last executing test programs: 27m15.459020074s ago: executing program 1 (id=2541): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 27m15.08613232s ago: executing program 1 (id=2546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf251500000018000180140002006e657464657673696d30000000000000075c9c"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x3aa6, 0x8, 0x2, 0x7, 0x6}, &(0x7f0000000040)={0x1, 0x5368, 0x9, 0x0, 0x8000000000000001, 0x5, 0x4, 0xc}, &(0x7f0000000080)={0xd, 0x3cae, 0xfefffffffffffffa, 0x7, 0x9, 0x9, 0x400, 0x1}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27m15.085895257s ago: executing program 1 (id=2547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 27m14.983130452s ago: executing program 1 (id=2548): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000040)) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x25c5dd54083b231a}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x3, 0x8d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) 27m13.974874088s ago: executing program 1 (id=2553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, 0x0}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 27m13.689939814s ago: executing program 1 (id=2558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 27m13.573445721s ago: executing program 32 (id=2558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.588552369s ago: executing program 3 (id=8095): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[], 0x10) write$P9_RSTATu(r0, &(0x7f00000008c0)={0xd5, 0x7d, 0xa, {{0x0, 0xa9, 0x3, 0x5, {0x0, 0x0, 0x5}, 0xb00000, 0x8, 0x7, 0x2, 0x1, '\x85', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x17, '\x97\xfe\xef\x85\xec\x92\xbf\xa6z\xa0K\x1f-Es\x020\x8frQ\x92\x81\xf4'}}, 0xd5) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.529797502s ago: executing program 3 (id=8096): socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0x2020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2.083302809s ago: executing program 2 (id=8102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 2.029557893s ago: executing program 2 (id=8104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x40004) 1.740173439s ago: executing program 2 (id=8108): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x80) flock(r2, 0x1) 1.08774703s ago: executing program 4 (id=8113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r3, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0) 970.534624ms ago: executing program 4 (id=8114): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x3, 0x1ff, 0x10000000, 0x3}, 0x10) 870.07651ms ago: executing program 4 (id=8115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xb, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 869.844003ms ago: executing program 2 (id=8116): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) 869.523993ms ago: executing program 2 (id=8117): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0xfffe, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 760.506743ms ago: executing program 4 (id=8118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d1800128078800180090001006c617374000000000400028008000340000001300c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 460.478307ms ago: executing program 3 (id=8121): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 460.156776ms ago: executing program 4 (id=8122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r3, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0) 459.72276ms ago: executing program 2 (id=8123): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x11b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x140040c5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 448.531014ms ago: executing program 3 (id=8124): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48814}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 318.460006ms ago: executing program 3 (id=8128): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002122, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 249.239304ms ago: executing program 3 (id=8129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40004) 249.088917ms ago: executing program 4 (id=8130): socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0x2020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 169.92807ms ago: executing program 0 (id=8131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d1800128078800180090001006c617374000000000400028008000340000001300c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 169.651896ms ago: executing program 0 (id=8132): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 89.610477ms ago: executing program 0 (id=8133): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x42e20, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 89.422572ms ago: executing program 0 (id=8134): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 349.911µs ago: executing program 0 (id=8135): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=8136): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r0, 0x0, 0x23b) kernel console output (not intermixed with test programs): eed is unknown, defaulting to 1000 [ 2117.381858][T10448] wg2 speed is unknown, defaulting to 1000 [ 2118.174099][T10451] wg2 speed is unknown, defaulting to 1000 [ 2118.726555][T10460] wg2 speed is unknown, defaulting to 1000 [ 2120.030607][T10475] wg2 speed is unknown, defaulting to 1000 [ 2121.035637][T10480] wg2 speed is unknown, defaulting to 1000 [ 2121.383822][T10489] wg2 speed is unknown, defaulting to 1000 [ 2123.385392][T10508] wg2 speed is unknown, defaulting to 1000 [ 2124.183007][T10510] wg2 speed is unknown, defaulting to 1000 [ 2125.005007][T10524] 9p: Bad value for 'wfdno' [ 2126.450028][T10529] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2126.454619][T10529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2126.457770][T10529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2126.597098][T10520] wg2 speed is unknown, defaulting to 1000 [ 2126.844695][T10534] wg2 speed is unknown, defaulting to 1000 [ 2127.461332][T10547] wg2 speed is unknown, defaulting to 1000 [ 2128.583588][T10548] wg2 speed is unknown, defaulting to 1000 [ 2129.857424][T10565] wg2 speed is unknown, defaulting to 1000 [ 2131.192124][T10570] wg2 speed is unknown, defaulting to 1000 [ 2131.526623][T10577] wg2 speed is unknown, defaulting to 1000 [ 2134.263727][T10593] wg2 speed is unknown, defaulting to 1000 [ 2135.555128][T10613] wg2 speed is unknown, defaulting to 1000 [ 2137.245046][T10635] 9p: Bad value for 'wfdno' [ 2138.700186][T10633] wg2 speed is unknown, defaulting to 1000 [ 2139.583892][T10632] wg2 speed is unknown, defaulting to 1000 [ 2139.850556][T10645] wg2 speed is unknown, defaulting to 1000 [ 2140.061204][T11504] wg2 speed is unknown, defaulting to 1000 [ 2141.889195][T11517] wg2 speed is unknown, defaulting to 1000 [ 2142.404778][T11533] wg2 speed is unknown, defaulting to 1000 [ 2143.185061][T11532] wg2 speed is unknown, defaulting to 1000 [ 2144.097577][T11542] wg2 speed is unknown, defaulting to 1000 [ 2144.669409][T11552] wg2 speed is unknown, defaulting to 1000 [ 2144.838572][T11557] 9p: Bad value for 'wfdno' [ 2144.899506][T11545] wg2 speed is unknown, defaulting to 1000 [ 2146.083029][T11561] wg2 speed is unknown, defaulting to 1000 [ 2146.727016][T11567] wg2 speed is unknown, defaulting to 1000 [ 2147.113164][T11573] wg2 speed is unknown, defaulting to 1000 [ 2147.268397][T11579] wg2 speed is unknown, defaulting to 1000 [ 2150.084617][T11595] wg2 speed is unknown, defaulting to 1000 [ 2150.434800][T11601] wg2 speed is unknown, defaulting to 1000 [ 2151.665178][T11618] wg2 speed is unknown, defaulting to 1000 [ 2152.913978][T11625] 9p: Bad value for 'wfdno' [ 2154.553749][T26973] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 1150 sec [ 2155.026077][T11642] wg2 speed is unknown, defaulting to 1000 [ 2156.535136][T11659] 9p: Bad value for 'wfdno' [ 2157.074487][T11649] wg2 speed is unknown, defaulting to 1000 [ 2159.401822][T11677] wg2 speed is unknown, defaulting to 1000 [ 2160.194204][T11686] wg2 speed is unknown, defaulting to 1000 [ 2160.900041][T11688] wg2 speed is unknown, defaulting to 1000 [ 2162.228437][T11712] 9p: Bad value for 'wfdno' [ 2163.846490][T11708] wg2 speed is unknown, defaulting to 1000 [ 2165.033284][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.035473][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.572063][T11728] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2166.575397][T11728] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2166.578729][T11728] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2166.633155][T11720] wg2 speed is unknown, defaulting to 1000 [ 2166.972848][T11733] wg2 speed is unknown, defaulting to 1000 [ 2171.115628][T11757] wg2 speed is unknown, defaulting to 1000 [ 2171.773806][T11773] wg2 speed is unknown, defaulting to 1000 [ 2171.913610][T11762] wg2 speed is unknown, defaulting to 1000 [ 2175.325947][T11794] wg2 speed is unknown, defaulting to 1000 [ 2176.878066][T11812] 9p: Bad value for 'wfdno' [ 2177.863921][T11809] wg2 speed is unknown, defaulting to 1000 [ 2178.298398][T11814] wg2 speed is unknown, defaulting to 1000 [ 2182.511349][T11843] wg2 speed is unknown, defaulting to 1000 [ 2183.293727][T11851] wg2 speed is unknown, defaulting to 1000 [ 2184.583591][T11865] wg2 speed is unknown, defaulting to 1000 [ 2186.472712][T11884] wg2 speed is unknown, defaulting to 1000 [ 2186.794413][T11888] wg2 speed is unknown, defaulting to 1000 [ 2186.909040][T11893] 9p: Bad value for 'wfdno' [ 2189.133251][T11903] wg2 speed is unknown, defaulting to 1000 [ 2189.254578][T11908] x_tables: duplicate underflow at hook 1 [ 2190.621549][T11913] wg2 speed is unknown, defaulting to 1000 [ 2191.736793][T11921] wg2 speed is unknown, defaulting to 1000 [ 2192.463114][T11932] wg2 speed is unknown, defaulting to 1000 [ 2193.892615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 2196.855126][T11946] wg2 speed is unknown, defaulting to 1000 [ 2197.030150][T11963] x_tables: duplicate underflow at hook 1 [ 2198.592559][T11970] wg2 speed is unknown, defaulting to 