last executing test programs: 6.661973221s ago: executing program 0 (id=72): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1da}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000050}, 0x8040) 6.6617798s ago: executing program 0 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x3, 0x2001) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) write(r1, &(0x7f0000000040)="0d7b30c7c0198313b4d2c55eb9e2e6f9c03428465e9b321116a1d23225b4e3a6a7d06ad9d70ab9641022d25b864a0df8884325a4385dc2214b430dc89c5cf255673586318b0e5e29ac265163a33e4d0fd205a48c973e4a20d2ac5fc8ff4966b5f9b82f477a375c945475777346e7195b9bb3c6896b6d4cd4320cb3cf248271d990c5b7", 0x83) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x8, 0x9, 0x7, 0x8}) getpgid(0x0) socket(0x2d, 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x5, 0x6, 0x2894, 0x6737267d, 0x1]}, &(0x7f0000000200)=0x54) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getnexthop={0x48, 0x6a, 0x2, 0x70bd26, 0x25dfdbff}, 0x48}}, 0x0) 6.521640425s ago: executing program 0 (id=74): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./tracefs\x00', 0x0, 0x10, r0}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa150800450000b0000000000011907800000000e000000100004e20009c000000000000007b4b142b7461fd777b1c012bd14efb9f080c26a0f568619ef7054c35f0fac04883ad5c8c82b8af0000f5967efabf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d26437cbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x10}}], 0x10}, 0x3002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 6.52139795s ago: executing program 0 (id=75): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000d977c4f9cfd2da319207fe000084000000010000000000000103000000c9ab9d39c95bb9e806000000000000004b8afeea114a0ff8825f8d7665f3825547aae411ac511df5eeba0a1c89efb307dccf6bf39f8f926e9e117a7c2c8e"], 0x30}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000150b30a650a02000b000000000000000000000708000240000000020c00044000000000000000030c000440000206c7a70000050c0004400000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x2, 0x17, 0xd1e, r3}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x6bd}, &(0x7f0000000040)=0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r4, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r4, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) unlink(&(0x7f00000002c0)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="300000000000d977c4f9cfd2da319207fe000084000000010000000000000103000000c9ab9d39c95bb9e806000000000000004b8afeea114a0ff8825f8d7665f3825547aae411ac511df5eeba0a1c89efb307dccf6bf39f8f926e9e117a7c2c8e"], 0x30}], 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000150b30a650a02000b000000000000000000000708000240000000020c00044000000000000000030c000440000206c7a70000050c0004400000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x2, 0x17, 0xd1e, r3}, 0x10) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x6bd}, &(0x7f0000000040)=0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) (async) pwrite64(r4, &(0x7f0000000100)="0000010042", 0x5, 0x1be) (async) pwrite64(r4, &(0x7f0000000100)="55aa", 0x2, 0x1fe) (async) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) (async) unlink(&(0x7f00000002c0)='./file0\x00') (async) creat(&(0x7f0000000100)='./file0\x00', 0x59) (async) 5.569626196s ago: executing program 0 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0xffffffffffffffff, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xea, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xb000, 0x4fb40}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000001240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000010080)=r6, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c42, 0x0) r7 = getuid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000010000)=@ipv6_delrule={0x60, 0x21, 0x4, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x10, 0x5, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r7, 0xffffffffffffffff}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}, @FRA_SRC={0x14, 0x2, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 5.231362608s ago: executing program 0 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x833, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x40, 0x10}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x120, 0x8a2, {{0x1d, 0x4, 0x3, 0x1, 0x74, 0x68, 0x0, 0x68, 0x29, 0x0, @empty, @loopback, {[@end, @timestamp={0x44, 0x10, 0xf6, 0x0, 0x2, [0x400, 0x5, 0x5]}, @timestamp_addr={0x44, 0x4c, 0xfb, 0x1, 0x0, [{@multicast1, 0xffffffff}, {@remote, 0x6}, {@loopback, 0x1}, {@local, 0x80000000}, {@multicast2, 0x3}, {@remote, 0x4}, {@remote, 0x7f}, {@empty, 0x4}, {@multicast1}]}]}}}}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x86b9, 0x35c, 0xfffffeff, 0x4120, r2, 0x2, '\x00', r3, r4, 0x3, 0x2, 0x4}, 0x50) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x6, @multicast}, 0x2, {0x2, 0x4e24, @empty}, 'bond_slave_0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100040000000000001f28000000180001801400020067656e65766530"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r6, &(0x7f0000000200)='1', 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.181370273s ago: executing program 32 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x833, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x40, 0x10}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x120, 0x8a2, {{0x1d, 0x4, 0x3, 0x1, 0x74, 0x68, 0x0, 0x68, 0x29, 0x0, @empty, @loopback, {[@end, @timestamp={0x44, 0x10, 0xf6, 0x0, 0x2, [0x400, 0x5, 0x5]}, @timestamp_addr={0x44, 0x4c, 0xfb, 0x1, 0x0, [{@multicast1, 0xffffffff}, {@remote, 0x6}, {@loopback, 0x1}, {@local, 0x80000000}, {@multicast2, 0x3}, {@remote, 0x4}, {@remote, 0x7f}, {@empty, 0x4}, {@multicast1}]}]}}}}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x86b9, 0x35c, 0xfffffeff, 0x4120, r2, 0x2, '\x00', r3, r4, 0x3, 0x2, 0x4}, 0x50) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x6, @multicast}, 0x2, {0x2, 0x4e24, @empty}, 'bond_slave_0\x00'}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100040000000000001f28000000180001801400020067656e65766530"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r6, &(0x7f0000000200)='1', 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.95429876s ago: executing program 3 (id=124): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x9, &(0x7f0000001380)=[{0x31, '\x00', @data=0x5, 0x5}, {0x30, '\x00', @data=0x1, 0xd357}]}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x67}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0xfffc, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x12c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "913820ab33a707f8186fadc4de2ba76eeb15e765a3c5220abc8c137dc9a93795aa543406f31cf723d40d04794f7d1fa8f98a641898d40c5c4daeba2f5fa7aca8a5586793118d68ddfdc93bd373283dd870fc090d1ac2a471c89b3712adbeeaddfbd23bf8e573cdbe8e5d0c54aee847eb96f37b02f0b9e0ef757c948bfe352cfd32f38991e5ff2b227cef2730674d797dfcfc2bf2f56970e102195a745262b0a5fcb32f76ac9e2491e9b448b0cdd68c7a702c31e6e17fcacc4b16789f2c4497ec0aeee2aaae1726492d29e6e1860dee06f83d2252c12c1bc94d1893d9cf5b7f156564ab33089538c5cfb6e7e1b8eb091b280c"}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "01000000"}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "01100000"}]}]}, 0x12c}}, 0x0) getsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000040), &(0x7f00000002c0)=0x4) write$tun(r1, &(0x7f0000000400)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="4bbef3206529", @rand_addr=0x64010101, @multicast, @private=0xa010102}}, 0x1c) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r8, 0x0, 0x20000000, 0x0) 2.861881708s ago: executing program 3 (id=125): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e27, @loopback}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x1, 0x2, 0x5, 0x2, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5703583a09a52f2c}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x24040040) (async, rerun: 64) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async, rerun: 64) prctl$PR_MCE_KILL_GET(0x22) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 2.861536947s ago: executing program 3 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c3ac020f58902dca7f802e5e3a060ee39b96966e41686494f0005f2f00f1de05fd999c7cd78553ac50213da3ab519f67250177e6b103000000268645973f668528652d65a99295976a8889da00e22d0600000070f7e804b4146e4d900b39c04757b9dd0034af4a91fa206d50d4e9ab00a2b06cb23e80aced18280f0916c1920229117f16bb62558831670000000000000000000000479dc6764de3786384eb8d7e80669410e5242aa609000040f182"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd26, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe5b7, 0x904, 0x5, 0x5e0, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r5, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x3c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000ac0)={'wg0\x00', 0x0}) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000b00), 0x402000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xea, &(0x7f00000009c0)=""/234, 0x41100, 0x6a, '\x00', r7, @fallback=0x1a, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x6, &(0x7f0000000b40)=[r1], &(0x7f0000000b80)=[{0x3, 0x4, 0x10, 0x8}, {0x0, 0x5, 0x0, 0xb}, {0x2, 0x40000001, 0xc, 0x6}, {0x0, 0x3, 0x0, 0x9}, {0x5, 0x4, 0x4, 0x7}, {0x4004, 0x3, 0x80000002, 0x2}], 0x10, 0x8}, 0x94) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$BLKTRACESETUP(r9, 0x6804, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r12 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000001040)={0xa2, 0x8200, 0x100, 0xf, r13}, &(0x7f0000001080)=0x10) 2.706597304s ago: executing program 3 (id=127): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) close_range(0xffffffffffffffff, r0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000040)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x4, 0x6}}, @uexit={0x0, 0x18, 0x9}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x5}}, @in_dx={0x69, 0x20, {0xc4d3, 0x3}}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x68, 0x1}}, @out_dx={0x6a, 0x28, {0xfe3f, 0x0, 0x7}}, @set_irq_handler={0xc8, 0x20, {0xe6}}, @rdmsr={0x66, 0x18, {0x1b}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb7, 0x6, 0x10000}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x416, 0x9f3, 0x2c7, 0x1000000}}, @set_irq_handler={0xc8, 0x20, {0x3d, 0x2}}, @code={0xa, 0x7d, {"f24e0f2c59eb440f08c403695d7de0fe0f015b0766baf80cb8107e0c82ef66bafc0cec66baa000b000eec4e3a141f500c744240099515bedc74424028000c0fec7442406000000000f011c2448b800000000000000000f23d80f21f835800000000f23f84b0fc7a9a1120000"}}, @code={0xa, 0x5c, {"0f01c3c74424000a000000c744240200580000c7442406000000000f011424c4c19ddc63fc264083b2f50000008164260f300f20c60f30f2f2d9af03000000c4832d0fd590f3430fbd6a00"}}, @in_dx={0x69, 0x20, {0xf3ee}}, @wrmsr={0x65, 0x20, {0xb8c, 0x7ff}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7fff}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_stgi={0x17e, 