}}}}}) r2 = syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000001c0)={0x1, 0x4f, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xfff1}, {0x4, 0xd}, {0x1, 0xa}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x3, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4dc4, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x44, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c801}, 0xc8c1) 30.876378344s ago: executing program 2 (id=1552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca6012887"], 0xffdd) 30.506013135s ago: executing program 0 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0x69) (fail_nth: 1) 30.076068398s ago: executing program 0 (id=1558): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) r7 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$VT_ACTIVATE(r7, 0x5606, 0x8aec) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 29.09370253s ago: executing program 0 (id=1560): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) epoll_create(0x101) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x37, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xa8, &(0x7f0000000f80)=""/168, 0x41000, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000001040), 0x10, 0x23, @void, @value}, 0x94) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000004c0)="aabf75165e2baa3797b0de01a04e74714e60fb1bbf6f4afb4f154365f31a118b0959f44de4a0d729254b458f", 0x2c}, {0x0}], 0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x538, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 25.380054899s ago: executing program 4 (id=1565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) 25.258464259s ago: executing program 0 (id=1566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x4a1c, 0x80) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newqdisc={0x84, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9cf}}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x84}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0xffff, 0x7}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@bridge_getlink={0x48, 0x12, 0x900, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x8, 0x810}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_EVENT={0x8, 0x2c, 0x10001}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7ff}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c040) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet(r7, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="60dbc0f4", 0x4}], 0x1}}], 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 25.226005888s ago: executing program 4 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(0x0, &(0x7f0000000040)) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}}], 0x1, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580), 0x70}}, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x24, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000300), 0x0}, 0x20) 23.995083778s ago: executing program 4 (id=1570): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (fail_nth: 1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000680)=@newtaction={0x630, 0x30, 0x0, 0x70bd27, 0x0, {}, [{0x61c, 0x1, [@m_ipt={0x618, 0x9, 0x0, 0x0, {{0x8}, {0x5f0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5ea, 0x6, {0x0, 'mangle\x00', 0x8, 0x5, "222a3a4306bf7466e8cfb43a1ab2c8e88fd2bc120abc26b5b875175d5426ec3ff19907c5f31e345c83ad4d2f205105056bd9797ddf6748f36b46e76b4dcf4835496bf1be5a03e71b742f13c5199d62701c4ec7bda0180b48bfb4e24d3d6a22228f3171af7e49501264aea42397f75bb39fdb5aff269c19e0e9395e12156efc80af008b3e86d6452fdfd913405bdcfbbbc2b6a9008026363000ae9cd0e513f34a28462e3fbb3a4de0ce4a28e17c246e5e13b229411f938c6a760dc788f0d2640a4daf39e291d97feebb88d91f414c4373401e62dae50e17caecbc1daf8258d42cedb7dd03d89fd4ab05c9a5a8786918d4ea558e824fb70bcca4b1166263a16c6e45391358191137643134940b20cd97c1edd082752b58a1caec8f9703463a7dc1313b8f5b5a3b92c29f3c5a1dc0172d8caf74dddb3f15c3f2a905bb8e4d1058985f607481cf3894bcef6ec469bce876ba1eba17f34309d1db7dd33c46d41583c80fca438d0c7433890b8a4335614ffb7e5646f3fe3a4513c138f70f3de2dea529c84dd6188613aa4ef0be8f37752c91cae22143caa36b3a2bf17dc06a95f149132bb366af51085a27e97b27e309b1a05083037218d6cd4d21bcb650aca4322f39dde3c0919732cee06b40bf0e87648eb9e39a2918d7828e6552b4f994aa81d5fd61cea73364cb83eb7643afa08104e1219c39851245ad39729788bbf0284d19a5629f6d6d1649c4e4c3766342d37b5b3c98a1215442ee89b2fc603e9097a124947a6e990cb62f9e326d97cc3e9028116611b6fca1aa6c0b9b9a122de459bfbe3ddd52539f2c60805a9e8e7a79498f31445b3d10b8e49aaff5f8a41d8b4f8ad598e559fd1db3b870b9aa320e56f99cfd139acbdd4d4a332aecfe23e8975b4d8fed185d0ce61c6ea1966e8526308fe8e4110342cab580ce061694d72adc06be62da36d4e09dcd8b87af5b0443da07f7626561f27107c85d501adbcbc9654d2bd33082f4b3f16126dfb1d060d9e8a300e6ce1538e2e72eb013b71aca53d47d83e43eba6ed9b0ef1cb26d3e66f45471a63c98b40ace285a9bfc8499121494b3744e0a68cb79414c928e08bdc06a371596ac2c578ce08c01a2b33af28aff53143885a9ebd184b32ec2dc453bd68080dddb1464b3dd497f1acdf98aee8a464f966454ff1deeb9d4407f1811653fbba64d7294a8926bd5a357372c250bb5f1de1bb6fe767d6e962ac91cfee1298db03e59e74bc26967cf287554825d4842365591765e2f4e2a273789dcf6c9295940a8af88d93e61f5394cfce0604a9c2a147440e781447278c399ee148af6845841e7c57c7981944dc824a79f660582984a17ef8bbf7130a4807d7cfbe65ca51f012bb449aa297775f3ed3775e717a8df9ebcc74929ae1beb5068fad9fe0475a901c9010e4ec75ffd397c1b2948a3eaffd08a45bab9674c1aba1f30b5c2e5ffc0f61d4554c4d20edbe34f0f99b44abe0e6d0f6944d08a10181e78bfcf831f7bb29986b7a3f2684415ea5c36bc272ff9346a2a01b3d975335a11ae4a9eb870ce9d2bc7537886f138a300ff8279f1b09a2030e3f36718f648ffd9ebec1b1cef9b6ef7c55976f296189fc2d91853cffb41671d48df7d7bc631037385571387eff41580c67da3dd6fe64acbd2a4957890dc563d9a686dc6b791b59465ac7c3afed916a45d03712cdc828331a8349d09839ba2e390719a155eda916b7bdd1758113791ef43b4ed9f5a3d0df2cab1a6e8e5808db75c794336c287835c0f5bd90c569dce102da4ab5a2cf0e6a0d03701ef93dba086078764e9859b409b0707a3d8a4a82dd9d881a8201b5abd21827d81cf9eb1c9254449188446c6c1cc4575ee4b84ab98f6100f4f13e5c2f3ff4c28d3869deacf8616099ce1acd71dc6d979e82a6695ee89dcd03d4b8d7f02836b4a47225183e232df3ca283efbcb1e54d921082af700557457aa0947083298cda8ea0550e7a9ac20cfddf20de689c53f09bf5990ad2c1e8fa24f3e12ea37a828e53519e767a3b65172bd2a2fb5e9f1f0b51bca6ddd097fc8b0dfd1658236658eb9cd8a146b3caf5bf1401e7a9"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x630}}, 0x0) 22.592305313s ago: executing program 4 (id=1573): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="910200000000005500000000000000ccc19b0fd41479db3931ca5fd3169bc10085000800170000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x4, 0xf5, &(0x7f0000000600)=""/245, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0), 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1f, 0xb7, &(0x7f0000000940)=""/183, 0x41100, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500), 0x280080, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000700000000000000001000009500000000000000183500000200000000000000000000009500000000000000d7d45b4005799a84bd9c59a1ebd79ff51739bcff07667ab49b4129dd5c3610826dd536d8f7404f93acf26c61b431743491c1f6e0286dc67010404f8b6adc59eabd678141168aa6eaf7147ee8fa51ad73ceb17e941da44a26b8f336d05f9416f35e99f1ca"], &(0x7f0000000400)='syzkaller\x00', 0x56a4, 0x34, &(0x7f0000000440)=""/52, 0x41100, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x1, 0xa6, 0x3}, 0x10, r4, 0x0, 0x0, &(0x7f0000000540)=[r5, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000180)={&(0x7f0000000040)="00f7e6", 0x3}}, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) dup(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1bb70000040000008efba950eb84bd971502f0d5b5ef848d4d8751644c52001fceae898b960c638dc4baea9b7cf4161ae1886f5ba3df1b9f81c55510417e69bd4733b762dba327376da58f6f9203bfa042278204632819dad185c4236c8cb2a391d0afc8a033"], &(0x7f0000000040)='GPL\x00', 0x1, 0xbd, &(0x7f0000000180)=""/189, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x401, 0xfffff000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) migrate_pages(r0, 0xd, &(0x7f0000000040)=0x80000000, &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0) 21.660103266s ago: executing program 4 (id=1575): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 17.924318885s ago: executing program 4 (id=1578): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xce9e1000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) quotactl_fd$Q_SYNC(r2, 0x9f2e01b4da99bc97, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 6.08585719s ago: executing program 1 (id=1603): socket(0x1, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYRES32=r6, @ANYBLOB="6480", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000002180)) 5.025553405s ago: executing program 1 (id=1605): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2], 0x24}}, 0x0) 4.749275406s ago: executing program 1 (id=1607): r0 = socket$inet6(0xa, 0x6, 0x2000005) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xff00000000000000, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903, 0x2}, 0x21) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, &(0x7f0000000140)={0x1, 0x1, @value=0x1012}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x931, 0x0, 0x0}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000480)={0x20004, 0xffffffff, 0x5, 0xffffffff, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB="23408c86c9bad056313a"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000380)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb9, 0x40, 0x40000000}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0xc, 0x0, 0x21980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f00000000c0), 0x4) getsockopt$inet6_buf(r11, 0x29, 0x6, &(0x7f0000000140)=""/25, &(0x7f0000000040)=0xfffffffffffffccf) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, 0x0, 0x20}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) 4.125989001s ago: executing program 3 (id=1608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480), 0x0, 0x102, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x800, 0x3, 0x56}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.269589843s ago: executing program 1 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000140)) 3.077443079s ago: executing program 1 (id=1610): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10, 0x60000000}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xa9, 0x1, 0x8, [{@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x3}, {@local, 0xffffffff}, {@loopback, 0xfff}, {@empty, 0x600}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x45}, {@multicast2, 0x3}, {@loopback}, {@broadcast, 0x40}]}]}}}], 0x78}}], 0x1, 0xa20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800090401000000000000000a00940f0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, &(0x7f0000000440)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/209}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x18, &(0x7f0000000000), 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000300)={@remote, r12}, 0x14) socket$key(0xf, 0x3, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) 3.072630016s ago: executing program 3 (id=1611): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[], 0x0) (fail_nth: 2) 2.644292659s ago: executing program 3 (id=1612): socket(0x1, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYRES32=r6, @ANYBLOB="6480", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000002180)) 1.285271044s ago: executing program 3 (id=1613): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x9, 0x8, 0x0) r0 = mq_open(&(0x7f0000000000)='\x00', 0x80, 0x140, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x7}) mq_timedreceive(r0, &(0x7f00000000c0)=""/176, 0xb0, 0xa, &(0x7f0000000180)={0x77359400}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.147828346s ago: executing program 3 (id=1614): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_connect(0x3, 0x8c6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8001, 0x9}) r3 = syz_open_procfs(r2, &(0x7f0000000100)='uid_map\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=r7, @ANYBLOB="0a003400020202020202000008003500000000000800010001ac0f000a000600ffffffffffff000009000700ed4a9454370000000500080005000000080026"], 0x60}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x38}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x1ee400000, &(0x7f0000000240)=""/114) readv(r10, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000aa7e19349a4a1f783000000000b060070b492"], 0x0}, 0x0) 549.13776ms ago: executing program 1 (id=1615): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xf) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x298, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x1a0, 0x160, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x0, 0xff], [], 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x245c3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xee) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x2, 0x8001, 0xffff9e15, 0x4}, 0x10) close(r2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x40, @mcast2, 0x7fffffff}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x3}, @in6={0xa, 0x4e24, 0x518f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, @in6={0xa, 0x4e24, 0x7, @private2, 0x301}], 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r5, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) read(r5, &(0x7f0000000000)=""/63, 0x3f) shutdown(r5, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='smackfstransmute', &(0x7f0000000700)='{\x00', 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400c7005200000100000000000000001d000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1616): r0 = open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x88, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000 ']) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x62) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000300)=""/191) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x7f01, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x8}) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x200}}}}}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010003"], 0x0) kernel console output (not intermixed with test programs): ous mode [ 602.212106][T10771] hsr_slave_1: entered promiscuous mode [ 602.221087][T10771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.228757][T10771] Cannot create hsr debugfs directory [ 602.238295][T10759] hsr_slave_0: entered promiscuous mode [ 602.244429][T10759] hsr_slave_1: entered promiscuous mode [ 602.254700][T10759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.262525][T10759] Cannot create hsr debugfs directory [ 602.470279][ T5399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.522768][ T5221] Bluetooth: hci6: command tx timeout [ 602.535312][ T5399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.660986][ T5399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.760578][ T5399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.946542][ T5399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.957591][ T5399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 5 - 0 [ 603.044762][ T5399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.055192][ T5399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 5 - 0 [ 603.082694][T10739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 603.101121][T10739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 603.155016][ T5399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.166245][ T5399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 5 - 0 [ 603.181113][T10739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 603.191439][T10739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.255831][ T5399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.266509][ T5399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 5 - 0 [ 603.333036][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.402078][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.499920][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.507037][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.536198][ T5399] bridge_slave_1: left allmulticast mode [ 603.543817][ T5399] bridge_slave_1: left promiscuous mode [ 603.558929][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.578840][ T5399] bridge_slave_0: left allmulticast mode [ 603.584527][ T5399] bridge_slave_0: left promiscuous mode [ 603.602389][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.621270][ T5399] bridge_slave_1: left allmulticast mode [ 603.626953][ T5399] bridge_slave_1: left promiscuous mode [ 603.646480][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.668882][ T5399] bridge_slave_0: left allmulticast mode [ 603.674560][ T5399] bridge_slave_0: left promiscuous mode [ 603.687559][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.707497][ T5399] bridge_slave_1: left allmulticast mode [ 603.713173][ T5399] bridge_slave_1: left promiscuous mode [ 603.719199][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.733490][ T5399] bridge_slave_0: left allmulticast mode [ 603.739314][ T5399] bridge_slave_0: left promiscuous mode [ 603.745012][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.763123][ T5399] bridge_slave_1: left allmulticast mode [ 603.769430][ T5399] bridge_slave_1: left promiscuous mode [ 603.775503][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.784809][ T5399] bridge_slave_0: left allmulticast mode [ 603.791833][ T5399] bridge_slave_0: left promiscuous mode [ 603.797759][ T5221] Bluetooth: hci2: command tx timeout [ 603.803273][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.812520][ T5399] bridge_slave_1: left allmulticast mode [ 603.818384][ T5399] bridge_slave_1: left promiscuous mode [ 603.824057][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.832651][ T5399] bridge_slave_0: left allmulticast