last executing test programs: 8.345840722s ago: executing program 4 (id=856): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 8.136064453s ago: executing program 1 (id=858): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfb, {0x21}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4814) 7.741935305s ago: executing program 4 (id=859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fdf7ffff0000000000000001850000004f0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000c8000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 6.60985356s ago: executing program 4 (id=862): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x2, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r3, &(0x7f0000000280)='1', 0x1) 5.787192091s ago: executing program 2 (id=868): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x6, 0x47, 0x0, {0xfffffffffffffffd, 0x50, 0xfffffffffffffffc, 0x7, 0xc, 0xffffffff, 0x7, 0x0, 0x80000, 0x6000, 0x0, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10006) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 5.59347853s ago: executing program 2 (id=869): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0xf7}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x0) 5.304631813s ago: executing program 2 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) 4.929747132s ago: executing program 2 (id=872): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x44, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.879388759s ago: executing program 0 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.402384262s ago: executing program 1 (id=875): r0 = syz_io_uring_setup(0xf, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f00000004c0)=0x0, 0x0, &(0x7f0000000110)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x25, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x9, 0x41, 0x1, {0xffff, r3}}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 4.186038851s ago: executing program 1 (id=876): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001200010000"], 0x54}}, 0x20004010) 3.996341311s ago: executing program 4 (id=878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x453, 0x8, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x804) 3.898010623s ago: executing program 0 (id=879): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x6, 0x47, 0x0, {0xfffffffffffffffd, 0x50, 0xfffffffffffffffc, 0x7, 0xc, 0xffffffff, 0x7, 0x0, 0x80000, 0x6000, 0x0, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10006) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 3.817262306s ago: executing program 1 (id=880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=@newtfilter={0x4c, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.906024803s ago: executing program 4 (id=881): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 2.905531093s ago: executing program 0 (id=882): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.617953043s ago: executing program 2 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 1.928854455s ago: executing program 4 (id=885): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfb, {0x21}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4814) 1.926810981s ago: executing program 1 (id=886): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.742681651s ago: executing program 0 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) close(r4) close(r3) 1.068882704s ago: executing program 0 (id=890): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000120001000000000000"], 0x54}}, 0x20004010) 982.344857ms ago: executing program 3 (id=891): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000280)="a75eacd7d10d8b68e080897a0e75153fb67b1252070a2f39e73121445175018c289c26a2e9f3580a34596e15ac04afc35f8ecbb48a171b78ce6461a5119c839721c7f35e6134c787c3afa0bc65d7c25cfde7f81366478dc82ab51d5cab44a480e2362cb71c892fbfc6ed68", 0x6b}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000580)="3db40f8312644abdf80f2a9f965ce7971211ce34309a17bda025b10c603b1722cd59a7adb3cc2e75fe5b5ea14943aafe4ded949a1fbfde1dbe2e55cb66f59349710b06e56cbc23ca0241f66ccddad7d8a046a6854c3c945ad56be43ed449cc9479cf7ecee1561112c5ac6664ae163378698feaa84ecdcd62b7471a244b6ea52f790a98cd5a75a7deee41a529", 0x8c}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="bb0484bc1336f26ee3ea933ed47422774d1a2d5c8b827d125cfa84a3ba3d14784bcdfbc143e69f8974675c7fa49d59fd82a6eb86b9bb1e93f9ab4490d704e86284fc8aea2fe0ce76929db5b00a27bc072ede", 0x52}, {&(0x7f0000001d00)="d01874c78656dc8b656dcc54d9f99bcde77e4f6086e3e75c26bf191f3986166bba7c82fa996b06a2da512c0645b566be2131ef838311b17dfffd766a5334d9a4233e7d3751b0efb590c143ebe3296c253aec6fb10f416136ab1a8d63", 0x5c}], 0x6}}], 0x1, 0x0) 951.062255ms ago: executing program 3 (id=892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fdf7ffff0000000000000001850000004f0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000c8000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 826.888774ms ago: executing program 2 (id=893): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x6, 0x4}, 0x20) syz_io_uring_setup(0xf02, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 792.287379ms ago: executing program 0 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 791.950091ms ago: executing program 3 (id=895): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 473.736724ms ago: executing program 3 (id=896): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000122c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000340)='syz0\x00') 219.439979ms ago: executing program 3 (id=897): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001880)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0x7}, {0xffe0, 0x4}}}, 0x24}}, 0x4800) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) 201.182752ms ago: executing program 1 (id=898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x453, 0x8, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x804) 0s ago: executing program 3 (id=899): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x243300, 0x52) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xf}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008850) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 74.114387][ T5578] cgroup: Unknown subsys name 'net' [ 74.356808][ T5578] cgroup: Unknown subsys name 'cpuset' [ 74.411726][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.136765][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.455632][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.504980][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.507042][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.510864][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.547535][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.548399][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.549384][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.552576][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.574359][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.597397][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.601549][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.625175][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.631173][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.631959][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.657628][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.668531][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.669476][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.678222][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.680292][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.684500][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.690415][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.694314][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.694672][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.697712][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.719434][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.572549][ T4906] Bluetooth: hci1: command tx timeout [ 80.730408][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.731175][ T4906] Bluetooth: hci4: command tx timeout [ 80.731281][ T4906] Bluetooth: hci2: command tx timeout [ 80.732565][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.732739][ T5590] bridge_slave_0: entered allmulticast mode [ 80.736224][ T5590] bridge_slave_0: entered promiscuous mode [ 80.792883][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.793042][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.793184][ T5590] bridge_slave_1: entered allmulticast mode [ 80.798452][ T5590] bridge_slave_1: entered promiscuous mode [ 80.891127][ T5596] Bluetooth: hci3: command tx timeout [ 80.901425][ T5596] Bluetooth: hci0: command tx timeout [ 80.941794][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.995647][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.996067][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.996244][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.996382][ T5591] bridge_slave_0: entered allmulticast mode [ 80.999475][ T5591] bridge_slave_0: entered promiscuous mode [ 81.038124][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.039710][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.039800][ T5593] bridge_slave_0: entered allmulticast mode [ 81.060524][ T5593] bridge_slave_0: entered promiscuous mode [ 81.077262][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.077409][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.077555][ T5591] bridge_slave_1: entered allmulticast mode [ 81.079958][ T5591] bridge_slave_1: entered promiscuous mode [ 81.084581][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.084690][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.084822][ T5589] bridge_slave_0: entered allmulticast mode [ 81.087822][ T5589] bridge_slave_0: entered promiscuous mode [ 81.090751][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.090860][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.092705][ T5592] bridge_slave_0: entered allmulticast mode [ 81.099098][ T5592] bridge_slave_0: entered promiscuous mode [ 81.100871][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.102703][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.102846][ T5593] bridge_slave_1: entered allmulticast mode [ 81.106249][ T5593] bridge_slave_1: entered promiscuous mode [ 81.148919][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.149291][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.149428][ T5589] bridge_slave_1: entered allmulticast mode [ 81.151863][ T5589] bridge_slave_1: entered promiscuous mode [ 81.154437][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.154554][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.154755][ T5592] bridge_slave_1: entered allmulticast mode [ 81.157422][ T5592] bridge_slave_1: entered promiscuous mode [ 81.182612][ T5590] team0: Port device team_slave_0 added [ 81.317153][ T5590] team0: Port device team_slave_1 added [ 81.324098][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.355791][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.376975][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.380646][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.388085][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.393216][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.424898][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.427877][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.445979][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.446033][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.446064][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.511147][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.511195][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.511219][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.515478][ T5591] team0: Port device team_slave_0 added [ 81.613878][ T198] cfg80211: failed to load regulatory.db [ 81.628139][ T5593] team0: Port device team_slave_0 added [ 81.668703][ T5591] team0: Port device team_slave_1 added [ 81.673471][ T5589] team0: Port device team_slave_0 added [ 81.683224][ T5592] team0: Port device team_slave_0 added [ 81.687379][ T5593] team0: Port device team_slave_1 added [ 81.720692][ T5589] team0: Port device team_slave_1 added [ 81.744339][ T5592] team0: Port device team_slave_1 added [ 81.864800][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.865847][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.865873][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.926974][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.927419][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.927444][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.928954][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.928974][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.928997][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.935261][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.935274][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.935297][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.938785][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.938797][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.938819][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.952415][ T5590] hsr_slave_0: entered promiscuous mode [ 81.953743][ T5590] hsr_slave_1: entered promiscuous mode [ 81.955935][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.955947][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.955975][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.969291][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.969304][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.969326][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.973128][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.973141][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.973164][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.177245][ T5591] hsr_slave_0: entered promiscuous mode [ 82.178456][ T5591] hsr_slave_1: entered promiscuous mode [ 82.179335][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 82.179433][ T5591] Cannot create hsr debugfs directory [ 82.264727][ T5592] hsr_slave_0: entered promiscuous mode [ 82.266812][ T5592] hsr_slave_1: entered promiscuous mode [ 82.268009][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 82.268031][ T5592] Cannot create hsr debugfs directory [ 82.279751][ T5593] hsr_slave_0: entered promiscuous mode [ 82.280908][ T5593] hsr_slave_1: entered promiscuous mode [ 82.282123][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 82.282144][ T5593] Cannot create hsr debugfs directory [ 82.651235][ T5596] Bluetooth: hci1: command tx timeout [ 82.702529][ T5589] hsr_slave_0: entered promiscuous mode [ 82.709975][ T5589] hsr_slave_1: entered promiscuous mode [ 82.710486][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 82.710507][ T5589] Cannot create hsr debugfs directory [ 82.811110][ T5596] Bluetooth: hci2: command tx timeout [ 82.811231][ T4906] Bluetooth: hci4: command tx timeout [ 82.971255][ T5596] Bluetooth: hci3: command tx timeout [ 82.971325][ T4906] Bluetooth: hci0: command tx timeout [ 83.316549][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.360407][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.368213][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.414292][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.417061][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.436668][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.455547][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.493585][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.605566][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.636237][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.640952][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.674182][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.682783][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.714862][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.734725][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.778618][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.900766][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.924566][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.936283][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.984734][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.994456][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.035754][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.059723][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.095653][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.239399][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.275975][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.293873][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.324394][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.341893][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.364598][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.374860][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.389463][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.427321][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.544353][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.577245][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.615744][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.631312][ T1825] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.633568][ T1825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.636468][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.666019][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.676410][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.707881][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.721804][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.731144][ T5596] Bluetooth: hci1: command tx timeout [ 84.764917][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.786210][ T1825] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.788086][ T1825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.805105][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.882119][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.891862][ T5596] Bluetooth: hci4: command tx timeout [ 84.906709][ T5596] Bluetooth: hci2: command tx timeout [ 84.937978][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.949936][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.950151][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.996046][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.996229][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.051224][ T4906] Bluetooth: hci3: command tx timeout [ 85.051341][ T5596] Bluetooth: hci0: command tx timeout [ 85.075763][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.130878][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.152357][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.160950][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.199039][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.199239][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.290565][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.342609][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.353579][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.440692][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.442431][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.460545][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.573588][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.626350][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.626558][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.657314][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.657547][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.317721][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.397204][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.732875][ T5591] veth0_vlan: entered promiscuous mode [ 86.797335][ T5591] veth1_vlan: entered promiscuous mode [ 86.811369][ T5596] Bluetooth: hci1: command tx timeout [ 86.968976][ T5591] veth0_macvtap: entered promiscuous mode [ 86.984200][ T4906] Bluetooth: hci4: command tx timeout [ 86.984296][ T5596] Bluetooth: hci2: command tx timeout [ 87.009711][ T5591] veth1_macvtap: entered promiscuous mode [ 87.035432][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.126795][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.131377][ T4906] Bluetooth: hci3: command tx timeout [ 87.131421][ T5596] Bluetooth: hci0: command tx timeout [ 87.159809][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.188099][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.358496][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.417197][ T5590] veth0_vlan: entered promiscuous mode [ 87.535591][ T5592] veth0_vlan: entered promiscuous mode [ 87.605098][ T5590] veth1_vlan: entered promiscuous mode [ 87.642616][ T5592] veth1_vlan: entered promiscuous mode [ 87.683462][ T5593] veth0_vlan: entered promiscuous mode [ 87.723662][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.728426][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.783629][ T5593] veth1_vlan: entered promiscuous mode [ 87.864993][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.874229][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.892033][ T5589] veth0_vlan: entered promiscuous mode [ 87.915212][ T5590] veth0_macvtap: entered promiscuous mode [ 87.929369][ T5592] veth0_macvtap: entered promiscuous mode [ 87.956225][ T5590] veth1_macvtap: entered promiscuous mode [ 87.965242][ T5589] veth1_vlan: entered promiscuous mode [ 87.967755][ T5592] veth1_macvtap: entered promiscuous mode [ 88.018093][ T5593] veth0_macvtap: entered promiscuous mode [ 88.031801][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.057340][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.069581][ T5593] veth1_macvtap: entered promiscuous mode [ 88.122814][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.149975][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.237485][ T5589] veth0_macvtap: entered promiscuous mode [ 88.279952][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.359482][ T5589] veth1_macvtap: entered promiscuous mode [ 88.429910][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.114735][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.270812][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.516357][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.516876][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.857235][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.857703][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.952512][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055517][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.056036][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.349203][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.355065][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.684225][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.693434][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.841359][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.906015][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.019300][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.019346][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.149983][ T1825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.160013][ T1825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.336540][ T5797] 0x000000000006-0x000000020000 : "" [ 91.860703][ T5797] ftl_cs: FTL header corrupt! [ 92.256747][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.257906][ T3648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.258425][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.387781][ T3648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.397613][ T3648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399378][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.425730][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.559269][ T1018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.604898][ T1018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.605619][ T1018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.606036][ T1018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.606310][ T1018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.655912][ T1002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.657545][ T1825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658084][ T1825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658503][ T1825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.782351][ T1825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982788][ T1825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.166876][ T5816] Bluetooth: MGMT ver 1.23 [ 93.234155][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 93.246110][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 93.490161][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 93.490237][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 93.509054][ T5815] Zero length message leads to an empty skb [ 93.576632][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.622450][ T1002] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.699671][ T3648] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.803951][ T1002] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.121549][ T5843] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 95.533311][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 95.663998][ T5848] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 96.590058][ T5823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.421622][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.629606][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 101.762487][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 103.025143][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.700888][ T5940] process 'syz.3.56' launched './file0' with NULL argv: empty string added [ 104.163538][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 104.447969][ T31] usb 1-1: device descriptor read/all, error -71 [ 105.899310][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.66'. [ 105.916743][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 105.918736][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 106.232815][ T5596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 106.239319][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.239347][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.239360][ T5596] Workqueue: hci4 hci_rx_work [ 106.239413][ T5596] Call Trace: [ 106.239421][ T5596] [ 106.239429][ T5596] dump_stack_lvl+0xe8/0x150 [ 106.239463][ T5596] sysfs_create_dir_ns+0x271/0x2a0 [ 106.239490][ T5596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 106.239517][ T5596] ? rt_spin_unlock+0x165/0x200 [ 106.239549][ T5596] kobject_add_internal+0x62c/0xce0 [ 106.239583][ T5596] kobject_add+0x163/0x240 [ 106.239607][ T5596] ? rt_spin_unlock+0x159/0x200 [ 106.239640][ T5596] ? __pfx_kobject_add+0x10/0x10 [ 106.239671][ T5596] ? get_device_parent+0x370/0x3a0 [ 106.239699][ T5596] device_add+0x3fa/0xb80 [ 106.239725][ T5596] hci_conn_add_sysfs+0xd5/0x210 [ 106.239757][ T5596] le_conn_complete_evt+0xfe3/0x16d0 [ 106.239787][ T5596] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.239812][ T5596] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.239834][ T5596] ? rt_mutex_slowunlock+0x219/0x460 [ 106.239863][ T5596] ? skb_pull_data+0xf0/0x200 [ 106.239896][ T5596] hci_le_conn_complete_evt+0x187/0x470 [ 106.239925][ T5596] hci_event_packet+0x67a/0xf10 [ 106.239954][ T5596] ? reacquire_held_locks+0x117/0x1a0 [ 106.239987][ T5596] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.240006][ T5596] ? __pfx_hci_event_packet+0x10/0x10 [ 106.240033][ T5596] ? rt_spin_unlock+0x159/0x200 [ 106.240070][ T5596] ? hci_send_to_monitor+0xe2/0x590 [ 106.240097][ T5596] hci_rx_work+0x3ee/0x1020 [ 106.240133][ T5596] ? process_scheduled_works+0x97a/0x1630 [ 106.240160][ T5596] process_scheduled_works+0xc3d/0x1630 [ 106.240226][ T5596] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.240260][ T5596] ? assign_work+0x3cf/0x5d0 [ 106.240292][ T5596] worker_thread+0xa47/0xfb0 [ 106.240334][ T5596] ? __kthread_parkme+0x71/0x1f0 [ 106.240374][ T5596] kthread+0x38b/0x470 [ 106.240395][ T5596] ? __pfx_worker_thread+0x10/0x10 [ 106.240420][ T5596] ? __pfx_kthread+0x10/0x10 [ 106.240441][ T5596] ret_from_fork+0x514/0xb70 [ 106.240465][ T5596] ? __pfx_ret_from_fork+0x10/0x10 [ 106.240484][ T5596] ? __switch_to+0xc89/0x1420 [ 106.240516][ T5596] ? __pfx_kthread+0x10/0x10 [ 106.240537][ T5596] ret_from_fork_asm+0x1a/0x30 [ 106.240573][ T5596] [ 106.240604][ T5596] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.240642][ T5596] Bluetooth: hci4: failed to register connection device [ 107.648779][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 108.891591][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.042969][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 109.054797][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.622671][ T6021] netlink: 44 bytes leftover after parsing attributes in process `syz.3.85'. [ 109.622841][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 109.628478][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 109.740382][ T31] usbhid 3-1:1.0: can't add hid device: -71 [ 109.761259][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 110.646036][ T31] usb 3-1: USB disconnect, device number 2 [ 110.998845][ T5980] syz.2.72 (5980) used greatest stack depth: 18688 bytes left [ 111.019128][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 112.521486][ T6061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.100'. [ 112.521559][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 112.522468][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 112.675384][ T4906] Bluetooth: hci4: command 0x0406 tx timeout [ 114.841170][ T976] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.025858][ T976] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 115.027123][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.538567][ T976] usbhid 3-1:1.0: can't add hid device: -71 [ 116.538715][ T976] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 117.205130][ T976] usb 3-1: USB disconnect, device number 3 [ 117.711498][ T6132] FAULT_INJECTION: forcing a failure. [ 117.711498][ T6132] name fail_futex, interval 1, probability 0, space 0, times 1 [ 117.714276][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.714302][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.714319][ T6132] Call Trace: [ 117.714327][ T6132] [ 117.714336][ T6132] dump_stack_lvl+0xe8/0x150 [ 117.714379][ T6132] should_fail_ex+0x46b/0x600 [ 117.714406][ T6132] get_futex_key+0x1b4/0x1580 [ 117.714433][ T6132] ? rcu_is_watching+0x16/0xb0 [ 117.714470][ T6132] ? __pfx_get_futex_key+0x10/0x10 [ 117.714508][ T6132] futex_wait_setup+0x4a/0x590 [ 117.714536][ T6132] ? __futex_wait+0xe1/0x410 [ 117.714563][ T6132] __futex_wait+0x161/0x410 [ 117.714590][ T6132] ? __pfx___futex_wait+0x10/0x10 [ 117.714625][ T6132] ? __pfx_futex_wake_mark+0x10/0x10 [ 117.714653][ T6132] ? try_to_wake_up+0x87f/0x1430 [ 117.714685][ T6132] futex_wait+0x121/0x390 [ 117.714710][ T6132] ? __pfx_futex_wait+0x10/0x10 [ 117.714740][ T6132] ? __pfx_vfs_writev+0x10/0x10 [ 117.714773][ T6132] do_futex+0x3e7/0x4e0 [ 117.714808][ T6132] ? __pfx_do_futex+0x10/0x10 [ 117.714845][ T6132] __se_sys_futex+0x3a8/0x450 [ 117.714882][ T6132] ? __pfx___se_sys_futex+0x10/0x10 [ 117.714911][ T6132] ? rcu_is_watching+0x16/0xb0 [ 117.714944][ T6132] ? __x64_sys_futex+0x21/0xf0 [ 117.714977][ T6132] do_syscall_64+0x166/0x520 [ 117.714998][ T6132] ? trace_irq_disable+0x3b/0x140 [ 117.715021][ T6132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.715041][ T6132] ? clear_bhb_loop+0x70/0xc0 [ 117.715066][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.715085][ T6132] RIP: 0033:0x7f579771e159 [ 117.715109][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.715126][ T6132] RSP: 002b:00007f57959760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 117.715152][ T6132] RAX: ffffffffffffffda RBX: 00007f57979a5fa8 RCX: 00007f579771e159 [ 117.715167][ T6132] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57979a5fa8 [ 117.715180][ T6132] RBP: 00007f57979a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 117.715193][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.715205][ T6132] R13: 00007f57979a6038 R14: 00007ffe84331920 R15: 00007ffe84331a08 [ 117.715236][ T6132] [ 118.833690][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 120.703685][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 121.009402][ T5689] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.174294][ T5689] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 121.177357][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.395709][ T5689] usbhid 1-1:1.0: can't add hid device: -71 [ 122.395861][ T5689] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 122.465088][ T5689] usb 1-1: USB disconnect, device number 4 [ 123.591571][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 124.629659][ T6227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 125.182810][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 126.084481][ T976] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.894070][ T976] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 126.914987][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.161072][ T5719] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.173166][ T976] usbhid 3-1:1.0: can't add hid device: -71 [ 128.206924][ T976] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 128.240173][ T976] usb 3-1: USB disconnect, device number 4 [ 128.331665][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 128.339786][ T5719] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 128.346326][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 128.346367][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.427786][ T5719] usb 1-1: config 0 descriptor?? [ 129.321843][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x2 [ 129.337776][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x1 [ 129.337867][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x0 [ 129.337895][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x0 [ 129.337935][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x0 [ 129.337962][ T5719] hid-led 0003:1294:1320.0001: ignoring exceeding usage max [ 129.344457][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x5 [ 129.344521][ T5719] hid-led 0003:1294:1320.0001: unknown main item tag 0x6 [ 129.575270][ T5719] hid-led 0003:1294:1320.0001: hidraw0: USB HID v0.c4 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 129.683797][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 130.784757][ T5719] hid-led 0003:1294:1320.0001: Riso Kagaku Webmail Notifier initialized [ 130.937908][ T5719] usb 1-1: USB disconnect, device number 5 [ 131.329388][ T162] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 131.426185][ T162] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 131.446569][ T1165] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 131.483321][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.642778][ T36] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 131.728505][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.163650][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 132.165417][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 132.241831][ T36] usbhid 4-1:1.0: can't add hid device: -71 [ 132.241982][ T36] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 132.340942][ T36] usb 4-1: USB disconnect, device number 2 [ 132.346026][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 132.346056][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 132.372319][ T1165] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.376737][ T1165] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.376774][ T1165] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.376807][ T1165] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.491496][ T6140] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.641169][ T6140] usb 5-1: Using ep0 maxpacket: 8 [ 132.641863][ T6140] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 132.659197][ T6140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 132.659277][ T6140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.676599][ T6140] usb 5-1: config 0 descriptor?? [ 132.778217][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783133][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346452][ T6140] hid-led 0003:1294:1320.0002: unknown main item tag 0x2 [ 133.346891][ T6140] hid-led 0003:1294:1320.0002: unknown main item tag 0x1 [ 133.347717][ T6140] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 133.348204][ T6140] hid-led 0003:1294:1320.0002: ignoring exceeding usage max [ 133.390916][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 133.981808][ T6140] hid-led 0003:1294:1320.0002: hidraw0: USB HID v0.c4 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 134.026023][ T6140] hid-led 0003:1294:1320.0002: Riso Kagaku Webmail Notifier initialized [ 134.442492][ T5712] usb 5-1: USB disconnect, device number 2 [ 135.475112][ T1002] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 135.563131][ T6350] fido_id[6350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 135.632436][ T1018] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 135.683531][ T1158] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 136.205615][ T37] audit: type=1326 audit(1787993659.565:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6360 comm="syz.2.200" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0ac51e159 code=0x0 [ 140.131547][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 142.948740][ T6402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.959379][ T6402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.110923][ T6402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.223655][ T6402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.252215][ T6402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.380592][ T6402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.439270][ T6435] tipc: Started in network mode [ 144.439341][ T6435] tipc: Node identity 7f000001, cluster identity 4711 [ 144.443737][ T6435] tipc: Enabled bearer , priority 10 [ 144.458637][ T6402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.458802][ T6402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.529604][ T6402] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 144.728546][ T6402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.735275][ T6402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.816456][ T6402] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.971050][ T5596] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.022885][ T6402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.023043][ T6402] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.296924][ T5596] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.535873][ T976] tipc: Node number set to 2130706433 [ 145.862174][ T6402] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.935003][ T6402] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.065579][ T5596] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.321070][ T5596] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.321188][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 147.321216][ T5596] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.371152][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.371342][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 149.373046][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.374695][ T4906] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.451034][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.757752][ T4906] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.840595][ T6487] tipc: Started in network mode [ 150.903805][ T6487] tipc: Node identity 7f000001, cluster identity 4711 [ 150.904561][ T6487] tipc: Enabled bearer , priority 10 [ 150.907784][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 151.464798][ T4906] Bluetooth: hci4: command 0x0406 tx timeout [ 151.464860][ T5596] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.925882][ T5712] tipc: Node number set to 2130706433 [ 152.458873][ T4906] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.546204][ T4906] Bluetooth: hci4: command 0x0406 tx timeout [ 154.269423][ T976] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.131767][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 155.133809][ T976] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 155.147574][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 155.147620][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.230846][ T976] usb 3-1: config 0 descriptor?? [ 155.763907][ T976] hid_parser_main: 4 callbacks suppressed [ 155.777522][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x2 [ 155.779187][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x1 [ 155.779268][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x0 [ 155.779308][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x0 [ 155.779332][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x0 [ 155.779357][ T976] hid-led 0003:1294:1320.0003: ignoring exceeding usage max [ 155.824895][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x5 [ 155.836395][ T976] hid-led 0003:1294:1320.0003: unknown main item tag 0x6 [ 155.865212][ T976] hid-led 0003:1294:1320.0003: hidraw0: USB HID v0.c4 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 