0x10}], 0x3d1}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000480)) (async, rerun: 64) ioctl$FIONCLEX(r1, 0x5450) (async, rerun: 64) write$P9_RLERRORu(r0, &(0x7f0000000540)={0x10, 0x7, 0x1, {{0x3, '*++'}, 0xe}}, 0x10) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000680)=0xe8) (async) write$P9_RAUTH(r0, &(0x7f00000006c0)={0x14, 0x67, 0x1, {0x2, 0x4, 0x1}}, 0x14) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000700)=r0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x7, 0x1, 0x936, 0x0, r0, 0x1ff, '\x00', r2, r0, 0x0, 0x5, 0x5, 0xa}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r4, &(0x7f00000007c0)="9998a90f97a5098a553da470a0e8d72bf56849420858f57dbe4b191c620a2b60b8d1c7c50aea057e809d3a4635097beeec4819eeb1e01c928053f86fca3185cd8ed131caeab5d480e15f5cead9e59d537fe1c720a69cc365586eda36ccfeb576fb307457eb6c3aad367e32b3839ddb1dc33817e769d92c36ddeb7551ed49c2e058f8a31c855bcf8d449e1aa2574bb31268766dd02cf5281c3faf8f4997a7cbd0b99f2172f490d492ed195f2c8f48386aead655df58a04fd0cc6d370cb4edbddab9cd7895449b87de8b97463f4bdf4d73487eb61ab1"}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000900)) r6 = accept4$llc(r0, &(0x7f0000000940)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000980)=0x10, 0x800) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x100010, r6, 0xba669000) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000009c0)={0x0, r0, 0x2, 0x6, 0x8, 0x8f}) (async, rerun: 64) flock(r4, 0x0) (async) write$9p(r0, &(0x7f0000000a00)="12ce940449ef0af173d8d2614590529d63a33b3233734681359f906756bb5ecfd2ffb62e6a30f8fcb4c9be41d7b63b0ad75d2f5f99087f9e888178f6da5f72b031a4c6442b53f926d9ceb0690309a486e3e2b9065ca19ebf01eff95e0fe48c61cddf7c7ac4a0561919e80be844dcf9762824cf7d0d3d7db686837e8e", 0x7c) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000a80)={@local, @private=0xa010100}) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x2, 0x202002) preadv(r7, &(0x7f0000001c00)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/169, 0xa9}, {&(0x7f0000001bc0)=""/8, 0x8}], 0x3, 0x6, 0xf1d) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01864c1, &(0x7f0000001c40)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r7, 0x3) write$khugepaged_scan(r0, &(0x7f0000001c80), 0x8) (async) connect$phonet_pipe(r0, &(0x7f0000001cc0)={0x23, 0x2, 0x4, 0x8}, 0x10) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000001d00)=r7, 0x1) (async) r8 = epoll_create(0x100) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000001d40), 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001d80)={0x0, 0xcf29, 0x5, 0x0, 0x0, [{{r6}, 0x4}, {{r4}, 0xffffffff80000001}, {{r8}, 0x8}, {{r9}, 0x7}, {{r7}, 0xc3}]}) 2.600930333s ago: executing program 3 (id=130): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r3 = openat(r1, &(0x7f0000000180)='./proc/mtrr\x00', 0x20100, 0x40) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x3, 0x2) (async) r5 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x18) (async) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000577fb40b3ad18e69af6992a803810055517eba1aa26aa88bb2be91aec027557bf2674c85f82364e53ec7b51e7d7f1f7bc9ca0db2b421e0a8660c629b16bb8c947a0e999dfaf709696948b9819d531ba0dc0bd0f1e96e34bd03026871e03ed88619ef16c077fb0acb1ec142488def84081f18d8d90b5523c3a25fa4bac9820641646f2f580aa2f2b000137d5f220fc068d2e368b92fa3431595000000000000979ee9a61cb07914dbd0d822631bca7444ff7c6003a41c9890c72a4a5ed9e9e07a218d8bf236c0b3a3fb610fcf52699a4f3d18756e008a276886314103d48608b6f1f66e204d37999a40d888", @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf25010000000800030008000000080004000400000005000500030000000500060001000000"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) (async, rerun: 32) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (rerun: 32) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0xffffffff, 0x0, 'syz0\x00', 0x1000000}, 0x0, [0x0, 0x403, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffd, 0xfffffffffffffffc, 0x0, 0x80000, 0xd, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0xb, 0x7ff, 0xfffffffe, 0x81, 0x40, 0x0, 0x4, 0x6, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x8, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffff8, 0x1, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x5, 0x0, 0x100000000]}) (async) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="105e2798", 0x2f}], 0x1, 0x6, 0x5) 2.359708783s ago: executing program 3 (id=133): ioctl$COMEDI_CANCEL(0xffffffffffffffff, 0x6407) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5, @ANYBLOB="fa52154912ae1d5456984459d682eebb1a8d2d89320fc91d30cda9dc107f6901420a3ee1432068bf67cde6d906830d25e2850cd6d4525b8e86"], 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x625}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r1, &(0x7f0000006580)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0xa03, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="24b63e34145be567cd1e54ddf2cb5f1d10d39a33d88848666bd0481ead23dd61636bef3a4bc0a6b2963287a80d6b10b1fffd20febe8c1a7abebe05481366f91765790ec2c6c09271cecd566d0322aab3288f26e908627b38b86e833acec23302ab991d597fdf0954f95677b8a385a666d68fa13c0ae2474fd66c29d9451e2fbc1f8514"], 0x18}}], 0x1, 0x20041030) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x7fff, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0xa002803f}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x10200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r11, 0xc0505350, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) pipe2$9p(&(0x7f0000000140)={0x0, 0x0}, 0x2880) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) 1.820321254s ago: executing program 1 (id=139): r0 = syz_io_uring_setup(0x2, &(0x7f0000000000), &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000400), 0x0) r4 = socket(0x2, 0x1, 0x0) bind(r4, &(0x7f0000000500)=@llc={0x1a, 0x304, 0x6, 0xe6, 0x8, 0x2b, @remote}, 0x80) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3210200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000804}, 0x24000000) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3210200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000804}, 0x24000000) listen(r4, 0xa) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x11, 0x0, @fd=r4, 0x0, &(0x7f0000002100)=[{&(0x7f0000002200)="636570682076320a10000100000000000000000000000101000000000000000000000000000000000000000000000000008fb12f570029688bd00000000000", 0x3f}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x11, 0x0, @fd=r4, 0x0, &(0x7f0000002100)=[{&(0x7f0000002200)="636570682076320a10000100000000000000000000000101000000000000000000000000000000000000000000000000008fb12f570029688bd00000000000", 0x3f}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./dir0\x00', 0x1ff) 1.819986827s ago: executing program 1 (id=140): syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20240, 0x20) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x80}, 0x18) 1.742178801s ago: executing program 4 (id=141): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x2) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) (async) sendto(r0, &(0x7f0000000700)="01", 0x11, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) (async) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.741724708s ago: executing program 2 (id=142): ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000dc0)) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstat(r0, &(0x7f00000000c0)) 1.741446049s ago: executing program 1 (id=143): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./tracefs\x00', 0x0, 0x10, r0}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa150800450000b0000000000011907800000000e000000100004e20009c000000000000007b4b142b7461fd777b1c012bd14efb9f080c26a0f568619ef7054c35f0fac04883ad5c8c82b8af0000f5967efabf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d26437cbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.740157643s ago: executing program 2 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="000000000000ffd0b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.670082857s ago: executing program 1 (id=145): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.669649749s ago: executing program 4 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 1.669087932s ago: executing program 2 (id=147): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) poll(&(0x7f0000000040)=[{r0, 0x2}], 0x1, 0x401) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x400}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x400}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x1fc, 0x6, 0x0, 0x3, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x1a1040) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) 1.620037257s ago: executing program 1 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, &(0x7f0000000400)="000000000100000000000000") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") r2 = syz_usb_connect(0x3, 0x172, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x4, 0x4a, 0x1c, 0x8, 0x19d2, 0xff52, 0x91da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x160, 0x1, 0x37, 0x6, 0xc0, 0x54, "", [{{0x9, 0x4, 0x95, 0x1c, 0x3, 0xff, 0xff, 0xff, 0xbd, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "b3ee0a883491"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x6a20, 0x8}, [@country_functional={0x12, 0x24, 0x7, 0x6, 0x8, [0x3, 0x5, 0x0, 0x3, 0x5, 0x3]}, @mbim={0xc, 0x24, 0x1b, 0xac5, 0x4, 0x7, 0xe4, 0x400, 0x36}, @dmm={0x7, 0x24, 0x14, 0x6, 0x10}, @country_functional={0xc, 0x24, 0x7, 0xc, 0x355, [0x1, 0x2d7c, 0x6]}]}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8b, 0x0, 0x8, [@generic={0x9a, 0x11, "332e3c884fbfd10c0fcdd101a507158d3fb7305b7d90b86e4b5fdf6341241fcd0b33039d5d8f0582b5023ff6d1872fa348a45388d32627c9d051be27c5d25b122334b7c8f8a3047af3602c9638cf0062257c8b4b60ebd79564313b5354f8ad304daabd62631eab2006fee8cc60ce9d81beb1533d0be95ef20336704dcdbc4f55dc8b8cf15456234223c0507f27eb293a80b0411f3f2d7b18"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x70, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x4, 0x1e, 0x81, [@generic={0x3e, 0xe, "a462b6d32646d758be95d88e5999f8a95bb961e0eda197b07ae41783d38f4cb6a5fd94f64a058be8a58c6ebc1d9ef16b5fa8a51b1d6a756f7dbd5567"}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x2, 0x7, 0x2, 0x20, 0x8}, 0x8, &(0x7f0000000780)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x20, 0x2, 0x74, {0x74, 0xa, "9725f4438eaf9a1b48f29bbc8faee8f1ee853838a17c66f56d7c738e9582ffd8d8fd7a601a91b7f82ace6ff4959a1acf8a7abc79733f89af1fba49d27d394095afa26589b56b0684e184a5e475a36414dd802ab5b5aad9af7ca0fc260b79e11af7f5c6f737e0f21d8a2ae93dc758aab3edb6"}}, &(0x7f0000000900)={0x0, 0x3, 0xd, @string={0xd, 0x3, "a93b09b400d971fcb660c7"}}, &(0x7f0000000940)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "04935d8696588f41dd7d59f4cc35cf2d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0xff}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x29, 0x87a5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0xfe, 