1000 [ 2198.829094][T11984] 9p: Bad value for 'wfdno' [ 2200.599996][T11996] 9p: Bad value for 'wfdno' [ 2200.655322][T11983] wg2 speed is unknown, defaulting to 1000 [ 2201.782332][T12007] wg2 speed is unknown, defaulting to 1000 [ 2202.687111][T12022] x_tables: duplicate underflow at hook 1 [ 2204.106962][T12027] wg2 speed is unknown, defaulting to 1000 [ 2205.024705][T12037] wg2 speed is unknown, defaulting to 1000 [ 2205.364391][T12036] wg2 speed is unknown, defaulting to 1000 [ 2206.828002][T12056] wg2 speed is unknown, defaulting to 1000 [ 2209.211365][T12077] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2209.215829][T12077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2209.219131][T12077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2209.276926][T12069] wg2 speed is unknown, defaulting to 1000 [ 2209.869287][T12087] 9p: Bad value for 'wfdno' [ 2211.950241][T12100] wg2 speed is unknown, defaulting to 1000 [ 2212.333940][T12109] wg2 speed is unknown, defaulting to 1000 [ 2214.612660][T26973] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 1210 sec [ 2215.968777][T12124] wg2 speed is unknown, defaulting to 1000 [ 2216.152284][T12135] wg2 speed is unknown, defaulting to 1000 [ 2216.542480][T12144] wg2 speed is unknown, defaulting to 1000 [ 2218.954769][T12637] wg2 speed is unknown, defaulting to 1000 [ 2219.514825][T12642] wg2 speed is unknown, defaulting to 1000 [ 2219.946699][T12648] wg2 speed is unknown, defaulting to 1000 [ 2220.821731][T12653] wg2 speed is unknown, defaulting to 1000 [ 2221.433353][T12666] 9p: Bad value for 'version' [ 2222.257663][T12672] wg2 speed is unknown, defaulting to 1000 [ 2222.830008][T12677] wg2 speed is unknown, defaulting to 1000 [ 2224.252249][T12689] wg2 speed is unknown, defaulting to 1000 [ 2226.465005][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.467661][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.541960][T12696] wg2 speed is unknown, defaulting to 1000 [ 2231.300115][T12728] wg2 speed is unknown, defaulting to 1000 [ 2232.357837][T12744] 9pnet_virtio: no channels available for device syz [ 2234.380914][T12737] wg2 speed is unknown, defaulting to 1000 [ 2235.786435][T12757] wg2 speed is unknown, defaulting to 1000 [ 2236.523865][T12767] wg2 speed is unknown, defaulting to 1000 [ 2236.803829][T12762] wg2 speed is unknown, defaulting to 1000 [ 2237.195105][T12775] wg2 speed is unknown, defaulting to 1000 [ 2238.063714][T12786] wg2 speed is unknown, defaulting to 1000 [ 2239.380394][T12799] wg2 speed is unknown, defaulting to 1000 [ 2240.368308][T12812] wg2 speed is unknown, defaulting to 1000 [ 2240.403957][T12818] x_tables: duplicate underflow at hook 1 [ 2245.649099][T12844] wg2 speed is unknown, defaulting to 1000 [ 2246.123307][T12859] wg2 speed is unknown, defaulting to 1000 [ 2246.408239][T12853] wg2 speed is unknown, defaulting to 1000 [ 2247.381996][T12868] wg2 speed is unknown, defaulting to 1000 [ 2249.312436][T12888] wg2 speed is unknown, defaulting to 1000 [ 2251.494510][T12908] wg2 speed is unknown, defaulting to 1000 [ 2251.668080][T12898] wg2 speed is unknown, defaulting to 1000 [ 2254.114293][T12923] wg2 speed is unknown, defaulting to 1000 [ 2254.697842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 2255.043205][T12939] wg2 speed is unknown, defaulting to 1000 [ 2255.382649][T12944] wg2 speed is unknown, defaulting to 1000 [ 2257.281046][T12960] wg2 speed is unknown, defaulting to 1000 [ 2258.823140][T12969] wg2 speed is unknown, defaulting to 1000 [ 2260.235319][T12988] wg2 speed is unknown, defaulting to 1000 [ 2263.041857][T13011] wg2 speed is unknown, defaulting to 1000 [ 2264.367197][T13025] wg2 speed is unknown, defaulting to 1000 [ 2267.092629][T13052] wg2 speed is unknown, defaulting to 1000 [ 2269.834185][T13051] wg2 speed is unknown, defaulting to 1000 [ 2271.869722][T13094] wg2 speed is unknown, defaulting to 1000 [ 2273.086564][T13092] wg2 speed is unknown, defaulting to 1000 [ 2274.943329][ T4392] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 1271 sec [ 2275.910999][T13123] wg2 speed is unknown, defaulting to 1000 [ 2276.600962][T13111] wg2 speed is unknown, defaulting to 1000 [ 2276.978927][T13130] wg2 speed is unknown, defaulting to 1000 [ 2278.284646][T13148] 9p: Bad value for 'wfdno' [ 2278.391093][T13142] wg2 speed is unknown, defaulting to 1000 [ 2279.372738][T13161] wg2 speed is unknown, defaulting to 1000 [ 2287.175145][T13227] wg2 speed is unknown, defaulting to 1000 [ 2287.788819][T13235] wg2 speed is unknown, defaulting to 1000 [ 2288.324725][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.327492][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.723508][T13251] wg2 speed is unknown, defaulting to 1000 [ 2291.507160][T13270] 9p: Bad value for 'version' [ 2295.024903][T13301] wg2 speed is unknown, defaulting to 1000 [ 2300.624161][T13353] wg2 speed is unknown, defaulting to 1000 [ 2301.986626][T13366] 9p: Bad value for 'version' [ 2302.097353][T13360] wg2 speed is unknown, defaulting to 1000 [ 2302.785119][T13371] wg2 speed is unknown, defaulting to 1000 [ 2305.056332][T13389] 9p: Bad value for 'version' [ 2305.860680][T13396] wg2 speed is unknown, defaulting to 1000 [ 2306.127383][T13395] wg2 speed is unknown, defaulting to 1000 [ 2308.675402][T13408] wg2 speed is unknown, defaulting to 1000 [ 2309.148437][T13416] 9p: Bad value for 'version' [ 2310.077165][T13422] wg2 speed is unknown, defaulting to 1000 [ 2312.454702][T13443] 9p: Bad value for 'version' [ 2313.523219][T13439] wg2 speed is unknown, defaulting to 1000 [ 2314.327082][T13463] 9p: Bad value for 'version' [ 2315.878334][T13458] wg2 speed is unknown, defaulting to 1000 [ 2317.753464][T13481] wg2 speed is unknown, defaulting to 1000 [ 2318.044977][T13485] wg2 speed is unknown, defaulting to 1000 [ 2318.342323][T13472] wg2 speed is unknown, defaulting to 1000 [ 2320.104824][T13503] wg2 speed is unknown, defaulting to 1000 [ 2321.827753][T13511] wg2 speed is unknown, defaulting to 1000 [ 2322.726735][T13537] wg2 speed is unknown, defaulting to 1000 [ 2323.450117][T13544] wg2 speed is unknown, defaulting to 1000 [ 2324.946881][T13555] wg2 speed is unknown, defaulting to 1000 [ 2325.053665][T13565] 9p: Bad value for 'version' [ 2325.933924][T13560] wg2 speed is unknown, defaulting to 1000 [ 2327.031060][T13568] wg2 speed is unknown, defaulting to 1000 [ 2327.128007][T13575] wg2 speed is unknown, defaulting to 1000 [ 2328.100586][T13584] wg2 speed is unknown, defaulting to 1000 [ 2328.573576][T13595] 9p: Bad value for 'version' [ 2328.622622][T13596] 9p: Bad value for 'version' [ 2330.437341][T13595] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2330.440641][T13595] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2330.443981][T13595] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2330.846338][T13601] 9p: Bad value for 'wfdno' [ 2332.998628][T13613] wg2 speed is unknown, defaulting to 1000 [ 2334.614942][T13629] wg2 speed is unknown, defaulting to 1000 [ 2334.805576][T13619] wg2 speed is unknown, defaulting to 1000 [ 2335.082126][T13635] wg2 speed is unknown, defaulting to 1000 [ 2335.263842][ T4392] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 1331 sec [ 2336.266130][T13651] wg2 speed is unknown, defaulting to 1000 [ 2337.577761][T13668] wg2 speed is unknown, defaulting to 1000 [ 2341.198777][T13681] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2341.201838][T13681] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2341.205133][T13681] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2341.467177][T13660] wg2 speed is unknown, defaulting to 1000 [ 2341.543600][T13690] 9p: Bad value for 'version' [ 2343.621130][T13694] wg2 speed is unknown, defaulting to 1000 [ 2344.015201][T13699] wg2 speed is unknown, defaulting to 1000 [ 2345.451361][T13709] wg2 speed is unknown, defaulting to 1000 [ 2349.384345][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.387202][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.492765][T13743] 9p: Bad value for 'version' [ 2349.646558][T13733] wg2 speed is unknown, defaulting to 1000 [ 2351.546450][T13759] wg2 speed is unknown, defaulting to 1000 [ 2352.800693][T13774] wg2 speed is unknown, defaulting to 1000 [ 2356.129395][T13794] wg2 speed is unknown, defaulting to 1000 [ 2357.076220][T13803] wg2 speed is unknown, defaulting to 1000 [ 2357.429896][T13799] wg2 speed is unknown, defaulting to 1000 [ 2358.302408][T13809] wg2 speed is unknown, defaulting to 1000 [ 2360.745839][T13845] wg2 speed is unknown, defaulting to 1000 [ 2361.093086][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6594'. [ 2362.955287][T13871] 9pnet_virtio: no channels available for device syz [ 2366.047311][T13865] wg2 speed is unknown, defaulting to 1000 [ 2367.725831][T14151] wg2 speed is unknown, defaulting to 1000 [ 2368.030867][T14152] wg2 speed is unknown, defaulting to 1000 [ 2368.677267][T14159] wg2 speed is unknown, defaulting to 1000 [ 2369.608970][T14171] wg2 speed is unknown, defaulting to 1000 [ 2369.797022][T14162] wg2 speed is unknown, defaulting to 1000 [ 2372.096958][T14178] wg2 speed is unknown, defaulting to 1000 [ 2372.996152][T14200] wg2 speed is unknown, defaulting to 1000 [ 2374.993463][T15007] wg2 speed is unknown, defaulting to 1000 [ 2375.265453][T15012] wg2 speed is unknown, defaulting to 1000 [ 2376.367913][T15246] wg2 speed is unknown, defaulting to 1000 [ 2377.779068][T15262] wg2 speed is unknown, defaulting to 1000 [ 2379.873510][T15273] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2379.877042][T15273] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2379.880474][T15273] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2380.205058][T15298] 9p: Bad value for 'version' [ 2381.096653][T15278] wg2 speed is unknown, defaulting to 1000 [ 2381.376184][T15301] wg2 speed is unknown, defaulting to 1000 [ 2381.633653][T15307] 9p: Bad value for 'wfdno' [ 2382.626547][T15313] wg2 speed is unknown, defaulting to 1000 [ 2383.921426][T15339] 9p: Bad value for 'version' [ 2384.348507][T15322] wg2 speed is unknown, defaulting to 1000 [ 2384.869053][T15334] wg2 speed is unknown, defaulting