mode [ 603.838439][ T5399] bridge_slave_0: left promiscuous mode [ 603.844051][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.087787][ T5399] bond0 (unregistering): Released all slaves [ 605.206246][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.219747][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.229953][ T5399] bond0 (unregistering): Released all slaves [ 605.247150][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.264964][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.275751][ T5399] bond0 (unregistering): Released all slaves [ 605.395067][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.408839][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.419894][ T5399] bond0 (unregistering): Released all slaves [ 605.544639][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.555100][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.569601][ T5399] bond0 (unregistering): Released all slaves [ 605.695021][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.708168][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.719201][ T5399] bond0 (unregistering): Released all slaves [ 605.759513][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.766627][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.879962][ T5221] Bluetooth: hci2: command tx timeout [ 605.951533][ T5399] tipc: Left network mode [ 606.144444][T10737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 606.325641][T10737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 606.380043][T10737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 606.391547][T10737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 606.522352][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.684561][T10739] veth0_vlan: entered promiscuous mode [ 606.756482][T10739] veth1_vlan: entered promiscuous mode [ 606.811279][T10737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.887003][T10737] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.947190][T10739] veth0_macvtap: entered promiscuous mode [ 607.069300][T10731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 607.091143][T10731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 607.116941][T10731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 607.138541][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.145686][ T7882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.204533][T10731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 607.238867][T10739] veth1_macvtap: entered promiscuous mode [ 607.273870][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.281046][ T7882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.464104][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.476056][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.486742][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.501582][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.511521][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.522114][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.533184][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.543910][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.565552][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.640807][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.654423][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.664789][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.676246][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.686415][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.697194][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.707410][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.718485][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.729820][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.795396][T10739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.811747][T10739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.822672][T10739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.836114][T10739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.970732][T10759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.237692][T10759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.440283][T10759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.639070][T10759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.779390][ T5399] batadv_slave_0: left promiscuous mode [ 608.812894][ T5399] hsr_slave_0: left promiscuous mode [ 608.829529][ T5399] hsr_slave_1: left promiscuous mode [ 608.842599][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.857441][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.878193][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.897406][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.927104][ T5399] hsr_slave_0: left promiscuous mode [ 608.939202][ T5399] hsr_slave_1: left promiscuous mode [ 608.956802][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.967487][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.987388][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.994829][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.024388][ T5399] hsr_slave_0: left promiscuous mode [ 609.031459][ T5399] hsr_slave_1: left promiscuous mode [ 609.048276][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.055731][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.075989][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.091912][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.101593][ T5399] batadv_slave_0: left promiscuous mode [ 609.115538][ T5399] hsr_slave_0: left promiscuous mode [ 609.123453][ T5399] hsr_slave_1: left promiscuous mode [ 609.129879][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.137483][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.145107][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.152700][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.211874][ T5399] veth1_macvtap: left promiscuous mode [ 609.217551][ T5399] veth0_macvtap: left promiscuous mode [ 609.223085][ T5399] veth1_vlan: left promiscuous mode [ 609.229180][ T5399] veth0_vlan: left promiscuous mode [ 609.235887][ T5399] veth1_macvtap: left promiscuous mode [ 609.243418][ T5399] veth0_macvtap: left promiscuous mode [ 609.249140][ T5399] veth1_vlan: left promiscuous mode [ 609.254430][ T5399] veth0_vlan: left promiscuous mode [ 609.261824][ T5399] veth1_macvtap: left promiscuous mode [ 609.267623][ T5399] veth0_macvtap: left promiscuous mode [ 609.273292][ T5399] veth1_vlan: left promiscuous mode [ 609.278710][ T5399] veth0_vlan: left promiscuous mode [ 609.285457][ T5399] veth1_macvtap: left promiscuous mode [ 609.291484][ T5399] veth0_macvtap: left promiscuous mode [ 609.296993][ T5399] veth1_vlan: left promiscuous mode [ 609.302405][ T5399] veth0_vlan: left promiscuous mode [ 609.566785][ T5399] infiniband syz2: set down [ 610.033516][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 610.076423][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 610.654767][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 610.664141][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.674573][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 610.691356][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 610.699839][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 610.707445][ T4613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.111919][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 611.156526][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 611.928032][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 611.976895][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 612.762780][ T5221] Bluetooth: hci3: command tx timeout [ 612.786479][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 612.796015][ T5413] smc: removing ib device syz2 [ 612.833952][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 613.261276][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.269232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.290086][T10731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.354261][T10737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.469755][ T7880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.527407][ T7880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.974937][T10771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 614.365106][T10771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 614.603245][T10771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 614.646956][T10771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 614.817335][T10759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.847372][ T5221] Bluetooth: hci3: command tx timeout [ 614.956764][T10759] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.092912][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.100098][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.167482][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 615.176597][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 615.185649][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1349'. [ 615.340426][T10737] veth0_vlan: entered promiscuous mode [ 615.792528][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.799710][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.210305][T10771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.551276][T10771] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.667395][T10938] chnl_net:caif_netlink_parms(): no params data found [ 616.709439][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.716561][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.823656][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.830850][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.931343][ T5221] Bluetooth: hci3: command tx timeout [ 617.861940][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.880572][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.889674][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.900262][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.915313][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 617.924961][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.989972][T10938] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.005954][T10938] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.006130][T10938] bridge_slave_0: entered allmulticast mode [ 618.007229][T10938] bridge_slave_0: entered promiscuous mode [ 618.009868][T10938] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.009929][T10938] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.010054][T10938] bridge_slave_1: entered allmulticast mode [ 618.012342][T10938] bridge_slave_1: entered promiscuous mode [ 618.115362][T10938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.130202][T10938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.302089][T10938] team0: Port device team_slave_0 added [ 618.343467][T10938] team0: Port device team_slave_1 added [ 618.828562][T10759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.946895][T10938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.958345][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.985251][T10938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.004680][ T5221] Bluetooth: hci3: command tx timeout [ 619.040555][T10938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.054067][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.097718][T10938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.213539][T10938] hsr_slave_0: entered promiscuous mode [ 619.222772][T10938] hsr_slave_1: entered promiscuous mode [ 619.420682][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.460565][T10771] veth0_vlan: entered promiscuous mode [ 619.472374][T10771] veth1_vlan: entered promiscuous mode [ 619.543500][T10771] veth0_macvtap: entered promiscuous mode [ 619.620761][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 619.629990][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 619.639218][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1356'. [ 619.999124][ T5221] Bluetooth: hci0: command tx timeout [ 620.116040][T10978] chnl_net:caif_netlink_parms(): no params data found [ 620.258648][T10771] veth1_macvtap: entered promiscuous mode [ 620.309327][T10759] veth0_vlan: entered promiscuous mode [ 620.508676][T10759] veth1_vlan: entered promiscuous mode [ 620.588929][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.627316][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.660997][ T5399] IPVS: stop unused estimator thread 0... [ 620.679497][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.691647][T10978] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.707074][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.742019][T10978] bridge_slave_0: entered allmulticast mode [ 620.766930][T10978] bridge_slave_0: entered promiscuous mode [ 620.796543][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.819672][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.842906][T10978] bridge_slave_1: entered allmulticast mode [ 620.865873][T10978] bridge_slave_1: entered promiscuous mode [ 620.962017][T10759] veth0_macvtap: entered promiscuous mode [ 620.976717][T10759] veth1_macvtap: entered promiscuous mode [ 621.019855][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.074787][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.092892][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.104384][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.117506][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.129183][T10759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.152279][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.172437][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.186823][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.205888][T10771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.221193][T10771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.234199][T10771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.258429][T10771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.287250][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.363175][T10978] team0: Port device team_slave_0 added [ 621.412751][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.425250][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.439633][T10759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.450364][T10759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.461314][T10759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.473600][T10978] team0: Port device team_slave_1 added [ 621.522988][T10759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.533048][T10759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.542517][T10759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.551292][T10759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.562104][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.584407][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.615129][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.636804][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.644350][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.672104][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.790883][T10978] hsr_slave_0: entered promiscuous mode [ 621.797185][T10978] hsr_slave_1: entered promiscuous mode [ 621.804057][T10978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.812029][T10978] Cannot create hsr debugfs directory [ 621.999475][T11017] netlink: 'syz.2.1360': attribute type 21 has an invalid length. [ 622.011795][T11017] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1360'. [ 622.021706][T11017] netlink: 'syz.2.1360': attribute type 4 has an invalid length. [ 622.030097][T11017] netlink: 'syz.2.1360': attribute type 3 has an invalid length. [ 622.038074][ T5221] Bluetooth: hci0: command tx timeout [ 622.043993][T11017] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1360'. [ 622.076665][ T7880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.097231][ T7880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.126860][T10938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 622.135266][T11017] netlink: 'syz.2.1360': attribute type 21 has an invalid length. [ 622.145409][T11017] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1360'. [ 622.155528][T11017] netlink: 'syz.2.1360': attribute type 4 has an invalid length. [ 622.181185][T11017] netlink: 'syz.2.1360': attribute type 5 has an invalid length. [ 622.189411][T11017] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1360'. [ 622.249276][T10938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 622.272104][ T7882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.282416][ T7882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.314270][T10938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 622.338070][T10938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.364190][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.374705][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.384890][ T5399] bridge_slave_1: left allmulticast mode [ 622.394822][ T5399] bridge_slave_1: left promiscuous mode [ 622.401674][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.410848][ T5399] bridge_slave_0: left allmulticast mode [ 622.416510][ T5399] bridge_slave_0: left promiscuous mode [ 622.423789][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.433266][ T5399] bridge_slave_1: left allmulticast mode [ 622.440035][ T5399] bridge_slave_1: left promiscuous mode [ 622.445756][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.454644][ T5399] bridge_slave_0: left allmulticast mode [ 622.460398][ T5399] bridge_slave_0: left promiscuous mode [ 622.466047][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.976632][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.992267][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.003736][ T5399] bond0 (unregistering): Released all slaves [ 623.115483][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.126553][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.142203][ T5399] bond0 (unregistering): Released all slaves [ 623.296456][ T7882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.317635][ T7882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.362256][ T5399] hsr_slave_0: left promiscuous mode [ 623.371722][ T5399] hsr_slave_1: left promiscuous mode [ 623.410291][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.438574][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.461599][ T5399] hsr_slave_0: left promiscuous mode [ 623.475323][ T5399] hsr_slave_1: left promiscuous mode [ 623.482336][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.501324][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.533235][ T5399] veth0_vlan: left promiscuous mode [ 623.710652][T10941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 623.889792][T10941] usb 4-1: Using ep0 maxpacket: 16 [ 623.927189][T10941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.082311][T10941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.118693][ T5221] Bluetooth: hci0: command tx timeout [ 624.199611][T10941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.218411][T10941] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 624.228320][T10941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.239918][T10941] usb 4-1: config 0 descriptor?? [ 624.474998][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 624.523031][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 624.608752][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.615092][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.665326][T10941] ryos 0003:1E7D:31CE.0003: unknown main item tag 0x0 [ 624.676773][T10941] ryos 0003:1E7D:31CE.0003: unbalanced delimiter at end of report description [ 624.706303][T10941] ryos 0003:1E7D:31CE.0003: parse failed [ 624.712127][T10941] ryos 0003:1E7D:31CE.0003: probe with driver ryos failed with error -22 [ 624.882818][T10941] usb 4-1: USB disconnect, device number 17 [ 625.334374][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 625.365608][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 625.672815][ T29] audit: type=1326 audit(1728207102.764:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.3.1365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99f157dff9 code=0x0 [ 626.353497][ T5221] Bluetooth: hci0: command tx timeout [ 626.729975][T10938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.859781][T10938] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.037174][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.044327][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.219059][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.226232][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.305396][T10938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.356161][T10978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 627.381656][T10978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 627.473849][T10978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 627.522626][T10978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 627.581416][T11070] mmap: syz.3.1373 (11070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 627.696429][T10978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.756156][T10978] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.814382][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.821568][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.861626][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.868866][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.985505][T10938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.273096][T10938] veth0_vlan: entered promiscuous mode [ 628.323936][T10941] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 629.110841][T10941] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 629.121360][T10941] usb 4-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 629.134277][T10938] veth1_vlan: entered promiscuous mode [ 629.137487][T10941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 629.157778][T10941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.184900][T10941] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.206409][T10941] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.217783][T10941] usb 4-1: Product: syz [ 629.257386][T10941] usb 4-1: Manufacturer: syz [ 629.304541][T10938] veth0_macvtap: entered promiscuous mode [ 629.455483][T10938] veth1_macvtap: entered promiscuous mode [ 629.536853][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.560718][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.596292][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.634701][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.637229][T10941] usb 4-1: USB disconnect, device number 18 [ 629.686793][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.714235][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.737900][T10938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.755189][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.774279][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.800960][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.821110][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.843162][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.854450][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.885012][T10938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.965265][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 630.275056][T10938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.507422][T10938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.539843][T10938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.580078][T10938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.627161][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.810086][T11131] FAULT_INJECTION: forcing a failure. [ 630.810086][T11131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.896931][ T29] audit: type=1326 audit(1728207107.964:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11123 comm="syz.0.1379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6b7dff9 code=0x0 [ 630.927650][T11131] CPU: 1 UID: 0 PID: 11131 Comm: syz.3.1381 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 630.938441][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.948517][T11131] Call Trace: [ 630.951809][T11131] [ 630.954746][T11131] dump_stack_lvl+0x241/0x360 [ 630.959446][T11131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.964670][T11131] ? __pfx__printk+0x10/0x10 [ 630.969290][T11131] ? __pfx_lock_release+0x10/0x10 [ 630.974348][T11131] should_fail_ex+0x3b0/0x4e0 [ 630.979055][T11131] _copy_from_user+0x2f/0xe0 [ 630.983675][T11131] copy_msghdr_from_user+0xae/0x680 [ 630.988888][T11131] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 630.994697][T11131] __sys_sendmmsg+0x36d/0x730 [ 630.999382][T11131] ? __pfx___sys_sendmmsg+0x10/0x10 [ 631.004590][T11131] ? __pfx_lock_release+0x10/0x10 [ 631.009718][T11131] ? kstrtouint_from_user+0x128/0x190 [ 631.015111][T11131] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 631.020994][T11131] ? ksys_write+0x229/0x2b0 [ 631.025516][T11131] ? __pfx_lock_release+0x10/0x10 [ 631.030543][T11131] ? vfs_write+0x7bf/0xc90 [ 631.034962][T11131] ? kmem_cache_free+0x1a2/0x420 [ 631.039907][T11131] ? __mutex_unlock_slowpath+0x21d/0x750 [ 631.045549][T11131] ? __fget_files+0x3f3/0x470 [ 631.050239][T11131] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 631.056228][T11131] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 631.062560][T11131] ? do_syscall_64+0x100/0x230 [ 631.067325][T11131] __x64_sys_sendmmsg+0xa0/0xb0 [ 631.072175][T11131] do_syscall_64+0xf3/0x230 [ 631.076675][T11131] ? clear_bhb_loop+0x35/0x90 [ 631.081344][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.087237][T11131] RIP: 0033:0x7f99f157dff9 [ 631.091649][T11131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.111256][T11131] RSP: 002b:00007f99f2455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 631.119672][T11131] RAX: ffffffffffffffda RBX: 00007f99f1735f80 RCX: 00007f99f157dff9 [ 631.127641][T11131] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 631.135603][T11131] RBP: 00007f99f2455090 R08: 0000000000000000 R09: 0000000000000000 [ 631.143569][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.151531][T11131] R13: 0000000000000000 R14: 00007f99f1735f80 R15: 00007fffab3e7428 [ 631.159505][T11131] [ 631.708629][ T5399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.716922][ T5399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.790348][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.806571][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.125274][T11165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1385'. [ 632.327492][T11165] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1385'. [ 632.493830][T11168] trusted_key: encrypted_key: insufficient parameters specified [ 632.979273][T10978] veth0_vlan: entered promiscuous mode [ 633.067789][T10978] veth1_vlan: entered promiscuous mode [ 633.146397][T11175] FAULT_INJECTION: forcing a failure. [ 633.146397][T11175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.166693][T11175] CPU: 1 UID: 0 PID: 11175 Comm: syz.0.1386 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 633.177506][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 633.184767][T10978] veth0_macvtap: entered promiscuous mode [ 633.187561][T11175] Call Trace: [ 633.187598][T11175] [ 633.187608][T11175] dump_stack_lvl+0x241/0x360 [ 633.187636][T11175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.209421][T11175] ? __pfx__printk+0x10/0x10 [ 633.214040][T11175] ? __pfx_lock_release+0x10/0x10 [ 633.219090][T11175] ? __lock_acquire+0x1384/0x2050 [ 633.224148][T11175] should_fail_ex+0x3b0/0x4e0 [ 633.228859][T11175] _copy_from_user+0x2f/0xe0 [ 633.233481][T11175] kstrtouint_from_user+0xc6/0x190 [ 633.238617][T11175] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 633.244363][T11175] ? __pfx_lock_acquire+0x10/0x10 [ 633.249144][T10978] veth1_macvtap: entered promiscuous mode [ 633.249410][T11175] proc_fail_nth_write+0xaa/0x2d0 [ 633.260162][T11175] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 633.266073][T11175] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 633.271733][T11175] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 633.277388][T11175] vfs_write+0x29c/0xc90 [ 633.281655][T11175] ? __pfx_vfs_write+0x10/0x10 [ 633.286442][T11175] ? __fget_files+0x3f3/0x470 [ 633.291153][T11175] ? fdget_pos+0x24e/0x320 [ 633.295594][T11175] ksys_write+0x183/0x2b0 [ 633.299615][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.299925][T11175] ? __pfx_ksys_write+0x10/0x10 [ 633.315186][T11175] ? do_syscall_64+0x100/0x230 [ 633.319971][T11175] ? do_syscall_64+0xb6/0x230 [ 633.324671][T11175] do_syscall_64+0xf3/0x230 [ 633.329189][T11175] ? clear_bhb_loop+0x35/0x90 [ 633.331555][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.333863][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.349545][T11175] RIP: 0033:0x7fb6e6b7cadf [ 633.353973][T11175] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 633.353980][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.353999][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.373569][T11175] RSP: 002b:00007fb6e79b8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 633.373593][T11175] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6e6b7cadf [ 633.373606][T11175] RDX: 0000000000000001 RSI: 00007fb6e79b80a0 RDI: 0000000000000005 [ 633.373618][T11175] RBP: 00007fb6e79b8090 R08: 0000000000000000 R09: 0000000000000000 [ 633.373631][T11175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 633.373643][T11175] R13: 0000000000000000 R14: 00007fb6e6d35f80 R15: 00007ffc7a5959c8 [ 633.373669][T11175] [ 633.517254][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.529570][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.539898][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.550612][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.615351][T10978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.666876][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.755102][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.772923][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.988737][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 634.002153][T10550] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 634.737744][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.760105][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.927103][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.367886][T10550] usb 4-1: Using ep0 maxpacket: 32 [ 635.377499][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.415545][T10550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.426600][T10550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.436733][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.446671][T10550] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 635.453555][T10978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.460021][T10550] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 635.495074][T10550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.522236][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 635.635246][T10550] usb 4-1: config 0 descriptor?? [ 635.666704][T10978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.726686][T10978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.735876][T10978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.761827][T10978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.009612][T11217] Cannot find map_set index 0 as target [ 636.848519][ T7880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.907379][ T7880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.989469][ T5399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.999045][ T5399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.329641][T10550] usbhid 4-1:0.0: can't add hid device: -71 [ 637.336307][T10550] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 637.354682][T10550] usb 4-1: USB disconnect, device number 19 [ 637.377423][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 637.668236][ T5221] Bluetooth: Frame is too long (len 10, expected len 9) [ 637.849360][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 637.907100][ T9] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 637.985864][ T9] usb 1-1: config 0 has no interface number 0 [ 638.031326][ T9] usb 1-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 638.080475][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.107589][ T9] usb 1-1: Product: syz [ 638.111890][ T9] usb 1-1: Manufacturer: syz [ 638.116554][ T9] usb 1-1: SerialNumber: syz [ 638.175294][T11247] cgroup: none used incorrectly [ 638.318725][ T9] usb 1-1: config 0 descriptor?? [ 638.327194][ T9] usb-storage 1-1:0.244: USB Mass Storage device detected [ 638.372418][T11251] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 638.447385][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 638.456474][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 638.465456][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1399'. [ 639.097806][T11247] orangefs_mount: mount request failed with -4 [ 639.927672][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 640.475799][ T8] usb 1-1: USB disconnect, device number 12 [ 640.741554][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 641.717508][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 641.725785][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.743088][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.784266][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 641.810374][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.828297][ T51] usb 3-1: config 0 descriptor?? [ 641.858904][ T51] hub 3-1:0.0: USB hub found [ 641.868146][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 641.878894][T11308] FAULT_INJECTION: forcing a failure. [ 641.878894][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.915963][T11308] CPU: 0 UID: 0 PID: 11308 Comm: syz.1.1412 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 641.926779][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.936837][T11308] Call Trace: [ 641.940113][T11308] [ 641.943053][T11308] dump_stack_lvl+0x241/0x360 [ 641.947745][T11308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.952952][T11308] ? __pfx__printk+0x10/0x10 [ 641.957569][T11308] ? snprintf+0xda/0x120 [ 641.961835][T11308] should_fail_ex+0x3b0/0x4e0 [ 641.966531][T11308] _copy_to_user+0x2f/0xb0 [ 641.970976][T11308] simple_read_from_buffer+0xca/0x150 [ 641.976382][T11308] proc_fail_nth_read+0x1e9/0x250 [ 641.981429][T11308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.986994][T11308] ? rw_verify_area+0x55e/0x6f0 [ 641.991847][T11308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.997401][T11308] vfs_read+0x201/0xbc0 [ 642.001552][T11308] ? __pfx_lock_release+0x10/0x10 [ 642.006596][T11308] ? __pfx_vfs_read+0x10/0x10 [ 642.011300][T11308] ? __fget_files+0x3f3/0x470 [ 642.016001][T11308] ? fdget_pos+0x24e/0x320 [ 642.020413][T11308] ksys_read+0x183/0x2b0 [ 642.024650][T11308] ? __pfx_ksys_read+0x10/0x10 [ 642.029403][T11308] ? do_syscall_64+0x100/0x230 [ 642.034184][T11308] ? do_syscall_64+0xb6/0x230 [ 642.038861][T11308] do_syscall_64+0xf3/0x230 [ 642.043374][T11308] ? clear_bhb_loop+0x35/0x90 [ 642.048056][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.053964][T11308] RIP: 