last executing test programs: 1m23.070072911s ago: executing program 2 (id=9): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xa8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000500)="7c00330700000000000800008847", 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) execve(&(0x7f0000000000)='./file1/../file0\x00', 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r6}, 0x10) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x55ff, 0xf, [{0x3}, {0xb, 0x1}, {0xd}, {0xb}, {0x0, 0x1}, {0x9}, {0x4, 0x1}, {0xe, 0x1}, {0x9}, {0x3}, {0x3}, {0x3, 0x1}, {0xe}, {0xf}, {0x6}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x28) 1m21.440323678s ago: executing program 2 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 1m19.563990502s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x6c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x5207, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newnexthop={0x34, 0x68, 0x1, 0x1000002, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x4}, {0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce090503"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x8, 0x1c, "498c2069f4d8afbc4d5de74740c384ef40c9684435155ae4f9a63818"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x83, 0x1, "c8"}, 0x0, 0x0}) accept$alg(r1, 0x0, 0x0) 1m15.800814455s ago: executing program 2 (id=33): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x1, 0xc8940) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000140)}, 0x10) (fail_nth: 1) sendmmsg(r5, 0x0, 0x0, 0x40840) 1m10.668782876s ago: executing program 2 (id=45): syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m0.95457777s ago: executing program 2 (id=68): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28042) write$sndseq(r2, &(0x7f0000000140)=[{0x5, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.612836571s ago: executing program 3 (id=187): set_mempolicy(0x4005, &(0x7f0000000080)=0x84, 0x9) (async, rerun: 32) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) (rerun: 32) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) r1 = eventfd2(0x0, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {0x0, 0x800}, {}, {}, {}, {0x0, 0x0, 0x5c1ccd69}, {}, {0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {0x0, 0x7fffffff}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x60e}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000000}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x4}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8, 0x6}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4100758d386bb409c8396cc4150896309aab23aca1989e7c02271f19bea3011d11ad7cea4dbd36f698064bfb29fbd02c1ea4ad12", @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf250a0000000c0003800800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04040aaaaaaaaaaa1229f087"], 0xd) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="2b26e0dc6a2f83000417ef65db7186f2a5f27834f0b110", @ANYRES16=r6, @ANYBLOB="08002dbd7000fddbdf250d00000008000400030000000c000180060004004e2200000800060007000000080004000800000008000500400000004c000180060004004e20000014000300ff010000000000000000000000000001070006006c63000008000b0073697000090006006e6f6e6500000000060004004e24000008000b0073697000"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.758752693s ago: executing program 3 (id=193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x1, 0x5145b597, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8, 0x1, 0x4, 0xfffffff9}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setresuid(0xee00, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000100)=0x84) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020008000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be98f0ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_getres(0x5, &(0x7f00000005c0)) syz_usb_disconnect(r3) alarm(0x400) alarm(0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@delpolicy={0x1a0, 0x14, 0x10, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x2, 0x4e22, 0x6, 0xa, 0x80, 0x20, 0x62, r1, r7}, 0x6e6bb7}, [@algo_aead={0x7f, 0x12, {{'seqiv(morus1280-avx2)\x00'}, 0x198, 0xc0, "c0ccb6695582ed32d040d5843eef73b5e3bf457d54b12fbee116f01174352ff6421f6f877296f300576c96f9bfe377816030be"}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @lastused={0xc, 0xf, 0x2}, @algo_comp={0xa9, 0x3, {{'lzs\x00'}, 0x308, "120529903d06a0ca35dfd9d7b2541704670b9e699727c7655c716beef6e4b302358c7cf93129f4e9bb6aa5e441ad7ffc74eada1f45317183b3b8a3ce9e67c3c36386b3764f9696fc59737dc05fc077c5e94cfa1f01491403c825f375ccdf566cf8"}}, @policy_type={0xa}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x2000c011}, 0x8044) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r8 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x267, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r8, 0x22, &(0x7f0000003000)={0x0}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x33a4, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc881}, 0x0) 9.801281306s ago: executing program 3 (id=204): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) fchdir(r2) close(r2) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00') fsconfig$FSCONFIG_SET_PATH(r9, 0x3, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', r1) preadv(r9, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r11, 0x0, 0x0}, 0x10) 4.689842716s ago: executing program 4 (id=214): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x10, 0x0, "53bb"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x800) (fail_nth: 1) 4.237881405s ago: executing program 4 (id=215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd27, 0x25dfdbfc, {0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)}, 0x4}], 0x1, 0x400101c3, 0x0) 3.948832299s ago: executing program 4 (id=216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653", 0x5d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000680)=""/85, 0x55}], 0x2}, 0x2121) 3.942954422s ago: executing program 0 (id=217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000027c0)=@delchain={0x7ec, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xd, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7c0, 0x2, [@TCA_BPF_ACT={0x7bc, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1ec, 0x5, 0x0, 0x0, {{0x7}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd4, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x140, 0x3b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x68}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x104, 0x8, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x57, 0x8, 0x5, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x28c, 0x13, 0x0, 0x0, {{0x7}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x69, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd}}]}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x7ec}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@md0, 0xee00, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') write$tun(r4, 0x0, 0x34) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @private2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000340)={0x0, 0x100}, 0x8) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040), 0x4) pread64(r2, &(0x7f00000006c0)=""/87, 0x57, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r6}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.611934003s ago: executing program 3 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000040}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.526157256s ago: executing program 0 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 3.521077355s ago: executing program 4 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, r1, 0x2f, 0x8}, 0x20) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x27) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r5, &(0x7f0000000040)=""/236, 0xec) 3.277274686s ago: executing program 1 (id=222): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (fail_nth: 1) 2.820577393s ago: executing program 1 (id=223): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_WRITE(r0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x18) 2.764972109s ago: executing program 0 (id=224): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x103}}, 0x10) bind$tipc(r0, 0x0, 0x0) (fail_nth: 1) 2.714706479s ago: executing program 3 (id=225): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000980)=""/183, 0xb7) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) 1.252830378s ago: executing program 1 (id=226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd27, 0x25dfdbfc, {0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)}, 0x4}], 0x1, 0x400101c3, 0x0) 1.132271683s ago: executing program 3 (id=227): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_clone(0x51029000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)="a1a0df52795bb4bfcf8c1319e625a84b013a058006cebb8c97503a09f38cdfa5b694aae85fd89a8363c21c5530439d778391fa49803b7194075b035636409231e9a90a7aba691128b2a2faba1110b64d2f7205002c1ad4a8efa9b5ed71474547ce28f7a046b1fb054b66621fa2b5bd3578") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000003980), 0x1, 0x0) write(r1, &(0x7f0000000100)="bf2e2e27038946df9f60115a37b34ca314850f3c199469f3ddf16d01331f571d7440e02f", 0x24) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="00146a"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x802541, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x2c) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000004c0)={0x3, 0x4, 0x2}) ppoll(&(0x7f0000000200)=[{r2, 0x48}], 0x1, 0x0, 0x0, 0x0) 1.043625312s ago: executing program 0 (id=228): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @multicast1}, &(0x7f0000000080)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x2000800) 936.667778ms ago: executing program 1 (id=229): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 936.452851ms ago: executing program 4 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 714.444783ms ago: executing program 1 (id=231): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653", 0x5d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000680)=""/85, 0x55}], 0x2}, 0x2121) 569.97989ms ago: executing program 1 (id=232): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000180)) r1 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000000004, 0x0, 0xfffffffffffff30a, 0x5, 0x9}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0x4, 0x0, &(0x7f0000000540)) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014}}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, &(0x7f0000000040)={"fa02efdefa827b629aa89eff2025e5c10f59f29865d6b4a697ef69d3f087", 0x80, 0x3323, 0x437, [0x2, 0x7, 0x8, 0x2, 0x2958, 0x440, 0xa04, 0x7ae, 0x83, 0x6, 0x3, 0x3, 0x7, 0x4, 0xcaaf, 0x40, 0x4, 0x1]}) write$P9_RSTATu(r5, 0x0, 0x232) 563.129368ms ago: executing program 0 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="680200000005010400000000000000000700000a54020100030000001d0a0000fd3f"], 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) syz_emit_ethernet(0x76, &(0x7f0000000740)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @remote}, [@hopopts={0x16, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x8}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0xfffffff7, [{0x3, 0x1, 0x2}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x5f, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8000000000007, 