0x6, 0x6}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x9a, 0xa, "8175e285", "d3bae853"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x11, 0x5, 0xd, 0x1bcf}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a80)={0x20, 0x11, 0x30, "a1dd0963b4b52e2f6247d8c21035e37f1282157876313a51506416623f0dfa2c3745049c427266b5752e1caecef61176"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x99}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x2, 0x6}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x45f}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "4bf4"}, &(0x7f0000000c80)={0x40, 0xf, 0x2}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "5ba9"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x32}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0xc5}}) ioctl(r1, 0x400c0930, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 782.422237ms ago: executing program 2 (id=149): r0 = getpgid(0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r1, 0xc0207504, &(0x7f0000000080)={0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x4, 0xac7, 0x0, 0x0, 0x1000, 0x5, r0, 0x0, 0x1}}) r2 = syz_pidfd_open(r0, 0x0) fstat(r2, &(0x7f0000003200)) 782.146433ms ago: executing program 2 (id=150): unshare(0x22020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4050) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) (async) fchown(r1, 0x0, 0xee01) 711.974723ms ago: executing program 2 (id=151): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f00000000c0)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_existing={0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0}}) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f0000000140)={r2}) (async) ioctl$UBLK_U_CMD_STOP_DEV(r1, 0xc0207507, &(0x7f0000000140)={r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x3, 0xf, 0x2, @empty, @empty, 0x8000, 0x8000, 0x1, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x3, 0xf, 0x2, @empty, @empty, 0x8000, 0x8000, 0x1, 0x6}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x37, 0x6, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0x800, 0x101}}) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x400}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3d80c608}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x8010) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, r5, 0x0, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r4, {0x7ff}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000980)={0xbf39, 0xd75, 0x6, 0x0, 0x0, [{{r14}, 0x9}, {{r1}, 0xed35}, {{r11}, 0x1000}, {{r4}, 0x1}, {{r1}, 0x81}, {{}, 0x400}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r11) bind$xdp(r14, &(0x7f0000000ac0)={0x2c, 0xb, r8, 0x11, r14}, 0x10) mount(&(0x7f0000000b00)=@md0, &(0x7f0000000b40)='\x00', &(0x7f0000000b80)='affs\x00', 0x11045, &(0x7f0000000bc0)='\x00') r15 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r14) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r15, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r15, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000000d40)=0x79a2fa2a) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r14) ioctl$AUTOFS_DEV_IOCTL_READY(r14, 0xc0189376, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r14, {0x2d0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r14, 0xc0189376, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r14, {0x2d0}}, './file0\x00'}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000e40)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x16c, r16, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r14}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r14}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r17}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r14}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r18}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r14}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x8050) 441.781642ms ago: executing program 4 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x2, 0x30, 0x8a49, 0x1, 0x0, 0x6, 0x0}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "1d44e882ffaeb648"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 291.985863ms ago: executing program 4 (id=153): unshare(0x8030000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000000, 0x801) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) 180.622702ms ago: executing program 4 (id=154): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='dummy_udc.0', 0xb) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000040)=0x107fff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x800, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {0xffff, 0x6}, {0xffff, 0xc76767d682f9c8a9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 80.858231ms ago: executing program 4 (id=155): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lseek(r1, 0x3, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x4}) r3 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff0a, 0x0) 0s ago: executing program 1 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) (async) timer_create(0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0xa, 0x1, 0xc53a, 0x9, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r12 = dup3(r11, r1, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x9, 0x102) (async) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x105, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$KVM_GET_PIT(r12, 0xc048ae65, &(0x7f00000001c0)) (rerun: 64) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) syz_kvm_setup_syzos_vm$x86(r13, &(0x7f00008f3000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0c0400c9"], 0xf) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22835' (ED25519) to the list of known hosts. [ 42.739336][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.739437][ T43] audit: type=1400 audit(1788675729.548:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.744893][ T43] audit: type=1400 audit(1788675729.558:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.747042][ T5718] cgroup: Unknown subsys name 'net' [ 42.766300][ T43] audit: type=1400 audit(1788675729.578:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.905878][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.910829][ T5718] cgroup: Unknown subsys name 'rlimit' [ 43.084286][ T43] audit: type=1400 audit(1788675729.898:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.084720][ T43] audit: type=1400 audit(1788675729.898:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.084963][ T43] audit: type=1400 audit(1788675729.898:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.085238][ T43] audit: type=1400 audit(1788675729.898:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.126249][ T43] audit: type=1400 audit(1788675729.938:148): avc: denied { read } for pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.139547][ T43] audit: type=1400 audit(1788675729.948:149): avc: denied { read } for pid=5444 comm="dhcpcd" name="n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.139814][ T43] audit: type=1400 audit(1788675729.948:150): avc: denied { open } for pid=5444 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.149365][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.916904][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.546845][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 48.546933][ T43] audit: type=1400 audit(1788675735.358:156): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.760406][ T43] audit: type=1400 audit(1788675735.568:157): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.760875][ T43] audit: type=1400 audit(1788675735.568:158): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.761218][ T43] audit: type=1400 audit(1788675735.568:159): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.770557][ T43] audit: type=1400 audit(1788675735.578:160): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[1817]" dev="sockfs" ino=1817 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.812991][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.815448][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.816851][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.818831][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.819151][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.819832][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.820050][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.820499][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.821228][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.821321][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.821855][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.822794][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.825036][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.825163][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.825183][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.825282][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.826477][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.826826][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.828852][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.832623][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.848832][ T43] audit: type=1400 audit(1788675735.648:161): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.848873][ T43] audit: type=1400 audit(1788675735.648:162): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.848904][ T43] audit: type=1400 audit(1788675735.658:163): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.848934][ T43] audit: type=1400 audit(1788675735.658:164): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.889129][ T43] audit: type=1400 audit(1788675735.698:165): avc: denied { sys_module } for pid=5734 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.624931][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.629059][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.632002][ T5734] bridge_slave_0: entered allmulticast mode [ 49.633009][ T5734] bridge_slave_0: entered promiscuous mode [ 49.634861][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.634902][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.635347][ T5734] bridge_slave_1: entered allmulticast mode [ 49.636139][ T5734] bridge_slave_1: entered promiscuous mode [ 49.653209][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.653306][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.653940][ T5731] bridge_slave_0: entered allmulticast mode [ 49.655130][ T5731] bridge_slave_0: entered promiscuous mode [ 49.675931][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.675996][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.676071][ T5731] bridge_slave_1: entered allmulticast mode [ 49.676791][ T5731] bridge_slave_1: entered promiscuous mode [ 