155.964023][ T976] hid-led 0003:1294:1320.0003: Riso Kagaku Webmail Notifier initialized [ 155.994081][ T976] usb 3-1: USB disconnect, device number 5 [ 156.042537][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 156.086813][ T6576] fido_id[6576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 156.089964][ T162] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 156.141084][ T162] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 156.151883][ T162] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 159.060977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.908514][ T4906] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 161.400053][ T6608] trusted_key: encrypted_key: insufficient parameters specified [ 164.862851][ T4906] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 165.227175][ T37] audit: type=1800 audit(1787993688.595:3): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.292" name="alua_access_type" dev="configfs" ino=13334 res=0 errno=0 [ 165.228603][ T6642] Unable to extract alua_access_type [ 166.249836][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 169.111561][ T6686] vim2m vim2m.0: vidioc_s_fmt queue busy [ 169.281550][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 169.812817][ T6694] FAULT_INJECTION: forcing a failure. [ 169.812817][ T6694] name fail_futex, interval 1, probability 0, space 0, times 0 [ 169.813158][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.4.308 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 169.813189][ T6694] Tainted: [L]=SOFTLOCKUP [ 169.813196][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.813208][ T6694] Call Trace: [ 169.813216][ T6694] [ 169.813225][ T6694] dump_stack_lvl+0xe8/0x150 [ 169.813261][ T6694] should_fail_ex+0x46b/0x600 [ 169.813289][ T6694] get_futex_key+0x1b4/0x1580 [ 169.813329][ T6694] ? __pfx_get_futex_key+0x10/0x10 [ 169.813360][ T6694] ? update_se+0x90/0xf30 [ 169.813392][ T6694] futex_wait_setup+0x4a/0x590 [ 169.813420][ T6694] ? __futex_wait+0xe1/0x410 [ 169.813447][ T6694] __futex_wait+0x161/0x410 [ 169.813475][ T6694] ? __pfx___futex_wait+0x10/0x10 [ 169.813502][ T6694] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.813531][ T6694] ? try_to_wake_up+0x843/0x1430 [ 169.813563][ T6694] futex_wait+0x121/0x390 [ 169.813588][ T6694] ? __pfx_futex_wait+0x10/0x10 [ 169.813629][ T6694] do_futex+0x3e7/0x4e0 [ 169.813664][ T6694] ? __pfx_do_futex+0x10/0x10 [ 169.813702][ T6694] __se_sys_futex+0x3a8/0x450 [ 169.813736][ T6694] ? do_writev+0x26e/0x2e0 [ 169.813763][ T6694] ? __pfx___se_sys_futex+0x10/0x10 [ 169.813793][ T6694] ? __pfx_do_writev+0x10/0x10 [ 169.813831][ T6694] ? __x64_sys_futex+0x21/0xf0 [ 169.813864][ T6694] do_syscall_64+0x166/0x520 [ 169.813886][ T6694] ? trace_irq_disable+0x3b/0x140 [ 169.813911][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.813931][ T6694] ? clear_bhb_loop+0x70/0xc0 [ 169.813955][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.813975][ T6694] RIP: 0033:0x7f488f0ee159 [ 169.813993][ T6694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.814010][ T6694] RSP: 002b:00007f488d3460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.814035][ T6694] RAX: ffffffffffffffda RBX: 00007f488f375fa8 RCX: 00007f488f0ee159 [ 169.814050][ T6694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f488f375fa8 [ 169.814063][ T6694] RBP: 00007f488f375fa0 R08: 0000000000000000 R09: 0000000000000000 [ 169.814076][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.814088][ T6694] R13: 00007f488f376038 R14: 00007ffc26b83db0 R15: 00007ffc26b83e98 [ 169.814120][ T6694] [ 172.358876][ T6714] syz.3.315 uses obsolete (PF_INET,SOCK_PACKET) [ 172.434012][ T6703] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 172.434036][ T6703] device-mapper: ioctl: error adding target to table [ 174.852619][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 178.076123][ T37] audit: type=1326 audit(1787993701.455:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f579771e159 code=0x0 [ 179.713058][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 181.294783][ T4906] Bluetooth: hci2: Unexpected cc 0x0000 with no status [ 181.444167][ T6805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.344'. [ 181.626910][ T6803] syzkaller1: entered promiscuous mode [ 181.626983][ T6803] syzkaller1: entered allmulticast mode [ 183.098289][ T37] audit: type=1326 audit(1787993706.475:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.0.347" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8b678e159 code=0x0 [ 185.399781][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 187.620335][ T6870] netlink: 64 bytes leftover after parsing attributes in process `syz.2.366'. [ 187.675220][ T6870] syzkaller1: entered promiscuous mode [ 187.683387][ T6870] syzkaller1: entered allmulticast mode [ 187.844575][ T6877] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 188.467907][ T6886] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 188.857013][ T37] audit: type=1326 audit(1787993712.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.4.371" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f488f0ee159 code=0x0 [ 192.764277][ T6931] netlink: 64 bytes leftover after parsing attributes in process `syz.0.385'. [ 192.808125][ T6931] syzkaller1: entered promiscuous mode [ 192.808166][ T6931] syzkaller1: entered allmulticast mode [ 193.036854][ T37] audit: type=1800 audit(1787993716.395:7): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.382" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 193.040505][ T6920] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 193.040544][ T6920] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 193.040563][ T6920] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 193.139725][ T6920] syz.3.382 (6920) used greatest stack depth: 16096 bytes left [ 193.406812][ T37] audit: type=1326 audit(1787993716.745:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6936 comm="syz.2.388" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0ac51e159 code=0x0 [ 193.431125][ T5719] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 194.122625][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 194.123777][ T5719] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 194.126186][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 194.126231][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.162050][ T5719] usb 2-1: config 0 descriptor?? [ 194.191606][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192372][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.491054][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 194.619319][ T6953] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 194.949098][ T5719] usbhid 2-1:0.0: can't add hid device: -71 [ 194.949257][ T5719] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.082750][ T6962] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 195.901711][ T5719] usb 2-1: USB disconnect, device number 2 [ 198.181733][ T7004] netlink: 'syz.0.409': attribute type 4 has an invalid length. [ 198.519842][ T7004] netlink: 'syz.0.409': attribute type 4 has an invalid length. [ 198.709590][ T7022] ip6tnl1: entered allmulticast mode [ 199.517866][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.422'. [ 199.517889][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 199.808891][ T7052] netlink: Unknown conntrack attr (0) [ 199.822926][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.033650][ T7060] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 203.131895][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.443'. [ 206.204287][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 206.713669][ T4906] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 207.988380][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 208.525389][ T4906] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 210.658682][ T4906] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 210.738292][ T7260] trusted_key: encrypted_key: key trusted:syz not found [ 212.343049][ T4906] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 212.565864][ T7301] block nbd0: server does not support multiple connections per device. [ 212.680246][ T7302] trusted_key: encrypted_key: insufficient parameters specified [ 212.688176][ T7301] block nbd0: shutting down sockets [ 213.077967][ T7312] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 213.227200][ T7312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.566315][ T7317] bond1: (slave geneve2): making interface the new active one [ 213.638210][ T7317] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 213.651037][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 216.051087][ T7365] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 216.141300][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.178355][ T7365] team0: Port device bond0 added [ 217.271032][ T6141] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 217.403153][ T6141] usb 1-1: device descriptor read/64, error -71 [ 217.726197][ T6141] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 217.875378][ T6141] usb 1-1: device descriptor read/64, error -71 [ 217.982982][ T6141] usb usb1-port1: attempt power cycle [ 218.230257][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 218.263229][ T7413] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 218.292763][ T7413] syz_tun: entered promiscuous mode [ 218.372440][ T6141] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.376311][ T7413] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.391960][ T3472] bond0: (slave bond_slave_0): interface is now down [ 218.442282][ T3472] bond0: (slave bond_slave_1): interface is now down [ 218.442299][ T3472] bond0: (slave syz_tun): interface is now down [ 218.448394][ T6141] usb 1-1: device descriptor read/8, error -71 [ 218.518039][ T3472] bond0: (slave bond_slave_0): interface is now down [ 218.518084][ T3472] bond0: (slave bond_slave_1): interface is now down [ 218.518097][ T3472] bond0: (slave syz_tun): interface is now down [ 218.532401][ T1839] bond0: (slave bond_slave_0): interface is now down [ 218.532418][ T1839] bond0: (slave bond_slave_1): interface is now down [ 218.532429][ T1839] bond0: (slave syz_tun): interface is now down [ 218.611065][ T198] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 218.637841][ T1839] bond0: now running without any active interface! [ 218.693989][ T6141] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 