0x0) write$binfmt_script(r3, &(0x7f0000003c40)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x62}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 156.469684ms ago: executing program 0 (id=234): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=235): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac553", 0x1a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f0000000540)=""/84, 0x54, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x0, 0xfffd, 0x102, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x200, 0x9, 0x4, 0xffffffffffffffff, 0x1}, {0x0, 0x5, 0x80000003, 0x800000000000002}, 0x0, 0x6e6bb2, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b2190", 0x98}], 0x1}}], 0x1, 0x2000c044) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r10], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffde, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x10, 0xffff}, 0x9a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r12 = syz_clone(0x20000000, &(0x7f00000005c0)="c86a4ae7429058d58f451bdaa8527bf73c6bfa9cc0ed6752200f856352a51e6d2416f2df65ecac01abc2dd5df6fbc63edc11411122ac7a226cde0aa0ed261c5fca4049dc869a9aeeb6d20a973bc37f4771057f56a2bdb3cd2e6e8a41ad35653ec16fe6a16207cb833e39273c47d861d7452a9aa8a71fa4a006392d5246c853d4fb1c6a53cb9001278aa5dbd3af31e9d8b1f563606c4dc7123f57e4ad87ceceb72d0436f1fc12896a67702d88c3", 0xad, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="2398ef018206253b0d878a2924b60b2cd195d142cec37cd7df8607e83c9db951969aed71753b52c08815e1bd316186d05dbb5685d773") fcntl$setown(r11, 0x8, r12) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a040007000000b6f1ff0c0100854105001a000000000000d74619edc700006040231e93e304ad59cac20e4acd8a1220bb64e6fda632eee8"], 0x38}}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 92.227558][ T1234] cfg80211: failed to load regulatory.db [ 92.565062][ T5566] cgroup: Unknown subsys name 'net' [ 92.787390][ T5566] cgroup: Unknown subsys name 'cpuset' [ 92.839961][ T5566] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.933843][ T5566] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.664077][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.692652][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.704949][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.721901][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.723971][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.725637][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.728817][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.739790][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.767783][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.785543][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.786319][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.794718][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.809413][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.828807][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.858836][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.864507][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.869372][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.890725][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.890988][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.892536][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.893754][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.896857][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.897627][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.898929][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.948377][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.971245][ T5595] Bluetooth: hci4: command tx timeout [ 100.129629][ T5595] Bluetooth: hci1: command tx timeout [ 100.209449][ T5595] Bluetooth: hci3: command tx timeout [ 100.209458][ T5584] Bluetooth: hci2: command tx timeout [ 100.219652][ T5584] Bluetooth: hci0: command tx timeout [ 100.738235][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.742096][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.742731][ T5583] bridge_slave_0: entered allmulticast mode [ 100.750044][ T5583] bridge_slave_0: entered promiscuous mode [ 100.822496][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.822621][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.822771][ T5583] bridge_slave_1: entered allmulticast mode [ 100.824739][ T5583] bridge_slave_1: entered promiscuous mode [ 101.042567][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.058276][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.059146][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.059787][ T5580] bridge_slave_0: entered allmulticast mode [ 101.067640][ T5580] bridge_slave_0: entered promiscuous mode [ 101.107864][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.107988][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.108149][ T5581] bridge_slave_0: entered allmulticast mode [ 101.115234][ T5581] bridge_slave_0: entered promiscuous mode [ 101.138878][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.241260][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.241371][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.241525][ T5580] bridge_slave_1: entered allmulticast mode [ 101.243377][ T5580] bridge_slave_1: entered promiscuous mode [ 101.255558][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.255878][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.256345][ T5581] bridge_slave_1: entered allmulticast mode [ 101.268817][ T5581] bridge_slave_1: entered promiscuous mode [ 101.390553][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.390789][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.395208][ T5579] bridge_slave_0: entered allmulticast mode [ 101.397173][ T5579] bridge_slave_0: entered promiscuous mode [ 101.465545][ T5583] team0: Port device team_slave_0 added [ 101.467031][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.467143][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.467278][ T5579] bridge_slave_1: entered allmulticast mode [ 101.469156][ T5579] bridge_slave_1: entered promiscuous mode [ 101.515524][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.515761][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.515876][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.516034][ T5582] bridge_slave_0: entered allmulticast mode [ 101.518868][ T5582] bridge_slave_0: entered promiscuous mode [ 101.567490][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.580927][ T5583] team0: Port device team_slave_1 added [ 101.604341][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.604601][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.604728][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.604857][ T5582] bridge_slave_1: entered allmulticast mode [ 101.607085][ T5582] bridge_slave_1: entered promiscuous mode [ 101.618416][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.746298][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.805661][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.805676][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.805697][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.816571][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.836701][ T5580] team0: Port device team_slave_0 added [ 101.873096][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.875519][ T5581] team0: Port device team_slave_0 added [ 101.876417][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.876434][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.876464][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.946075][ T5580] team0: Port device team_slave_1 added [ 101.948562][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.966985][ T5581] team0: Port device team_slave_1 added [ 102.053132][ T5584] Bluetooth: hci4: command tx timeout [ 102.057638][ T5579] team0: Port device team_slave_0 added [ 102.116711][ T5579] team0: Port device team_slave_1 added [ 102.117483][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.117494][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.117514][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.133253][ T5582] team0: Port device team_slave_0 added [ 102.138912][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.138953][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.139033][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.211232][ T5584] Bluetooth: hci1: command tx timeout [ 102.249987][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.250002][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.250026][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.255520][ T5582] team0: Port device team_slave_1 added [ 102.256673][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.256686][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.256709][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.289842][ T5584] Bluetooth: hci0: command tx timeout [ 102.289937][ T5584] Bluetooth: hci3: command tx timeout [ 102.290000][ T5584] Bluetooth: hci2: command tx timeout [ 102.749476][ T5583] hsr_slave_0: entered promiscuous mode [ 102.751776][ T5583] hsr_slave_1: entered promiscuous mode [ 102.753650][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.753663][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.753683][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.821905][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.821918][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.821938][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.825134][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.825147][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.825167][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.956692][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.956705][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.956726][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.054173][ T5580] hsr_slave_0: entered promiscuous mode [ 103.055204][ T5580] hsr_slave_1: entered promiscuous mode [ 103.056050][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 103.056149][ T5580] Cannot create hsr debugfs directory [ 103.081772][ T5581] hsr_slave_0: entered promiscuous mode [ 103.085724][ T5581] hsr_slave_1: entered promiscuous mode [ 103.088105][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 103.088167][ T5581] Cannot create hsr debugfs directory [ 103.197099][ T5579] hsr_slave_0: entered promiscuous mode [ 103.198104][ T5579] hsr_slave_1: entered promiscuous mode [ 103.198772][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 103.198789][ T5579] Cannot create hsr debugfs directory [ 103.447296][ T5582] hsr_slave_0: entered promiscuous mode [ 103.448967][ T5582] hsr_slave_1: entered promiscuous mode [ 103.451659][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 103.451724][ T5582] Cannot create hsr debugfs directory [ 104.129373][ T5595] Bluetooth: hci4: command tx timeout [ 104.241924][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.285421][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.297759][ T5595] Bluetooth: hci1: command tx timeout [ 104.314529][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.355846][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.357697][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.369453][ T5595] Bluetooth: hci2: command tx timeout [ 104.369486][ T5595] Bluetooth: hci3: command tx