0033:0x7f3bdf57ca3c [ 642.058381][T11308] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 642.078004][T11308] RSP: 002b:00007f3be0351030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.086411][T11308] RAX: ffffffffffffffda RBX: 00007f3bdf736058 RCX: 00007f3bdf57ca3c [ 642.094393][T11308] RDX: 000000000000000f RSI: 00007f3be03510a0 RDI: 0000000000000006 [ 642.102369][T11308] RBP: 00007f3be0351090 R08: 0000000000000000 R09: 0000000000000000 [ 642.110347][T11308] R10: 00000000200077c0 R11: 0000000000000246 R12: 0000000000000001 [ 642.118307][T11308] R13: 0000000000000001 R14: 00007f3bdf736058 R15: 00007ffe0ad00368 [ 642.126303][T11308] [ 642.411503][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 642.419659][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.050402][ T51] hub 3-1:0.0: 1 port detected [ 643.134345][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.158635][ T51] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 643.175934][ T51] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 643.264738][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 643.669633][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 643.681618][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 643.690211][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 643.728771][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.742989][ T51] usb 3-1: USB disconnect, device number 9 [ 643.752108][ T9] usb 1-1: config 0 descriptor?? [ 643.788793][ T9] usb 1-1: can't set config #0, error -71 [ 644.532558][ T9] usb 1-1: USB disconnect, device number 13 [ 644.987447][ T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 645.168175][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 645.175150][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.195966][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.216820][ T51] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 645.286858][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.321968][ T51] usb 5-1: config 0 descriptor?? [ 645.744784][ T51] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0xe [ 646.159102][ T4613] Bluetooth: Frame is too long (len 10, expected len 9) [ 646.769162][ T51] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 648.135566][ T9] usb 5-1: USB disconnect, device number 19 [ 649.092100][ T51] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 649.366100][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1427'. [ 649.440686][T11405] bond0: entered promiscuous mode [ 649.445773][T11405] bond_slave_0: entered promiscuous mode [ 649.457519][T11405] bond_slave_1: entered promiscuous mode [ 649.602108][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 651.357409][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 651.518048][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.568098][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.637568][ T8] usb 5-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 651.701865][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.776534][ T51] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 651.782231][ T8] usb 5-1: config 0 descriptor?? [ 651.785177][ T51] usb 3-1: can't read configurations, error -71 [ 651.796826][T11453] FAULT_INJECTION: forcing a failure. [ 651.796826][T11453] name failslab, interval 1, probability 0, space 0, times 0 [ 651.929559][T11453] CPU: 0 UID: 0 PID: 11453 Comm: syz.0.1437 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 651.940376][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.950453][T11453] Call Trace: [ 651.953742][T11453] [ 651.956681][T11453] dump_stack_lvl+0x241/0x360 [ 651.961384][T11453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.966605][T11453] ? __pfx__printk+0x10/0x10 [ 651.971224][T11453] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 651.977238][T11453] ? __pfx___might_resched+0x10/0x10 [ 651.982549][T11453] should_fail_ex+0x3b0/0x4e0 [ 651.987260][T11453] should_failslab+0xac/0x100 [ 651.991954][T11453] ? __alloc_skb+0x1c3/0x440 [ 651.996571][T11453] kmem_cache_alloc_node_noprof+0x71/0x320 [ 652.002404][T11453] __alloc_skb+0x1c3/0x440 [ 652.006839][T11453] ? __pfx___alloc_skb+0x10/0x10 [ 652.011880][T11453] ? netlink_autobind+0xd6/0x2f0 [ 652.016918][T11453] ? netlink_autobind+0x2b0/0x2f0 [ 652.021965][T11453] netlink_sendmsg+0x638/0xcb0 [ 652.026760][T11453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.032078][T11453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.037380][T11453] __sock_sendmsg+0x221/0x270 [ 652.042084][T11453] ____sys_sendmsg+0x52a/0x7e0 [ 652.046879][T11453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.052200][T11453] __sys_sendmsg+0x292/0x380 [ 652.056816][T11453] ? __pfx___sys_sendmsg+0x10/0x10 [ 652.061956][T11453] ? __pfx_vfs_write+0x10/0x10 [ 652.066762][T11453] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.073118][T11453] ? do_syscall_64+0x100/0x230 [ 652.077910][T11453] ? do_syscall_64+0xb6/0x230 [ 652.082605][T11453] do_syscall_64+0xf3/0x230 [ 652.087122][T11453] ? clear_bhb_loop+0x35/0x90 [ 652.091841][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.097764][T11453] RIP: 0033:0x7fb6e6b7dff9 [ 652.102193][T11453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.121816][T11453] RSP: 002b:00007fb6e79b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.130254][T11453] RAX: ffffffffffffffda RBX: 00007fb6e6d35f80 RCX: 00007fb6e6b7dff9 [ 652.138244][T11453] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 652.146233][T11453] RBP: 00007fb6e79b8090 R08: 0000000000000000 R09: 0000000000000000 [ 652.154235][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.162224][T11453] R13: 0000000000000000 R14: 00007fb6e6d35f80 R15: 00007ffc7a5959c8 [ 652.170389][T11453] [ 652.400578][ T4613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 652.421836][ T4613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 652.430377][ T4613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 652.442632][ T4613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 652.450690][ T4613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 652.458359][ T4613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 652.691817][ T8] hid (null): bogus close delimiter [ 652.721577][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 652.731063][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 652.740135][T11474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1440'. [ 653.247113][ T8] lenovo 0003:04B3:3103.0005: bogus close delimiter [ 653.338055][ T8] lenovo 0003:04B3:3103.0005: item 0 1 2 10 parsing failed [ 653.346619][ T8] lenovo 0003:04B3:3103.0005: hid_parse failed [ 653.353640][ T8] lenovo 0003:04B3:3103.0005: probe with driver lenovo failed with error -22 [ 653.379280][ T8] usb 5-1: USB disconnect, device number 20 [ 653.641990][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1443'. [ 653.762980][T11469] chnl_net:caif_netlink_parms(): no params data found [ 654.033209][T11500] xt_TPROXY: Can be used only with -p tcp or -p udp [ 654.059422][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 654.315686][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 654.416940][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.563792][ T8] usb 5-1: Product: syz [ 654.680291][ T8] usb 5-1: Manufacturer: syz [ 654.680705][ T4613] Bluetooth: hci1: command tx timeout [ 654.685284][ T8] usb 5-1: SerialNumber: syz [ 654.712638][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 654.820309][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 655.058341][ T51] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 655.657860][ T5301] usb 5-1: USB disconnect, device number 21 [ 655.682209][T11469] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.702812][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.719022][T11469] bridge_slave_0: entered allmulticast mode [ 655.737437][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 655.744296][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.757429][T11469] bridge_slave_0: entered promiscuous mode [ 655.764261][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.788904][T11469] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.796011][T11469] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.817385][ T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 655.867529][ T51] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 655.897623][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.904071][T11469] bridge_slave_1: entered allmulticast mode [ 655.914724][T11469] bridge_slave_1: entered promiscuous mode [ 655.914837][ T51] usb 2-1: config 0 descriptor?? [ 656.148592][ T9] usb 5-1: Service connection timeout for: 256 [ 656.155919][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 656.166406][ T5399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.166655][ T9] ath9k_htc: Failed to initialize the device [ 656.540638][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 656.557202][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 656.566665][T11534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1450'. [ 656.748419][ T5301] usb 5-1: ath9k_htc: USB layer deinitialized [ 657.153017][ T5221] Bluetooth: hci1: command tx timeout [ 657.569526][T11536] Cannot find map_set index 0 as target [ 657.721761][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 657.753805][ T5399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.836685][T11469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.863961][T11469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.874255][T11540] FAULT_INJECTION: forcing a failure. [ 657.874255][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 657.888413][ T8] usb 1-1: device descriptor read/64, error -71 [ 657.920688][T11540] CPU: 0 UID: 0 PID: 11540 Comm: syz.4.1453 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 657.931490][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.941545][T11540] Call Trace: [ 657.944825][T11540] [ 657.947750][T11540] dump_stack_lvl+0x241/0x360 [ 657.952426][T11540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.957624][T11540] ? __pfx__printk+0x10/0x10 [ 657.962224][T11540] ? fs_reclaim_acquire+0x93/0x140 [ 657.967340][T11540] ? __pfx___might_resched+0x10/0x10 [ 657.972636][T11540] should_fail_ex+0x3b0/0x4e0 [ 657.977321][T11540] ? tomoyo_encode+0x26f/0x540 [ 657.982082][T11540] should_failslab+0xac/0x100 [ 657.986751][T11540] ? tomoyo_encode+0x26f/0x540 [ 657.991513][T11540] __kmalloc_noprof+0xd8/0x400 [ 657.996278][T11540] tomoyo_encode+0x26f/0x540 [ 658.000873][T11540] tomoyo_realpath_from_path+0x59e/0x5e0 [ 658.006516][T11540] tomoyo_path_number_perm+0x23a/0x880 [ 658.011978][T11540] ? tomoyo_path_number_perm+0x208/0x880 [ 658.017622][T11540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 658.023630][T11540] ? __fget_files+0x29/0x470 [ 658.028224][T11540] ? __fget_files+0x3f3/0x470 [ 658.032905][T11540] security_file_ioctl+0xc6/0x2a0 [ 658.037927][T11540] __se_sys_ioctl+0x47/0x170 [ 658.042523][T11540] do_syscall_64+0xf3/0x230 [ 658.047021][T11540] ? clear_bhb_loop+0x35/0x90 [ 658.051702][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.057594][T11540] RIP: 0033:0x7f817137dff9 [ 658.062003][T11540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.081608][T11540] RSP: 002b:00007f8170dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.090034][T11540] RAX: ffffffffffffffda RBX: 00007f8171535f80 RCX: 00007f817137dff9 [ 658.098013][T11540] RDX: 0000000020000000 RSI: 0000000040085112 RDI: 0000000000000003 [ 658.105997][T11540] RBP: 00007f8170dff090 R08: 0000000000000000 R09: 0000000000000000 [ 658.113971][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.121947][T11540] R13: 0000000000000000 R14: 00007f8171535f80 R15: 00007ffc2b60bda8 [ 658.129963][T11540] [ 658.146149][T11542] FAULT_INJECTION: forcing a failure. [ 658.146149][T11542] name failslab, interval 1, probability 0, space 0, times 0 [ 658.159151][T11542] CPU: 1 UID: 0 PID: 11542 Comm: syz.2.1454 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 658.163079][T11540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 658.169916][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 658.169931][T11542] Call Trace: [ 658.169939][T11542] [ 658.169948][T11542] dump_stack_lvl+0x241/0x360 [ 658.169976][T11542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.169995][T11542] ? __pfx__printk+0x10/0x10 [ 658.170023][T11542] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 658.170044][T11542] ? __pfx___might_resched+0x10/0x10 [ 658.170072][T11542] should_fail_ex+0x3b0/0x4e0 [ 658.170102][T11542] should_failslab+0xac/0x100 [ 658.227949][T11542] __kmalloc_cache_node_noprof+0x74/0x300 [ 658.233708][T11542] ? __get_vm_area_node+0x113/0x270 [ 658.238934][T11542] __get_vm_area_node+0x113/0x270 [ 658.243985][T11542] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 658.249910][T11542] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.255480][T11542] ? mark_lock+0x9a/0x360 [ 658.259851][T11542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 658.266207][T11542] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.271768][T11542] __vmalloc_noprof+0x79/0x90 [ 658.276463][T11542] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.277648][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 658.282015][T11542] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.282043][T11542] ? bpf_prog_alloc+0x28/0x1b0 [ 658.282068][T11542] bpf_prog_alloc+0x3a/0x1b0 [ 658.304309][T11542] bpf_prog_load+0x7f7/0x20f0 [ 658.309006][T11542] ? __pfx_bpf_prog_load+0x10/0x10 [ 658.314111][T11542] ? __pfx___might_resched+0x10/0x10 [ 658.319413][T11542] ? __might_fault+0xc6/0x120 [ 658.324103][T11542] __sys_bpf+0x4ee/0x810 [ 658.328350][T11542] ? __pfx___sys_bpf+0x10/0x10 [ 658.333127][T11542] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 658.339112][T11542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 658.345453][T11542] ? do_syscall_64+0x100/0x230 [ 658.350237][T11542] __x64_sys_bpf+0x7c/0x90 [ 658.354645][T11542] do_syscall_64+0xf3/0x230 [ 658.359153][T11542] ? clear_bhb_loop+0x35/0x90 [ 658.363848][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.369765][T11542] RIP: 0033:0x7fde1af7dff9 [ 658.374183][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.393780][T11542] RSP: 002b:00007fde1bcec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.402199][T11542] RAX: ffffffffffffffda RBX: 00007fde1b135f80 RCX: 00007fde1af7dff9 [ 658.410190][T11542] RDX: 0000000000000094 RSI: 00000000200004c0 RDI: 0000000000000005 [ 658.417438][ T8] usb 1-1: device descriptor read/64, error -71 [ 658.418159][T11542] RBP: 00007fde1bcec090 R08: 0000000000000000 R09: 0000000000000000 [ 658.418178][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.418191][T11542] R13: 0000000000000000 R14: 00007fde1b135f80 R15: 00007ffc24e7d718 [ 658.448347][T11542] [ 658.465063][T11542] syz.2.1454: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 658.482402][T11542] CPU: 1 UID: 0 PID: 11542 Comm: syz.2.1454 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 658.493192][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 658.503264][T11542] Call Trace: [ 658.506560][T11542] [ 658.509506][T11542] dump_stack_lvl+0x241/0x360 [ 658.514208][T11542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.519427][T11542] ? __pfx__printk+0x10/0x10 [ 658.524060][T11542] ? __rcu_read_unlock+0xa1/0x110 [ 658.529112][T11542] warn_alloc+0x278/0x410 [ 658.530875][ T8] usb usb1-port1: attempt power cycle [ 658.533480][T11542] ? __pfx_warn_alloc+0x10/0x10 [ 658.533512][T11542] ? __get_vm_area_node+0x113/0x270 [ 658.549020][T11542] ? __get_vm_area_node+0x261/0x270 [ 658.554250][T11542] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 658.560169][T11542] ? mark_lock+0x9a/0x360 [ 658.564515][T11542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 658.570846][T11542] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.576390][T11542] __vmalloc_noprof+0x79/0x90 [ 658.581067][T11542] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.586625][T11542] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 658.591997][T11542] ? bpf_prog_alloc+0x28/0x1b0 [ 658.596764][T11542] bpf_prog_alloc+0x3a/0x1b0 [ 658.601353][T11542] bpf_prog_load+0x7f7/0x20f0 [ 658.606034][T11542] ? __pfx_bpf_prog_load+0x10/0x10 [ 658.611141][T11542] ? __pfx___might_resched+0x10/0x10 [ 658.616434][T11542] ? __might_fault+0xc6/0x120 [ 658.621115][T11542] __sys_bpf+0x4ee/0x810 [ 658.625354][T11542] ? __pfx___sys_bpf+0x10/0x10 [ 658.630119][T11542] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 658.636100][T11542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 658.642427][T11542] ? do_syscall_64+0x100/0x230 [ 658.647192][T11542] __x64_sys_bpf+0x7c/0x90 [ 658.651636][T11542] do_syscall_64+0xf3/0x230 [ 658.656147][T11542] ? clear_bhb_loop+0x35/0x90 [ 658.660838][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.666741][T11542] RIP: 0033:0x7fde1af7dff9 [ 658.671155][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.690761][T11542] RSP: 002b:00007fde1bcec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.699176][T11542] RAX: ffffffffffffffda RBX: 00007fde1b135f80 RCX: 00007fde1af7dff9 [ 658.707145][T11542] RDX: 0000000000000094 RSI: 00000000200004c0 RDI: 0000000000000005 [ 658.715110][T11542] RBP: 00007fde1bcec090 R08: 0000000000000000 R09: 0000000000000000 [ 658.723129][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.731103][T11542] R13: 0000000000000000 R14: 00007fde1b135f80 R15: 00007ffc24e7d718 [ 658.739087][T11542] [ 658.762087][ T5399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.773533][T11542] Mem-Info: [ 658.776769][T11542] active_anon:244 inactive_anon:7741 isolated_anon:0 [ 658.776769][T11542] active_file:13481 