49.693650][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.700722][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.732026][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.750887][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.752705][ T5734] team0: Port device team_slave_0 added [ 49.779987][ T5734] team0: Port device team_slave_1 added [ 49.793392][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.793527][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.793805][ T5741] bridge_slave_0: entered allmulticast mode [ 49.795126][ T5741] bridge_slave_0: entered promiscuous mode [ 49.809848][ T5731] team0: Port device team_slave_0 added [ 49.836891][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.837061][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.837192][ T5741] bridge_slave_1: entered allmulticast mode [ 49.838561][ T5741] bridge_slave_1: entered promiscuous mode [ 49.852901][ T5731] team0: Port device team_slave_1 added [ 49.853838][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.853852][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.853871][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.887374][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.887450][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.887512][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.899740][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.899821][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.899923][ T5736] bridge_slave_0: entered allmulticast mode [ 49.901779][ T5736] bridge_slave_0: entered promiscuous mode [ 49.904061][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.904168][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.904448][ T5736] bridge_slave_1: entered allmulticast mode [ 49.905824][ T5736] bridge_slave_1: entered promiscuous mode [ 49.910406][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.928980][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.929040][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.929094][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.931585][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.931597][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.931618][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.933921][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.961772][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.964354][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.006434][ T5741] team0: Port device team_slave_0 added [ 50.032515][ T5741] team0: Port device team_slave_1 added [ 50.038512][ T5734] hsr_slave_0: entered promiscuous mode [ 50.039379][ T5734] hsr_slave_1: entered promiscuous mode [ 50.053344][ T5736] team0: Port device team_slave_0 added [ 50.081893][ T5731] hsr_slave_0: entered promiscuous mode [ 50.083379][ T5731] hsr_slave_1: entered promiscuous mode [ 50.083935][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 50.084012][ T5731] Cannot create hsr debugfs directory [ 50.099610][ T5736] team0: Port device team_slave_1 added [ 50.134200][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.134263][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.134333][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.146541][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.146556][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.146574][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.151377][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.151393][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.151417][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.165043][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.165058][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.165079][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.293867][ T5736] hsr_slave_0: entered promiscuous mode [ 50.294435][ T5736] hsr_slave_1: entered promiscuous mode [ 50.294769][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 50.294782][ T5736] Cannot create hsr debugfs directory [ 50.303564][ T5741] hsr_slave_0: entered promiscuous mode [ 50.304173][ T5741] hsr_slave_1: entered promiscuous mode [ 50.304625][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 50.304638][ T5741] Cannot create hsr debugfs directory [ 50.488141][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.494420][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.498030][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.504627][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.507837][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.513722][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.538379][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.543860][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.617236][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.624054][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.630205][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.636835][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.637403][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.641449][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.642634][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.649779][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.743044][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.749167][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.754026][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.760460][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.770256][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.776589][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.777743][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.784214][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.840691][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.845380][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.849967][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.854411][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.857562][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.863974][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.865635][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.869921][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.886703][ T5090] Bluetooth: hci3: command tx timeout [ 50.886732][ T5735] Bluetooth: hci2: command tx timeout [ 50.886980][ T5735] Bluetooth: hci1: command tx timeout [ 50.886987][ T5090] Bluetooth: hci0: command tx timeout [ 50.892809][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.928113][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.942286][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.942464][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.956301][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.956388][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.967866][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.006674][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.028863][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.028988][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.043903][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.045874][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.045933][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.103629][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.110686][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.121484][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.122914][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.129636][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.129711][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.152705][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.179909][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.180126][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.191332][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.191482][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.376384][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.428412][ T5734] veth0_vlan: entered promiscuous mode [ 51.436188][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.440848][ T5734] veth1_vlan: entered promiscuous mode [ 51.478044][ T5734] veth0_macvtap: entered promiscuous mode [ 51.489226][ T5734] veth1_macvtap: entered promiscuous mode [ 51.496868][ T5731] veth0_vlan: entered promiscuous mode [ 51.515684][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.516267][ T5731] veth1_vlan: entered promiscuous mode [ 51.524469][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.537732][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.582357][ T5731] veth0_macvtap: entered promiscuous mode [ 51.598728][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.607461][ T5731] veth1_macvtap: entered promiscuous mode [ 51.626084][ T5741] veth0_vlan: entered promiscuous mode [ 51.650954][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.653180][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.653193][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.667830][ T5741] veth1_vlan: entered promiscuous mode [ 51.677555][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.700211][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.700282][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.712148][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.722587][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.742354][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.743568][ T5741] veth0_macvtap: entered promiscuous mode [ 51.749967][ T5736] veth0_vlan: entered promiscuous mode [ 51.766612][ T5741] veth1_macvtap: entered promiscuous mode [ 51.771841][ T5736] veth1_vlan: entered promiscuous mode [ 51.795502][ T5734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.804046][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.804085][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.804170][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.804188][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.804206][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.809423][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.816726][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.816744][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.824474][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.826136][ T5736] veth0_macvtap: entered promiscuous mode [ 51.858430][ T5736] veth1_macvtap: entered promiscuous mode [ 