to 1000 [ 2385.064496][T15331] wg2 speed is unknown, defaulting to 1000 [ 2386.852653][T15357] 9pnet_virtio: no channels available for device syz [ 2389.543731][T15367] 9p: Bad value for 'wfdno' [ 2389.623251][T15369] wg2 speed is unknown, defaulting to 1000 [ 2390.449964][T15371] wg2 speed is unknown, defaulting to 1000 [ 2391.169056][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6643'. [ 2392.221426][T15383] wg2 speed is unknown, defaulting to 1000 [ 2393.107966][T15406] 9p: Bad value for 'wfdno' [ 2393.687788][T15410] wg2 speed is unknown, defaulting to 1000 [ 2394.585678][T15421] wg2 speed is unknown, defaulting to 1000 [ 2394.752393][T15420] wg2 speed is unknown, defaulting to 1000 [ 2394.893351][T15429] wg2 speed is unknown, defaulting to 1000 [ 2395.352923][ T6139] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 1391 sec [ 2399.086556][T15455] 9pnet_virtio: no channels available for device syz [ 2399.771173][T15447] wg2 speed is unknown, defaulting to 1000 [ 2400.420260][T15470] 9p: Bad value for 'version' [ 2403.276923][T15486] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2403.280128][T15486] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2403.284322][T15486] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2403.292631][T15467] wg2 speed is unknown, defaulting to 1000 [ 2403.825054][T15481] wg2 speed is unknown, defaulting to 1000 [ 2404.230052][T15501] 9p: Bad value for 'version' [ 2404.679173][T15491] wg2 speed is unknown, defaulting to 1000 [ 2406.818707][T15509] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2406.821926][T15509] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2406.825157][T15509] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2408.299312][T15529] 9p: Bad value for 'version' [ 2409.164884][T15523] wg2 speed is unknown, defaulting to 1000 [ 2410.574529][T15538] wg2 speed is unknown, defaulting to 1000 [ 2410.785188][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.787279][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.290811][T15543] wg2 speed is unknown, defaulting to 1000 [ 2412.182933][T15556] wg2 speed is unknown, defaulting to 1000 [ 2412.576862][T15566] 9p: Bad value for 'version' [ 2413.159967][T15565] wg2 speed is unknown, defaulting to 1000 [ 2414.663315][T15587] 9p: Bad value for 'version' [ 2416.754098][T15572] wg2 speed is unknown, defaulting to 1000 [ 2417.191658][T15592] wg2 speed is unknown, defaulting to 1000 [ 2417.459133][T15602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2417.467531][T15602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2417.471744][T15602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2417.483138][T15602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2417.485913][T15602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2418.041650][T15599] wg2 speed is unknown, defaulting to 1000 [ 2418.377378][T11729] smc: removing ib device syz1 [ 2418.386566][T15607] wg2 speed is unknown, defaulting to 1000 [ 2419.592619][ T5297] Bluetooth: hci4: command tx timeout [ 2419.734428][T15599] chnl_net:caif_netlink_parms(): no params data found [ 2420.148932][T15599] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.151920][T15599] bridge0: port 1(bridge_slave_0) entered disabled state [ 2420.156663][T15599] bridge_slave_0: entered allmulticast mode [ 2420.160878][T15599] bridge_slave_0: entered promiscuous mode [ 2420.168752][T15599] bridge0: port 2(bridge_slave_1) entered blocking state [ 2420.171494][T15599] bridge0: port 2(bridge_slave_1) entered disabled state [ 2420.175040][T15599] bridge_slave_1: entered allmulticast mode [ 2420.178544][T15599] bridge_slave_1: entered promiscuous mode [ 2420.199799][T15599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2420.206048][T15599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2420.297265][T15599] team0: Port device team_slave_0 added [ 2420.302433][T15599] team0: Port device team_slave_1 added [ 2420.405767][T15621] wg2 speed is unknown, defaulting to 1000 [ 2420.420467][T15599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2420.432262][T15599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.446512][T15599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.488470][T15599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2420.490716][T15599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.515304][T15599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2420.804997][T15599] hsr_slave_0: entered promiscuous mode [ 2420.807316][T15599] hsr_slave_1: entered promiscuous mode [ 2420.809564][T15599] debugfs: 'hsr0' already exists in 'hsr' [ 2420.811456][T15599] Cannot create hsr debugfs directory [ 2420.943764][T15630] wg2 speed is unknown, defaulting to 1000 [ 2420.978228][T15599] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2420.981427][T15599] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2421.251517][T15599] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2421.254733][T15599] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2421.324680][T15599] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2421.327796][T15599] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2421.475647][T15599] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2421.479783][T15599] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2421.673558][ T5297] Bluetooth: hci4: command tx timeout [ 2421.832405][ T6194] bond3 (unregistering): (slave gretap2): Releasing active interface [ 2421.862967][ T6194] bond2 (unregistering): (slave geneve2): Releasing active interface [ 2422.163870][ T6194] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 2422.167305][ T6194] bond1 (unregistering): (slave macvlan2): the permanent HWaddr of slave - ce:bc:1e:fc:57:47 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2422.180012][ T6194] bond1 (unregistering): (slave macvlan4): Releasing backup interface [ 2422.189838][ T6194] bond0 (unregistering): Released all slaves [ 2422.197688][ T6194] bond1 (unregistering): Released all slaves [ 2422.204704][ T6194] bond2 (unregistering): Released all slaves [ 2422.211718][ T6194] bond3 (unregistering): Released all slaves [ 2422.247110][T15599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2422.253540][T15599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2422.266723][T15599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2422.273454][T15636] wg2 speed is unknown, defaulting to 1000 [ 2422.273960][T15599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2422.346002][ T6194] ‚#{6c: left promiscuous mode [ 2422.378494][T15599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2422.395447][T15599] 8021q: adding VLAN 0 to HW filter on device team0 [ 2422.404710][T27693] bridge0: port 1(bridge_slave_0) entered blocking state [ 2422.407770][T27693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2422.417280][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2422.419645][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2422.448226][ T6194] tipc: Disabling bearer [ 2422.453129][ T6194] tipc: Disabling bearer [ 2422.471268][ T6194] tipc: Left network mode [ 2422.771535][T15599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2422.953973][T15599] veth0_vlan: entered promiscuous mode [ 2422.960921][T15599] veth1_vlan: entered promiscuous mode [ 2422.970493][T15661] 9p: Bad value for 'version' [ 2422.977614][T15599] veth0_macvtap: entered promiscuous mode [ 2422.981958][T15599] veth1_macvtap: entered promiscuous mode [ 2422.994245][T15599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2422.998754][T15599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2423.391051][ T1178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.394072][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.402421][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2423.742813][ T5297] Bluetooth: hci4: command tx timeout [ 2423.879152][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.103626][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2424.107015][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2424.115501][T15655] wg2 speed is unknown, defaulting to 1000 [ 2424.278676][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2424.286260][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2424.595207][ T6194] hsr_slave_0: left promiscuous mode [ 2424.597449][ T6194] hsr_slave_1: left promiscuous mode [ 2425.125345][T15679] 9p: Bad value for 'wfdno' [ 2425.387468][T14292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2425.403435][T14292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2425.407876][T14292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2425.411549][T14292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2425.415801][T14292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2425.656218][ T6188] smc: removing ib device syz2 [ 2425.823193][T14292] Bluetooth: hci4: command tx timeout [ 2426.975006][T15687] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2426.978926][T15687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2426.983047][T15687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2427.512825][T14292] Bluetooth: hci2: command tx timeout [ 2427.720381][T15680] chnl_net:caif_netlink_parms(): no params data found [ 2427.788795][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 2427.793227][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.802855][T15680] bridge_slave_0: entered allmulticast mode [ 2427.808242][T15680] bridge_slave_0: entered promiscuous mode [ 2427.824027][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 2427.827465][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.830907][T15680] bridge_slave_1: entered allmulticast mode [ 2427.836151][T15680] bridge_slave_1: entered promiscuous mode [ 2427.881840][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2427.887904][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2427.909973][T15680] team0: Port device team_slave_0 added [ 2427.915415][T15680] team0: Port device team_slave_1 added [ 