inactive_file:40648 isolated_file:0 [ 658.776769][T11542] unevictable:2154 dirty:201 writeback:0 [ 658.776769][T11542] slab_reclaimable:9336 slab_unreclaimable:99631 [ 658.776769][T11542] mapped:24986 shmem:4107 pagetables:789 [ 658.776769][T11542] sec_pagetables:0 bounce:0 [ 658.776769][T11542] kernel_misc_reclaimable:0 [ 658.776769][T11542] free:1341211 free_pcp:1233 free_cma:0 [ 658.822754][T11542] Node 0 active_anon:976kB inactive_anon:28256kB active_file:53848kB inactive_file:162592kB unevictable:1580kB isolated(anon):0kB isolated(file):0kB mapped:99844kB dirty:796kB writeback:0kB shmem:14892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:3056kB sec_pagetables:0kB all_unreclaimable? no [ 658.857762][T11542] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 658.891310][T11542] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 658.895784][T11469] team0: Port device team_slave_0 added [ 658.919482][T11542] lowmem_reserve[]: 0 2465 2466 0 0 [ 659.010470][T11542] Node 0 DMA32 free:1434992kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:7672kB inactive_anon:16516kB active_file:53064kB inactive_file:162540kB unevictable:1580kB writepending:788kB present:3129332kB managed:2552500kB mlocked:44kB bounce:0kB free_pcp:6996kB local_pcp:944kB free_cma:0kB [ 659.043531][ T51] usbhid 2-1:0.0: can't add hid device: -71 [ 659.049603][ T51] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 659.061126][ T51] usb 2-1: USB disconnect, device number 23 [ 659.083036][T11542] lowmem_reserve[]: 0 0 0 0 0 [ 659.087918][T11542] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:784kB inactive_file:52kB unevictable:0kB writepending:8kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.117702][T11542] lowmem_reserve[]: 0 0 0 0 0 [ 659.118538][ T5399] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.122497][T11542] Node 1 Normal free:3925912kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.167816][T11542] lowmem_reserve[]: 0 0 0 0 0 [ 659.169246][T11469] team0: Port device team_slave_1 added [ 659.172730][T11542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 659.195696][T11542] Node 0 DMA32: 1469*4kB (UME) 1408*8kB (UME) 1326*16kB (UME) 1040*32kB (UME) 715*64kB (UME) 309*128kB (UME) 169*256kB (UME) 99*512kB (UME) 38*1024kB (UME) 7*2048kB (UME) 279*4096kB (UM) = 1446932kB [ 659.215499][T11542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 659.227182][T11542] Node 1 Normal: 170*4kB (UME) 50*8kB (UME) 30*16kB (UME) 164*32kB (UME) 78*64kB (UME) 31*128kB (UE) 16*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 4*2048kB (UE) 949*4096kB (M) = 3925912kB [ 659.246091][T11542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.255868][T11542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.265754][T11542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.275972][T11542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.278369][T11548] FAULT_INJECTION: forcing a failure. [ 659.278369][T11548] name failslab, interval 1, probability 0, space 0, times 0 [ 659.285343][T11542] 55370 total pagecache pages [ 659.302886][T11542] 0 pages in swap cache [ 659.307041][T11542] Free swap = 124592kB [ 659.311288][T11542] Total swap = 124996kB [ 659.313772][ T5221] Bluetooth: hci1: command tx timeout [ 659.315432][T11542] 2097051 pages RAM [ 659.315444][T11542] 0 pages HighMem/MovableOnly [ 659.315452][T11542] 427074 pages reserved [ 659.315460][T11542] 0 pages cma reserved [ 659.337602][T11548] CPU: 0 UID: 0 PID: 11548 Comm: syz.4.1456 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 659.348572][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 659.358645][T11548] Call Trace: [ 659.361938][T11548] [ 659.364882][T11548] dump_stack_lvl+0x241/0x360 [ 659.369584][T11548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.374804][T11548] ? __pfx__printk+0x10/0x10 [ 659.379422][T11548] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 659.385425][T11548] ? __pfx___might_resched+0x10/0x10 [ 659.390727][T11548] ? tcp_established_options+0x3c1/0x800 [ 659.396362][T11548] should_fail_ex+0x3b0/0x4e0 [ 659.401044][T11548] should_failslab+0xac/0x100 [ 659.405709][T11548] ? __alloc_skb+0x1c3/0x440 [ 659.410292][T11548] kmem_cache_alloc_node_noprof+0x71/0x320 [ 659.416090][T11548] ? tcp_current_mss+0x29b/0x4d0 [ 659.421023][T11548] __alloc_skb+0x1c3/0x440 [ 659.425436][T11548] ? __pfx___alloc_skb+0x10/0x10 [ 659.430363][T11548] ? validate_chain+0x11e/0x5920 [ 659.435293][T11548] ? validate_chain+0x11e/0x5920 [ 659.440229][T11548] tcp_stream_alloc_skb+0x3d/0x310 [ 659.445337][T11548] tcp_sendmsg_locked+0xde1/0x50a0 [ 659.450441][T11548] ? __lock_acquire+0x1384/0x2050 [ 659.455492][T11548] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 659.461030][T11548] ? __local_bh_enable_ip+0x168/0x200 [ 659.466400][T11548] ? do_raw_spin_unlock+0x13c/0x8b0 [ 659.471602][T11548] tcp_sendmsg+0x30/0x50 [ 659.475840][T11548] __sock_sendmsg+0x1a6/0x270 [ 659.480519][T11548] ____sys_sendmsg+0x52a/0x7e0 [ 659.485285][T11548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.490580][T11548] __sys_sendmsg+0x292/0x380 [ 659.495167][T11548] ? __pfx___sys_sendmsg+0x10/0x10 [ 659.500279][T11548] ? __pfx_vfs_write+0x10/0x10 [ 659.505068][T11548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 659.511394][T11548] ? do_syscall_64+0x100/0x230 [ 659.516175][T11548] ? do_syscall_64+0xb6/0x230 [ 659.520846][T11548] do_syscall_64+0xf3/0x230 [ 659.525343][T11548] ? clear_bhb_loop+0x35/0x90 [ 659.530018][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.535954][T11548] RIP: 0033:0x7f817137dff9 [ 659.540363][T11548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.559974][T11548] RSP: 002b:00007f8170dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.568393][T11548] RAX: ffffffffffffffda RBX: 00007f8171535f80 RCX: 00007f817137dff9 [ 659.576360][T11548] RDX: 0000000000000000 RSI: 00000000200015c0 RDI: 0000000000000006 [ 659.584324][T11548] RBP: 00007f8170dff090 R08: 0000000000000000 R09: 0000000000000000 [ 659.592290][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.600254][T11548] R13: 0000000000000000 R14: 00007f8171535f80 R15: 00007ffc2b60bda8 [ 659.608243][T11548] [ 659.668859][T11469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.676054][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.702590][T11469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.744215][T11563] dns_resolver: Unsupported server list version (0) [ 659.771428][T11469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.780705][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.809389][T11469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.824956][T11560] syzkaller1: entered promiscuous mode [ 659.832398][T11560] syzkaller1: entered allmulticast mode [ 659.860020][ T5399] bridge_slave_1: left allmulticast mode [ 659.865921][ T5399] bridge_slave_1: left promiscuous mode [ 659.872849][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.906920][ T5399] bridge_slave_0: left allmulticast mode [ 659.930422][ T5399] bridge_slave_0: left promiscuous mode [ 659.936154][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.310256][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 660.319428][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 660.328564][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1463'. [ 661.397398][ T5221] Bluetooth: hci1: command tx timeout [ 661.787675][ T5301] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 661.861594][ T5399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.872375][ T5399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.883447][ T5399] bond0 (unregistering): Released all slaves [ 661.989955][ T5301] usb 2-1: not running at top speed; connect to a high speed hub [ 662.019095][ T5301] usb 2-1: config 123 has an invalid interface number: 222 but max is 1 [ 662.069686][ T5301] usb 2-1: config 123 has an invalid interface number: 61 but max is 1 [ 662.093405][ T5301] usb 2-1: config 123 has no interface number 0 [ 662.101062][T11469] hsr_slave_0: entered promiscuous mode [ 662.107039][ T5301] usb 2-1: config 123 has no interface number 1 [ 662.123822][ T5301] usb 2-1: config 123 interface 61 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 662.136288][T11469] hsr_slave_1: entered promiscuous mode [ 662.143230][ T5301] usb 2-1: config 123 interface 61 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 662.205690][T11469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.227060][T11469] Cannot create hsr debugfs directory [ 662.345795][ T5301] usb 2-1: config 123 interface 222 has no altsetting 0 [ 662.352870][ T5301] usb 2-1: config 123 interface 61 has no altsetting 0 [ 662.365132][ T5301] usb 2-1: string descriptor 0 read error: -22 [ 662.371467][ T5301] usb 2-1: New USB device found, idVendor=13d3, idProduct=3321, bcdDevice=8f.1c [ 662.380831][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.398184][ T5301] usb 2-1: bad CDC descriptors [ 663.296746][T11591] FAULT_INJECTION: forcing a failure. [ 663.296746][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 663.327533][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.0.1469 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 663.338366][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 663.348419][T11591] Call Trace: [ 663.351696][T11591] [ 663.354629][T11591] dump_stack_lvl+0x241/0x360 [ 663.359310][T11591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.364502][T11591] ? __pfx__printk+0x10/0x10 [ 663.369091][T11591] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 663.374977][T11591] ? __pfx___might_resched+0x10/0x10 [ 663.380261][T11591] should_fail_ex+0x3b0/0x4e0 [ 663.384957][T11591] ? __d_alloc+0x31/0x700 [ 663.389279][T11591] should_failslab+0xac/0x100 [ 663.393950][T11591] ? __d_alloc+0x31/0x700 [ 663.398268][T11591] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 663.403983][T11591] __d_alloc+0x31/0x700 [ 663.408134][T11591] d_alloc_pseudo+0x1f/0xb0 [ 663.412627][T11591] alloc_file_pseudo+0x123/0x290 [ 663.417559][T11591] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 663.423015][T11591] ? _raw_spin_unlock+0x28/0x50 [ 663.427861][T11591] ? alloc_fd+0x5a1/0x640 [ 663.432192][T11591] anon_inode_getfile+0xc8/0x180 [ 663.437123][T11591] do_epoll_create+0x290/0x350 [ 663.441881][T11591] __x64_sys_epoll_create+0x4e/0x70 [ 663.447070][T11591] do_syscall_64+0xf3/0x230 [ 663.451566][T11591] ? clear_bhb_loop+0x35/0x90 [ 663.456233][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.462125][T11591] RIP: 0033:0x7fb6e6b7dff9 [ 663.466533][T11591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.486133][T11591] RSP: 002b:00007fb6e79b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 663.494547][T11591] RAX: ffffffffffffffda RBX: 00007fb6e6d35f80 RCX: 00007fb6e6b7dff9 [ 663.502508][T11591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800809 [ 663.510471][T11591] RBP: 00007fb6e79b8090 R08: 0000000000000000 R09: 0000000000000000 [ 663.518450][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.526428][T11591] R13: 0000000000000000 R14: 00007fb6e6d35f80 R15: 00007ffc7a5959c8 [ 663.534415][T11591] [ 664.488303][ T940] usb 2-1: USB disconnect, device number 25 [ 665.858791][ T5399] hsr_slave_0: left promiscuous mode [ 665.873181][ T5399] hsr_slave_1: left promiscuous mode [ 665.880415][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.896857][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.020044][ T5221] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 666.127948][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 666.136869][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 666.145992][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1475'. [ 666.765490][ T5399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.820992][ T5399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.887547][ T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 666.916538][ T5399] veth1_macvtap: left promiscuous mode [ 666.922235][ T5399] veth0_macvtap: left promiscuous mode [ 666.928784][ T5399] veth1_vlan: left promiscuous mode [ 666.934312][ T5399] veth0_vlan: left promiscuous mode [ 666.940287][T11635] bpf: Bad value for 'mode' [ 667.071374][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 667.291236][ T51] usb 1-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice=37.6e [ 667.300551][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.308837][ T51] usb 1-1: Product: syz [ 667.313087][ T51] usb 1-1: Manufacturer: syz [ 667.321952][ T51] usb 1-1: SerialNumber: syz [ 667.331033][ T51] usb 1-1: config 0 descriptor?? [ 668.172735][ T5301] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 668.385937][ T5301] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 668.429586][ T5301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.446867][ T5301] usb 3-1: config 0 has no interface number 0 [ 668.469369][ T5301] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 668.482537][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.495679][ T5301] usb 3-1: Product: syz [ 668.545059][ T5301] usb 3-1: Manufacturer: syz [ 668.578867][ T5301] usb 3-1: SerialNumber: syz [ 668.641306][ T5301] usb 3-1: config 0 descriptor?? [ 668.703460][ T5301] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 668.711228][ T5301] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 668.840116][ T5399] team0 (unregistering): Port device team_slave_1 removed [ 669.120358][ T5399] team0 (unregistering): Port device team_slave_0 removed [ 669.385971][T11648] dlm: no local IP address has been set [ 669.403263][T11648] dlm: cannot start dlm midcomms -107 [ 670.096595][T11653] 9pnet_fd: Insufficient options for proto=fd [ 670.164862][ T5300] usb 3-1: USB disconnect, device number 12 [ 670.361195][T11658] fuse: Invalid rootmode [ 670.507880][ T5301] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 671.228777][ T5301] usb 2-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 671.253884][ T5301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.265579][ T5301] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 671.275257][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 671.285489][ T5301] usb 2-1: SerialNumber: syz [ 671.533097][ T940] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 671.674829][ T5301] usb 2-1: 0:2 : does not exist [ 671.690491][ T51] usb 1-1: USB disconnect, device number 17 [ 671.699786][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.734917][ T5301] usb 2-1: USB disconnect, device number 26 [ 671.742520][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.742565][ T940] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 671.742592][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.751528][ T940] usb 3-1: config 0 descriptor?? [ 671.850000][T11469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 671.856855][T10834] udevd[10834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 671.915639][T11469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 671.989312][T11469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.016357][T11469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 672.116613][T11469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.140721][T11469] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.197803][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.204940][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.253473][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.260638][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.451242][T11701] fuse: Invalid rootmode [ 672.459102][T11469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.353510][T11469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.782659][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 673.819840][ T940] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 674.000216][ T940] usb 3-1: USB disconnect, device number 13 [ 674.408074][T11469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.201874][T11469] veth0_vlan: entered promiscuous mode [ 675.215031][T11469] veth1_vlan: entered promiscuous mode [ 675.236612][T11469] veth0_macvtap: entered promiscuous mode [ 675.245563][T11469] veth1_macvtap: entered promiscuous mode [ 675.259813][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.270369][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.280297][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.290804][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.300645][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.311155][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.321089][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.331550][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.343441][T11469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.353787][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.364308][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.374210][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.384782][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.394689][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.405214][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.415067][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.425550][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.437487][T11469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.579711][T11469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.588914][T11469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.597712][T11469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.606413][T11469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.824213][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'. [ 675.917442][T10550] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 675.956236][ T7875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.996928][ T7875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.060246][ T7877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.086451][ T7877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.097425][T10550] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 676.237361][T10550] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.287736][T10550] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.308331][T10550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.374980][T10550] usb 2-1: config 0 descriptor?? [ 676.419563][T10550] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 677.027523][T11774] fuse: Bad value for 'rootmode' [ 677.341722][T11783] vlan0: entered promiscuous mode [ 677.413590][T11783] team0: Port device vlan0 added [ 677.927523][ T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 678.180839][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.212267][ T51] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.226116][ T51] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 678.237954][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.259790][ T51] usb 3-1: Product: syz [ 678.272732][ T51] usb 3-1: Manufacturer: syz [ 678.282900][ T51] usb 3-1: SerialNumber: syz [ 678.296094][ T51] usb 3-1: config 0 descriptor?? [ 678.301238][T10724] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 678.457719][T10724] usb 4-1: Using ep0 maxpacket: 8 [ 678.466497][T10724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.477691][T10724] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 678.486824][T10724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.501001][T10724] usb 4-1: config 0 descriptor?? [ 678.698031][T10724] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 678.703675][T10550] usb 2-1: USB disconnect, device number 27 [ 678.758043][ T51] usb 3-1: USB disconnect, device number 14 [ 679.942472][T11837] fuse: Bad value for 'rootmode' [ 683.151555][T11852] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 683.237584][ T9] usb 4-1: USB disconnect, device number 20 [ 683.299716][T11859] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "&@" [ 683.726994][T11864] FAULT_INJECTION: forcing a failure. [ 683.726994][T11864] name failslab, interval 1, probability 0, space 0, times 0 [ 683.961449][T11864] CPU: 1 UID: 0 PID: 11864 Comm: syz.1.1522 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 683.972271][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 683.982339][T11864] Call Trace: [ 683.985605][T11864] [ 683.988522][T11864] dump_stack_lvl+0x241/0x360 [ 683.993272][T11864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.998453][T11864] ? __pfx__printk+0x10/0x10 [ 684.003027][T11864] ? fs_reclaim_acquire+0x93/0x140 [ 684.008149][T11864] ? __pfx___might_resched+0x10/0x10 [ 684.013420][T11864] should_fail_ex+0x3b0/0x4e0 [ 684.018103][T11864] ? tomoyo_encode+0x26f/0x540 [ 684.022886][T11864] should_failslab+0xac/0x100 [ 684.027576][T11864] ? tomoyo_encode+0x26f/0x540 [ 684.032354][T11864] __kmalloc_noprof+0xd8/0x400 [ 684.037139][T11864] tomoyo_encode+0x26f/0x540 [ 684.041763][T11864] tomoyo_realpath_from_path+0x59e/0x5e0 [ 684.047430][T11864] tomoyo_path_number_perm+0x23a/0x880 [ 684.052920][T11864] ? tomoyo_path_number_perm+0x208/0x880 [ 684.058578][T11864] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 684.064616][T11864] ? __fget_files+0x29/0x470 [ 684.069232][T11864] ? __fget_files+0x3f3/0x470 [ 684.073941][T11864] security_file_ioctl+0xc6/0x2a0 [ 684.078978][T11864] __se_sys_ioctl+0x47/0x170 [ 684.083569][T11864] do_syscall_64+0xf3/0x230 [ 684.088069][T11864] ? clear_bhb_loop+0x35/0x90 [ 684.092739][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.098629][T11864] RIP: 0033:0x7f3bdf57dff9 [ 684.103037][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.122646][T11864] RSP: 002b:00007f3be0372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.131067][T11864] RAX: ffffffffffffffda RBX: 00007f3bdf735f80 RCX: 00007f3bdf57dff9 [ 684.139042][T11864] RDX: 0000000020000080 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 684.147020][T11864] RBP: 00007f3be0372090 R08: 0000000000000000 R09: 0000000000000000 [ 684.154990][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.162953][T11864] R13: 0000000000000000 R14: 00007f3bdf735f80 R15: 00007ffe0ad00368 [ 684.170930][T11864] [ 684.182260][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 684.197528][T11864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 684.349494][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 684.365670][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.388024][T11874] FAULT_INJECTION: forcing a failure. [ 684.388024][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 684.407034][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.420384][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.2.1526 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 684.431183][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 684.441256][T11874] Call Trace: [ 684.444550][T11874] [ 684.447497][T11874] dump_stack_lvl+0x241/0x360 [ 684.452198][T11874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.457427][T11874] ? __pfx__printk+0x10/0x10 [ 684.462040][T11874] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 684.468046][T11874] ? __pfx___might_resched+0x10/0x10 [ 684.473354][T11874] should_fail_ex+0x3b0/0x4e0 [ 684.478054][T11874] should_failslab+0xac/0x100 [ 684.482745][T11874] ? __alloc_skb+0x1c3/0x440 [ 684.487350][T11874] kmem_cache_alloc_node_noprof+0x71/0x320 [ 684.493173][T11874] __alloc_skb+0x1c3/0x440 [ 684.497607][T11874] ? __pfx___alloc_skb+0x10/0x10 [ 684.502557][T11874] ? netlink_autobind+0xd6/0x2f0 [ 684.507517][T11874] ? netlink_autobind+0x2b0/0x2f0 [ 684.512570][T11874] netlink_sendmsg+0x638/0xcb0 [ 684.517359][T11874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.522672][T11874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.527974][T11874] __sock_sendmsg+0x221/0x270 [ 684.532678][T11874] ____sys_sendmsg+0x52a/0x7e0 [ 684.537497][T11874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.542817][T11874] __sys_sendmsg+0x292/0x380 [ 684.547428][T11874] ? __pfx___sys_sendmsg+0x10/0x10 [ 684.552570][T11874] ? __pfx_vfs_write+0x10/0x10 [ 684.557379][T11874] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 684.563729][T11874] ? do_syscall_64+0x100/0x230 [ 684.568511][T11874] ? do_syscall_64+0xb6/0x230 [ 684.573243][T11874] do_syscall_64+0xf3/0x230 [ 684.577774][T11874] ? clear_bhb_loop+0x35/0x90 [ 684.582466][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.588376][T11874] RIP: 0033:0x7fde1af7dff9 [ 684.592801][T11874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.612420][T11874] RSP: 002b:00007fde1bcec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.620862][T11874] RAX: ffffffffffffffda RBX: 00007fde1b135f80 RCX: 00007fde1af7dff9 [ 684.628855][T11874] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 684.636845][T11874] RBP: 00007fde1bcec090 R08: 0000000000000000 R09: 0000000000000000 [ 684.644833][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.652818][T11874] R13: 0000000000000000 R14: 00007fde1b135f80 R15: 00007ffc24e7d718 [ 684.660809][T11874] [ 684.666292][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.637961][ T9] usb 4-1: config 0 descriptor?? [ 685.658706][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 686.063375][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.133951][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.771025][T11889] VFS: unable to find oldfs superblock on device nullb0 [ 687.745543][T10550] usb 4-1: USB disconnect, device number 21 [ 687.998866][T11912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1536'. [ 688.109808][T11914] hugetlbfs: Invalid gid '0x00000000ffffffff' [ 690.808843][T11933] FAULT_INJECTION: forcing a failure. [ 690.808843][T11933] name failslab, interval 1, probability 0, space 0, times 0 [ 690.902443][T11920] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 691.027547][T11933] CPU: 1 UID: 0 PID: 11933 Comm: syz.2.1540 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 691.047469][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 691.057554][T11933] Call Trace: [ 691.060853][T11933] [ 691.063797][T11933] dump_stack_lvl+0x241/0x360 [ 691.068514][T11933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.073741][T11933] ? __pfx__printk+0x10/0x10 [ 691.078360][T11933] ? __kmalloc_noprof+0xb0/0x400 [ 691.083316][T11933] ? __pfx___might_resched+0x10/0x10 [ 691.088631][T11933] should_fail_ex+0x3b0/0x4e0 [ 691.093338][T11933] ? kernfs_fop_write_iter+0x15a/0x500 [ 691.098824][T11933] should_failslab+0xac/0x100 [ 691.103527][T11933] ? kernfs_fop_write_iter+0x15a/0x500 [ 691.109009][T11933] __kmalloc_noprof+0xd8/0x400 [ 691.113767][T11933] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 691.119672][T11933] kernfs_fop_write_iter+0x15a/0x500 [ 691.124962][T11933] vfs_write+0xa6d/0xc90 [ 691.129196][T11933] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 691.134991][T11933] ? __pfx_vfs_write+0x10/0x10 [ 691.139777][T11933] ? fdget_pos+0x24e/0x320 [ 691.144219][T11933] ksys_write+0x183/0x2b0 [ 691.148574][T11933] ? __pfx_ksys_write+0x10/0x10 [ 691.153459][T11933] ? do_syscall_64+0x100/0x230 [ 691.158259][T11933] ? do_syscall_64+0xb6/0x230 [ 691.162960][T11933] do_syscall_64+0xf3/0x230 [ 691.167481][T11933] ? clear_bhb_loop+0x35/0x90 [ 691.172174][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.178093][T11933] RIP: 0033:0x7fde1af7dff9 [ 691.182520][T11933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.202147][T11933] RSP: 002b:00007fde1bcec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.210590][T11933] RAX: ffffffffffffffda RBX: 00007fde1b135f80 RCX: 00007fde1af7dff9 [ 691.218578][T11933] RDX: 0000000000000012 RSI: 0000000020000c40 RDI: 0000000000000004 [ 691.226560][T11933] RBP: 00007fde1bcec090 R08: 0000000000000000 R09: 0000000000000000 [ 691.234541][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.242530][T11933] R13: 0000000000000000 R14: 00007fde1b135f80 R15: 00007ffc24e7d718 [ 691.250539][T11933] [ 691.375629][ T29] audit: type=1326 audit(1728207168.464:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11946 comm="syz.0.1544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6b7dff9 code=0x0 [ 692.687166][T11967] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 692.842065][T11972] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1550'. [ 692.899980][T11972] : entered promiscuous mode [ 692.932836][T11972] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1550'. [ 692.964934][T11972] openvswitch: : Dropping previously announced user features [ 693.395402][T11979] syzkaller0: entered promiscuous mode [ 693.407985][ T5221] Bluetooth: hci1: command tx timeout [ 693.413599][T11979] syzkaller0: entered allmulticast mode [ 693.565862][T11992] FAULT_INJECTION: forcing a failure. [ 693.565862][T11992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.607484][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.0.1555 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 693.618298][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 693.628377][T11992] Call Trace: [ 693.631674][T11992] [ 693.634629][T11992] dump_stack_lvl+0x241/0x360 [ 693.639330][T11992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.644551][T11992] ? __pfx__printk+0x10/0x10 [ 693.649170][T11992] ? __pfx_lock_release+0x10/0x10 [ 693.654206][T11992] should_fail_ex+0x3b0/0x4e0 [ 693.658907][T11992] _copy_from_user+0x2f/0xe0 [ 693.663516][T11992] __sys_bpf+0x1a4/0x810 [ 693.667772][T11992] ? __pfx___sys_bpf+0x10/0x10 [ 693.672551][T11992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 693.678540][T11992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 693.684955][T11992] ? do_syscall_64+0x100/0x230 [ 693.689716][T11992] __x64_sys_bpf+0x7c/0x90 [ 693.694127][T11992] do_syscall_64+0xf3/0x230 [ 693.698624][T11992] ? clear_bhb_loop+0x35/0x90 [ 693.703294][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.709185][T11992] RIP: 0033:0x7fb6e6b7dff9 [ 693.713593][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.733290][T11992] RSP: 002b:00007fb6e79b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.741707][T11992] RAX: ffffffffffffffda RBX: 00007fb6e6d35f80 RCX: 00007fb6e6b7dff9 [ 693.749687][T11992] RDX: 0000000000000069 RSI: 00000000200002c0 RDI: 000000000000000a [ 693.757660][T11992] RBP: 00007fb6e79b8090 R08: 0000000000000000 R09: 0000000000000000 [ 693.765631][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.773604][T11992] R13: 0000000000000000 R14: 00007fb6e6d35f80 R15: 00007ffc7a5959c8 [ 693.781592][T11992] [ 693.892940][ T7875] syzkaller0: tun_net_xmit 48 [ 694.876358][ T5301] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 695.180002][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.190949][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.205163][ T5301] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.214642][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.226015][ T5301] usb 2-1: config 0 descriptor?? [ 695.377951][T10547] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 695.743188][ T5301] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 695.957438][T10547] usb 1-1: Using ep0 maxpacket: 32 [ 695.971120][T10547] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.023723][T10547] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.593710][T10547] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 696.608475][T10547] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 696.619967][T10547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.635219][T10547] usb 1-1: config 0 descriptor?? [ 696.778641][T12017] FAULT_INJECTION: forcing a failure. [ 696.778641][T12017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.832351][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.4.1561 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 696.843174][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 696.853237][T12017] Call Trace: [ 696.856514][T12017] [ 696.859433][T12017] dump_stack_lvl+0x241/0x360 [ 696.864095][T12017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.869273][T12017] ? __pfx__printk+0x10/0x10 [ 696.873849][T12017] ? __pfx_lock_release+0x10/0x10 [ 696.878877][T12017] ? __lock_acquire+0x1384/0x2050 [ 696.883936][T12017] should_fail_ex+0x3b0/0x4e0 [ 696.888645][T12017] _copy_from_user+0x2f/0xe0 [ 696.893258][T12017] kstrtouint_from_user+0xc6/0x190 [ 696.898395][T12017] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 696.904134][T12017] ? __pfx_lock_acquire+0x10/0x10 [ 696.909188][T12017] proc_fail_nth_write+0xaa/0x2d0 [ 696.914232][T12017] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 696.920144][T12017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 696.925801][T12017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 696.931455][T12017] vfs_write+0x29c/0xc90 [ 696.935727][T12017] ? __pfx_vfs_write+0x10/0x10 [ 696.940520][T12017] ? __fget_files+0x3f3/0x470 [ 696.945243][T12017] ? fdget_pos+0x24e/0x320 [ 696.949687][T12017] ksys_write+0x183/0x2b0 [ 696.954044][T12017] ? __pfx_ksys_write+0x10/0x10 [ 696.958918][T12017] ? do_syscall_64+0x100/0x230 [ 696.963701][T12017] ? do_syscall_64+0xb6/0x230 [ 696.968399][T12017] do_syscall_64+0xf3/0x230 [ 696.972920][T12017] ? clear_bhb_loop+0x35/0x90 [ 696.977614][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.983532][T12017] RIP: 0033:0x7f817137cadf [ 696.987966][T12017] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 697.007593][T12017] RSP: 002b:00007f8170dde030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 697.016118][T12017] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f817137cadf [ 697.024105][T12017] RDX: 0000000000000001 RSI: 00007f8170dde0a0 RDI: 0000000000000003 [ 697.032089][T12017] RBP: 00007f8170dde090 R08: 0000000000000000 R09: 0000000000000000 [ 697.040072][T12017] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 697.048057][T12017] R13: 0000000000000001 R14: 00007f8171536058 R15: 00007ffc2b60bda8 [ 697.056061][T12017] [ 697.699691][ T5301] usb 2-1: USB disconnect, device number 28 [ 698.397876][ T4613] Bluetooth: hci4: command 0x0406 tx timeout [ 698.660004][T10547] usbhid 1-1:0.0: can't add hid device: -71 [ 698.666136][T10547] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 698.681333][T10547] usb 1-1: USB disconnect, device number 18 [ 700.121580][T12048] FAULT_INJECTION: forcing a failure. [ 700.121580][T12048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 700.291712][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.4.1570 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 700.302520][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 700.312565][T12048] Call Trace: [ 700.315852][T12048] [ 700.318785][T12048] dump_stack_lvl+0x241/0x360 [ 700.323497][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.328683][T12048] ? __pfx__printk+0x10/0x10 [ 700.333269][T12048] should_fail_ex+0x3b0/0x4e0 [ 700.337935][T12048] prepare_alloc_pages+0x1da/0x5d0 [ 700.343055][T12048] __alloc_pages_noprof+0x166/0x6c0 [ 700.348270][T12048] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 700.353992][T12048] ? validate_chain+0x11e/0x5920 [ 700.358930][T12048] ? __pfx_lock_acquire+0x10/0x10 [ 700.363955][T12048] ? __pfx_lock_release+0x10/0x10 [ 700.368977][T12048] alloc_pages_mpol_noprof+0x3e8/0x680 [ 700.374436][T12048] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 700.380448][T12048] vma_alloc_folio_noprof+0x12e/0x230 [ 700.385814][T12048] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 700.391705][T12048] folio_prealloc+0x31/0x170 [ 700.396290][T12048] handle_pte_fault+0x24dd/0x6800 [ 700.401321][T12048] ? mark_lock+0x9a/0x360 [ 