51.862043][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.862767][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.875303][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.875384][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.905999][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.912698][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.969273][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.969321][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.007613][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.007675][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.013545][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.013615][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.013914][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.014106][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.014125][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.014144][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.097143][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.097233][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.145421][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.145501][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.387341][ T5910] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure [ 52.406124][ T5911] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 52.437632][ T5915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=5915 comm=syz.1.10 [ 52.437843][ T5915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5915 comm=syz.1.10 [ 52.438688][ T5915] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 52.684698][ T5926] netlink: 'syz.0.16': attribute type 11 has an invalid length. [ 52.688313][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16'. [ 52.962316][ T66] Bluetooth: hci1: command tx timeout [ 52.962393][ T66] Bluetooth: hci3: command tx timeout [ 52.963481][ T5090] Bluetooth: hci2: command tx timeout [ 53.209665][ T5913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.209816][ T5913] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.218355][ T5913] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.224255][ T5913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.224325][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.230369][ T5913] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.235840][ T5913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.235914][ T5913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.242745][ T5913] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.246879][ T5913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.248019][ T5913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.254697][ T5913] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.472350][ T5958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 53.472378][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.474404][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 53.476339][ T5962] vhci_hcd: connection closed [ 53.477736][ T5781] vhci_hcd vhci_hcd.3: stop threads [ 53.477907][ T5781] vhci_hcd vhci_hcd.3: release socket [ 53.477923][ T5781] vhci_hcd vhci_hcd.3: disconnect device [ 53.505998][ T5965] ======================================================= [ 53.505998][ T5965] WARNING: The mand mount option has been deprecated and [ 53.505998][ T5965] and is ignored by this kernel. Remove the mand [ 53.505998][ T5965] option from the mount to silence this warning. [ 53.505998][ T5965] ======================================================= [ 53.506142][ T5965] new mount options do not match the existing superblock, will be ignored [ 53.509211][ T66] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 53.513756][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 53.513775][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 53.513787][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 53.525101][ T5965] Bluetooth: MGMT ver 1.23 [ 53.554243][ T43] kauditd_printk_skb: 84 callbacks suppressed [ 53.554312][ T43] audit: type=1400 audit(1788675740.368:250): avc: denied { read write } for pid=5969 comm="syz.1.30" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.554615][ T43] audit: type=1400 audit(1788675740.368:251): avc: denied { open } for pid=5969 comm="syz.1.30" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.569546][ T43] audit: type=1400 audit(1788675740.378:252): avc: denied { ioctl } for pid=5949 comm="syz.0.24" path="socket:[9856]" dev="sockfs" ino=9856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.570145][ T43] audit: type=1400 audit(1788675740.378:253): avc: denied { map } for pid=5949 comm="syz.0.24" path="socket:[9856]" dev="sockfs" ino=9856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.570171][ T43] audit: type=1400 audit(1788675740.378:254): avc: denied { accept } for pid=5949 comm="syz.0.24" path="socket:[9856]" dev="sockfs" ino=9856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.573310][ T5821] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0002/input/input5 [ 53.609733][ T5821] hid-generic 0005:0009:0040.0002: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 53.611890][ T43] audit: type=1400 audit(1788675740.428:255): avc: denied { ioctl } for pid=5971 comm="syz.2.31" path="socket:[9863]" dev="sockfs" ino=9863 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.619902][ T43] audit: type=1400 audit(1788675740.428:256): avc: denied { create } for pid=5971 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.671432][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.696313][ T43] audit: type=1400 audit(1788675740.508:257): avc: denied { create } for pid=5984 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.697563][ T43] audit: type=1400 audit(1788675740.508:258): avc: denied { setopt } for pid=5984 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.699522][ T43] audit: type=1400 audit(1788675740.508:259): avc: denied { create } for pid=5984 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.787361][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 54.016216][ T6008] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 54.266289][ T6025] CIFS: Attempting to mount //::1/share [ 54.343380][ T6032] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 54.354640][ T6030] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 54.358454][ T6032] ntfs3(sr0): Primary boot signature is not NTFS. [ 54.361369][ T6032] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 54.403982][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 54.488821][ T6041] Zero length message leads to an empty skb [ 54.523744][ T6056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28445 sclass=netlink_route_socket pid=6056 comm=syz.3.60 [ 54.524604][ T6056] trusted_key: encrypted_key: insufficient parameters specified [ 54.562216][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 55.283178][ T5090] Bluetooth: hci2: command 0x0419 tx timeout [ 55.283238][ T5090] Bluetooth: hci1: command 0x0419 tx timeout [ 55.355436][ T6088] futex_wake_op: syz.2.71 tries to shift op by -1; fix this program [ 55.361411][ T6088] FAULT_INJECTION: forcing a failure. [ 55.361411][ T6088] name failslab, interval 1, probability 0, space 0, times 1 [ 55.361486][ T6088] CPU: 2 UID: 0 PID: 6088 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(full) [ 55.361514][ T6088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.361524][ T6088] Call Trace: [ 55.361529][ T6088] [ 55.361534][ T6088] dump_stack_lvl+0x100/0x190 [ 55.361558][ T6088] should_fail_ex.cold+0x5/0xa [ 55.361577][ T6088] should_failslab+0xc2/0x120 [ 55.361594][ T6088] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 55.361609][ T6088] ? __kthread_create_on_node+0x186/0x3f0 [ 55.361628][ T6088] kvasprintf+0xbc/0x150 [ 55.361656][ T6088] ? __pfx_kvasprintf+0x10/0x10 [ 55.361668][ T6088] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 55.361687][ T6088] ? __kthread_create_on_node+0xce/0x3f0 [ 55.361704][ T6088] ? __pfx_vhci_rx_loop+0x10/0x10 [ 55.361716][ T6088] __kthread_create_on_node+0x186/0x3f0 [ 55.361733][ T6088] ? __pfx___kthread_create_on_node+0x10/0x10 [ 55.361753][ T6088] ? gve_adjust_queues+0x150/0x6c0 [ 55.361793][ T6088] ? lock_acquire+0x1d1/0x380 [ 55.361807][ T6088] ? __pfx_vhci_rx_loop+0x10/0x10 [ 55.361820][ T6088] kthread_create_on_node+0xc7/0x100 [ 55.361837][ T6088] ? __pfx_kthread_create_on_node+0x10/0x10 [ 55.361857][ T6088] ? __fget_files+0x21f/0x3d0 [ 55.361877][ T6088] attach_store+0x3c2/0x8f0 [ 55.361899][ T6088] ? __pfx_attach_store+0x10/0x10 [ 55.361923][ T6088] ? find_held_lock+0x2b/0x80 [ 55.361939][ T6088] ? sysfs_file_kobj+0xe4/0x290 [ 55.361954][ T6088] ? sysfs_file_kobj+0xe4/0x290 [ 55.361968][ T6088] ? __pfx_attach_store+0x10/0x10 [ 55.361986][ T6088] dev_attr_store+0x58/0x80 [ 55.362001][ T6088] ? __pfx_dev_attr_store+0x10/0x10 [ 55.362014][ T6088] sysfs_kf_write+0xf2/0x150 [ 55.362029][ T6088] kernfs_fop_write_iter+0x3e0/0x5f0 [ 55.362040][ T6088] ? __pfx_sysfs_kf_write+0x10/0x10 [ 55.362055][ T6088] vfs_write+0x6af/0x1050 [ 55.362068][ T6088] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 55.362082][ T6088] ? __pfx_vfs_write+0x10/0x10 [ 55.362092][ T6088] ? find_held_lock+0x2b/0x80 [ 55.362118][ T6088] ksys_write+0x12a/0x250 [ 55.362129][ T6088] ? __pfx_ksys_write+0x10/0x10 [ 55.362146][ T6088] do_syscall_64+0x123/0x790 [ 55.362162][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.362175][ T6088] RIP: 0033:0x7ff7c735e98e [ 55.362186][ T6088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.362197][ T6088] RSP: 002b:00007ff7c830aa08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.362209][ T6088] RAX: ffffffffffffffda RBX: 00007ff7c830b6c0 RCX: 00007ff7c735e98e [ 55.362217][ T6088] RDX: 0000000000000008 RSI: 00007ff7c830aa90 RDI: 0000000000000008 [ 55.362224][ T6088] RBP: 00007ff7c7409070 R08: 0000000000000000 R09: 0000000000000000 [ 55.362232][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 55.362240][ T6088] R13: 00007ff7c830aa90 R14: 00007ff7c7625fa0 R15: 00007ffda1a344a8 [ 55.362257][ T6088] [ 56.010861][ T6105] 9pnet_virtio: no channels available for device syz [ 56.151926][ T2128] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 56.413216][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 56.437040][ T6025] CIFS: VFS: cifs_mount failed w/return code = -112 [ 56.516415][ T6128] futex_wake_op: syz.3.82 tries to shift op by -1; fix this program [ 56.521395][ T6128] FAULT_INJECTION: forcing a failure. [ 56.521395][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 56.522905][ T6128] CPU: 1 UID: 0 PID: 6128 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(full) [ 56.522932][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.522945][ T6128] Call Trace: [ 56.522952][ T6128] [ 56.522959][ T6128] dump_stack_lvl+0x100/0x190 [ 56.522994][ T6128] should_fail_ex.cold+0x5/0xa [ 56.523024][ T6128] ? __pfx_vhci_rx_loop+0x10/0x10 [ 56.523042][ T6128] should_failslab+0xc2/0x120 [ 56.523066][ T6128] __kmalloc_cache_noprof+0x91/0x6d0 [ 56.523089][ T6128] ? __kthread_create_on_node+0xce/0x3f0 [ 56.523111][ T6128] ? __pfx_vhci_rx_loop+0x10/0x10 [ 56.523125][ T6128] __kthread_create_on_node+0xce/0x3f0 [ 56.523145][ T6128] ? __pfx___kthread_create_on_node+0x10/0x10 [ 56.523167][ T6128] ? gve_adjust_queues+0x150/0x6c0 [ 56.523194][ T6128] ? lock_acquire+0x1d1/0x380 [ 56.523213][ T6128] ? __pfx_vhci_rx_loop+0x10/0x10 [ 56.523231][ T6128] kthread_create_on_node+0xc7/0x100 [ 56.523254][ T6128] ? __pfx_kthread_create_on_node+0x10/0x10 [ 56.523280][ T6128] ? __fget_files+0x21f/0x3d0 [ 56.523310][ T6128] attach_store+0x3c2/0x8f0 [ 56.523342][ T6128] ? __pfx_attach_store+0x10/0x10 [ 56.523374][ T6128] ? find_held_lock+0x2b/0x80 [ 56.523392][ T6128] ? sysfs_file_kobj+0xe4/0x290 [ 56.523410][ T6128] ? sysfs_file_kobj+0xe4/0x290 [ 56.523432][ T6128] ? __pfx_attach_store+0x10/0x10 [ 56.523459][ T6128] dev_attr_store+0x58/0x80 [ 56.523480][ T6128] ? __pfx_dev_attr_store+0x10/0x10 [ 56.523501][ T6128] sysfs_kf_write+0xf2/0x150 [ 56.523524][ T6128] kernfs_fop_write_iter+0x3e0/0x5f0 [ 56.523541][ T6128] ? __pfx_sysfs_kf_write+0x10/0x10 [ 56.523566][ T6128] vfs_write+0x6af/0x1050 [ 56.523585][ T6128] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 56.523606][ T6128] ? __pfx_vfs_write+0x10/0x10 [ 56.523654][ T6128] ? find_held_lock+0x2b/0x80 [ 56.523697][ T6128] ksys_write+0x12a/0x250 [ 56.523715][ T6128] ? __pfx_ksys_write+0x10/0x10 [ 56.523740][ T6128] do_syscall_64+0x123/0x790 [ 56.523773][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.523794][ T6128] RIP: 0033:0x7f9c00d5e98e [ 56.523811][ T6128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.523830][ T6128] RSP: 002b:00007f9c01cf2a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.523849][ T6128] RAX: ffffffffffffffda RBX: 00007f9c01cf36c0 RCX: 00007f9c00d5e98e [ 56.523862][ T6128] RDX: 0000000000000008 RSI: 00007f9c01cf2a90 RDI: 0000000000000008 [ 56.523873][ T6128] RBP: 00007f9c00e09070 R08: 0000000000000000 R09: 0000000000000000 [ 56.523884][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 56.523894][ T6128] R13: 00007f9c01cf2a90 R14: 00007f9c01025fa0 R15: 00007ffc48e9cf98 [ 56.523923][ T6128] [ 56.628164][ T6097] loop0: detected capacity change from 0 to 1 [ 56.644549][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 56.657357][ T6134] dvmrp0: entered allmulticast mode [ 56.782832][ T6140] SELinux: ebitmap: truncated map [ 56.783322][ T6140] SELinux: invalid class [ 56.788154][ T6140] SELinux: failed to load policy [ 56.835114][ T6145] Bluetooth: MGMT ver 1.23 [ 56.836063][ T6145] SELinux: policydb string SE Li does not match my string SE Linux [ 56.836096][ T6145] SELinux: failed to load policy [ 57.010466][ T5781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.075390][ T5781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.118386][ T6156] batman_adv: batadv0: Adding interface: veth0 [ 57.118453][ T6156] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.118493][ T6156] batman_adv: batadv0: Interface activated: veth0 [ 57.121230][ T6156] netlink: 240 bytes leftover after parsing attributes in process `syz.2.95'. [ 57.127166][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 57.147155][ T5781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.153789][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.153890][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.158462][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.158479][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.160556][ T6156] batman_adv: batadv0: Interface deactivated: veth0 [ 57.160566][ T6156] batman_adv: batadv0: Removing interface: veth0 [ 57.183999][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.185205][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.185609][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.187322][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.187607][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.219391][ T5781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.330101][ T5781] bridge_slave_1: left allmulticast mode [ 57.330156][ T5781] bridge_slave_1: left promiscuous mode [ 57.331111][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.347245][ T5781] bridge_slave_0: left allmulticast mode [ 57.347302][ T5781] bridge_slave_0: left promiscuous mode [ 57.347445][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.362379][ T66] Bluetooth: hci2: command 0x0419 tx timeout [ 57.538444][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.545997][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.551106][ T5781] bond0 (unregistering): Released all slaves [ 57.563036][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 57.868411][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 57.898513][ T6201] pim6reg1: entered promiscuous mode [ 57.898576][ T6201] pim6reg1: entered allmulticast mode [ 57.991098][ T5781] hsr_slave_0: left promiscuous mode [ 57.993528][ T5781] hsr_slave_1: left promiscuous mode [ 57.994072][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.994091][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.998442][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.998454][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.010270][ T5781] veth1_macvtap: left promiscuous mode [ 58.011168][ T5781] veth0_macvtap: left promiscuous mode [ 58.011229][ T5781] veth1_vlan: left promiscuous mode [ 58.011274][ T5781] veth0_vlan: left promiscuous mode [ 58.036815][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.102'. [ 58.036858][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 58.059112][ T6211] futex_wake_op: syz.1.105 tries to shift op by -1; fix this program [ 58.086856][ T6211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 58.086898][ T6211] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.087020][ T6211] vhci_hcd vhci_hcd.0: Device attached [ 58.089940][ T6213] vhci_hcd: connection closed [ 58.097072][ T5809] vhci_hcd vhci_hcd.1: stop threads [ 58.097125][ T5809] vhci_hcd vhci_hcd.1: release socket [ 58.100154][ T5809] vhci_hcd vhci_hcd.1: disconnect device [ 58.182765][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 58.194290][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 58.303458][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 58.327465][ T6222] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 58.327509][ T6222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.333443][ T6222] vhci_hcd vhci_hcd.0: Device attached [ 58.339061][ T6223] vhci_hcd: connection closed [ 58.341866][ T5809] vhci_hcd vhci_hcd.2: stop threads [ 58.341964][ T5809] vhci_hcd vhci_hcd.2: release socket [ 58.342003][ T5809] vhci_hcd vhci_hcd.2: disconnect device [ 58.409915][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.410060][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.410121][ T6159] bridge_slave_0: entered allmulticast mode [ 58.411131][ T6159] bridge_slave_0: entered promiscuous mode [ 58.412867][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.412937][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.412989][ T6159] bridge_slave_1: entered allmulticast mode [ 58.413713][ T6159] bridge_slave_1: entered promiscuous mode [ 58.439319][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.440767][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.454577][ T6159] team0: Port device team_slave_0 added [ 58.455843][ T6159] team0: Port device team_slave_1 added [ 58.493034][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.493087][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.493157][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.499666][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.499680][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.499968][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.571135][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 58.575292][ T6159] hsr_slave_0: entered promiscuous mode [ 58.575916][ T6159] hsr_slave_1: entered promiscuous mode [ 58.602917][ T43] kauditd_printk_skb: 104 callbacks suppressed [ 58.602982][ T43] audit: type=1400 audit(1788675745.418:364): avc: denied { read } for pid=6239 comm="syz.3.110" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.603151][ T43] audit: type=1400 audit(1788675745.418:365): avc: denied { open } for pid=6239 comm="syz.3.110" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.628832][ T43] audit: type=1400 audit(1788675745.438:366): avc: denied { read } for pid=6239 comm="syz.3.110" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.629986][ T43] audit: type=1400 audit(1788675745.438:367): avc: denied { open } for pid=6239 comm="syz.3.110" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.698943][ T43] audit: type=1400 audit(1788675745.508:368): avc: denied { mount } for pid=6247 comm="syz.3.112" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.699862][ T43] audit: type=1400 audit(1788675745.508:369): avc: denied { mounton } for pid=6247 comm="syz.3.112" path="/35/mnt" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.703804][ T43] audit: type=1400 audit(1788675745.518:370): avc: denied { ioctl } for pid=6247 comm="syz.3.112" path="socket:[12351]" dev="sockfs" ino=12351 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.730268][ T43] audit: type=1400 audit(1788675745.538:371): avc: denied { open } for pid=6247 comm="syz.3.112" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 58.731786][ T43] audit: type=1400 audit(1788675745.538:372): avc: denied { ioctl } for pid=6247 comm="syz.3.112" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 58.736172][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 58.770645][ T6159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.777733][ T43] audit: type=1400 audit(1788675745.588:373): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.783813][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.784687][ T6159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.793009][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.793732][ T6159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.803941][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.805329][ T6159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.812749][ T6159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.917085][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.918836][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 58.936992][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.945884][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.946014][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.953792][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.953880][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.985516][ T6277] block nbd3: not configured, cannot reconfigure [ 59.005857][ T6282] futex_wake_op: syz.1.119 tries to shift op by -1; fix this program [ 59.018459][ T6282] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 59.018493][ T6282] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.018607][ T6282] vhci_hcd vhci_hcd.0: Device attached [ 59.020034][ T6284] vhci_hcd: connection closed [ 59.020671][ T5809] vhci_hcd vhci_hcd.1: stop threads [ 59.020687][ T5809] vhci_hcd vhci_hcd.1: release socket [ 59.020697][ T5809] vhci_hcd vhci_hcd.1: disconnect device [ 59.091402][ T6288] FAULT_INJECTION: forcing a failure. [ 59.091402][ T6288] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.091528][ T6288] CPU: 3 UID: 0 PID: 6288 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT(full) [ 59.091560][ T6288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.091571][ T6288] Call Trace: [ 59.091576][ T6288] [ 59.091583][ T6288] dump_stack_lvl+0x100/0x190 [ 59.091651][ T6288] should_fail_ex.cold+0x5/0xa [ 59.091675][ T6288] _copy_from_user+0x2e/0xd0 [ 59.091700][ T6288] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 59.091724][ T6288] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 59.091760][ T6288] do_sock_getsockopt+0x530/0x6e0 [ 59.091783][ T6288] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 59.091806][ T6288] ? __fget_files+0x34/0x3d0 [ 59.091825][ T6288] ? find_held_lock+0x2b/0x80 [ 59.091853][ T6288] ? __fget_files+0x21f/0x3d0 [ 59.091876][ T6288] __sys_getsockopt+0x148/0x260 [ 59.091898][ T6288] ? __x64_sys_getsockopt+0xbd/0x160 [ 59.091913][ T6288] __x64_sys_getsockopt+0xbd/0x160 [ 59.091928][ T6288] ? do_syscall_64+0xae/0x790 [ 59.091947][ T6288] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.091965][ T6288] do_syscall_64+0x123/0x790 [ 59.091986][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.092002][ T6288] RIP: 0033:0x7f9c00d9e159 [ 59.092016][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.092030][ T6288] RSP: 002b:00007f9c01cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 59.092047][ T6288] RAX: ffffffffffffffda RBX: 00007f9c01025fa0 RCX: 00007f9c00d9e159 [ 59.092058][ T6288] RDX: 0000000000000004 RSI: 0000000000000065 RDI: 0000000000000003 [ 59.092067][ T6288] RBP: 00007f9c01cf3090 R08: 00002000000001c0 R09: 0000000000000000 [ 59.092077][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.092086][ T6288] R13: 00007f9c01026038 R14: 00007f9c01025fa0 R15: 00007ffc48e9cf98 [ 59.092107][ T6288] [ 59.202943][ T66] Bluetooth: hci1: command tx timeout [ 59.334260][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.398864][ T6310] No such timeout policy "syz1" [ 59.441959][ T66] Bluetooth: hci2: command 0x0419 tx timeout [ 59.510312][ T6315] openvswitch: netlink: Key 0 has unexpected len 41 expected 0 [ 59.557819][ T6159] veth0_vlan: entered promiscuous mode [ 59.563338][ T6159] veth1_vlan: entered promiscuous mode [ 59.587030][ T6159] veth0_macvtap: entered promiscuous mode [ 59.593196][ T6159] veth1_macvtap: entered promiscuous mode [ 59.603024][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.605623][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.658042][ T5781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.658136][ T5781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.658195][ T5781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.658225][ T5781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.726378][ T6337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.129'. [ 59.757341][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.757391][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.813378][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.813445][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.970267][ T6358] futex_wake_op: syz.4.135 tries to shift op by -1; fix this program [ 59.975451][ T6358] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 59.975489][ T6358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.976927][ T6358] vhci_hcd vhci_hcd.0: Device attached [ 59.978235][ T6359] vhci_hcd: connection closed [ 59.979266][ T5809] vhci_hcd vhci_hcd.4: stop threads [ 59.979283][ T5809] vhci_hcd vhci_hcd.4: release socket [ 59.979295][ T5809] vhci_hcd vhci_hcd.4: disconnect device [ 60.035840][ T6356] overlay: Unknown parameter 'func' [ 60.128151][ T6366] trusted_key: encrypted_key: keylen parameter is missing [ 60.603414][ T6394] netlink: 14 bytes leftover after parsing attributes in process `syz.4.146'. [ 60.702620][ T6401] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.802454][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 61.091793][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.241754][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 61.244379][ T35] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff52, bcdDevice=91.da [ 61.247059][ T35] usb 6-1: config 55 has an invalid interface number: 149 but max is 0 [ 61.247074][ T35] usb 6-1: config 55 has no interface number 0 [ 61.247093][ T35] usb 6-1: config 55 interface 149 altsetting 28 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 61.247106][ T35] usb 6-1: config 55 interface 149 altsetting 28 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 61.247119][ T35] usb 6-1: config 55 interface 149 altsetting 28 has a duplicate endpoint with address 0x5, skipping [ 61.247130][ T35] usb 6-1: config 55 interface 149 has no altsetting 0 [ 61.248973][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.248987][ T35] usb 6-1: Product: syz [ 61.248995][ T35] usb 6-1: Manufacturer: 䠊 [ 61.249004][ T35] usb 6-1: SerialNumber: syz [ 61.282570][ T66] Bluetooth: hci1: command tx timeout [ 61.531850][ T66] Bluetooth: hci2: command 0x0419 tx timeout [ 61.706655][ T6401] md/raid10:md0: not clean -- starting background reconstruction [ 61.706724][ T6401] md/raid10:md0: active with 1 out of 2 devices [ 61.707679][ T6401] md0: detected capacity change from 0 to 2048 [ 61.719185][ T35] option 6-1:55.149: GSM modem (1-port) converter detected [ 61.731365][ T6420] md: resync of RAID array md0 [ 61.740649][ T35] usb 6-1: USB disconnect, device number 2 [ 61.751175][ T35] option 6-1:55.149: device disconnected [ 61.760495][ T6420] md: md0: resync done. [ 61.815112][ T6423] md: recover of RAID array md0 [ 61.815252][ T6423] md: md0: recover done. [ 61.823407][ T6425] usb usb9: check_ctrlrecip: process 6425 (syz.4.152) requesting ep 01 but needs 81 [ 61.826128][ T6426] netlink: 'syz.4.152': attribute type 15 has an invalid length. [ 61.826147][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 61.827143][ T6425] usb usb9: usbfs: process 6425 (syz.4.152) did not claim interface 0 before use [ 61.840207][ T6426] netlink: 'syz.4.152': attribute type 15 has an invalid length. [ 61.840278][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 61.851805][ T5781] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 61.851883][ T5781] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 61.851938][ T5781] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 61.851981][ T5781] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 61.969821][ T6431] xt_hashlimit: size too large, truncated to 1048576 [ 62.349769][ T6444] syzkaller0: entered promiscuous mode [ 62.350617][ T6444] syzkaller0: entered allmulticast mode [ 62.363153][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363256][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363367][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363448][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363532][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363641][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363728][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363811][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363875][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.363935][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.364000][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.364062][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.364126][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.364187][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.364254][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.364315][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.365007][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.365076][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.365139][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.365203][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.365264][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.366809][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.366878][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.366940][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367004][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367066][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367131][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367195][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367258][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367322][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367387][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367453][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367515][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367580][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367680][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367744][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367809][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367873][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.367941][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368037][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368100][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368164][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368227][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368291][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368352][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368418][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368481][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368544][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368605][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368759][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368845][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.368977][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369043][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369108][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369181][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369244][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369308][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369369][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369435][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369496][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369561][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.369623][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.370110][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.370187][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.370253][ T6443] binder: 6442:6443 ioctl c048ae65 2000000001c0 returned -22 [ 62.372671][ T1313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.504738][ T35] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 62.536679][ T1313] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 62.537346][ T1313] usb 5-1: Dual-Role OTG device on HNP port [ 62.537623][ T1313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.591066][ T1313] gspca_main: spca501-2.14.0 probing 0000:0000 [ 62.601130][ T1313] gspca_spca501: reg write: error -32 [ 62.601179][ T1313] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 62.601270][ T1313] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 62.642889][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 62.647431][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 62.650582][ C0] CPU: 0 UID: 0 PID: 1313 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 62.654134][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.658369][ C0] Workqueue: usb_hub_wq hub_event [ 62.660208][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 62.661979][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 62.668203][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 62.670119][ C0] RAX: dffffc0000000000 RBX: ffff88805641c000 RCX: 0000000000000103 [ 62.672757][ C0] RDX: 00000000000000e6 RSI: ffffffff87f56686 RDI: ffff88805641c128 [ 62.675301][ C0] RBP: ffff88805641c128 R08: 0000000000000004 R09: 0000000000000020 [ 62.677700][ C0] R10: 0000000000000020 R11: 000000000000762b R12: ffff88805641c0f0 [ 62.680116][ C0] R13: ffff88805641c128 R14: ffff88805641c740 R15: 0000000000000001 [ 62.682832][ C0] FS: 0000000000000000(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 62.686009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.688300][ C0] CR2: 00007f58cc392ff8 CR3: 00000000267c4000 CR4: 0000000000352ef0 [ 62.690839][ C0] Call Trace: [ 62.691932][ C0] [ 62.692832][ C0] f_midi2_set_alt+0x444/0x5f0 [ 62.694368][ C0] composite_setup+0x16f8/0x9290 [ 62.695955][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 62.697526][ C0] ? set_task_cpu+0x831/0xa20 [ 62.698999][ C0] ? __pfx_composite_setup+0x10/0x10 [ 62.700813][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.702600][ C0] ? do_raw_spin_lock+0x128/0x260 [ 62.704242][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.705993][ C0] ? configfs_composite_setup+0xfb/0x130 [ 62.707811][ C0] configfs_composite_setup+0xfb/0x130 [ 62.709564][ C0] dummy_timer+0x2039/0x3700 [ 62.711206][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.713619][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 62.715528][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 62.717519][ C0] ? mark_held_locks+0x40/0x70 [ 62.719104][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.721004][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 62.722612][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 62.724329][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 62.726046][ C0] handle_softirqs+0x1e6/0x9d0 [ 62.727662][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 62.729397][ C0] ? _raw_spin_unlock+0x28/0x50 [ 62.730992][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 62.732793][ C0] __irq_exit_rcu+0x194/0x210 [ 62.734304][ C0] irq_exit_rcu+0x9/0x30 [ 62.735724][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 62.737537][ C0] [ 62.738466][ C0] [ 62.739360][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 62.741180][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 62.743293][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 3d 14 f6 48 89 df e8 4e 93 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 9a 03 f6 65 48 83 3d e4 14 b9 08 00 74 16 5b [ 62.750161][ C0] RSP: 0018:ffffc90005e96880 EFLAGS: 00000246 [ 62.752154][ C0] RAX: 0000000000000006 RBX: ffff888025a90000 RCX: 0000000000000040 [ 62.754806][ C0] RDX: 0000000000000001 RSI: ffffffff8e3ebe0c RDI: ffffffff8c621080 [ 62.757503][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 62.760384][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 62.762822][ C0] R13: ffff88802c108478 R14: 0000000000000000 R15: ffff88802c108400 [ 62.765535][ C0] dummy_urb_enqueue+0x56c/0x880 [ 62.767366][ C0] ? __device_attach_driver+0x1b1/0x320 [ 62.769411][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 62.771281][ C0] ? bus_for_each_drv+0x159/0x1e0 [ 62.773111][ C0] ? __device_attach+0x1e4/0x4d0 [ 62.774639][ C0] ? device_initial_probe+0xaf/0xd0 [ 62.776252][ C0] ? bus_probe_device+0x64/0x160 [ 62.777820][ C0] ? device_add+0x121d/0x1970 [ 62.779378][ C0] ? usb_new_device.part.0+0xcc2/0x1686 [ 62.781079][ C0] ? hub_event.cold+0x1e3/0xe90 [ 62.782594][ C0] usb_submit_urb+0x827/0x19b0 [ 62.784203][ C0] ? __init_swait_queue_head+0xca/0x150 [ 62.785949][ C0] usb_start_wait_urb+0x10e/0x580 [ 62.787706][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 62.789603][ C0] ? __asan_memset+0x23/0x50 [ 62.791336][ C0] usb_control_msg+0x328/0x4b0 [ 62.793199][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 62.795040][ C0] usb_control_msg_send+0xca/0x130 [ 62.796745][ C0] usb_set_interface+0x9b6/0xe20 [ 62.798456][ C0] snd_usb_midi_v2_create+0x629/0x4070 [ 62.800723][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 62.802880][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.805210][ C0] ? snd_info_create_entry+0x6f/0x400 [ 62.807400][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 62.809595][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 62.812400][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 62.814739][ C0] ? snd_info_create_entry+0x314/0x400 [ 62.816903][ C0] ? usb_ifnum_to_if+0x16f/0x1d0 [ 62.818870][ C0] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 62.821237][ C0] usb_audio_probe+0xf0b/0x3b10 [ 62.823539][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 62.825916][ C0] ? do_raw_spin_lock+0x128/0x260 [ 62.828026][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.830090][ C0] ? mark_held_locks+0x40/0x70 [ 62.832020][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 62.834151][ C0] ? find_held_lock+0x2b/0x80 [ 62.836116][ C0] ? mark_held_locks+0x40/0x70 [ 62.838153][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.840527][ C0] usb_probe_interface+0x386/0x9b0 [ 62.842672][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 62.844925][ C0] ? kernfs_put+0x3f/0x60 [ 62.846676][ C0] ? sysfs_create_link+0x68/0xc0 [ 62.848610][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 62.850920][ C0] really_probe+0x241/0xa60 [ 62.853139][ C0] __driver_probe_device+0x210/0x460 [ 62.855613][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.857896][ C0] driver_probe_device+0x4a/0x140 [ 62.859879][ C0] __device_attach_driver+0x1df/0x320 [ 62.861953][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 62.864332][ C0] bus_for_each_drv+0x159/0x1e0 [ 62.866292][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 62.868511][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.870632][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.873144][ C0] __device_attach+0x1e4/0x4d0 [ 62.875199][ C0] ? __pfx___device_attach+0x10/0x10 [ 62.877304][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 62.879344][ C0] device_initial_probe+0xaf/0xd0 [ 62.881316][ C0] bus_probe_device+0x64/0x160 [ 62.883227][ C0] device_add+0x121d/0x1970 [ 62.885109][ C0] ? __pfx_device_add+0x10/0x10 [ 62.887336][ C0] ? mark_held_locks+0x40/0x70 [ 62.889711][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.892399][ C0] usb_set_configuration+0xd97/0x1c60 [ 62.894583][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 62.897030][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 62.898567][ T6351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.902664][ C0] usb_probe_device+0xef/0x400 [ 62.904488][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 62.906191][ C0] really_probe+0x241/0xa60 [ 62.907768][ C0] __driver_probe_device+0x210/0x460 [ 62.909716][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 62.911880][ C0] driver_probe_device+0x4a/0x140 [ 62.913580][ C0] __device_attach_driver+0x1df/0x320 [ 62.915209][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 62.917099][ C0] bus_for_each_drv+0x159/0x1e0 [ 62.918582][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 62.920213][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.921830][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.923670][ C0] __device_attach+0x1e4/0x4d0 [ 62.925213][ C0] ? __pfx___device_attach+0x10/0x10 [ 62.927096][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 62.929221][ C0] device_initial_probe+0xaf/0xd0 [ 62.931174][ C0] bus_probe_device+0x64/0x160 [ 62.932796][ C0] device_add+0x121d/0x1970 [ 62.934198][ C0] ? __pfx_device_add+0x10/0x10 [ 62.935721][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 62.937460][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 62.939122][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 62.940960][ C0] ? mark_held_locks+0x40/0x70 [ 62.942511][ C0] hub_event.cold+0x1e3/0xe90 [ 62.944223][ C0] ? __pfx_hub_event+0x10/0x10 [ 62.945756][ C0] ? print_usage_bug.part.0+0x1f0/0x340 [ 62.947531][ C0] ? lock_acquire+0x1d1/0x380 [ 62.949027][ C0] ? process_one_work+0xa2c/0x1b10 [ 62.950554][ C0] ? process_one_work+0x906/0x1b10 [ 62.952168][ C0] ? process_one_work+0x906/0x1b10 [ 62.954084][ C0] process_one_work+0xac7/0x1b10 [ 62.956027][ C0] ? __pfx_process_one_work+0x10/0x10 [ 62.957866][ C0] ? lock_acquire+0x1d1/0x380 [ 62.959286][ C0] ? __pfx_hub_event+0x10/0x10 [ 62.960931][ C0] worker_thread+0x5ef/0xe50 [ 62.962384][ C0] ? __pfx_worker_thread+0x10/0x10 [ 62.964064][ C0] ? kthread+0x13a/0x450 [ 62.965333][ C0] ? __pfx_worker_thread+0x10/0x10 [ 62.966871][ C0] kthread+0x373/0x450 [ 62.968119][ C0] ? __pfx_kthread+0x10/0x10 [ 62.969522][ C0] ret_from_fork+0x730/0xd60 [ 62.971005][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 62.972683][ C0] ? __switch_to+0x800/0x10f0 [ 62.974513][ C0] ? __pfx_kthread+0x10/0x10 [ 62.976608][ C0] ret_from_fork_asm+0x1a/0x30 [ 62.978590][ C0] [ 62.979728][ C0] Modules linked in: [ 62.981118][ C0] ---[ end trace 0000000000000000 ]--- [ 62.982885][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 62.982918][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 62.982929][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 62.982940][ C0] RAX: dffffc0000000000 RBX: ffff88805641c000 RCX: 0000000000000103 [ 62.982947][ C0] RDX: 00000000000000e6 RSI: ffffffff87f56686 RDI: ffff88805641c128 [ 62.982954][ C0] RBP: ffff88805641c128 R08: 0000000000000004 R09: 0000000000000020 [ 62.982961][ C0] R10: 0000000000000020 R11: 000000000000762b R12: ffff88805641c0f0 [ 62.982968][ C0] R13: ffff88805641c128 R14: ffff88805641c740 R15: 0000000000000001 [ 62.982975][ C0] FS: 0000000000000000(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 62.983003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.983012][ C0] CR2: 00007f58cc392ff8 CR3: 00000000267c4000 CR4: 0000000000352ef0 [ 62.983022][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 63.018138][ C0] Kernel Offset: disabled [ 63.019471][ C0] Rebooting in 86400 seconds..