2427.940016][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2427.943259][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2427.955842][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2427.968752][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2427.971063][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2427.989884][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2428.044194][T15680] hsr_slave_0: entered promiscuous mode [ 2428.049283][T15680] hsr_slave_1: entered promiscuous mode [ 2428.052369][T15680] debugfs: 'hsr0' already exists in 'hsr' [ 2428.055168][T15680] Cannot create hsr debugfs directory [ 2428.225688][T15680] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58612 - 0 [ 2428.448400][T15680] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58612 - 0 [ 2428.500221][T15680] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58612 - 0 [ 2428.559613][T15680] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58612 - 0 [ 2429.075358][ T6194] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2429.137524][ T6194] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2429.583567][T14292] Bluetooth: hci2: command tx timeout [ 2429.657281][ T6194] smc: removing net device bond0 with user defined pnetid SYZ2 [ 2429.660747][ T6194] bond0 (unregistering): Released all slaves [ 2429.670258][ T6194] bond1 (unregistering): Released all slaves [ 2429.677570][ T6194] bond2 (unregistering): Released all slaves [ 2429.863884][ T6194] : left promiscuous mode [ 2429.915775][ T6194] tipc: Disabling bearer [ 2429.923723][ T6194] tipc: Left network mode [ 2429.995877][T15680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2430.018148][T15680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2430.033118][T15680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2430.039333][T15680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2430.260722][T15680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2430.273626][T15680] 8021q: adding VLAN 0 to HW filter on device team0 [ 2430.288293][T11729] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.291551][T11729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2430.298411][T11729] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.302104][T11729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2430.338583][T15680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2430.347292][T15680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2430.480852][T15680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2430.509419][T15680] veth0_vlan: entered promiscuous mode [ 2430.528420][T15680] veth1_vlan: entered promiscuous mode [ 2430.823645][T12935] kernel write not supported for file /dsp (pid: 12935 comm: kworker/1:0) [ 2430.907441][T15680] veth0_macvtap: entered promiscuous mode [ 2431.016399][T15680] veth1_macvtap: entered promiscuous mode [ 2431.123492][T15680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2431.131214][ T6194] hsr_slave_0: left promiscuous mode [ 2431.134880][ T6194] hsr_slave_1: left promiscuous mode [ 2431.139299][ T6194] pim6reg99999999 (unregistering): left allmulticast mode [ 2431.351400][T15680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2431.366301][T13738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.397995][T13738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.412463][T13738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.416660][T13738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2431.500613][T27693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2431.505298][T27693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.546876][T13738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2431.549901][T13738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.662627][T14292] Bluetooth: hci2: command tx timeout [ 2431.836590][T15759] 9p: Bad value for 'version' [ 2432.273706][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2432.282559][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2432.286189][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2432.291065][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2432.300332][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2433.084548][ T6194] IPVS: stop unused estimator thread 0... [ 2433.521256][T15763] chnl_net:caif_netlink_parms(): no params data found [ 2433.729147][T15763] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.732367][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.735970][T15763] bridge_slave_0: entered allmulticast mode [ 2433.740010][T15763] bridge_slave_0: entered promiscuous mode [ 2433.746375][T15763] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.749480][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.752712][ T5297] Bluetooth: hci2: command tx timeout [ 2433.755306][T15763] bridge_slave_1: entered allmulticast mode [ 2433.759365][T15763] bridge_slave_1: entered promiscuous mode [ 2433.970240][T15763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.985686][T15763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2434.019411][T15763] team0: Port device team_slave_0 added [ 2434.022895][T15763] team0: Port device team_slave_1 added [ 2434.039137][T15763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2434.041521][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2434.051299][T15763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2434.057930][T15763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2434.061183][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2434.071811][T15763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2434.111449][T15763] hsr_slave_0: entered promiscuous mode [ 2434.115305][T15763] hsr_slave_1: entered promiscuous mode [ 2434.118469][T15763] debugfs: 'hsr0' already exists in 'hsr' [ 2434.121204][T15763] Cannot create hsr debugfs directory [ 2434.389550][ T5297] Bluetooth: hci3: command tx timeout [ 2434.448451][T15763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.607569][T15763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.864879][T15763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.026194][T15763] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.378847][ T6194] batman_adv: batadv0: Interface deactivated: gretap1 [ 2435.522934][ T6194] bond_slave_0: left promiscuous mode [ 2435.525691][ T6194] bond_slave_1: left promiscuous mode [ 2435.669089][ T6194] batman_adv: batadv0: Removing interface: gretap1 [ 2435.686804][ T6194] dvmrp0 (unregistering): left allmulticast mode [ 2435.704061][ T6194] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 2435.723681][ T6194] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 2435.735109][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2435.747185][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2435.752435][ T6194] bond0 (unregistering): Released all slaves [ 2435.759646][ T6194] bond1 (unregistering): Released all slaves [ 2435.947800][T15763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2435.955193][ T6194] : left promiscuous mode [ 2435.960850][T15763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2435.969078][T15763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2435.973893][T15763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2436.060931][ T6194] tipc: Left network mode [ 2436.123500][T15763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2436.132297][T15763] 8021q: adding VLAN 0 to HW filter on device team0 [ 2436.143646][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 2436.145921][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2436.154766][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 2436.157127][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2436.463499][ T5297] Bluetooth: hci3: command tx timeout [ 2436.464666][T15763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2436.937562][ T6194] hsr_slave_0: left promiscuous mode [ 2436.940285][ T6194] hsr_slave_1: left promiscuous mode [ 2436.942903][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2436.948006][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2436.951015][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2436.960736][ T6194] veth1_macvtap: left promiscuous mode [ 2436.965959][ T6194] veth0_macvtap: left promiscuous mode [ 2436.968595][ T6194] veth1_vlan: left promiscuous mode [ 2436.971002][ T6194] veth0_vlan: left promiscuous mode [ 2437.747119][T15763] veth0_vlan: entered promiscuous mode [ 2437.753607][T15763] veth1_vlan: entered promiscuous mode [ 2437.775461][T15763] veth0_macvtap: entered promiscuous mode [ 2437.779676][T15763] veth1_macvtap: entered promiscuous mode [ 2437.833412][T15763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2437.841001][T15763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2437.849568][T11513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.854477][T11513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.858434][T11513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.888826][ T6190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.022864][T27693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.034107][T27693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2438.064822][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2438.070462][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2438.276749][ T6194] IPVS: stop unused estimator thread 0... [ 2438.652709][ T5297] Bluetooth: hci3: command tx timeout [ 2439.432100][T14292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2439.441124][T14292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2439.450858][T14292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2439.454747][T14292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2439.457916][T14292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2440.402919][T15869] chnl_net:caif_netlink_parms(): no params data found [ 2440.483082][T15869] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.486836][T15869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.490360][T15869] bridge_slave_0: entered allmulticast mode [ 2440.504794][T15869] bridge_slave_0: entered promiscuous mode [ 2440.510452][T15869] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.513710][T15869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2440.516813][T15869] bridge_slave_1: entered allmulticast mode [ 2440.520760][T15869] bridge_slave_1: entered promiscuous mode [ 2440.556427][T15869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2440.561073][T15869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2440.705450][T14292] Bluetooth: hci3: command tx timeout [ 2440.715260][T15869] team0: Port device team_slave_0 added [ 2440.809019][T15869] team0: Port device team_slave_1 added [ 2440.856159][T15869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2440.859234][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2440.878757][T15869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2440.886048][T15869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2440.889706][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2440.904806][T15869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2441.010023][T15869] hsr_slave_0: entered promiscuous mode [ 2441.014004][T15869] hsr_slave_1: entered promiscuous mode [ 2441.017539][T15869] debugfs: 'hsr0' already exists in 'hsr' [ 2441.020853][T15869] Cannot create hsr debugfs directory [ 2441.601960][T14292] Bluetooth: hci1: command tx timeout [ 2442.056413][ T6194] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 2442.062657][T12922] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2442.073864][ T6194] bond4 (unregistering): (slave gretap2): Releasing active interface [ 2442.236142][T12922] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2442.239938][T12922] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2442.245439][T12922] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2442.248749][T12922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.251715][T12922] usb 8-1: Product: syz [ 2442.254750][T12922] usb 8-1: Manufacturer: syz [ 2442.256789][T12922] usb 8-1: SerialNumber: syz [ 2442.265087][T12922] cdc_mbim 8-1:1.0: skipping garbage [ 2442.425605][ T6194] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 2442.428557][ T6194] bridge5 (unregistering): left promiscuous mode [ 2442.464273][T15902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2442.486924][ T6194] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 2442.489168][ T6194] bridge6 (unregistering): left promiscuous mode [ 2442.566064][ T6194] bond1 (unregistering): Released all slaves [ 2442.572977][ T6194] smc: removing net device bond0 with user defined pnetid SYZ2 [ 2442.576254][ T6194] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 2442.579584][ T6194] vcan1: left promiscuous mode [ 2442.582878][ T6194] bond0 (unregistering): Released all slaves [ 2442.591089][ T6194] bond2 (unregistering): Released all slaves [ 2442.598288][ T6194] bond3 (unregistering): Released all slaves [ 2442.608266][ T6194] bond4 (unregistering): Released all slaves [ 2442.705347][T15907] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2442.725676][T15914] syzkaller1: entered promiscuous mode [ 2442.727994][T15914] syzkaller1: entered allmulticast mode [ 2442.767722][ T6194] ‚#{6c: left promiscuous mode [ 2442.823716][T15907] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2442.863539][ T6194] tipc: Disabling bearer [ 2442.866309][ T6194] tipc: Left network mode [ 2442.942013][T15907] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.070110][T15902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2443.074226][T12922] cdc_mbim 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2443.078665][T12922] cdc_mbim 8-1:1.0: setting rx_max = 2048 [ 2443.087027][T15907] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.283782][T12922] cdc_mbim 8-1:1.0: setting tx_max = 184 [ 2443.292192][T12922] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 2443.333771][T12922] wwan wwan0: port wwan0mbim0 attached [ 2443.346414][ T1178] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2443.373041][ T1178] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2443.373492][T12922] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 9e:49:0d:e8:2d:28 [ 2443.400536][ T6190] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2443.457239][ T6190] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2443.471480][T15869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2443.482318][ T39] usb 8-1: USB disconnect, device number 2 [ 2443.485562][ T39] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 2443.486917][T15869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2443.526592][T15869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2443.538179][T15947] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2443.539322][T15869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2443.543268][T15947] block device autoloading is deprecated and will be removed. [ 2443.582094][ T6194] hsr_slave_0: left promiscuous mode [ 2443.588528][ T6194] hsr_slave_1: left promiscuous mode [ 2443.589270][ T39] wwan wwan0: port wwan0mbim0 disconnected [ 2443.601532][ T6194] pim6reg99999999 (unregistering): left allmulticast mode [ 2443.663087][T14292] Bluetooth: hci1: command tx timeout [ 2443.827278][T15869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2443.836324][T15869] 8021q: adding VLAN 0 to HW filter on device team0 [ 2443.853929][T11729] bridge0: port 1(bridge_slave_0) entered blocking state [ 2443.856330][T11729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2443.866914][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 2443.869554][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2443.891529][T15869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2444.022818][T15869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2444.032421][T15973] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6736'. [ 2444.036851][T15975] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2444.064463][T15869] veth0_vlan: entered promiscuous mode [ 2444.117567][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2444.120574][T15869] veth1_vlan: entered promiscuous mode [ 2444.156769][T12935] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2444.160746][T12935] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2444.174299][T15978] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 6=CLASS2_FRAME_FROM_NONAUTH_STA) [ 2444.236112][ T6194] IPVS: stop unused estimator thread 0... [ 2444.238976][T15869] veth0_macvtap: entered promiscuous mode [ 2444.250496][T15869] veth1_macvtap: entered promiscuous mode [ 2444.265762][T15869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2444.274593][T15869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2444.306240][ T1247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.312636][ T1247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.316726][ T1247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.339936][ T1247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.390491][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2444.393671][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.424624][T11729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2444.430291][T11729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2444.594181][T16003] binder: 16002:16003 ioctl c0306201 800003c0 returned -14 [ 2445.048020][T16016] usb usb7: selecting invalid altsetting 6 [ 2445.169319][T27011] IPVS: starting estimator thread 0... [ 2445.184514][T16022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2445.275078][T16023] IPVS: using max 44 ests per chain, 105600 per kthread [ 2445.434766][T16033] bridge0: port 3(syz_tun) entered blocking state [ 2445.438713][T16033] bridge0: port 3(syz_tun) entered disabled state [ 2445.441436][T16033] syz_tun: entered allmulticast mode [ 2445.445120][T16033] syz_tun: entered promiscuous mode [ 2445.447472][T16033] bridge0: port 3(syz_tun) entered blocking state [ 2445.450059][T16033] bridge0: port 3(syz_tun) entered forwarding state [ 2445.464453][T16033] netlink: 'syz.0.6755': attribute type 10 has an invalid length. [ 2445.467148][T16033] bridge0: port 3(syz_tun) entered disabled state [ 2445.469831][T16033] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.472974][T16033] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.479031][T16033] bridge0: port 3(syz_tun) entered blocking state [ 2445.481753][T16033] bridge0: port 3(syz_tun) entered forwarding state [ 2445.484982][T16033] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.487733][T16033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2445.490972][T16033] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.493971][T16033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2445.500220][T16033] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2445.525588][T16037] netlink: 'syz.2.6757': attribute type 2 has an invalid length. [ 2445.528812][T16037] tipc: Started in network mode [ 2445.530966][T16037] tipc: Node identity 1340008, cluster identity 4711 [ 2445.533413][T16037] tipc: Node number set to 20185096 [ 2445.689456][T16048] syzkaller0: entered promiscuous mode [ 2445.695548][ T1247] 0: reclassify loop, rule prio 0, protocol 800 [ 2445.752841][T14292] Bluetooth: hci1: command tx timeout [ 2446.220734][T16063] netlink: 'syz.2.6767': attribute type 10 has an invalid length. [ 2446.224187][T16063] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.226881][T16063] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.235107][T16063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.237413][T16063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2446.239911][T16063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.242213][T16063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2446.247153][T16063] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2446.285193][T16066] bridge0: port 3(syz_tun) entered blocking state [ 2446.289023][T16066] bridge0: port 3(syz_tun) entered disabled state [ 2446.291139][T16066] syz_tun: entered allmulticast mode [ 2446.295305][T16066] syz_tun: entered promiscuous mode [ 2446.297751][T16066] bridge0: port 3(syz_tun) entered blocking state [ 2446.300435][T16066] bridge0: port 3(syz_tun) entered forwarding state [ 