700.405644][T12048] ? __pfx_handle_pte_fault+0x10/0x10 [ 700.411022][T12048] ? reacquire_held_locks+0x3eb/0x690 [ 700.416392][T12048] ? lock_vma_under_rcu+0x34b/0x790 [ 700.421600][T12048] ? __pfx_reacquire_held_locks+0x10/0x10 [ 700.427329][T12048] handle_mm_fault+0x1053/0x1ad0 [ 700.432288][T12048] ? __pfx_handle_mm_fault+0x10/0x10 [ 700.437567][T12048] ? lock_vma_under_rcu+0x602/0x790 [ 700.442758][T12048] ? lock_vma_under_rcu+0x1dd/0x790 [ 700.447964][T12048] ? exc_page_fault+0x113/0x8c0 [ 700.452813][T12048] exc_page_fault+0x459/0x8c0 [ 700.457492][T12048] asm_exc_page_fault+0x26/0x30 [ 700.462345][T12048] RIP: 0033:0x7f817124940b [ 700.466752][T12048] Code: 00 00 00 48 8d 3d fd 27 19 00 48 89 c1 31 c0 e8 bb 5a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 28 19 00 48 89 34 24 48 8b 14 24 48 8b [ 700.486349][T12048] RSP: 002b:00007f8170dfdfb0 EFLAGS: 00010202 [ 700.492417][T12048] RAX: 0000000000000000 RBX: 00007f8171535f80 RCX: 0000000000000000 [ 700.500380][T12048] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000200000c0 [ 700.508362][T12048] RBP: 00007f8170dff090 R08: 0000000000000000 R09: 0000000000000000 [ 700.516342][T12048] R10: 00000000200000c0 R11: 0000000000000000 R12: 0000000000000001 [ 700.524322][T12048] R13: 0000000000000000 R14: 00007f8171535f80 R15: 00007ffc2b60bda8 [ 700.532308][T12048] [ 700.539661][T12048] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 701.657601][T10550] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 701.837895][T10550] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 701.851510][T10550] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.994890][T10550] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.081281][T10550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.184652][T10550] usb 4-1: config 0 descriptor?? [ 702.225428][T10550] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 706.543499][T10550] usb 4-1: USB disconnect, device number 22 [ 706.552502][ T4613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.562687][ T4613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.572011][ T4613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.580163][ T4613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.644743][T12094] xt_TPROXY: Can be used only with -p tcp or -p udp [ 707.266147][ T4613] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 707.273950][ T4613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.513909][T12098] FAULT_INJECTION: forcing a failure. [ 707.513909][T12098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.527374][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.1.1581 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 707.538161][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 707.548206][T12098] Call Trace: [ 707.551471][T12098] [ 707.554385][T12098] dump_stack_lvl+0x241/0x360 [ 707.559069][T12098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.564262][T12098] ? __pfx__printk+0x10/0x10 [ 707.568843][T12098] ? __pfx_lock_release+0x10/0x10 [ 707.573875][T12098] ? __lock_acquire+0x1384/0x2050 [ 707.578897][T12098] should_fail_ex+0x3b0/0x4e0 [ 707.583570][T12098] _copy_from_user+0x2f/0xe0 [ 707.588154][T12098] kstrtouint_from_user+0xc6/0x190 [ 707.593262][T12098] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 707.598974][T12098] ? __pfx_lock_acquire+0x10/0x10 [ 707.603991][T12098] proc_fail_nth_write+0xaa/0x2d0 [ 707.609096][T12098] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 707.614971][T12098] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 707.620612][T12098] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 707.626247][T12098] vfs_write+0x29c/0xc90 [ 707.630481][T12098] ? __pfx_vfs_write+0x10/0x10 [ 707.635232][T12098] ? __fget_files+0x3f3/0x470 [ 707.639904][T12098] ? fdget_pos+0x24e/0x320 [ 707.644325][T12098] ksys_write+0x183/0x2b0 [ 707.648645][T12098] ? __pfx_ksys_write+0x10/0x10 [ 707.653478][T12098] ? do_syscall_64+0x100/0x230 [ 707.658225][T12098] ? do_syscall_64+0xb6/0x230 [ 707.662901][T12098] do_syscall_64+0xf3/0x230 [ 707.667387][T12098] ? clear_bhb_loop+0x35/0x90 [ 707.672068][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.677986][T12098] RIP: 0033:0x7f3bdf57cadf [ 707.682396][T12098] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 707.702004][T12098] RSP: 002b:00007f3be0372030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 707.710408][T12098] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3bdf57cadf [ 707.718365][T12098] RDX: 0000000000000001 RSI: 00007f3be03720a0 RDI: 0000000000000005 [ 707.726321][T12098] RBP: 00007f3be0372090 R08: 0000000000000000 R09: 0000000000000000 [ 707.734278][T12098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 707.742239][T12098] R13: 0000000000000000 R14: 00007f3bdf735f80 R15: 00007ffe0ad00368 [ 707.750209][T12098] [ 709.336401][ T4613] Bluetooth: hci2: command tx timeout [ 709.990951][ T5221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.000106][ T5221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.008393][ T5221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.018772][ T5221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.026067][ T5221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 710.033317][ T5221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.304210][T12122] Bluetooth: MGMT ver 1.23 [ 711.851556][ T4613] Bluetooth: hci2: command tx timeout [ 712.101955][T12132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 712.128090][ T5221] Bluetooth: hci5: command tx timeout [ 713.881878][ T5221] Bluetooth: hci2: command tx timeout [ 714.001045][T12138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1592'. [ 714.010112][T12138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1592'. [ 714.019142][T12138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1592'. [ 714.197419][ T5221] Bluetooth: hci5: command tx timeout [ 714.455173][T12147] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "&@" [ 715.203777][T12116] chnl_net:caif_netlink_parms(): no params data found [ 715.260441][T12088] chnl_net:caif_netlink_parms(): no params data found [ 715.959059][ T5221] Bluetooth: hci2: command tx timeout [ 716.277946][ T5221] Bluetooth: hci5: command tx timeout [ 716.779081][ T5405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.823379][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.863098][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.887809][T12088] bridge_slave_0: entered allmulticast mode [ 716.901196][T12088] bridge_slave_0: entered promiscuous mode [ 716.993495][ T5405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.043839][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.061894][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.082431][T12088] bridge_slave_1: entered allmulticast mode [ 717.096305][T12088] bridge_slave_1: entered promiscuous mode [ 717.295955][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 717.310584][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 717.320645][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 717.346952][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 717.365358][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 717.845730][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 717.899929][ T5405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.241893][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 718.251019][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 718.260031][T12192] nbd: socks must be embedded in a SOCK_ITEM attr [ 718.421404][ T5221] Bluetooth: hci5: command tx timeout [ 718.824227][ T5405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.838049][ T5221] Bluetooth: hci6: command 0x0406 tx timeout [ 718.947489][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.954615][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.968175][T12116] bridge_slave_0: entered allmulticast mode [ 718.976066][T12116] bridge_slave_0: entered promiscuous mode [ 719.035093][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.042454][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.049847][T12116] bridge_slave_1: entered allmulticast mode [ 719.056767][T12116] bridge_slave_1: entered promiscuous mode [ 719.082595][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.101334][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.145491][T12088] team0: Port device team_slave_0 added [ 719.211646][T12201] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "&@" [ 719.283628][T12088] team0: Port device team_slave_1 added [ 719.743531][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.804727][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.834709][T12206] kAFS: unable to lookup cell '@ɺV1' [ 719.854211][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.865499][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.894843][ T4613] Bluetooth: hci4: command tx timeout [ 719.908873][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.015106][T12116] team0: Port device team_slave_0 added [ 720.155980][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.165992][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.447030][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.633266][T12116] team0: Port device team_slave_1 added [ 720.930696][T12220] FAULT_INJECTION: forcing a failure. [ 720.930696][T12220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.937120][ T5405] bridge_slave_1: left allmulticast mode [ 720.943858][T12220] CPU: 1 UID: 0 PID: 12220 Comm: syz.3.1611 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 720.943884][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 720.956846][ T5405] bridge_slave_1: left promiscuous mode [ 720.960237][T12220] Call Trace: [ 720.960247][T12220] [ 720.960255][T12220] dump_stack_lvl+0x241/0x360 [ 720.960282][T12220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.960302][T12220] ? __pfx__printk+0x10/0x10 [ 720.978889][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.979165][T12220] ? __pfx_lock_release+0x10/0x10 [ 721.008579][T12220] ? rcu_is_watching+0x15/0xb0 [ 721.013370][T12220] should_fail_ex+0x3b0/0x4e0 [ 721.018074][T12220] _copy_from_iter+0x1ed/0x1d60 [ 721.022953][T12220] ? alloc_pages_mpol_noprof+0x417/0x680 [ 721.028704][T12220] ? __pfx__copy_from_iter+0x10/0x10 [ 721.034005][T12220] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 721.040011][T12220] ? alloc_pages_noprof+0xef/0x170 [ 721.045109][T12220] ? page_copy_sane+0x46/0x260 [ 721.049876][T12220] copy_page_from_iter+0x7a/0x100 [ 721.054910][T12220] tun_get_user+0x2046/0x47e0 [ 721.059581][T12220] ? tun_get_user+0x871/0x47e0 [ 721.064337][T12220] ? __lock_acquire+0x1384/0x2050 [ 721.069369][T12220] ? __pfx_tun_get_user+0x10/0x10 [ 721.074439][T12220] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 721.079899][T12220] ? tun_get+0x1e/0x2f0 [ 721.084077][T12220] ? __pfx_lock_release+0x10/0x10 [ 721.089214][T12220] ? tun_get+0x1e/0x2f0 [ 721.093365][T12220] ? tun_get+0x27d/0x2f0 [ 721.097603][T12220] tun_chr_write_iter+0x10d/0x1f0 [ 721.102624][T12220] vfs_write+0xa6d/0xc90 [ 721.106864][T12220] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 721.112414][T12220] ? __pfx_vfs_write+0x10/0x10 [ 721.117186][T12220] ? fdget_pos+0x19a/0x320 [ 721.121601][T12220] ksys_write+0x183/0x2b0 [ 721.125927][T12220] ? __pfx_ksys_write+0x10/0x10 [ 721.130774][T12220] ? do_syscall_64+0x100/0x230 [ 721.135545][T12220] ? do_syscall_64+0xb6/0x230 [ 721.140217][T12220] do_syscall_64+0xf3/0x230 [ 721.144712][T12220] ? clear_bhb_loop+0x35/0x90 [ 721.149384][T12220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.155275][T12220] RIP: 0033:0x7f7a2ed7cadf [ 721.159689][T12220] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 721.179289][T12220] RSP: 002b:00007f7a2ebf9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 721.187702][T12220] RAX: ffffffffffffffda RBX: 00007f7a2ef35f80 RCX: 00007f7a2ed7cadf [ 721.195664][T12220] RDX: 0000000000000036 RSI: 0000000020000340 RDI: 00000000000000c8 [ 721.203624][T12220] RBP: 00007f7a2ebf9090 R08: 0000000000000000 R09: 0000000000000000 [ 721.211588][T12220] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 721.219553][T12220] R13: 0000000000000000 R14: 00007f7a2ef35f80 R15: 00007ffeaac3dfd8 [ 721.227527][T12220] [ 721.241911][ T5405] bridge_slave_0: left allmulticast mode [ 721.247931][ T5405] bridge_slave_0: left promiscuous mode [ 721.264128][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.659787][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 721.668993][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 721.677976][T12228] nbd: socks must be embedded in a SOCK_ITEM attr [ 722.574666][ T4613] Bluetooth: hci4: command tx timeout [ 723.289641][ T5405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.316861][ T5405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.332358][ T5405] bond0 (unregistering): Released all slaves [ 723.350572][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.359434][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.386051][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.454605][ T5405] : left promiscuous mode [ 723.483014][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.500857][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.535386][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.645812][T12186] chnl_net:caif_netlink_parms(): no params data found [ 723.746890][T12088] hsr_slave_0: entered promiscuous mode [ 723.755085][T12088] hsr_slave_1: entered promiscuous mode [ 723.771502][T12088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.779349][T12088] Cannot create hsr debugfs directory [ 723.818766][T12116] hsr_slave_0: entered promiscuous mode [ 723.825416][T12116] hsr_slave_1: entered promiscuous mode [ 723.832779][T12116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.841131][T12116] Cannot create hsr debugfs directory [ 724.078181][T12256] bpf: Bad value for 'mode' [ 724.096573][T12258] [ 724.098948][T12258] ====================================================== [ 724.105972][T12258] WARNING: possible circular locking dependency detected [ 724.112996][T12258] 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 Not tainted [ 724.120110][T12258] ------------------------------------------------------ [ 724.127134][T12258] syz.1.1615/12258 is trying to acquire lock: [ 724.133204][T12258] ffff8880672a3258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310 [ 724.144719][T12258] [ 724.144719][T12258] but task is already holding lock: [ 724.152093][T12258] ffff8880660c0928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 [ 724.161001][T12258] [ 724.161001][T12258] which lock already depends on the new lock. [ 724.161001][T12258] [ 724.171414][T12258] [ 724.171414][T12258] the existing dependency chain (in reverse order) is: [ 724.180438][T12258] [ 724.180438][T12258] -> #3 (&d->lock){+.+.}-{3:3}: [ 724.187504][T12258] lock_acquire+0x1ed/0x550 [ 724.192538][T12258] __mutex_lock+0x136/0xd70 [ 724.197562][T12258] __rfcomm_dlc_close+0x226/0x6a0 [ 724.203105][T12258] rfcomm_dlc_close+0xf1/0x190 [ 724.208372][T12258] __rfcomm_sock_close+0x121/0x250 [ 724.213988][T12258] rfcomm_sock_shutdown+0xb8/0x240 [ 724.219604][T12258] __se_sys_shutdown+0x144/0x1b0 [ 724.225042][T12258] do_syscall_64+0xf3/0x230 [ 724.230049][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.236446][T12258] [ 724.236446][T12258] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 724.243814][T12258] lock_acquire+0x1ed/0x550 [ 724.248838][T12258] __mutex_lock+0x136/0xd70 [ 724.253891][T12258] rfcomm_dlc_exists+0xa6/0x380 [ 724.259242][T12258] rfcomm_dev_ioctl+0xb53/0x2220 [ 724.264693][T12258] rfcomm_sock_ioctl+0x86/0xd0 [ 724.269973][T12258] sock_do_ioctl+0x158/0x460 [ 724.275084][T12258] sock_ioctl+0x626/0x8e0 [ 724.279932][T12258] __se_sys_ioctl+0xf9/0x170 [ 724.285047][T12258] do_syscall_64+0xf3/0x230 [ 724.290095][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.296496][T12258] [ 724.296496][T12258] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 724.304410][T12258] lock_acquire+0x1ed/0x550 [ 724.309423][T12258] __mutex_lock+0x136/0xd70 [ 724.314429][T12258] rfcomm_dev_ioctl+0x237/0x2220 [ 724.319881][T12258] rfcomm_sock_ioctl+0x86/0xd0 [ 724.325179][T12258] sock_do_ioctl+0x158/0x460 [ 724.330276][T12258] sock_ioctl+0x626/0x8e0 [ 724.335110][T12258] __se_sys_ioctl+0xf9/0x170 [ 724.340203][T12258] do_syscall_64+0xf3/0x230 [ 724.345209][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.351618][T12258] [ 724.351618][T12258] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 724.360978][T12258] validate_chain+0x18ef/0x5920 [ 724.366333][T12258] __lock_acquire+0x1384/0x2050 [ 724.371689][T12258] lock_acquire+0x1ed/0x550 [ 724.376713][T12258] lock_sock_nested+0x48/0x100 [ 724.381990][T12258] rfcomm_sk_state_change+0x5b/0x310 [ 724.387785][T12258] __rfcomm_dlc_close+0x26f/0x6a0 [ 724.393315][T12258] rfcomm_dlc_close+0xf1/0x190 [ 724.398591][T12258] __rfcomm_sock_close+0x121/0x250 [ 724.404226][T12258] rfcomm_sock_shutdown+0xb8/0x240 [ 724.409842][T12258] __se_sys_shutdown+0x144/0x1b0 [ 724.415279][T12258] do_syscall_64+0xf3/0x230 [ 724.420282][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.426682][T12258] [ 724.426682][T12258] other info that might help us debug this: [ 724.426682][T12258] [ 724.436887][T12258] Chain exists of: [ 724.436887][T12258] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock [ 724.436887][T12258] [ 724.450770][T12258] Possible unsafe locking scenario: [ 724.450770][T12258] [ 724.458199][T12258] CPU0 CPU1 [ 724.463541][T12258] ---- ---- [ 724.468911][T12258] lock(&d->lock); [ 724.472709][T12258] lock(rfcomm_mutex); [ 724.479381][T12258] lock(&d->lock); [ 724.485693][T12258] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 