timeout [ 104.369508][ T5595] Bluetooth: hci0: command tx timeout [ 104.396402][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.424108][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.456920][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.621676][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.654884][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.660716][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.712883][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.717008][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.764354][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.794578][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.834181][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.991999][ T5579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.027542][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.037889][ T5579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.073668][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.078909][ T5579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.113342][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.148045][ T5579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.176772][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.359002][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.394478][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.419839][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.454068][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.469847][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.506902][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.543917][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.565820][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.733284][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.794395][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.825173][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.843827][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.874019][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.893945][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.933582][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.948115][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.978767][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.033388][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.056597][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.105858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.106110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.168284][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.168377][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.209396][ T5584] Bluetooth: hci4: command tx timeout [ 106.253445][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.299052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.299199][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.341368][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.373805][ T5584] Bluetooth: hci1: command tx timeout [ 106.375450][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.375556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.449518][ T5584] Bluetooth: hci3: command tx timeout [ 106.449549][ T4894] Bluetooth: hci0: command tx timeout [ 106.449559][ T5584] Bluetooth: hci2: command tx timeout [ 106.503841][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.555161][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.555311][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.583887][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.696415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.696520][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.853877][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.895612][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.940980][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.941189][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.004762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.004984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.115478][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.226375][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.226509][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.311946][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.312084][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.825810][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.333197][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.361523][ T5583] veth0_vlan: entered promiscuous mode [ 108.498566][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.520395][ T5583] veth1_vlan: entered promiscuous mode [ 108.781493][ T5581] veth0_vlan: entered promiscuous mode [ 108.789351][ T5583] veth0_macvtap: entered promiscuous mode [ 108.844545][ T5583] veth1_macvtap: entered promiscuous mode [ 108.870257][ T5581] veth1_vlan: entered promiscuous mode [ 108.975845][ T5579] veth0_vlan: entered promiscuous mode [ 109.010629][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.071626][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.098433][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.173974][ T5579] veth1_vlan: entered promiscuous mode [ 109.398473][ T5581] veth0_macvtap: entered promiscuous mode [ 109.477753][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.500775][ T5581] veth1_macvtap: entered promiscuous mode [ 109.752521][ T5579] veth0_macvtap: entered promiscuous mode [ 109.838276][ T5579] veth1_macvtap: entered promiscuous mode [ 109.875323][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.956257][ T5580] veth0_vlan: entered promiscuous mode [ 109.969093][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.026836][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.026866][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.088994][ T5580] veth1_vlan: entered promiscuous mode [ 110.104680][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.166693][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.245431][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.245454][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.965511][ T5580] veth0_macvtap: entered promiscuous mode [ 111.158222][ T5580] veth1_macvtap: entered promiscuous mode [ 111.240268][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.240288][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.296035][ T5582] veth0_vlan: entered promiscuous mode [ 111.466469][ T5582] veth1_vlan: entered promiscuous mode [ 111.505880][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.542133][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.542158][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.615775][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.655730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.655754][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.792005][ T5771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 111.813248][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.813267][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.900904][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.922292][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.922790][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.923094][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.923805][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.924220][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.924653][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.288098][ T5582] veth0_macvtap: entered promiscuous mode [ 112.344697][ T5582] veth1_macvtap: entered promiscuous mode [ 112.568104][ T5775] FAULT_INJECTION: forcing a failure. [ 112.568104][ T5775] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.568155][ T5775] CPU: 1 UID: 0 PID: 5775 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.568186][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.568208][ T5775] Call Trace: [ 112.568216][ T5775] [ 112.568225][ T5775] dump_stack_lvl+0xe8/0x150 [ 112.568271][ T5775] should_fail_ex+0x467/0x600 [ 112.568307][ T5775] _copy_from_user+0x2d/0xb0 [ 112.568330][ T5775] __sys_bpf+0x2e7/0xd90 [ 112.568361][ T5775] ? __pfx___sys_bpf+0x10/0x10 [ 112.568386][ T5775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.568416][ T5775] ? rt_mutex_slowunlock+0x219/0x460 [ 112.568467][ T5775] ? ksys_write+0x248/0x270 [ 112.568497][ T5775] ? __pfx_ksys_write+0x10/0x10 [ 112.568530][ T5775] __x64_sys_bpf+0xba/0xd0 [ 112.568564][ T5775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.568589][ T5775] do_syscall_64+0x174/0x580 [ 112.568612][ T5775] ? trace_irq_disable+0x3b/0x140 [ 112.568647][ T5775] ? clear_bhb_loop+0x40/0x90 [ 112.568676][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.568699][ T5775] RIP: 0033:0x7fd91adfe0d9 [ 112.568725][ T5775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.568744][ T5775] RSP: 002b:00007fd919056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.568776][ T5775] RAX: ffffffffffffffda RBX: 00007fd91b085fa0 RCX: 00007fd91adfe0d9 [ 112.568793][ T5775] RDX: 0000000000000028 RSI: 0000200000001180 RDI: 0000000000000012 [ 112.568807][ T5775] RBP: 00007fd919056090 R08: 0000000000000000 R09: 0000000000000000 [ 112.568820][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.568833][ T5775] R13: 00007fd91b086038 R14: 00007fd91b085fa0 R15: 00007ffdc5c1df88 [ 112.568874][ T5775] [ 112.813621][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.813644][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.889956][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.973969][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.181237][ T5783] FAULT_INJECTION: forcing a failure. [ 113.181237][ T5783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.181309][ T5783] CPU: 1 UID: 0 PID: 5783 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.181337][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.181350][ T5783] Call Trace: [ 113.181358][ T5783] [ 113.181368][ T5783] dump_stack_lvl+0xe8/0x150 [ 113.181420][ T5783] should_fail_ex+0x467/0x600 [ 113.181456][ T5783] _copy_from_user+0x2d/0xb0 [ 113.181479][ T5783] ___sys_sendmsg+0x1c6/0x360 [ 113.181503][ T5783] ? __lock_acquire+0x683/0x2ce0 [ 113.181530][ T5783] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.181587][ T5783] ? __fget_files+0x2a/0x420 [ 113.181611][ T5783] ? __fget_files+0x3a8/0x420 [ 113.181633][ T5783] __x64_sys_sendmsg+0x1b7/0x290 [ 113.181652][ T5783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.181682][ T5783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.181699][ T5783] do_syscall_64+0x174/0x580 [ 113.181716][ T5783] ? trace_irq_disable+0x3b/0x140 [ 113.181741][ T5783] ? clear_bhb_loop+0x40/0x90 [ 113.181760][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.181776][ T5783] RIP: 0033:0x7f765fafe0d9 [ 113.181795][ T5783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.181809][ T5783] RSP: 002b:00007f765dd35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.181830][ T5783] RAX: ffffffffffffffda RBX: 00007f765fd86090 RCX: 00007f765fafe0d9 [ 113.181842][ T5783] RDX: 0000000000004000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 113.181852][ T5783] RBP: 00007f765dd35090 R08: 0000000000000000 R09: 0000000000000000 [ 113.181862][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.181871][ T5783] R13: 00007f765fd86128 