2446.347072][T16070] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2446.349104][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'. [ 2446.359509][T16072] : entered promiscuous mode [ 2446.379265][T16070] bridge_slave_0: left allmulticast mode [ 2446.381848][T16070] bridge_slave_0: left promiscuous mode [ 2446.385137][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.386271][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'. [ 2446.397400][T16070] bridge_slave_1: left allmulticast mode [ 2446.399788][T16070] bridge_slave_1: left promiscuous mode [ 2446.402672][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.411303][T16070] bond0: (slave bond_slave_0): Releasing backup interface [ 2446.417891][T16070] bond0: (slave bond_slave_1): Releasing backup interface [ 2446.423444][T16073] netlink: 'syz.3.6770': attribute type 10 has an invalid length. [ 2446.424379][T16070] team0: Port device team_slave_0 removed [ 2446.434043][T16070] team0: Port device team_slave_1 removed [ 2446.436346][T16070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2446.438936][T16070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2446.443369][T16070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2446.446352][T16070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2446.451068][T16070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2446.465464][T16072] openvswitch: : Dropping previously announced user features [ 2446.468302][T16073] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2446.473301][T16073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2446.480132][T16073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2446.729617][T16085] netlink: 'syz.2.6777': attribute type 10 has an invalid length. [ 2446.733367][T16085] bridge0: port 3(syz_tun) entered disabled state [ 2446.735672][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.738202][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.881836][T16098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2446.938698][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.001147][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.008667][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.822617][T14292] Bluetooth: hci1: command tx timeout [ 2448.104711][T16156] binder: 16155:16156 ioctl c0306201 800003c0 returned -14 [ 2448.445073][T16184] binder: 16183:16184 ioctl c0306201 800003c0 returned -14 [ 2448.672647][T16191] syz.0.6822 (16191): drop_caches: 2 [ 2448.677111][T16191] syz.0.6822 (16191): drop_caches: 2 [ 2449.027406][T16222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.047182][T16227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6838'. [ 2449.054459][T16224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2449.212307][T16222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.297891][T16222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.387265][T16222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2449.514665][ T1247] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.527022][ T6194] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.539494][ T1247] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.547358][ T1247] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2449.691196][T16247] binder: 16246:16247 ioctl c0306201 800003c0 returned -14 [ 2449.854696][T16259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2449.878548][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.882035][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.885884][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.889274][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.895189][T15667] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2449.898172][T15667] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2449.901236][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.903085][T14292] Bluetooth: hci1: command tx timeout [ 2449.905681][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.909717][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.913483][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.916947][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2449.920453][T16250] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2450.014541][ T1247] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 2450.040289][T16250] syzkaller0: entered promiscuous mode [ 2450.042103][T16250] syzkaller0: entered allmulticast mode [ 2450.124817][ T6194] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 2450.244507][ T6188] wlan1: authentication with 08:02:11:00:00:00 timed out [ 2450.897158][T16287] No control pipe specified [ 2451.024311][T16293] binder: 16292:16293 ioctl c0306201 800003c0 returned -14 [ 2451.263601][T14292] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2451.268544][T14292] Bluetooth: hci4: Injecting HCI hardware error event [ 2451.271507][T14292] Bluetooth: hci4: hardware error 0x00 [ 2451.879867][T16311] No control pipe specified [ 2452.079994][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6891'. [ 2452.089339][T16341] : entered promiscuous mode [ 2452.258737][T16356] Unsupported ieee802154 address type: 0 [ 2452.349593][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6900'. [ 2452.566130][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6915'. [ 2452.572286][T16392] openvswitch: : Dropping previously announced user features [ 2452.644815][T16400] binder_alloc: 16399: binder_alloc_buf, no vma [ 2452.646858][T16400] binder: 16399:16400 ioctl c0306201 800003c0 returned -14 [ 2452.649031][T16402] autofs: Bad value for 'fd' [ 2452.970287][T16424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6931'. [ 2453.005671][T16426] autofs: Bad value for 'fd' [ 2453.061568][T16431] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.128131][T16431] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.146075][T16437] binder: 16436:16437 ioctl c0306201 800003c0 returned -14 [ 2453.187403][T16431] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.237855][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6939'. [ 2453.245618][T16443] : entered promiscuous mode [ 2453.266543][T16431] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.342962][T14292] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2453.400575][ T1178] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2453.409378][ T1178] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2453.418718][ T1178] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2453.426718][ T1178] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2453.575577][T16466] binder: BINDER_SET_CONTEXT_MGR already set [ 2453.577782][T16466] binder: 16465:16466 ioctl 4018620d 80004a80 returned -16 [ 2453.580415][T16466] binder: 16465:16466 ioctl c0306201 800003c0 returned -14 [ 2453.758080][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6957'. [ 2453.767507][T16484] : entered promiscuous mode [ 2453.830038][T16492] binder: BINDER_SET_CONTEXT_MGR already set [ 2453.832128][T16492] binder: 16491:16492 ioctl 4018620d 80004a80 returned -16 [ 2453.836810][T16492] binder: 16491:16492 ioctl c0306201 800003c0 returned -14 [ 2453.867551][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6966'. [ 2454.069172][T16522] binder: BINDER_SET_CONTEXT_MGR already set [ 2454.071796][T16522] binder: 16521:16522 ioctl 4018620d 80004a80 returned -16 [ 2454.075767][T16522] binder: 16521:16522 ioctl c0306201 800003c0 returned -14 [ 2454.320693][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 2454.775682][T16577] binder: 16576:16577 ioctl c0306201 800003c0 returned -14 [ 2454.808214][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6998'. [ 2455.324244][T16595] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.388203][T16595] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.466798][T16595] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.548790][T16595] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.747883][T16623] autofs: Bad value for 'fd' [ 2456.021571][T16637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2456.280791][T16672] autofs: Bad value for 'fd' [ 2456.390000][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7041'. [ 2456.393876][T16680] openvswitch: : Dropping previously announced user features [ 2456.571683][T16695] binder: 16694:16695 ioctl c0306201 800003c0 returned -14 [ 2456.676597][T16705] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 2456.680365][T16705] team0 (unregistering): Port device team_slave_0 removed [ 2456.686177][T16705] team0 (unregistering): Failed to send options change via netlink (err -105) [ 2456.689357][T16705] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 2456.693408][T16705] team0 (unregistering): Port device team_slave_1 removed [ 2456.827422][T16716] binder: 16715:16716 ioctl c0306201 800003c0 returned -14 [ 2456.870230][T16720] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7059'. [ 2457.205530][T16755] binder: 16753:16755 ioctl c0306201 800003c0 returned -14 [ 2457.336483][T16770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2457.410749][T16782] binder: 16781:16782 ioctl c0306201 800003c0 returned -14 [ 2457.734562][T16805] binder: 16804:16805 ioctl c0306201 800003c0 returned -14 [ 2457.757995][ T1247] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2457.760736][ T1247] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2457.775132][ T6194] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2457.781970][ T6188] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2458.349831][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7112'. [ 2458.353743][T16831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7112'. [ 2458.359375][T16831] IPv6: sit1: Disabled Multicast RS [ 2458.520221][T16844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2458.525649][T16848] autofs: Unknown parameter '0x0000000000000004' [ 2458.676093][T16858] sit1: entered allmulticast mode [ 2458.794313][T16876] binder: 16875:16876 ioctl 4018620d 0 returned -22 [ 2458.798056][T16876] binder: 16875:16876 ioctl c0306201 800003c0 returned -14 [ 2458.928162][T16899] autofs: Unknown parameter '0x0000000000000004' [ 