218.719658][ T6141] usb 1-1: device descriptor read/8, error -71 [ 218.762512][ T198] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.775124][ T198] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.776765][ T198] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.776810][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.821426][ T6141] usb usb1-port1: unable to enumerate USB device [ 219.081269][ T198] usb 3-1: usb_control_msg returned -32 [ 219.086987][ T198] usbtmc 3-1:16.0: can't read capabilities [ 221.575459][ T6140] usb 3-1: USB disconnect, device number 6 [ 221.835938][ T7466] loop4: detected capacity change from 0 to 7 [ 222.188588][ T7472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 222.841077][ T7473] warning: `syz.0.565' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.021144][ T7466] Dev loop4: unable to read RDB block 7 [ 223.035817][ T7466] loop4: unable to read partition table [ 223.036025][ T7466] loop4: partition table beyond EOD, truncated [ 223.036060][ T7466] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.484715][ T6141] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 225.701464][ T6141] usb 4-1: device descriptor read/64, error -71 [ 225.941148][ T6141] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 225.973059][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 226.071393][ T6141] usb 4-1: device descriptor read/64, error -71 [ 226.182883][ T6141] usb usb4-port1: attempt power cycle [ 226.398566][ T5719] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 227.665288][ T5719] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 227.666318][ T5719] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 227.666350][ T5719] usb 1-1: can't read configurations, error -71 [ 230.823299][ T7546] null_blk: disk nullb1 created [ 231.013153][ T6141] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 231.174592][ T6141] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 231.189374][ T6141] usb 1-1: config 0 has no interfaces? [ 231.189450][ T6141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.254910][ T6141] usb 1-1: config 0 descriptor?? [ 231.536466][ T5712] usb 1-1: USB disconnect, device number 12 [ 231.691038][ T1870] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 232.415226][ T1870] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 232.416258][ T1870] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 232.416291][ T1870] usb 4-1: can't read configurations, error -71 [ 233.048208][ T7616] trusted_key: encrypted_key: insufficient parameters specified [ 235.891050][ T6141] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.056969][ T6141] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 236.066840][ T6141] usb 1-1: config 0 has no interfaces? [ 236.066903][ T6141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.104054][ T6141] usb 1-1: config 0 descriptor?? [ 236.211064][ T6140] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 236.503265][ T5712] usb 1-1: USB disconnect, device number 13 [ 237.137669][ T6140] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 237.149118][ T6140] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 237.149158][ T6140] usb 5-1: can't read configurations, error -71 [ 237.543651][ T7685] 9p: Bad value for 'rfdno' [ 237.606756][ T7693] 9p: Bad value for 'rfdno' [ 238.079680][ T7709] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 239.921267][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 240.451032][ T6140] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 240.508270][ T5712] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 240.529625][ T7747] 9p: Bad value for 'rfdno' [ 241.225629][ T6140] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 241.233706][ T6140] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 241.233774][ T6140] usb 5-1: can't read configurations, error -71 [ 241.373865][ T7753] 9p: Bad value for 'rfdno' [ 241.451813][ T5712] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 241.453747][ T5712] usb 4-1: config 0 has no interfaces? [ 241.453778][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.460350][ T5712] usb 4-1: config 0 descriptor?? [ 241.488030][ T7755] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 241.695953][ T5712] usb 4-1: USB disconnect, device number 8 [ 244.307262][ T7800] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 244.496721][ T7800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.621638][ T7808] bond1: (slave geneve2): making interface the new active one [ 244.627260][ T7808] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 244.646523][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 245.551699][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 245.564529][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 245.571012][ T9] usb 2-1: can't read configurations, error -71 [ 245.631792][ T7821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.659'. [ 245.741036][ T198] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 245.851384][ T6141] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 245.901983][ T198] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 245.912675][ T198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.014376][ T6141] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 246.015750][ T6141] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.015800][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.297304][ T6141] opticon 3-1:1.0: required endpoints missing [ 247.211711][ T198] usbhid 4-1:1.0: can't add hid device: -71 [ 247.211858][ T198] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 247.237973][ T6141] usb 3-1: USB disconnect, device number 7 [ 247.264427][ T198] usb 4-1: USB disconnect, device number 9 [ 249.214020][ T7879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'. [ 250.211052][ T6140] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 250.362600][ T6140] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 250.373955][ T6140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.378583][ T6140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.902798][ T6140] opticon 2-1:1.0: required endpoints missing [ 251.383187][ T7926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.687'. [ 251.429135][ T6141] usb 2-1: USB disconnect, device number 5 [ 251.941590][ T5719] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 252.178122][ T5719] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 252.191335][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.739413][ T5719] usbhid 4-1:1.0: can't add hid device: -71 [ 252.745661][ T5719] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 252.768178][ T5719] usb 4-1: USB disconnect, device number 10 [ 255.321224][ T8001] FAULT_INJECTION: forcing a failure. [ 255.321224][ T8001] name failslab, interval 1, probability 0, space 0, times 1 [ 255.335149][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.2.709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.335179][ T8001] Tainted: [L]=SOFTLOCKUP [ 255.335187][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.335198][ T8001] Call Trace: [ 255.335205][ T8001] [ 255.335214][ T8001] dump_stack_lvl+0xe8/0x150 [ 255.335248][ T8001] should_fail_ex+0x46b/0x600 [ 255.335274][ T8001] should_failslab+0xa8/0x100 [ 255.335304][ T8001] __kmalloc_noprof+0xfb/0x790 [ 255.335329][ T8001] ? tomoyo_encode+0x2ad/0x570 [ 255.335351][ T8001] ? tomoyo_encode+0x2ad/0x570 [ 255.335381][ T8001] tomoyo_encode+0x2ad/0x570 [ 255.335409][ T8001] tomoyo_realpath_from_path+0x5fa/0x640 [ 255.335444][ T8001] ? tomoyo_path_number_perm+0x219/0x5f0 [ 255.335464][ T8001] tomoyo_path_number_perm+0x246/0x5f0 [ 255.335486][ T8001] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.335507][ T8001] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 255.335529][ T8001] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 255.335591][ T8001] ? __pfx_current_check_access_path+0x10/0x10 [ 255.335618][ T8001] ? d_splice_alias+0x12/0x30 [ 255.335648][ T8001] tomoyo_path_mknod+0x14a/0x1a0 [ 255.335677][ T8001] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 255.335715][ T8001] security_path_mknod+0x176/0x370 [ 255.335752][ T8001] filename_mknodat+0x2c2/0x670 [ 255.335783][ T8001] ? __pfx_filename_mknodat+0x10/0x10 [ 255.335808][ T8001] ? do_getname+0x151/0x250 [ 255.335839][ T8001] __se_sys_mknodat+0x3b/0x150 [ 255.335869][ T8001] do_syscall_64+0x166/0x520 [ 255.335890][ T8001] ? trace_irq_disable+0x3b/0x140 [ 255.335912][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.335931][ T8001] ? clear_bhb_loop+0x70/0xc0 [ 255.335955][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.335974][ T8001] RIP: 0033:0x7fd0ac51e159 [ 255.335992][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.336008][ T8001] RSP: 002b:00007fd0aa776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 255.336028][ T8001] RAX: ffffffffffffffda RBX: 00007fd0ac7a5fa0 RCX: 00007fd0ac51e159 [ 255.336043][ T8001] RDX: c0e99db6de761f86 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 255.336058][ T8001] RBP: 00007fd0ac5b5024 R08: 0000000000000000 R09: 0000000000000000 [ 255.336070][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.336081][ T8001] R13: 00007fd0ac7a6038 R14: 00007fd0ac7a5fa0 R15: 00007ffd3f5c1148 [ 255.336113][ T8001] [ 255.339199][ T8001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.379105][ T5719] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 255.619238][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.619366][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.637800][ T5719] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 255.650775][ T5719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.650827][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.714485][ T5719] opticon 1-1:1.0: required endpoints missing [ 255.916833][ T5719] usb 1-1: USB disconnect, device number 14 [ 256.101044][ T1870] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 256.252007][ T1870] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 256.257243][ T1870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.602508][ T8025] FAULT_INJECTION: forcing a failure. [ 256.602508][ T8025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 256.615854][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.1.713 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.615883][ T8025] Tainted: [L]=SOFTLOCKUP [ 