R14: 00007f765fd86090 R15: 00007ffe163e3c98 [ 113.181895][ T5783] [ 113.441868][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.441889][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.601756][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 113.601885][ T5778] sch_tbf: peakrate 2174 is lower than or equals to rate 2972 ! [ 113.814931][ T5789] Zero length message leads to an empty skb [ 113.867205][ T770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.496012][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.496381][ T5787] loop5: detected capacity change from 0 to 7 [ 114.525467][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.525875][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.526209][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.526601][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.527036][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.527239][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.527430][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.527889][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.528275][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.528676][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.820352][ T5787] Dev loop5: unable to read RDB block 7 [ 114.820417][ T5787] loop5: unable to read partition table [ 114.820643][ T5787] loop5: partition table beyond EOD, truncated [ 114.820680][ T5787] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.024313][ T5800] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 115.024338][ T5800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13'. [ 115.051541][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.051562][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.279801][ T5807] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.412125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.412148][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.553253][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.006535][ T5818] FAULT_INJECTION: forcing a failure. [ 116.006535][ T5818] name failslab, interval 1, probability 0, space 0, times 1 [ 116.006566][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.006587][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.006598][ T5818] Call Trace: [ 116.006604][ T5818] [ 116.006612][ T5818] dump_stack_lvl+0xe8/0x150 [ 116.006643][ T5818] should_fail_ex+0x467/0x600 [ 116.006671][ T5818] should_failslab+0xa8/0x100 [ 116.006692][ T5818] kmem_cache_alloc_noprof+0xa4/0x650 [ 116.006721][ T5818] ? do_getname+0x2e/0x250 [ 116.006749][ T5818] ? do_getname+0x2e/0x250 [ 116.006780][ T5818] do_getname+0x2e/0x250 [ 116.006804][ T5818] ? getname_uflags+0x11/0x30 [ 116.006832][ T5818] do_fchownat+0xe3/0x250 [ 116.006860][ T5818] ? __pfx_do_fchownat+0x10/0x10 [ 116.006889][ T5818] ? __pfx_ksys_write+0x10/0x10 [ 116.006913][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.006932][ T5818] __x64_sys_lchown+0x85/0xa0 [ 116.006958][ T5818] do_syscall_64+0x174/0x580 [ 116.006978][ T5818] ? trace_irq_disable+0x3b/0x140 [ 116.007008][ T5818] ? clear_bhb_loop+0x40/0x90 [ 116.007031][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.007049][ T5818] RIP: 0033:0x7f2d23b7e0d9 [ 116.007067][ T5818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.007081][ T5818] RSP: 002b:00007f2d21dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 116.007100][ T5818] RAX: ffffffffffffffda RBX: 00007f2d23e05fa0 RCX: 00007f2d23b7e0d9 [ 116.007113][ T5818] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000040 [ 116.007125][ T5818] RBP: 00007f2d21dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.007135][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.007145][ T5818] R13: 00007f2d23e06038 R14: 00007f2d23e05fa0 R15: 00007ffff1faade8 [ 116.007172][ T5818] [ 117.299279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.501327][ T5828] syz.4.5 (5828) used greatest stack depth: 18592 bytes left [ 118.608931][ T5698] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.822613][ T5855] FAULT_INJECTION: forcing a failure. [ 118.822613][ T5855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.822640][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.822658][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.822668][ T5855] Call Trace: [ 118.822674][ T5855] [ 118.822680][ T5855] dump_stack_lvl+0xe8/0x150 [ 118.822708][ T5855] should_fail_ex+0x467/0x600 [ 118.822733][ T5855] _copy_from_user+0x2d/0xb0 [ 118.822749][ T5855] ___sys_sendmsg+0x1c6/0x360 [ 118.822766][ T5855] ? __lock_acquire+0x683/0x2ce0 [ 118.822784][ T5855] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.822826][ T5855] ? __fget_files+0x2a/0x420 [ 118.822840][ T5855] ? __fget_files+0x3a8/0x420 [ 118.822862][ T5855] __x64_sys_sendmsg+0x1b7/0x290 [ 118.822882][ T5855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.822911][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.822929][ T5855] do_syscall_64+0x174/0x580 [ 118.822949][ T5855] ? trace_irq_disable+0x3b/0x140 [ 118.822974][ T5855] ? clear_bhb_loop+0x40/0x90 [ 118.822993][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.823009][ T5855] RIP: 0033:0x7f4ff746e0d9 [ 118.823024][ T5855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.823037][ T5855] RSP: 002b:00007f4ff56c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.823060][ T5855] RAX: ffffffffffffffda RBX: 00007f4ff76f5fa0 RCX: 00007f4ff746e0d9 [ 118.823072][ T5855] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 118.823082][ T5855] RBP: 00007f4ff56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.823091][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.823100][ T5855] R13: 00007f4ff76f6038 R14: 00007f4ff76f5fa0 R15: 00007ffe0553b378 [ 118.823124][ T5855] [ 118.828902][ T5698] usb 3-1: device descriptor read/64, error -71 [ 119.295575][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.472675][ T5698] usb 3-1: device descriptor read/64, error -71 [ 119.601574][ T5698] usb usb3-port1: attempt power cycle [ 119.905227][ T5867] FAULT_INJECTION: forcing a failure. [ 119.905227][ T5867] name failslab, interval 1, probability 0, space 0, times 0 [ 119.905266][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.905288][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.905307][ T5867] Call Trace: [ 119.905316][ T5867] [ 119.905323][ T5867] dump_stack_lvl+0xe8/0x150 [ 119.905353][ T5867] should_fail_ex+0x467/0x600 [ 119.905382][ T5867] should_failslab+0xa8/0x100 [ 119.905409][ T5867] __kmalloc_noprof+0xfe/0x780 [ 119.905426][ T5867] ? vfs_write+0x231/0xbb0 [ 119.905447][ T5867] ? kernfs_fop_write_iter+0x158/0x540 [ 119.905472][ T5867] ? kernfs_fop_write_iter+0x158/0x540 [ 119.905500][ T5867] kernfs_fop_write_iter+0x158/0x540 [ 119.905528][ T5867] vfs_write+0x61e/0xbb0 [ 119.905555][ T5867] ? __pfx_vfs_write+0x10/0x10 [ 119.905578][ T5867] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 119.905599][ T5867] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.905619][ T5867] ? mutex_lock_nested+0x152/0x1d0 [ 119.905644][ T5867] ? fdget_pos+0x252/0x320 [ 119.905668][ T5867] ksys_write+0x156/0x270 [ 119.905693][ T5867] ? __pfx_ksys_write+0x10/0x10 [ 119.905721][ T5867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.905741][ T5867] do_syscall_64+0x174/0x580 [ 119.905761][ T5867] ? trace_irq_disable+0x3b/0x140 [ 119.905790][ T5867] ? clear_bhb_loop+0x40/0x90 [ 119.905829][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.905846][ T5867] RIP: 0033:0x7fd91adfe0d9 [ 119.905864][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.905879][ T5867] RSP: 002b:00007fd919056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.905898][ T5867] RAX: ffffffffffffffda RBX: 00007fd91b085fa0 RCX: 00007fd91adfe0d9 [ 119.905910][ T5867] RDX: 0000000000000027 RSI: 0000200000000000 RDI: 0000000000000005 [ 119.905921][ T5867] RBP: 00007fd919056090 R08: 0000000000000000 R09: 0000000000000000 [ 119.905932][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.905942][ T5867] R13: 00007fd91b086038 R14: 00007fd91b085fa0 R15: 00007ffdc5c1df88 [ 119.905972][ T5867] [ 120.209992][ T5698] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.587470][ T5698] usb 3-1: device descriptor read/8, error -71 [ 120.815388][ T5873] FAULT_INJECTION: forcing a failure. [ 120.815388][ T5873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.815427][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.3.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.815458][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.815473][ T5873] Call Trace: [ 120.815483][ T5873] [ 120.815493][ T5873] dump_stack_lvl+0xe8/0x150 [ 120.815536][ T5873] should_fail_ex+0x467/0x600 [ 120.815576][ T5873] _copy_to_user+0x31/0xb0 [ 120.815603][ T5873] simple_read_from_buffer+0xe1/0x170 [ 120.815635][ T5873] proc_fail_nth_read+0x1be/0x230 [ 120.815668][ T5873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.815700][ T5873] ? rw_verify_area+0x250/0x4d0 [ 120.815732][ T5873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.815758][ T5873] vfs_read+0x219/0xa90 [ 120.815798][ T5873] ? __pfx_vfs_read+0x10/0x10 [ 120.815840][ T5873] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.815869][ T5873] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.815897][ T5873] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.815925][ T5873] ? mutex_lock_nested+0x152/0x1d0 [ 120.815960][ T5873] ? fdget_pos+0x252/0x320 [ 120.816018][ T5873] ksys_read+0x156/0x270 [ 120.816052][ T5873] ? __pfx_ksys_read+0x10/0x10 [ 120.816093][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.816126][ T5873] do_syscall_64+0x174/0x580 [ 120.816154][ T5873] ? trace_irq_disable+0x3b/0x140 [ 120.816193][ T5873] ? clear_bhb_loop+0x40/0x90 [ 120.816225][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.816250][ T5873] RIP: 0033:0x7fd91adbe90e [ 120.816278][ T5873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.816299][ T5873] RSP: 002b:00007fd919034fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.816324][ T5873] RAX: ffffffffffffffda RBX: 00007fd9190356c0 RCX: 00007fd91adbe90e [ 120.816342][ T5873] RDX: 000000000000000f RSI: 00007fd9190350a0 RDI: 0000000000000004 [ 120.816357][ T5873] RBP: 00007fd919035090 R08: 0000000000000000 R09: 0000000000000000 [ 120.816372][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.816386][ T5873] R13: 00007fd91b086128 R14: 00007fd91b086090 R15: 00007ffdc5c1df88 [ 120.816426][ T5873] [ 121.707067][ T5880] Invalid option length (65331) for dns_resolver key [ 122.508600][ T5892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.550832][ T5892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.705305][ T5897] 9p: Bad value for 'rfdno' [ 124.127015][ T5875] FAULT_INJECTION: forcing a failure. [ 124.127015][ T5875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.127128][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.127156][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.127169][ T5875] Call Trace: [ 124.127182][ T5875] [ 124.127189][ T5875] dump_stack_lvl+0xe8/0x150 [ 124.127218][ T5875] should_fail_ex+0x467/0x600 [ 124.127243][ T5875] _copy_from_user+0x2d/0xb0 [ 124.127259][ T5875] sk_setsockopt+0x2b7/0x2c40 [ 124.127291][ T5875] ? __pfx_sk_setsockopt+0x10/0x10 [ 124.127316][ T5875] ? __pfx___schedule+0x10/0x10 [ 124.127346][ T5875] ? __fget_files+0x2a/0x420 [ 124.127369][ T5875] ? __fget_files+0x2a/0x420 [ 124.127385][ T5875] ? __fget_files+0x2a/0x420 [ 124.127399][ T5875] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 124.127424][ T5875] do_sock_setsockopt+0x11b/0x1b0 [ 124.127443][ T5875] __x64_sys_setsockopt+0x143/0x1b0 [ 124.127462][ T5875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.127479][ T5875] do_syscall_64+0x174/0x580 [ 124.127498][ T5875] ? clear_bhb_loop+0x40/0x90 [ 124.127517][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.127534][ T5875] RIP: 0033:0x7f765fafe0d9 [ 124.127549][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.127562][ T5875] RSP: 002b:00007f765dd35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.127579][ T5875] RAX: ffffffffffffffda RBX: 00007f765fd86090 RCX: 00007f765fafe0d9 [ 124.127591][ T5875] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000006 [ 124.127600][ T5875] RBP: 00007f765dd35090 R08: 0000000000000010 R09: 0000000000000000 [ 124.127610][ T5875] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 124.127620][ T5875] R13: 00007f765fd86128 R14: 00007f765fd86090 R15: 00007ffe163e3c98 [ 124.127649][ T5875] [ 126.431367][ T5919] FAULT_INJECTION: forcing a failure. [ 126.431367][ T5919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.431429][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.431457][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.431471][ T5919] Call Trace: [ 126.431480][ T5919] [ 126.431489][ T5919] dump_stack_lvl+0xe8/0x150 [ 126.431528][ T5919] should_fail_ex+0x467/0x600 [ 126.431563][ T5919] _copy_from_user+0x2d/0xb0 [ 126.431587][ T5919] ___sys_sendmsg+0x1c6/0x360 [ 126.431617][ T5919] ? __lock_acquire+0x683/0x2ce0 [ 126.431645][ T5919] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.431696][ T5919] ? __fget_files+0x2a/0x420 [ 126.431713][ T5919] ? __fget_files+0x3a8/0x420 [ 126.431737][ T5919] __x64_sys_sendmsg+0x1b7/0x290 [ 126.431755][ T5919] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.431777][ T5919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.431811][ T5919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.431831][ T5919] do_syscall_64+0x174/0x580 [ 126.431857][ T5919] ? clear_bhb_loop+0x40/0x90 [ 126.431879][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.431897][ T5919] RIP: 0033:0x7f4ff746e0d9 [ 126.431913][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.431928][ T5919] RSP: 002b:00007f4ff5684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.431947][ T5919] RAX: ffffffffffffffda RBX: 00007f4ff76f6180 RCX: 00007f4ff746e0d9 [ 126.431961][ T5919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 126.431972][ T5919] RBP: 00007f4ff5684090 R08: 0000000000000000 R09: 0000000000000000 [ 126.431982][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.431992][ T5919] R13: 00007f4ff76f6218 R14: 00007f4ff76f6180 R15: 00007ffe0553b378 [ 126.432019][ T5919] [ 127.771503][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'. [ 127.815158][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'. [ 128.100027][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.302495][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 128.326503][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.480939][ T43] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 128.480967][ T43] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 128.480985][ T43] usb 5-1: config 4 has no interface number 0 [ 128.648337][ T43] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 128.648368][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.648389][ T43] usb 5-1: Product: syz [ 128.648404][ T43] usb 5-1: Manufacturer: syz [ 128.648419][ T43] usb 5-1: SerialNumber: syz [ 129.504367][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.504966][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.632509][ T5945] tc_dump_action: action bad kind [ 129.869416][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.019425][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 130.037737][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 130.037767][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.037790][ T10] usb 4-1: Product: syz [ 130.037805][ T10] usb 4-1: Manufacturer: syz [ 130.037819][ T10] usb 4-1: SerialNumber: syz [ 130.168139][ T10] usb 4-1: config 0 descriptor?? [ 130.316659][ T43] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 130.316774][ T43] uvcvideo 5-1:4.147: No valid video chain found. [ 130.545548][ T43] usb 5-1: USB disconnect, device number 2 [ 130.664475][ T10] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 130.664548][ T10] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 131.069044][ T10] usb 4-1: USB disconnect, device number 2 [ 131.194128][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 131.457955][ T31] usb 2-1: config 43 interface 0 has no altsetting 0 [ 131.483323][ T31] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 131.483358][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.483382][ T31] usb 2-1: Product: syz [ 131.483399][ T31] usb 2-1: Manufacturer: syz [ 131.483415][ T31] usb 2-1: SerialNumber: syz [ 132.310176][ T31] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 132.310499][ T31] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 132.310607][ T31] dvb_usb_anysee 2-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 132.372596][ T31] usb 2-1: USB disconnect, device number 2 [ 133.917648][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.930939][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.262232][ T5993] FAULT_INJECTION: forcing a failure. [ 134.262232][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.262300][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.262327][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.262341][ T5993] Call Trace: [ 134.262350][ T5993] [ 134.262360][ T5993] dump_stack_lvl+0xe8/0x150 [ 134.262406][ T5993] should_fail_ex+0x467/0x600 [ 134.262442][ T5993] _copy_from_user+0x2d/0xb0 [ 134.262465][ T5993] __sys_bpf+0x2e7/0xd90 [ 134.262496][ T5993] ? __pfx___sys_bpf+0x10/0x10 [ 134.262516][ T5993] ? __schedule+0x16f2/0x5500 [ 134.262541][ T5993] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.262593][ T5993] ? ksys_write+0x248/0x270 [ 134.262632][ T5993] __x64_sys_bpf+0xba/0xd0 [ 134.262666][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.262692][ T5993] do_syscall_64+0x174/0x580 [ 134.262719][ T5993] ? clear_bhb_loop+0x40/0x90 [ 134.262748][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.262772][ T5993] RIP: 0033:0x7f2d23b7e0d9 [ 134.262794][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.262813][ T5993] RSP: 002b:00007f2d21d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.262838][ T5993] RAX: ffffffffffffffda RBX: 00007f2d23e06180 RCX: 00007f2d23b7e0d9 [ 134.262855][ T5993] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000 [ 134.262869][ T5993] RBP: 00007f2d21d94090 R08: 0000000000000000 R09: 0000000000000000 [ 134.262883][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.262896][ T5993] R13: 00007f2d23e06218 R14: 00007f2d23e06180 R15: 00007ffff1faade8 [ 134.262930][ T5993] [ 136.444585][ T6001] capability: warning: `syz.3.71' uses 32-bit capabilities (legacy support in use) [ 137.592736][ T4894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.627345][ T4894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.641309][ T4894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.645429][ T4894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.648057][ T4894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.802639][ T36] audit: type=1326 audit(1786065882.392:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.0.73" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d23b7e0d9 code=0x0 [ 138.194898][ T6021] FAULT_INJECTION: forcing a failure. [ 138.194898][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.194929][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.3.75 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.194950][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.194960][ T6021] Call Trace: [ 138.194967][ T6021] [ 138.194974][ T6021] dump_stack_lvl+0xe8/0x150 [ 138.195006][ T6021] should_fail_ex+0x467/0x600 [ 138.195036][ T6021] _copy_to_user+0x31/0xb0 [ 138.195055][ T6021] simple_read_from_buffer+0xe1/0x170 [ 138.195080][ T6021] proc_fail_nth_read+0x1be/0x230 [ 138.195102][ T6021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.195127][ T6021] ? rw_verify_area+0x250/0x4d0 [ 138.195150][ T6021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.195169][ T6021] vfs_read+0x219/0xa90 [ 138.195198][ T6021] ? __pfx_vfs_read+0x10/0x10 [ 138.195220][ T6021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.195241][ T6021] ? lockdep_hardirqs_on+0x7a/0x110 [ 138.195259][ T6021] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 138.195278][ T6021] ? mutex_lock_nested+0x152/0x1d0 [ 138.195301][ T6021] ? fdget_pos+0x252/0x320 [ 138.195326][ T6021] ksys_read+0x156/0x270 [ 138.195350][ T6021] ? __pfx_ksys_read+0x10/0x10 [ 138.195375][ T6021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.195395][ T6021] do_syscall_64+0x174/0x580 [ 138.195413][ T6021] ? trace_irq_disable+0x3b/0x140 [ 138.195442][ T6021] ? clear_bhb_loop+0x40/0x90 [ 138.195465][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.195484][ T6021] RIP: 0033:0x7fd91adbe90e [ 138.195502][ T6021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.195520][ T6021] RSP: 002b:00007fd919013fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.195539][ T6021] RAX: ffffffffffffffda RBX: 00007fd9190146c0 RCX: 00007fd91adbe90e [ 138.195551][ T6021] RDX: 000000000000000f RSI: 00007fd9190140a0 RDI: 0000000000000004 [ 138.195562][ T6021] RBP: 00007fd919014090 R08: 0000000000000000 R09: 0000000000000000 [ 138.195572][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.195581][ T6021] R13: 00007fd91b086218 R14: 00007fd91b086180 R15: 00007ffdc5c1df88 [ 138.195633][ T6021] [ 138.360537][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.360872][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.548893][ T1167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.087293][ T6031] FAULT_INJECTION: forcing a failure. [ 139.087293][ T6031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.087325][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.087347][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.087359][ T6031] Call Trace: [ 139.087367][ T6031] [ 139.087376][ T6031] dump_stack_lvl+0xe8/0x150 [ 139.087409][ T6031] should_fail_ex+0x467/0x600 [ 139.087437][ T6031] _copy_to_user+0x31/0xb0 [ 139.087455][ T6031] simple_read_from_buffer+0xe1/0x170 [ 139.087478][ T6031] proc_fail_nth_read+0x1be/0x230 [ 139.087500][ T6031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.087521][ T6031] ? rw_verify_area+0x250/0x4d0 [ 139.087541][ T6031] ? __fget_files+0x2a/0x420 [ 139.087559][ T6031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.087580][ T6031] vfs_read+0x219/0xa90 [ 139.087613][ T6031] ? __pfx_vfs_read+0x10/0x10 [ 139.087637][ T6031] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.087656][ T6031] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.087674][ T6031] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 139.087692][ T6031] ? mutex_lock_nested+0x152/0x1d0 [ 139.087716][ T6031] ? fdget_pos+0x252/0x320 [ 139.087739][ T6031] ksys_read+0x156/0x270 [ 139.087763][ T6031] ? __pfx_ksys_read+0x10/0x10 [ 139.087794][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.087815][ T6031] do_syscall_64+0x174/0x580 [ 139.087835][ T6031] ? clear_bhb_loop+0x40/0x90 [ 139.087855][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.087873][ T6031] RIP: 0033:0x7f4ff742e90e [ 139.087890][ T6031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.087904][ T6031] RSP: 002b:00007f4ff5683fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.087924][ T6031] RAX: ffffffffffffffda RBX: 00007f4ff56846c0 RCX: 00007f4ff742e90e [ 139.087937][ T6031] RDX: 000000000000000f RSI: 00007f4ff56840a0 RDI: 0000000000000007 [ 139.087947][ T6031] RBP: 00007f4ff5684090 R08: 0000000000000000 R09: 0000000000000000 [ 139.087958][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.087967][ T6031] R13: 00007f4ff76f6218 R14: 00007f4ff76f6180 R15: 00007ffe0553b378 [ 139.087994][ T6031] [ 139.451171][ T197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.641220][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 139.675858][ T197] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 139.675893][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.675916][ T197] usb 4-1: Product: syz [ 139.675933][ T197] usb 4-1: Manufacturer: syz [ 139.675950][ T197] usb 4-1: SerialNumber: syz [ 139.785659][ T197] usb 4-1: config 0 descriptor?? [ 139.800295][ T6035] fuse: Bad value for 'fd' [ 139.824482][ T5595] Bluetooth: hci0: command tx timeout [ 139.912689][ T4257] Bluetooth: hci5: Frame reassembly failed (-84) [ 140.111770][ T197] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 140.111818][ T197] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 140.421576][ T5794] usb 4-1: USB disconnect, device number 3 [ 140.524871][ T1167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.799418][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.856271][ T1167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.970119][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 140.994852][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 140.994896][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.994919][ T9] usb 2-1: Product: syz [ 140.994936][ T9] usb 2-1: Manufacturer: syz [ 140.994953][ T9] usb 2-1: SerialNumber: syz [ 141.093341][ T9] usb 2-1: config 0 descriptor?? [ 141.317780][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 141.683662][ T1167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.809438][ T4894] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.889454][ T4894] Bluetooth: hci0: command tx timeout [ 142.377100][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 142.815361][ T1234] usb 2-1: USB disconnect, device number 3 [ 143.171337][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.372032][ T43] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 143.372067][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.436883][ T43] usb 5-1: config 0 descriptor?? [ 143.505517][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 143.974106][ T4894] Bluetooth: hci0: command tx timeout [ 144.344926][ T6078] fuse: Bad value for 'fd' [ 144.428241][ T6079] Bluetooth: MGMT ver 1.23 [ 144.545819][ T43] gspca_cpia1: usb_control_msg 05, error -110 [ 144.576334][ T43] gspca_cpia1: usb_control_msg 01, error -32 [ 144.631394][ T43] gspca_cpia1: usb_control_msg 01, error -32 [ 145.839596][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.840126][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.849033][ T43] gspca_cpia1: usb_control_msg 01, error -110 [ 145.849055][ T43] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 146.049394][ T4894] Bluetooth: hci0: command tx timeout [ 148.973992][ T43] usb 5-1: USB disconnect, device number 3 [ 149.337030][ T6107] tipc: Started in network mode [ 149.337068][ T6107] tipc: Node identity 7f000001, cluster identity 4711 [ 149.595337][ T6107] tipc: New replicast peer: 127.0.0.2 [ 149.667775][ T6107] tipc: Enabled bearer , priority 10 [ 150.081044][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.081675][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.153304][ T1167] bridge_slave_1: left allmulticast mode [ 150.153458][ T1167] bridge_slave_1: left promiscuous mode [ 150.174589][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.296867][ T6134] fuse: Bad value for 'fd' [ 150.381053][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 150.542944][ T1167] bridge_slave_0: left allmulticast mode [ 150.542985][ T1167] bridge_slave_0: left promiscuous mode [ 150.543249][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.127742][ T6155] Bluetooth: MGMT ver 1.23 [ 151.155847][ T6156] netlink: 'syz.3.110': attribute type 17 has an invalid length. [ 151.155870][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 152.847694][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.941640][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.018205][ T1167] bond0 (unregistering): Released all slaves [ 153.263114][ T9] tipc: Node number set to 2130706433 [ 153.304750][ T5240] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.049288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.069292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.079279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.089268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.099265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.109274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.119294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.129269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.139266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.408313][ T6191] netlink: 'syz.0.123': attribute type 16 has an invalid length. [ 156.408335][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 157.402627][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.402771][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.403019][ T6007] bridge_slave_0: entered allmulticast mode [ 157.436153][ T6007] bridge_slave_0: entered promiscuous mode [ 157.524822][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.524952][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.568878][ T6007] bridge_slave_1: entered allmulticast mode [ 157.601109][ T6007] bridge_slave_1: entered promiscuous mode [ 157.834617][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.861723][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.599481][ T5750] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.623808][ T6208] binder: 6207:6208 ioctl c0306201 0 returned -14 [ 158.783832][ T5750] usb 4-1: Using ep0 maxpacket: 8 [ 158.798245][ T5750] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 158.798268][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.798283][ T5750] usb 4-1: Product: syz [ 158.798294][ T5750] usb 4-1: Manufacturer: syz [ 158.798304][ T5750] usb 4-1: SerialNumber: syz [ 158.862007][ T5750] usb 4-1: config 0 descriptor?? [ 159.110838][ T5750] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.177681][ T6007] team0: Port device team_slave_0 added [ 159.505988][ T6007] team0: Port device team_slave_1 added [ 159.720521][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.720540][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.720570][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.816344][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.816358][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.816380][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.659673][ T5750] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 162.516414][ T43] usb 4-1: USB disconnect, device number 4 [ 162.660830][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.680225][ T6007] hsr_slave_0: entered promiscuous mode [ 162.740973][ T6007] hsr_slave_1: entered promiscuous mode [ 162.742032][ T6007] debugfs: 'hsr0' already exists in 'hsr' [ 162.742058][ T6007] Cannot create hsr debugfs directory [ 162.839326][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.839364][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.839406][ T5906] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 162.839430][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.065861][ T5906] usb 5-1: config 0 descriptor?? [ 163.178393][ T1167] hsr_slave_0: left promiscuous mode [ 163.259391][ T1167] hsr_slave_1: left promiscuous mode [ 163.260557][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.260638][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.425845][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.425872][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.534613][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.535250][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.687942][ T6253] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 163.724418][ T1167] veth1_macvtap: left promiscuous mode [ 163.725327][ T1167] veth0_macvtap: left promiscuous mode [ 163.725636][ T1167] veth1_vlan: left promiscuous mode [ 163.725993][ T1167] veth0_vlan: left promiscuous mode [ 163.906245][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 163.906312][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 163.906342][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 163.906371][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 163.906399][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 163.906426][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 163.906453][ T5906] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 164.388417][ T5906] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 164.568142][ T5906] cp2112 0003:10C4:EA90.0001: error requesting version [ 164.648689][ T6263] Bluetooth: MGMT ver 1.23 [ 164.727427][ T6264] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 164.727454][ T6264] netlink: 224 bytes leftover after parsing attributes in process `syz.3.144'. [ 164.960243][ T6266] FAULT_INJECTION: forcing a failure. [ 164.960243][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.960282][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.0.145 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.960308][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.960321][ T6266] Call Trace: [ 164.960330][ T6266] [ 164.960339][ T6266] dump_stack_lvl+0xe8/0x150 [ 164.960376][ T6266] should_fail_ex+0x467/0x600 [ 164.960411][ T6266] _copy_from_user+0x2d/0xb0 [ 164.960433][ T6266] __sys_bind+0x1cc/0x410 [ 164.960468][ T6266] ? __pfx___sys_bind+0x10/0x10 [ 164.960511][ T6266] ? rcu_is_watching+0x15/0xb0 [ 164.960547][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.960572][ T6266] __x64_sys_bind+0x7a/0x90 [ 164.960604][ T6266] do_syscall_64+0x174/0x580 [ 164.960628][ T6266] ? trace_irq_disable+0x3b/0x140 [ 164.960662][ T6266] ? clear_bhb_loop+0x40/0x90 [ 164.960690][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.960713][ T6266] RIP: 0033:0x7f2d23b7e0d9 [ 164.960733][ T6266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.960752][ T6266] RSP: 002b:00007f2d21d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 164.960776][ T6266] RAX: ffffffffffffffda RBX: 00007f2d23e06180 RCX: 00007f2d23b7e0d9 [ 164.960792][ T6266] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000009 [ 164.960805][ T6266] RBP: 00007f2d21d94090 R08: 0000000000000000 R09: 0000000000000000 [ 164.960819][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.960831][ T6266] R13: 00007f2d23e06218 R14: 