2459.175437][T16936] sg_write: data in/out 460254/120 bytes for SCSI command 0x0-- guessing data in; [ 2459.175437][T16936] program syz.2.7162 not setting count and/or reply_len properly [ 2459.344033][T14292] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2459.347192][T14292] Bluetooth: hci3: Injecting HCI hardware error event [ 2459.352043][T14292] Bluetooth: hci3: hardware error 0x00 [ 2459.375959][T16956] autofs: Unknown parameter '0x0000000000000004' [ 2459.389900][T16954] syzkaller0: entered allmulticast mode [ 2459.893831][T16980] sctp_transport_update_pmtu: 55 callbacks suppressed [ 2459.893845][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.900551][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.905772][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.909174][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.909682][T16984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.913135][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.919833][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.923895][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.927189][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.930711][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.934684][T16980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2459.990324][T16980] syzkaller0: entered promiscuous mode [ 2459.992685][T16980] syzkaller0: entered allmulticast mode [ 2460.016280][T16984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2460.279026][T16992] fuse: Bad value for 'fd' [ 2461.436626][T14292] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2461.491553][T16984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2461.582084][T17015] binder: 17014:17015 ioctl c0306201 0 returned -14 [ 2461.586367][T17015] binder: 17014:17015 ioctl c0306201 800003c0 returned -14 [ 2461.590229][T16984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2461.745535][ T1247] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2461.758463][ T6194] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2461.767689][ T6194] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2461.777387][ T6194] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2462.341365][T17019] tipc: Enabled bearer , priority 0 [ 2462.344599][T17019] syzkaller0: entered promiscuous mode [ 2462.346517][T17019] syzkaller0: entered allmulticast mode [ 2462.366081][T17019] tipc: Resetting bearer [ 2462.371865][T17018] tipc: Resetting bearer [ 2462.382138][T17018] tipc: Disabling bearer [ 2462.521689][T17029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7202'. [ 2462.527176][T17025] syz.2.7201 (17025): drop_caches: 2 [ 2462.529231][T17025] syz.2.7201 (17025): drop_caches: 2 [ 2462.699169][T17039] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2462.729221][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7209'. [ 2462.806456][T17039] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2462.871946][T17039] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2462.943980][T17039] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2463.069606][ T6194] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2463.082582][ T1247] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2463.092623][ T1247] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2463.108882][ T1247] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2463.390851][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7219'. [ 2463.777184][T17084] No control pipe specified [ 2463.821856][T17088] binder: 17086:17088 ioctl c0306201 800003c0 returned -14 [ 2463.992446][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7234'. [ 2464.089265][T17107] No control pipe specified [ 2465.820917][T17251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7296'. [ 2466.355467][T17280] sctp_transport_update_pmtu: 93 callbacks suppressed [ 2466.355489][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.362249][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.367602][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.372468][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.378150][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.382040][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.388479][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.393748][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.399448][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.408944][T17280] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2466.498986][T17286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7312'. [ 2466.568593][T17292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2466.653737][T17297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7317'. [ 2466.675235][T17299] binder_alloc: 17298: binder_alloc_buf, no vma [ 2467.362359][T17340] binder: 17339:17340 ioctl 4018620d 0 returned -22 [ 2467.365556][T17340] binder: 17339:17340 ioctl c0306201 800003c0 returned -14 [ 2467.897241][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7348'. [ 2467.976072][T17371] sit1: entered allmulticast mode [ 2468.208577][T17386] binder: 17384:17386 ioctl 4018620d 0 returned -22 [ 2468.211181][T17386] binder: 17384:17386 ioctl c0306201 800003c0 returned -14 [ 2468.426109][T17400] syz.2.7361 (17400): drop_caches: 2 [ 2468.428094][T17400] syz.2.7361 (17400): drop_caches: 2 [ 2468.513085][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7363'. [ 2468.656535][T17419] tipc: Started in network mode [ 2468.658884][T17419] tipc: Node identity 461503e879eb, cluster identity 4711 [ 2468.662153][T17419] tipc: Enabled bearer , priority 0 [ 2468.667118][T17419] syzkaller0: entered promiscuous mode [ 2468.669887][T17419] syzkaller0: entered allmulticast mode [ 2468.679325][T17419] tipc: Resetting bearer [ 2468.683661][T17418] tipc: Resetting bearer [ 2468.697477][T17418] tipc: Disabling bearer [ 2468.983615][T17438] syzkaller0: entered allmulticast mode [ 2469.121473][T17449] binder: 17448:17449 ioctl c0306201 0 returned -14 [ 2469.124928][T17449] binder: 17448:17449 ioctl c0306201 800003c0 returned -14 [ 2469.161674][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 2469.161693][ T40] audit: type=1326 audit(2000000021.400:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.182272][ T40] audit: type=1326 audit(2000000021.400:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.212582][ T40] audit: type=1326 audit(2000000021.400:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.221979][ T40] audit: type=1326 audit(2000000021.400:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.232286][ T40] audit: type=1326 audit(2000000021.420:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.242953][ T40] audit: type=1326 audit(2000000021.420:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.252282][ T40] audit: type=1326 audit(2000000021.420:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.260669][ T40] audit: type=1326 audit(2000000021.420:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.268180][ T40] audit: type=1326 audit(2000000021.420:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17452 comm="syz.3.7386" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fb6f6c code=0x7ffc0000 [ 2469.503709][T15992] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2469.642612][T15992] usb 9-1: device descriptor read/64, error -71 [ 2469.652647][T27090] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2469.782803][T27090] usb 8-1: device descriptor read/64, error -71 [ 2469.882636][T15992] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2470.032710][T15992] usb 9-1: device descriptor read/64, error -71 [ 2470.042611][T27090] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2470.153371][T15992] usb usb9-port1: attempt power cycle [ 2470.182628][T27090] usb 8-1: device descriptor read/64, error -71 [ 2470.195084][T17470] syz.0.7391 (17470): drop_caches: 2 [ 2470.197872][T17470] syz.0.7391 (17470): drop_caches: 2 [ 2470.293124][T27090] usb usb8-port1: attempt power cycle [ 2470.295829][ T40] audit: type=1326 audit(2000000022.540:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17473 comm="syz.0.7393" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 2470.492675][T15992] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2470.513206][T15992] usb 9-1: device descriptor read/8, error -71 [ 2470.652859][T27090] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2470.673273][T27090] usb 8-1: device descriptor read/8, error -71 [ 2470.721884][T17478] netlink: 'syz.2.7394': attribute type 10 has an invalid length. [ 2470.762601][T15992] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2470.784064][T15992] usb 9-1: device descriptor read/8, error -71 [ 2470.893257][T15992] usb usb9-port1: unable to enumerate USB device [ 2470.922627][T27090] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2470.943681][T27090] usb 8-1: device descriptor read/8, error -71 [ 2471.063009][T27090] usb usb8-port1: unable to enumerate USB device [ 2471.781490][T17514] syz.0.7403 (17514): drop_caches: 2 [ 2471.785571][T17514] syz.0.7403 (17514): drop_caches: 2 [ 2471.942646][T12935] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2472.089900][T12935] usb 8-1: device descriptor read/64, error -71 [ 2472.169264][T17522] tipc: Enabled bearer , priority 0 [ 2472.173279][T17522] syzkaller0: entered promiscuous mode [ 2472.175801][T17522] syzkaller0: entered allmulticast mode [ 2472.186182][T17522] tipc: Resetting bearer [ 2472.190499][T17521] tipc: Resetting bearer [ 2472.202774][T17521] tipc: Disabling bearer [ 2472.228394][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.231284][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.308092][T17530] binder: BINDER_SET_CONTEXT_MGR already set [ 2472.310868][T17530] binder: 17529:17530 ioctl 4018620d 80004a80 returned -16 [ 2473.269984][T17540] bridge0: port 1(syz_tun) entered blocking state [ 2473.273019][T17540] bridge0: port 1(syz_tun) entered disabled state [ 2473.275946][T17540] syz_tun: entered allmulticast mode [ 2473.283149][T17540] syz_tun: entered promiscuous mode [ 2473.288945][T17540] bridge0: port 1(syz_tun) entered blocking state [ 