256.615890][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.615901][ T8025] Call Trace: [ 256.615910][ T8025] [ 256.615918][ T8025] dump_stack_lvl+0xe8/0x150 [ 256.615953][ T8025] should_fail_ex+0x46b/0x600 [ 256.615980][ T8025] _copy_to_user+0x31/0xb0 [ 256.616006][ T8025] __x64_sys_sched_getaffinity+0x12f/0x1c0 [ 256.616028][ T8025] ? __pfx___x64_sys_sched_getaffinity+0x10/0x10 [ 256.616063][ T8025] do_syscall_64+0x166/0x520 [ 256.616083][ T8025] ? trace_irq_disable+0x3b/0x140 [ 256.616107][ T8025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.616136][ T8025] ? clear_bhb_loop+0x70/0xc0 [ 256.616160][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.616180][ T8025] RIP: 0033:0x7f2bdcd4e159 [ 256.616199][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.616215][ T8025] RSP: 002b:00007f2bdafa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000cc [ 256.616237][ T8025] RAX: ffffffffffffffda RBX: 00007f2bdcfd5fa0 RCX: 00007f2bdcd4e159 [ 256.616252][ T8025] RDX: 0000200000000000 RSI: 0000000000000008 RDI: 000000000000016f [ 256.616266][ T8025] RBP: 00007f2bdcde5024 R08: 0000000000000000 R09: 0000000000000000 [ 256.616278][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.616290][ T8025] R13: 00007f2bdcfd6038 R14: 00007f2bdcfd5fa0 R15: 00007ffc34e16278 [ 256.616321][ T8025] [ 256.718578][ T1870] usbhid 3-1:1.0: can't add hid device: -71 [ 256.718687][ T1870] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 256.887462][ T1870] usb 3-1: USB disconnect, device number 8 [ 257.011013][ T37] audit: type=1800 audit(1787993780.385:9): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.715" name="alua_access_type" dev="configfs" ino=17691 res=0 errno=0 [ 257.012730][ T8035] Unable to extract alua_access_type [ 257.646779][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 259.181034][ T5719] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 259.341915][ T5719] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 259.344245][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.344291][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.344330][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.383682][ T5719] opticon 3-1:1.0: required endpoints missing [ 259.631830][ T198] usb 3-1: USB disconnect, device number 9 [ 259.923284][ T37] audit: type=1800 audit(1787993783.295:10): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.729" name="alua_access_type" dev="configfs" ino=17049 res=0 errno=0 [ 259.925862][ T8088] Unable to extract alua_access_type [ 261.157800][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 264.215620][ T1870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.662669][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 264.941045][ T1870] usb 4-1: Using ep0 maxpacket: 8 [ 264.941945][ T1870] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 264.943260][ T1870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 264.943305][ T1870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.250568][ T1870] usb 4-1: config 0 descriptor?? [ 265.377251][ T198] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 265.541831][ T198] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 265.543512][ T198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.543559][ T198] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.543598][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.615552][ T198] opticon 2-1:1.0: required endpoints missing [ 265.620842][ T8160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.901108][ T198] usb 2-1: USB disconnect, device number 6 [ 266.105183][ T1870] usbhid 4-1:0.0: can't add hid device: -71 [ 266.111402][ T1870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 266.164435][ T1870] usb 4-1: USB disconnect, device number 11 [ 268.041964][ T6140] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 268.420537][ T6140] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 268.431329][ T6140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.121136][ T6140] usbhid 2-1:1.0: can't add hid device: -71 [ 269.127300][ T6140] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 269.544212][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 270.174057][ T6140] usb 2-1: USB disconnect, device number 7 [ 270.811314][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.962040][ T10] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 270.963840][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.963889][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.963928][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.122597][ T10] opticon 4-1:1.0: required endpoints missing [ 271.324177][ T10] usb 4-1: USB disconnect, device number 12 [ 272.167414][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 272.731319][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 273.144953][ T37] audit: type=1800 audit(1787993796.525:11): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.778" name="addr_trsvcid" dev="configfs" ino=17324 res=0 errno=0 [ 274.684129][ T8247] capability: warning: `syz.1.781' uses 32-bit capabilities (legacy support in use) [ 275.266765][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 275.275510][ T8276] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 275.629104][ T8277] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 276.281061][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 278.437160][ T8311] trusted_key: encrypted_key: insufficient parameters specified [ 279.359946][ T8323] netlink: 'syz.4.808': attribute type 4 has an invalid length. [ 279.479204][ T8324] netlink: 'syz.4.808': attribute type 4 has an invalid length. [ 281.785557][ T8346] binder: 8342:8346 ioctl c0306201 0 returned -14 [ 282.061066][ T8344] binder: 8342:8344 unknown command 0 [ 282.062081][ T8344] binder: 8342:8344 ioctl c0306201 2000000001c0 returned -22 [ 282.423978][ T8365] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 283.377027][ T8369] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 283.519515][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 283.818779][ T8386] capability: warning: `syz.2.829' uses deprecated v2 capabilities in a way that may be insecure [ 285.353392][ T8407] trusted_key: encrypted_key: insufficient parameters specified [ 286.098690][ T8417] FAULT_INJECTION: forcing a failure. [ 286.098690][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 286.098726][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.0.843 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.098754][ T8417] Tainted: [L]=SOFTLOCKUP [ 286.098761][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.098773][ T8417] Call Trace: [ 286.098780][ T8417] [ 286.098787][ T8417] dump_stack_lvl+0xe8/0x150 [ 286.098822][ T8417] should_fail_ex+0x46b/0x600 [ 286.098850][ T8417] should_failslab+0xa8/0x100 [ 286.098888][ T8417] ? alloc_empty_file+0x5b/0x1d0 [ 286.098916][ T8417] kmem_cache_alloc_noprof+0x9e/0x690 [ 286.098946][ T8417] ? alloc_empty_file+0x5b/0x1d0 [ 286.098980][ T8417] alloc_empty_file+0x5b/0x1d0 [ 286.099008][ T8417] alloc_file_pseudo+0x115/0x1e0 [ 286.099040][ T8417] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 286.099076][ T8417] __shmem_file_setup+0x2e9/0x370 [ 286.099101][ T8417] ? __pfx___shmem_file_setup+0x10/0x10 [ 286.099127][ T8417] ? vma_set_pgoff+0x163/0x2d0 [ 286.099148][ T8417] shmem_zero_setup+0x90/0x130 [ 286.099171][ T8417] mmap_region+0x18df/0x2240 [ 286.099214][ T8417] ? __pfx_mmap_region+0x10/0x10 [ 286.099248][ T8417] ? __lock_acquire+0x6df/0x2e40 [ 286.099275][ T8417] ? trace_pelt_se_tp+0x3b/0x150 [ 286.099308][ T8417] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 286.099341][ T8417] ? lock_acquire+0x115/0x350 [ 286.099442][ T8417] ? cap_mmap_addr+0xb6/0x100 [ 286.099464][ T8417] ? bpf_lsm_mmap_addr+0x9/0x50 [ 286.099481][ T8417] ? security_mmap_addr+0x71/0x240 [ 286.099508][ T8417] do_mmap+0xe0e/0x1310 [ 286.099535][ T8417] ? __pfx_do_mmap+0x10/0x10 [ 286.099562][ T8417] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 286.099588][ T8417] ? rwbase_write_lock+0x550/0x720 [ 286.099622][ T8417] vm_mmap_pgoff+0x275/0x4e0 [ 286.099647][ T8417] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 286.099667][ T8417] ? rcu_is_watching+0x16/0xb0 [ 286.099699][ T8417] ? __x64_sys_mmap+0x7f/0x140 [ 286.099723][ T8417] do_syscall_64+0x166/0x520 [ 286.099744][ T8417] ? trace_irq_disable+0x3b/0x140 [ 286.099768][ T8417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.099786][ T8417] ? clear_bhb_loop+0x70/0xc0 [ 286.099809][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.099829][ T8417] RIP: 0033:0x7fe8b678e159 [ 286.099847][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.099872][ T8417] RSP: 002b:00007fe8b49e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.099895][ T8417] RAX: ffffffffffffffda RBX: 00007fe8b6a15fa0 RCX: 00007fe8b678e159 [ 286.099910][ T8417] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 286.099922][ T8417] RBP: 00007fe8b6825024 R08: ffffffffffffffff R09: 0000000000000000 [ 286.099937][ T8417] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 286.099950][ T8417] R13: 00007fe8b6a16038 R14: 00007fe8b6a15fa0 R15: 00007ffefdee26e8 [ 286.099983][ T8417] [ 289.243002][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 295.549806][ T8561] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 296.055123][ T8565] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 296.066075][ T8565] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 296.227207][ T8565] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 296.228980][ T8565] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 296.229321][ ** replaying previous printk message ** [ 296.229321][ T8565] ================================================================== [ 296.229333][ T8565] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0xd8/0xae0 [ 296.229364][ T8565] Write of size 8 at addr ffff888063842100 by task syz.0.894/8565 [ 296.229381][ T8565] [ 296.229394][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.0.894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 296.229428][ T8565] Tainted: [L]=SOFTLOCKUP [ 296.229435][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.229446][ T8565] Call Trace: [ 296.229454][ T8565] [ 296.229461][ T8565] dump_stack_lvl+0xe8/0x150 [ 296.229490][ T8565] print_address_description+0x55/0x1e0 [ 296.229518][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 296.229538][ T8565] print_report+0x58/0x70 [ 296.229560][ T8565] kasan_report+0x117/0x150 [ 296.229587][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 296.229612][ T8565] gadgetfs_bind+0xd8/0xae0 [ 296.229637][ T8565] ? __pfx_gadgetfs_bind+0x10/0x10 [ 296.229658][ T8565] gadget_bind_driver+0x2ca/0x9e0 [ 296.229682][ T8565] ? __pfx_gadget_bind_driver+0x10/0x10 [ 296.229700][ T8565] really_probe+0x254/0xae0 [ 296.229726][ T8565] __driver_probe_device+0x1e8/0x360 [ 296.229751][ T8565] driver_probe_device+0x4f/0x240 [ 296.229776][ T8565] __driver_attach+0x339/0x600 [ 296.229801][ T8565] bus_for_each_dev+0x23e/0x2c0 [ 296.229818][ T8565] ? __pfx___driver_attach+0x10/0x10 [ 296.229841][ T8565] ? __pfx_bus_for_each_dev+0x10/0x10 [ 296.229856][ T8565] ? rt_spin_unlock+0x159/0x200 [ 296.229884][ T8565] ? rt_spin_unlock+0x165/0x200 [ 296.229910][ T8565] bus_add_driver+0x348/0x670 [ 296.229931][ T8565] driver_register+0x23a/0x320 [ 296.229957][ T8565] usb_gadget_register_driver_owner+0xf9/0x270 [ 296.229977][ T8565] dev_config+0xe4e/0x12c0 [ 296.230001][ T8565] ? __pfx_dev_config+0x10/0x10 [ 296.230024][ T8565] ? __pfx_dev_config+0x10/0x10 [ 296.230044][ T8565] vfs_write+0x29f/0xbb0 [ 296.230066][ T8565] ? __pfx_vfs_write+0x10/0x10 [ 296.230085][ T8565] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.230106][ T8565] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 296.230125][ T8565] ? mutex_lock_nested+0x152/0x1d0 [ 296.230148][ T8565] ? fdget_pos+0x252/0x320 [ 296.230169][ T8565] ksys_write+0x156/0x270 [ 296.230189][ T8565] ? __pfx_ksys_write+0x10/0x10 [ 296.230213][ T8565] do_syscall_64+0x166/0x520 [ 296.230232][ T8565] ? trace_irq_disable+0x3b/0x140 [ 296.230254][ T8565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.230272][ T8565] ? clear_bhb_loop+0x70/0xc0 [ 296.230292][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.230310][ T8565] RIP: 0033:0x7fe8b678e159 [ 296.230326][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.230342][ T8565] RSP: 002b:00007fe8b49c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.230363][ T8565] RAX: ffffffffffffffda RBX: 00007fe8b6a16090 RCX: 00007fe8b678e159 [ 296.230376][ T8565] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 296.230389][ T8565] RBP: 00007fe8b6825024 R08: 0000000000000000 R09: 0000000000000000 [ 296.230401][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.230412][ T8565] R13: 00007fe8b6a16128 R14: 00007fe8b6a16090 R15: 00007ffefdee26e8 [ 296.230443][ T8565] [ 296.230450][ T8565] [ 296.230454][ T8565] Allocated by task 5591: [ 296.230464][ T8565] kasan_save_track+0x3e/0x80 [ 296.230485][ T8565] __kasan_kmalloc+0x93/0xb0 [ 296.230508][ T8565] __kmalloc_cache_noprof+0x3d5/0x680 [ 296.230530][ T8565] gadgetfs_fill_super+0x27b/0x7a0 [ 296.230548][ T8565] get_tree_single+0xc0/0x150 [ 296.230565][ T8565] vfs_get_tree+0x92/0x2a0 [ 296.230582][ T8565] do_new_mount+0x319/0xdc0 [ 296.230607][ T8565] __se_sys_mount+0x31d/0x420 [ 296.230621][ T8565] do_syscall_64+0x166/0x520 [ 296.230638][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.230654][ T8565] [ 296.230659][ T8565] Freed by task 8565: [ 296.230667][ T8565] kasan_save_track+0x3e/0x80 [ 296.230686][ T8565] kasan_save_free_info+0x40/0x50 [ 296.230702][ T8565] __kasan_slab_free+0x5c/0x80 [ 296.230723][ T8565] kfree+0x1c5/0x6d0 [ 296.230739][ T8565] gadgetfs_bind+0x942/0xae0 [ 296.230758][ T8565] gadget_bind_driver+0x2ca/0x9e0 [ 296.230774][ T8565] really_probe+0x254/0xae0 [ 296.230795][ T8565] __driver_probe_device+0x1e8/0x360 [ 296.230815][ T8565] driver_probe_device+0x4f/0x240 [ 296.230836][ T8565] __driver_attach+0x339/0x600 [ 296.230857][ T8565] bus_for_each_dev+0x23e/0x2c0 [ 296.230871][ T8565] bus_add_driver+0x348/0x670 [ 296.230885][ T8565] driver_register+0x23a/0x320 [ 296.230908][ T8565] usb_gadget_register_driver_owner+0xf9/0x270 [ 296.230923][ T8565] dev_config+0xe4e/0x12c0 [ 296.230940][ T8565] vfs_write+0x29f/0xbb0 [ 296.230956][ T8565] ksys_write+0x156/0x270 [ 296.230972][ T8565] do_syscall_64+0x166/0x520 [ 296.230989][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.231005][ T8565] [ 296.231010][ T8565] The buggy address belongs to the object at ffff888063842000 [ 296.231010][ T8565] which belongs to the cache kmalloc-1k of size 1024 [ 296.231025][ T8565] The buggy address is located 256 bytes inside of [ 296.231025][ T8565] freed 1024-byte region [ffff888063842000, ffff888063842400) [ 296.231045][ T8565] [ 296.231050][ T8565] The buggy address belongs to the physical page: [ 296.231070][ T8565] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63840 [ 296.231088][ T8565] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.231103][ T8565] flags: 0x80000000000040(head|node=0|zone=1) [ 296.231126][ T8565] page_type: f5(slab) [ 296.231144][ T8565] raw: 0080000000000040 ffff88813ffbbdc0 dead000000000100 dead000000000122 [ 296.231159][ T8565] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 296.231176][ T8565] head: 0080000000000040 ffff88813ffbbdc0 dead000000000100 dead000000000122 [ 296.231193][ T8565] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 296.231209][ T8565] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 296.231224][ T8565] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 296.231233][ T8565] page dumped because: kasan: bad access detected [ 296.231245][ T8565] page_owner tracks the page as allocated [ 296.231252][ T8565] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5591, tgid 5591 (syz-executor), ts 87946859455 [ 296.231282][ T8565] post_alloc_hook+0x1f9/0x250 [ 296.231301][ T8565] get_page_from_freelist+0x2591/0x2600 [ 296.231324][ T8565] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 296.231347][ T8565] allocate_slab+0x7d/0x620 [ 296.231362][ T8565] refill_objects+0x2d8/0x350 [ 296.231378][ T8565] __pcs_replace_empty_main+0x339/0x690 [ 296.231404][ T8565] __kmalloc_noprof+0x54b/0x790 [ 296.231430][ T8565] tomoyo_init_log+0x1aaf/0x1fa0 [ 296.231450][ T8565] tomoyo_supervisor+0x35f/0x1560 [ 296.231471][ T8565] tomoyo_mount_permission+0x670/0x9e0 [ 296.231489][ T8565] security_sb_mount+0xe4/0x320 [ 296.231512][ T8565] path_mount+0xbc/0x1050 [ 296.231535][ T8565] __se_sys_mount+0x31d/0x420 [ 296.231550][ T8565] do_syscall_64+0x166/0x520 [ 296.231566][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.231583][ T8565] page_owner free stack trace missing [ 296.231589][ T8565] [ 296.231594][ T8565] Memory state around the buggy address: [ 296.231603][ T8565] ffff888063842000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.231616][ T8565] ffff888063842080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.231627][ T8565] >ffff888063842100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.231635][ T8565] ^ [ 296.231644][ T8565] ffff888063842180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.231656][ T8565] ffff888063842200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.231665][ T8565] ================================================================== [ 296.244107][ T8565] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 297.016413][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.0.894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.027686][ T8565] Tainted: [L]=SOFTLOCKUP [ 297.031992][ T8565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.042029][ T8565] Call Trace: [ 297.045293][ T8565] [ 297.048208][ T8565] vpanic+0x56d/0xa60 [ 297.052178][ T8565] ? rcu_is_watching+0x16/0xb0 [ 297.056933][ T8565] ? __pfx_vpanic+0x10/0x10 [ 297.061421][ T8565] panic+0xc5/0xd0 [ 297.065134][ T8565] ? __pfx_panic+0x10/0x10 [ 297.069542][ T8565] ? preempt_schedule_thunk+0x16/0x40 [ 297.074904][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 297.079570][ T8565] ? preempt_schedule_thunk+0x16/0x40 [ 297.084931][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 297.089602][ T8565] check_panic_on_warn+0x89/0xb0 [ 297.094554][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 297.099224][ T8565] end_report+0x73/0x170 [ 297.103461][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 297.108127][ T8565] kasan_report+0x128/0x150 [ 297.112629][ T8565] ? gadgetfs_bind+0xd8/0xae0 [ 297.117299][ T8565] gadgetfs_bind+0xd8/0xae0 [ 297.121803][ T8565] ? __pfx_gadgetfs_bind+0x10/0x10 [ 297.126905][ T8565] gadget_bind_driver+0x2ca/0x9e0 [ 297.131927][ T8565] ? __pfx_gadget_bind_driver+0x10/0x10 [ 297.137460][ T8565] really_probe+0x254/0xae0 [ 297.141958][ T8565] __driver_probe_device+0x1e8/0x360 [ 297.147239][ T8565] driver_probe_device+0x4f/0x240 [ 297.152258][ T8565] __driver_attach+0x339/0x600 [ 297.157014][ T8565] bus_for_each_dev+0x23e/0x2c0 [ 297.161849][ T8565] ? __pfx___driver_attach+0x10/0x10 [ 297.167122][ T8565] ? __pfx_bus_for_each_dev+0x10/0x10 [ 297.172477][ T8565] ? rt_spin_unlock+0x159/0x200 [ 297.177325][ T8565] ? rt_spin_unlock+0x165/0x200 [ 297.182175][ T8565] bus_add_driver+0x348/0x670 [ 297.186852][ T8565] driver_register+0x23a/0x320 [ 297.191610][ T8565] usb_gadget_register_driver_owner+0xf9/0x270 [ 297.197754][ T8565] dev_config+0xe4e/0x12c0 [ 297.202161][ T8565] ? __pfx_dev_config+0x10/0x10 [ 297.207024][ T8565] ? __pfx_dev_config+0x10/0x10 [ 297.211861][ T8565] vfs_write+0x29f/0xbb0 [ 297.216094][ T8565] ? __pfx_vfs_write+0x10/0x10 [ 297.220846][ T8565] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.226642][ T8565] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.232434][ T8565] ? mutex_lock_nested+0x152/0x1d0 [ 297.237536][ T8565] ? fdget_pos+0x252/0x320 [ 297.241938][ T8565] ksys_write+0x156/0x270 [ 297.246253][ T8565] ? __pfx_ksys_write+0x10/0x10 [ 297.251091][ T8565] do_syscall_64+0x166/0x520 [ 297.255666][ T8565] ? trace_irq_disable+0x3b/0x140 [ 297.260676][ T8565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.266727][ T8565] ? clear_bhb_loop+0x70/0xc0 [ 297.271392][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.277275][ T8565] RIP: 0033:0x7fe8b678e159 [ 297.281676][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.301268][ T8565] RSP: 002b:00007fe8b49c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.309671][ T8565] RAX: ffffffffffffffda RBX: 00007fe8b6a16090 RCX: 00007fe8b678e159 [ 297.317628][ T8565] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 297.325583][ T8565] RBP: 00007fe8b6825024 R08: 0000000000000000 R09: 0000000000000000 [ 297.333536][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.341493][ T8565] R13: 00007fe8b6a16128 R14: 00007fe8b6a16090 R15: 00007ffefdee26e8 [ 297.349456][ T8565] [ 297.352703][ T8565] Kernel Offset: disabled [ 297.357015][ T8565] Rebooting in 86400 seconds..