00007f2d23e06180 R15: 00007ffff1faade8 [ 164.960865][ T6266] [ 165.071527][ T5906] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 165.146192][ T5906] usb 5-1: USB disconnect, device number 4 [ 166.339346][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.440319][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 166.500033][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 166.500921][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 166.525533][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 166.525556][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.525571][ T5906] usb 2-1: Product: syz [ 166.525582][ T5906] usb 2-1: Manufacturer: syz [ 166.525593][ T5906] usb 2-1: SerialNumber: syz [ 166.598739][ T5906] usb 2-1: config 0 descriptor?? [ 166.814445][ T5906] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.579788][ T5906] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 167.656927][ T5240] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.659065][ T5906] usb 2-1: USB disconnect, device number 5 [ 170.065380][ T6307] FAULT_INJECTION: forcing a failure. [ 170.065380][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.065418][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.065444][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.065457][ T6307] Call Trace: [ 170.065466][ T6307] [ 170.065475][ T6307] dump_stack_lvl+0xe8/0x150 [ 170.065512][ T6307] should_fail_ex+0x467/0x600 [ 170.065548][ T6307] _copy_from_user+0x2d/0xb0 [ 170.065571][ T6307] ___sys_sendmsg+0x1c6/0x360 [ 170.065596][ T6307] ? __lock_acquire+0x683/0x2ce0 [ 170.065622][ T6307] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.065682][ T6307] ? __fget_files+0x2a/0x420 [ 170.065704][ T6307] ? __fget_files+0x3a8/0x420 [ 170.065736][ T6307] __x64_sys_sendmsg+0x1b7/0x290 [ 170.065764][ T6307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.065807][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.065832][ T6307] do_syscall_64+0x174/0x580 [ 170.065856][ T6307] ? trace_irq_disable+0x3b/0x140 [ 170.065890][ T6307] ? clear_bhb_loop+0x40/0x90 [ 170.065918][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.065941][ T6307] RIP: 0033:0x7f2d23b7e0d9 [ 170.065962][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.065980][ T6307] RSP: 002b:00007f2d21dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.066012][ T6307] RAX: ffffffffffffffda RBX: 00007f2d23e05fa0 RCX: 00007f2d23b7e0d9 [ 170.066029][ T6307] RDX: 0000000000048880 RSI: 0000200000000280 RDI: 0000000000000003 [ 170.066043][ T6307] RBP: 00007f2d21dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.066057][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.066070][ T6307] R13: 00007f2d23e06038 R14: 00007f2d23e05fa0 R15: 00007ffff1faade8 [ 170.066104][ T6307] [ 170.561185][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.781223][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.781262][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 170.781282][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.781313][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 170.781330][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.913084][ T5906] usb 2-1: config 0 descriptor?? [ 170.962514][ T6316] netlink: 264 bytes leftover after parsing attributes in process `syz.0.162'. [ 171.154522][ T9] usb 2-1: USB disconnect, device number 6 [ 171.579335][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.755707][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.755782][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.755807][ T5906] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.755833][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.755879][ T5906] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 171.755904][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.152975][ T6323] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 172.262422][ T5906] gud 5-1:1.0: probe with driver gud failed with error -22 [ 173.912562][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.962495][ T5906] usb 5-1: USB disconnect, device number 5 [ 174.104043][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 174.138979][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 174.139010][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.139030][ T9] usb 2-1: Product: syz [ 174.139044][ T9] usb 2-1: Manufacturer: syz [ 174.139057][ T9] usb 2-1: SerialNumber: syz [ 174.383727][ T9] usb 2-1: config 0 descriptor?? [ 174.666147][ T9] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 174.666197][ T9] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 174.770300][ T5240] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.935754][ T5750] usb 2-1: USB disconnect, device number 7 [ 178.743362][ T6390] ======================================================= [ 178.743362][ T6390] WARNING: The mand mount option has been deprecated and [ 178.743362][ T6390] and is ignored by this kernel. Remove the mand [ 178.743362][ T6390] option from the mount to silence this warning. [ 178.743362][ T6390] ======================================================= [ 178.881610][ T6390] overlayfs: missing 'lowerdir' [ 180.549434][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.699893][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 180.736899][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 180.736934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.736956][ T9] usb 2-1: Product: syz [ 180.736972][ T9] usb 2-1: Manufacturer: syz [ 180.736989][ T9] usb 2-1: SerialNumber: syz [ 180.806426][ T9] usb 2-1: config 0 descriptor?? [ 181.165245][ T9] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 181.165279][ T9] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 181.489078][ T5906] usb 2-1: USB disconnect, device number 8 [ 182.269503][ T6425] FAULT_INJECTION: forcing a failure. [ 182.269503][ T6425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.269540][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.269565][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.269579][ T6425] Call Trace: [ 182.269587][ T6425] [ 182.269596][ T6425] dump_stack_lvl+0xe8/0x150 [ 182.269634][ T6425] should_fail_ex+0x467/0x600 [ 182.269670][ T6425] _copy_from_user+0x2d/0xb0 [ 182.269694][ T6425] ___sys_sendmsg+0x1c6/0x360 [ 182.269719][ T6425] ? __lock_acquire+0x683/0x2ce0 [ 182.269747][ T6425] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.269811][ T6425] ? __fget_files+0x2a/0x420 [ 182.269834][ T6425] ? __fget_files+0x3a8/0x420 [ 182.269867][ T6425] __x64_sys_sendmsg+0x1b7/0x290 [ 182.269894][ T6425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.269939][ T6425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.269965][ T6425] do_syscall_64+0x174/0x580 [ 182.269991][ T6425] ? trace_irq_disable+0x3b/0x140 [ 182.270027][ T6425] ? clear_bhb_loop+0x40/0x90 [ 182.270056][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.270078][ T6425] RIP: 0033:0x7f4ff746e0d9 [ 182.270107][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.270127][ T6425] RSP: 002b:00007f4ff56c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.270150][ T6425] RAX: ffffffffffffffda RBX: 00007f4ff76f5fa0 RCX: 00007f4ff746e0d9 [ 182.270167][ T6425] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 182.270180][ T6425] RBP: 00007f4ff56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 182.270194][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.270207][ T6425] R13: 00007f4ff76f6038 R14: 00007f4ff76f5fa0 R15: 00007ffe0553b378 [ 182.270241][ T6425] [ 182.577157][ T6430] netlink: 'syz.4.179': attribute type 16 has an invalid length. [ 182.577180][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 184.659067][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.697840][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.176233][ T6007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.298450][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.323293][ T6007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.362487][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.365452][ T6007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.501736][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.504053][ T6007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.588709][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.072570][ T5794] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 187.284909][ T5794] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 187.304150][ T5794] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 187.304200][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.304232][ T5794] usb 4-1: Product: syz [ 187.304249][ T5794] usb 4-1: Manufacturer: syz [ 187.304265][ T5794] usb 4-1: SerialNumber: syz [ 188.767003][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.132103][ T5794] usb 4-1: Cannot retrieve CPort count: -110 [ 189.132159][ T5794] usb 4-1: Cannot retrieve CPort count: -110 [ 189.132198][ T5794] es2_ap_driver 4-1:246.0: probe with driver es2_ap_driver failed with error -110 [ 189.174995][ T6516] FAULT_INJECTION: forcing a failure. [ 189.174995][ T6516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.175033][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.175056][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.175068][ T6516] Call Trace: [ 189.175075][ T6516] [ 189.175083][ T6516] dump_stack_lvl+0xe8/0x150 [ 189.175121][ T6516] should_fail_ex+0x467/0x600 [ 189.175155][ T6516] _copy_from_user+0x2d/0xb0 [ 189.175179][ T6516] ___sys_sendmsg+0x1c6/0x360 [ 189.175204][ T6516] ? __lock_acquire+0x683/0x2ce0 [ 189.175229][ T6516] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.175257][ T6516] ? kstrtouint+0x6e/0xe0 [ 189.175307][ T6516] ? __fget_files+0x2a/0x420 [ 189.175325][ T6516] ? __fget_files+0x3a8/0x420 [ 189.175353][ T6516] __sys_sendmmsg+0x279/0x4d0 [ 189.175382][ T6516] ? __pfx___sys_sendmmsg+0x10/0x10 [ 189.175415][ T6516] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 189.175461][ T6516] ? ksys_write+0x248/0x270 [ 189.175489][ T6516] ? __pfx_ksys_write+0x10/0x10 [ 189.175535][ T6516] __x64_sys_sendmmsg+0xa0/0xc0 [ 189.175561][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.175585][ T6516] do_syscall_64+0x174/0x580 [ 189.175609][ T6516] ? trace_irq_disable+0x3b/0x140 [ 189.175643][ T6516] ? clear_bhb_loop+0x40/0x90 [ 189.175671][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.175694][ T6516] RIP: 0033:0x7f7cd5bbe0d9 [ 189.175715][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.175734][ T6516] RSP: 002b:00007f7cd3dd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.175755][ T6516] RAX: ffffffffffffffda RBX: 00007f7cd5e46180 RCX: 00007f7cd5bbe0d9 [ 189.175771][ T6516] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 189.175785][ T6516] RBP: 00007f7cd3dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.175798][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.175810][ T6516] R13: 00007f7cd5e46218 R14: 00007f7cd5e46180 R15: 00007ffd64759648 [ 189.175845][ T6516] [ 190.251724][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.315931][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.317767][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.418346][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.418574][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.111002][ T6540] FAULT_INJECTION: forcing a failure. [ 191.111002][ T6540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.111040][ T6540] CPU: 0 UID: 0 PID: 6540 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.111083][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.111097][ T6540] Call Trace: [ 191.111106][ T6540] [ 191.111116][ T6540] dump_stack_lvl+0xe8/0x150 [ 191.111154][ T6540] should_fail_ex+0x467/0x600 [ 191.111190][ T6540] _copy_from_user+0x2d/0xb0 [ 191.111218][ T6540] do_sock_getsockopt+0x200/0x7e0 [ 191.111249][ T6540] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 191.111290][ T6540] ? __fget_files+0x3a8/0x420 [ 191.111313][ T6540] ? __fget_files+0x2a/0x420 [ 191.111343][ T6540] __x64_sys_getsockopt+0x1aa/0x250 [ 191.111374][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.111400][ T6540] do_syscall_64+0x174/0x580 [ 191.111426][ T6540] ? trace_irq_disable+0x3b/0x140 [ 191.111462][ T6540] ? clear_bhb_loop+0x40/0x90 [ 191.111491][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.111514][ T6540] RIP: 0033:0x7f2d23b7e0d9 [ 191.111536][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.111556][ T6540] RSP: 002b:00007f2d21dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 191.111580][ T6540] RAX: ffffffffffffffda RBX: 00007f2d23e05fa0 RCX: 00007f2d23b7e0d9 [ 191.111597][ T6540] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 191.111611][ T6540] RBP: 00007f2d21dd6090 R08: 0000200000000140 R09: 0000000000000000 [ 191.111626][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.111640][ T6540] R13: 00007f2d23e06038 R14: 00007f2d23e05fa0 R15: 00007ffff1faade8 [ 191.111675][ T6540] [ 191.857866][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.858487][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.943771][ T6549] FAULT_INJECTION: forcing a failure. [ 191.943771][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.943808][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.4.214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.943834][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.943848][ T6549] Call Trace: [ 191.943856][ T6549] [ 191.943865][ T6549] dump_stack_lvl+0xe8/0x150 [ 191.943912][ T6549] should_fail_ex+0x467/0x600 [ 191.943948][ T6549] _copy_from_user+0x2d/0xb0 [ 191.943971][ T6549] ___sys_sendmsg+0x1c6/0x360 [ 191.943995][ T6549] ? __lock_acquire+0x683/0x2ce0 [ 191.944022][ T6549] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.944084][ T6549] ? __fget_files+0x2a/0x420 [ 191.944106][ T6549] ? __fget_files+0x3a8/0x420 [ 191.944139][ T6549] __x64_sys_sendmsg+0x1b7/0x290 [ 191.944167][ T6549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.944211][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.944236][ T6549] do_syscall_64+0x174/0x580 [ 191.944262][ T6549] ? trace_irq_disable+0x3b/0x140 [ 191.944297][ T6549] ? clear_bhb_loop+0x40/0x90 [ 191.944326][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.944349][ T6549] RIP: 0033:0x7f7cd5bbe0d9 [ 191.944370][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.944389][ T6549] RSP: 002b:00007f7cd3e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.944413][ T6549] RAX: ffffffffffffffda RBX: 00007f7cd5e45fa0 RCX: 00007f7cd5bbe0d9 [ 191.944429][ T6549] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.944443][ T6549] RBP: 00007f7cd3e16090 R08: 0000000000000000 R09: 0000000000000000 [ 191.944456][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.944469][ T6549] R13: 00007f7cd5e46038 R14: 00007f7cd5e45fa0 R15: 00007ffd64759648 [ 191.944503][ T6549] [ 192.353156][ T5750] usb 4-1: USB disconnect, device number 5 [ 193.351390][ T6580] FAULT_INJECTION: forcing a failure. [ 193.351390][ T6580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.351422][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.351444][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.351457][ T6580] Call Trace: [ 193.351464][ T6580] [ 193.351473][ T6580] dump_stack_lvl+0xe8/0x150 [ 193.351504][ T6580] should_fail_ex+0x467/0x600 [ 193.351532][ T6580] _copy_from_user+0x2d/0xb0 [ 193.351550][ T6580] ___sys_sendmsg+0x1c6/0x360 [ 193.351569][ T6580] ? __lock_acquire+0x683/0x2ce0 [ 193.351590][ T6580] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.351613][ T6580] ? kstrtouint+0x6e/0xe0 [ 193.351671][ T6580] ? __fget_files+0x2a/0x420 [ 193.351688][ T6580] ? __fget_files+0x3a8/0x420 [ 193.351721][ T6580] __sys_sendmmsg+0x279/0x4d0 [ 193.351747][ T6580] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.351774][ T6580] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 193.351810][ T6580] ? ksys_write+0x248/0x270 [ 193.351833][ T6580] ? __pfx_ksys_write+0x10/0x10 [ 193.351858][ T6580] __x64_sys_sendmmsg+0xa0/0xc0 [ 193.351877][ T6580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.351897][ T6580] do_syscall_64+0x174/0x580 [ 193.351918][ T6580] ? clear_bhb_loop+0x40/0x90 [ 193.351941][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.351959][ T6580] RIP: 0033:0x7f4ff746e0d9 [ 193.351976][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.351993][ T6580] RSP: 002b:00007f4ff56c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.352016][ T6580] RAX: ffffffffffffffda RBX: 00007f4ff76f5fa0 RCX: 00007f4ff746e0d9 [ 193.352033][ T6580] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 193.352047][ T6580] RBP: 00007f4ff56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.352058][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.352068][ T6580] R13: 00007f4ff76f6038 R14: 00007f4ff76f5fa0 R15: 00007ffe0553b378 [ 193.352094][ T6580] [ 193.956605][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.765269][ T6609] veth1_to_bond: entered allmulticast mode [ 195.800894][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 195.851399][ T5750] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.013167][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 196.029022][ T5750] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 196.029066][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.029082][ T5750] usb 4-1: Product: syz [ 196.029093][ T5750] usb 4-1: Manufacturer: syz [ 196.029103][ T5750] usb 4-1: SerialNumber: syz [ 196.089523][ T6609] veth1_to_bond (unregistering): left allmulticast mode [ 196.093716][ T5750] usb 4-1: config 0 descriptor?? [ 196.165679][ T6609] bond0: (slave bond_slave_1): Releasing backup interface [ 196.384347][ T5750] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 196.384370][ T5750] 00 00 00 00 00 00 00 00 [ 196.384457][ T5750] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 196.506640][ T1234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.700760][ T1234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.700809][ T1234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.705466][ T197] usb 4-1: USB disconnect, device number 6 [ 196.710262][ T1234] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 196.710356][ T1234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.710416][ T1234] usb 2-1: Product: syz [ 196.710451][ T1234] usb 2-1: Manufacturer: syz [ 196.710486][ T1234] usb 2-1: SerialNumber: syz [ 196.949466][ T5750] 1024-page vmalloc region starting at 0xffffc9000f511000 allocated at kcov_ioctl+0x58/0x650 [ 196.949536][ T5750] list_del [ 196.949536][ T5750] list_del corruption. next->prev should be ffffc9001b24f000, but was 0000000000000000. (next=ffffc9000f511000) [ 196.951204][ T5750] ------------[ cut here ]------------ [ 196.951217][ T5750] kernel BUG at lib/list_debug.c:67! [ 196.976922][ T5750] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 196.976952][ T5750] CPU: 1 UID: 0 PID: 5750 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.976974][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.976987][ T5750] Workqueue: usb_hub_wq hub_event [ 196.977021][ T5750] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 196.977051][ T5750] Code: ec bf 41 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ed 1e 62 fd 49 8b 56 08 48 c7 c7 c0 58 ca 8b 48 89 de 4c 89 f1 e8 b7 41 5a fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 196.977066][ T5750] RSP: 0018:ffffc9000592f7b8 EFLAGS: 00010246 [ 196.977081][ T5750] RAX: 000000000000006d RBX: ffffc9001b24f000 RCX: 75f84621a505f600 [ 196.977094][ T5750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.977105][ T5750] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 196.977115][ T5750] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 1ffff92001ea2201 [ 196.977129][ T5750] R13: dffffc0000000000 R14: ffffc9000f511000 R15: ffffc9000f511008 [ 196.977142][ T5750] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 196.977156][ T5750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.977168][ T5750] CR2: 000055d9a151b950 CR3: 000000003c118000 CR4: 00000000003526f0 [ 196.977185][ T5750] Call Trace: [ 196.977192][ T5750] [ 196.977201][ T5750] kcov_remote_start+0x295/0x6f0 [ 196.977230][ T5750] hub_event+0x15d/0x4cf0 [ 196.977258][ T5750] ? rt_spin_unlock+0x163/0x200 [ 196.977285][ T5750] ? __lock_acquire+0x683/0x2ce0 [ 196.977303][ T5750] ? register_lock_class+0x31/0x2e0 [ 196.977333][ T5750] ? __lock_acquire+0x683/0x2ce0 [ 196.977355][ T5750] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.977381][ T5750] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 196.977407][ T5750] ? __pfx_hub_event+0x10/0x10 [ 196.977432][ T5750] ? process_scheduled_works+0xa20/0x14e0 [ 196.977455][ T5750] ? rcu_is_watching+0x15/0xb0 [ 196.977484][ T5750] ? process_scheduled_works+0xa20/0x14e0 [ 196.977503][ T5750] process_scheduled_works+0xa8e/0x14e0 [ 196.977534][ T5750] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.977557][ T5750] ? assign_work+0x3cf/0x5d0 [ 196.977577][ T5750] worker_thread+0xa47/0xfb0 [ 196.977604][ T5750] ? __kthread_parkme+0x71/0x1f0 [ 196.977630][ T5750] kthread+0x388/0x470 [ 196.977655][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 196.977673][ T5750] ? __pfx_kthread+0x10/0x10 [ 196.977698][ T5750] ret_from_fork+0x514/0xb70 [ 196.977725][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 196.977750][ T5750] ? __switch_to+0xc89/0x1420 [ 196.977773][ T5750] ? __pfx_kthread+0x10/0x10 [ 196.977798][ T5750] ret_from_fork_asm+0x1a/0x30 [ 196.977833][ T5750] [ 196.977839][ T5750] Modules linked in: [ 196.977856][ T5750] ---[ end trace 0000000000000000 ]--- [ 196.977869][ T5750] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 196.977896][ T5750] Code: ec bf 41 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ed 1e 62 fd 49 8b 56 08 48 c7 c7 c0 58 ca 8b 48 89 de 4c 89 f1 e8 b7 41 5a fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 196.977910][ T5750] RSP: 0018:ffffc9000592f7b8 EFLAGS: 00010246 [ 196.977925][ T5750] RAX: 000000000000006d RBX: ffffc9001b24f000 RCX: 75f84621a505f600 [ 196.977938][ T5750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.977948][ T5750] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 196.977959][ T5750] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 1ffff92001ea2201 [ 196.977973][ T5750] R13: dffffc0000000000 R14: ffffc9000f511000 R15: ffffc9000f511008 [ 196.977987][ T5750] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 196.978002][ T5750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.978014][ T5750] CR2: 000055d9a151b950 CR3: 000000003c118000 CR4: 00000000003526f0 [ 196.978032][ T5750] Kernel panic - not syncing: Fatal exception [ 196.978627][ T5750] Kernel Offset: disabled