724.491832][T12258] [ 724.491832][T12258] *** DEADLOCK *** [ 724.491832][T12258] [ 724.499956][T12258] 2 locks held by syz.1.1615/12258: [ 724.505138][T12258] #0: ffffffff8fe4d548 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x3b/0x190 [ 724.514527][T12258] #1: ffff8880660c0928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0 [ 724.523821][T12258] [ 724.523821][T12258] stack backtrace: [ 724.529693][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.1.1615 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 724.540434][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 724.550482][T12258] Call Trace: [ 724.553753][T12258] [ 724.556764][T12258] dump_stack_lvl+0x241/0x360 [ 724.561427][T12258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.566608][T12258] ? __pfx__printk+0x10/0x10 [ 724.571184][T12258] print_circular_bug+0x13a/0x1b0 [ 724.576194][T12258] check_noncircular+0x36a/0x4a0 [ 724.581116][T12258] ? add_lock_to_list+0x1e8/0x2f0 [ 724.586125][T12258] ? __pfx_check_noncircular+0x10/0x10 [ 724.591572][T12258] ? lockdep_lock+0x123/0x2b0 [ 724.596268][T12258] validate_chain+0x18ef/0x5920 [ 724.599403][ T5221] Bluetooth: hci4: command tx timeout [ 724.601108][T12258] ? __pfx_validate_chain+0x10/0x10 [ 724.611653][T12258] ? register_lock_class+0x102/0x980 [ 724.616959][T12258] ? __pfx_register_lock_class+0x10/0x10 [ 724.622584][T12258] ? mark_lock+0x9a/0x360 [ 724.626896][T12258] ? __lock_acquire+0x1384/0x2050 [ 724.631907][T12258] ? mark_lock+0x9a/0x360 [ 724.636213][T12258] __lock_acquire+0x1384/0x2050 [ 724.641056][T12258] lock_acquire+0x1ed/0x550 [ 724.645544][T12258] ? rfcomm_sk_state_change+0x5b/0x310 [ 724.650989][T12258] ? __pfx_lock_acquire+0x10/0x10 [ 724.655997][T12258] ? trace_contention_end+0x3c/0x120 [ 724.661351][T12258] ? __mutex_lock+0x2ef/0xd70 [ 724.666007][T12258] ? detach_timer+0x16c/0x320 [ 724.670670][T12258] ? __timer_delete+0x2e0/0x380 [ 724.675518][T12258] ? __rfcomm_dlc_close+0x226/0x6a0 [ 724.680696][T12258] ? __pfx___mutex_lock+0x10/0x10 [ 724.685700][T12258] lock_sock_nested+0x48/0x100 [ 724.690451][T12258] ? rfcomm_sk_state_change+0x5b/0x310 [ 724.695907][T12258] rfcomm_sk_state_change+0x5b/0x310 [ 724.701197][T12258] __rfcomm_dlc_close+0x26f/0x6a0 [ 724.706229][T12258] rfcomm_dlc_close+0xf1/0x190 [ 724.710978][T12258] __rfcomm_sock_close+0x121/0x250 [ 724.716076][T12258] rfcomm_sock_shutdown+0xb8/0x240 [ 724.721174][T12258] __se_sys_shutdown+0x144/0x1b0 [ 724.726099][T12258] do_syscall_64+0xf3/0x230 [ 724.730586][T12258] ? clear_bhb_loop+0x35/0x90 [ 724.735245][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.741128][T12258] RIP: 0033:0x7f3bdf57dff9 [ 724.745526][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.765119][T12258] RSP: 002b:00007f3be0330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 724.773521][T12258] RAX: ffffffffffffffda RBX: 00007f3bdf736130 RCX: 00007f3bdf57dff9 [ 724.781480][T12258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 724.789434][T12258] RBP: 00007f3bdf5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 724.797401][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.805373][T12258] R13: 0000000000000001 R14: 00007f3bdf736130 R15: 00007ffe0ad00368 [ 724.813332][T12258] [ 724.853972][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.861648][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.871691][T12186] bridge_slave_0: entered allmulticast mode [ 724.878468][T12186] bridge_slave_0: entered promiscuous mode [ 724.924072][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.936506][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.943076][T12239] Smack: duplicate mount options [ 724.946276][T12186] bridge_slave_1: entered allmulticast mode [ 724.955192][T12186] bridge_slave_1: entered promiscuous mode [ 724.989786][ T5405] hsr_slave_0: left promiscuous mode [ 724.995566][ T5405] hsr_slave_1: left promiscuous mode [ 725.002740][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.012865][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.020694][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.031024][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.040734][ T5405] veth1_macvtap: left promiscuous mode [ 725.046243][ T5405] veth0_macvtap: left promiscuous mode [ 725.057418][ T5405] veth1_vlan: left promiscuous mode [ 725.062878][ T5405] veth0_vlan: left promiscuous mode [ 725.189250][ T5405] team0 (unregistering): Port device vlan0 removed [ 725.207717][ T5328] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 725.246681][ T5405] team0 (unregistering): Port device team_slave_1 removed [ 725.276796][ T5405] team0 (unregistering): Port device team_slave_0 removed [ 725.380294][ T5328] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 725.388454][ T5328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.398972][ T5328] usb 4-1: config 0 has no interface number 0 [ 725.410227][ T5328] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 725.420847][ T5328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.429816][ T5328] usb 4-1: Product: syz [ 725.434007][ T5328] usb 4-1: Manufacturer: syz [ 725.438752][ T5328] usb 4-1: SerialNumber: syz [ 725.444744][ T5328] usb 4-1: config 0 descriptor?? [ 725.455951][ T5328] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 725.463852][ T5328] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 725.512649][T12186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.527166][T12186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.602305][T12186] team0: Port device team_slave_0 added [ 725.622022][T12186] team0: Port device team_slave_1 added [ 725.669518][ T8] usb 4-1: USB disconnect, device number 23 [ 725.690959][T12186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.712023][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.754002][T12186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.796165][T12186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.803322][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.832037][T12186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.864470][T12186] hsr_slave_0: entered promiscuous mode [ 725.871747][T12186] hsr_slave_1: entered promiscuous mode [ 725.881343][T12186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.889461][T12186] Cannot create hsr debugfs directory [ 725.993357][ T5405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.031030][T12088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 726.044084][T12088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 726.067064][ T5405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.079893][T12088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 726.088580][T12088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.111306][ T5405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.171083][ T5405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.196584][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.240777][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.280348][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.287488][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.328800][ T5405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.351881][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.359024][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.398215][ T5405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.456215][ T5405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.542839][ T5405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.566150][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.646244][T12088] veth0_vlan: entered promiscuous mode [ 726.657514][ T5405] bridge_slave_1: left allmulticast mode [ 726.663511][ T5405] bridge_slave_1: left promiscuous mode [ 726.670664][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.680300][ T5405] bridge_slave_0: left allmulticast mode [ 726.685959][ T5405] bridge_slave_0: left promiscuous mode [ 726.687515][ T5221] Bluetooth: hci4: command 0x0419 tx timeout [ 726.692133][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.706669][ T5405] bridge_slave_1: left allmulticast mode [ 726.713693][ T5405] bridge_slave_1: left promiscuous mode [ 726.719788][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.728877][ T5405] bridge_slave_0: left allmulticast mode [ 726.734520][ T5405] bridge_slave_0: left promiscuous mode [ 726.741462][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.007883][ T5405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.016601][ T5405] bond_slave_0: left promiscuous mode [ 727.023415][ T5405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.032909][ T5405] bond_slave_1: left promiscuous mode [ 727.040540][ T5405] bond0 (unregistering): Released all slaves [ 727.052683][ T5405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.063635][ T5405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.074534][ T5405] bond0 (unregistering): Released all slaves [ 727.085424][T12088] veth1_vlan: entered promiscuous mode [ 727.130201][T12116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.166920][T12116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.182842][T12088] veth0_macvtap: entered promiscuous mode [ 727.189361][T12116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.218583][T12116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.241758][T12088] veth1_macvtap: entered promiscuous mode [ 727.304774][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.315672][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.330832][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.343635][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.354301][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.364830][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.380403][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.391224][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.402567][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.457891][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.469346][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.481933][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.492532][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.502494][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.513065][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.522927][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.533539][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.544253][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.564107][T12088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.575690][T12088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.584553][T12088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.594021][T12088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.672604][T12088] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 727.692842][ T5405] hsr_slave_0: left promiscuous mode [ 727.699962][ T5405] hsr_slave_1: left promiscuous mode [ 727.705670][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.713599][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.721503][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.729068][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.739365][ T5405] hsr_slave_0: left promiscuous mode [ 727.744981][ T5405] hsr_slave_1: left promiscuous mode [ 727.750817][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.758288][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.766221][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.773924][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.783667][ T5405] veth1_macvtap: left promiscuous mode [ 727.789309][ T5405] veth0_macvtap: left promiscuous mode [ 727.794820][ T5405] veth1_vlan: left promiscuous mode [ 727.800275][ T5405] veth0_vlan: left promiscuous mode [ 727.806113][ T5405] veth1_macvtap: left promiscuous mode [ 727.812497][ T5405] veth0_macvtap: left promiscuous mode [ 727.818092][ T5405] veth1_vlan: left promiscuous mode [ 727.823327][ T5405] veth0_vlan: left promiscuous mode [ 727.989251][ T5405] team0 (unregistering): Port device team_slave_1 removed [ 728.016189][ T5405] team0 (unregistering): Port device team_slave_0 removed [ 728.191718][ T5405] team0 (unregistering): Port device team_slave_1 removed [ 728.213602][ T5405] team0 (unregistering): Port device team_slave_0 removed [ 728.291813][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.303693][T12186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.307392][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.335171][T12088] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 728.365857][T12186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.392027][T12186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 728.415918][T12186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 728.429908][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.445869][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.458172][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.484319][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.521012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.528162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.543278][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.550403][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.649049][T12186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.682866][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.708174][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.715315][ T5413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.725143][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.732241][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.767618][ T5221] Bluetooth: hci4: command 0x0419 tx timeout [ 728.862113][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.901907][T12116] veth0_vlan: entered promiscuous mode [ 728.915415][T12116] veth1_vlan: entered promiscuous mode [ 728.941595][T12116] veth0_macvtap: entered promiscuous mode [ 728.955885][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.964937][T12116] veth1_macvtap: entered promiscuous mode [ 728.990977][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.007638][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.018771][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.029275][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.039159][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.049625][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.060245][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.070973][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.087541][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.099047][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.110205][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.120238][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.131600][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.142431][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.152586][T12116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.162173][T12116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.171029][T12116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.179843][T12116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.219499][T12116] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 729.236693][T12186] veth0_vlan: entered promiscuous mode [ 729.254099][T12186] veth1_vlan: entered promiscuous mode [ 729.264341][ T5413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.274270][T12116] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 729.278136][ T5413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.303093][T12186] veth0_macvtap: entered promiscuous mode [ 729.309675][ T5399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.311019][T12186] veth1_macvtap: entered promiscuous mode [ 729.324731][ T5399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.335809][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.346555][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.359685][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.370178][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.381019][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.391643][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.403523][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.413981][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.424856][T12186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.445596][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.456410][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.466700][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.478541][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.488561][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.499353][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.511133][T12186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.521646][T12186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.532483][T12186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.544311][T12186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.553885][T12186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.562911][T12186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.572119][T12186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.597562][T12186] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 729.615670][ T5413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.616830][T12186] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 729.635529][ T5413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.652135][ T5401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.660576][ T5401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50