2473.291791][T17540] bridge0: port 1(syz_tun) entered forwarding state [ 2473.321537][T17540] netlink: 'syz.3.7415': attribute type 10 has an invalid length. [ 2473.325578][T17540] bridge0: port 1(syz_tun) entered disabled state [ 2473.455533][T17550] tipc: Started in network mode [ 2473.457825][T17550] tipc: Node identity baec0ab6260c, cluster identity 4711 [ 2473.460920][T17550] tipc: Enabled bearer , priority 0 [ 2473.464907][T17550] syzkaller0: entered promiscuous mode [ 2473.466696][T17550] syzkaller0: entered allmulticast mode [ 2473.472253][T17550] tipc: Resetting bearer [ 2473.476400][T17549] tipc: Resetting bearer [ 2473.488360][T17549] tipc: Disabling bearer [ 2473.629282][T17553] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2473.658517][T17553] bridge_slave_0: left allmulticast mode [ 2473.660420][T17553] bridge_slave_0: left promiscuous mode [ 2473.662418][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 2473.667976][T17553] bridge_slave_1: left allmulticast mode [ 2473.670002][T17553] bridge_slave_1: left promiscuous mode [ 2473.672041][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 2473.678774][T17553] bond0: (slave bond_slave_0): Releasing backup interface [ 2473.689627][T17553] bond0: (slave bond_slave_1): Releasing backup interface [ 2473.689746][T17557] syz.3.7422 (17557): drop_caches: 2 [ 2473.696995][T17557] syz.3.7422 (17557): drop_caches: 2 [ 2473.702317][T17553] team0: Port device team_slave_0 removed [ 2473.706313][T17558] netlink: 'syz.4.7420': attribute type 10 has an invalid length. [ 2473.708205][T17553] team0: Port device team_slave_1 removed [ 2473.713835][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2473.716375][T17553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2473.725596][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2473.728762][T17553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2473.733533][T17553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2473.743379][T17558] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2473.753295][T17558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2473.761073][T17558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2473.822429][T17566] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2473.848284][T17566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2473.860492][T17566] netlink: 'syz.4.7425': attribute type 10 has an invalid length. [ 2473.863994][T17566] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2474.011271][T17586] netlink: 'syz.2.7431': attribute type 10 has an invalid length. [ 2474.047851][T17588] binder: 17587:17588 ioctl c0306201 0 returned -14 [ 2474.303610][T17609] syzkaller0: entered allmulticast mode [ 2474.386420][T17617] 9p: Bad value for 'rfdno' [ 2474.435902][T17623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7449'. [ 2475.987377][T17659] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2476.004248][T17661] syz_tun: left allmulticast mode [ 2476.006316][T17661] syz_tun: left promiscuous mode [ 2476.008576][T17661] bridge0: port 1(syz_tun) entered disabled state [ 2476.019048][T17661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2476.020361][T17659] netlink: 'syz.3.7465': attribute type 10 has an invalid length. [ 2476.027384][T17659] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2476.055174][T17664] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 2476.065419][T17664] syz_tun: left allmulticast mode [ 2476.067017][T17664] syz_tun: left promiscuous mode [ 2476.068709][T17664] bridge0: port 3(syz_tun) entered disabled state [ 2476.077433][T17664] bond0: (slave bridge0): Releasing backup interface [ 2476.081630][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 2476.084686][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 2476.095045][T17664] bridge_slave_0: left allmulticast mode [ 2476.097443][T17664] bridge_slave_0: left promiscuous mode [ 2476.099843][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 2476.113557][T17664] bridge_slave_1: left allmulticast mode [ 2476.114057][T17670] netlink: 'syz.0.7466': attribute type 10 has an invalid length. [ 2476.115788][T17664] bridge_slave_1: left promiscuous mode [ 2476.115960][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 2476.129653][T17664] bond0: (slave bond_slave_0): Releasing backup interface [ 2476.136661][T17664] bond0: (slave bond_slave_1): Releasing backup interface [ 2476.145724][T17664] team0: Port device team_slave_0 removed [ 2476.151804][T17664] team0: Port device team_slave_1 removed [ 2476.155664][T17664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2476.158801][T17664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2476.163265][T17664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2476.166312][T17664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2476.171202][T17664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2476.181474][T17670] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 2476.188079][T17670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2476.191888][T17670] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2476.339522][T17686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7474'. [ 2476.383692][T17688] syz.4.7475 (17688): drop_caches: 2 [ 2476.386019][T17688] syz.4.7475 (17688): drop_caches: 2 [ 2476.532584][T12935] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2476.630136][T17696] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2476.647771][T17696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2476.658864][T17696] netlink: 'syz.4.7479': attribute type 10 has an invalid length. [ 2476.661582][T17696] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2476.685416][T12935] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 2476.688432][T12935] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2476.691860][T12935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2476.696093][T12935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2476.699421][T12935] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2476.702456][T12935] usb 5-1: Product: syz [ 2476.704191][T12935] usb 5-1: Manufacturer: syz [ 2476.707684][T12935] usb 5-1: SerialNumber: syz [ 2476.715096][T12935] usb 5-1: config 0 descriptor?? [ 2476.721411][T12935] hub 5-1:0.0: bad descriptor, ignoring hub [ 2476.724639][T12935] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2476.729046][T12935] usb 5-1: selecting invalid altsetting 0 [ 2476.765926][T17698] sctp_transport_update_pmtu: 48 callbacks suppressed [ 2476.765941][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.771687][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.777117][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.780648][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.785314][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.789906][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.794374][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.798114][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.801907][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2476.807659][T17698] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2477.254671][T17703] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 2477.260028][T17703] usb 5-1: device reset changed ep0 maxpacket size! [ 2477.265422][T12935] usb 5-1: USB disconnect, device number 3 [ 2477.412650][T12935] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2477.562602][T12935] usb 5-1: Using ep0 maxpacket: 8 [ 2477.566565][T12935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2477.570300][T12935] usb 5-1: config 0 has no interfaces? [ 2477.572716][T12935] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2477.576324][T12935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2477.581499][T12935] usb 5-1: config 0 descriptor?? [ 2478.303293][T15749] usb 5-1: USB disconnect, device number 4 [ 2478.972678][T15667] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2479.134011][T15667] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 2479.137542][T15667] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2479.142000][T15667] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2479.148424][T15667] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2479.152095][T15667] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2479.154810][T15667] usb 8-1: Product: syz [ 2479.156401][T15667] usb 8-1: Manufacturer: syz [ 2479.158328][T15667] usb 8-1: SerialNumber: syz [ 2479.162084][T15667] usb 8-1: config 0 descriptor?? [ 2479.166383][T15667] hub 8-1:0.0: bad descriptor, ignoring hub [ 2479.168785][T15667] hub 8-1:0.0: probe with driver hub failed with error -5 [ 2479.173871][T15667] usb 8-1: selecting invalid altsetting 0 [ 2479.522306][T17809] syz.0.7527 (17809): drop_caches: 2 [ 2479.529683][T17809] syz.0.7527 (17809): drop_caches: 2 [ 2479.712606][T17778] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 2479.715608][T17778] usb 8-1: device reset changed ep0 maxpacket size! [ 2479.727094][ T39] usb 8-1: USB disconnect, device number 9 [ 2479.882598][ T39] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2480.031731][T17829] syz.4.7536 (17829): drop_caches: 2 [ 2480.034351][T17829] syz.4.7536 (17829): drop_caches: 2 [ 2480.043521][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 2480.046332][ T39] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.051262][ T39] usb 8-1: config 0 has no interfaces? [ 2480.053175][ T39] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2480.056025][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.060214][ T39] usb 8-1: config 0 descriptor?? [ 2480.522613][T17851] syz.0.7547 (17851): drop_caches: 2 [ 2480.526069][T17851] syz.0.7547 (17851): drop_caches: 2 [ 2480.549351][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7549'. [ 2480.780850][T15749] usb 8-1: USB disconnect, device number 10 [ 2480.885425][T17877] syz.2.7559 (17877): drop_caches: 2 [ 2480.887917][T17877] syz.2.7559 (17877): drop_caches: 2 [ 2481.493205][T15749] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2481.635743][T17915] syzkaller0: entered allmulticast mode [ 2481.656687][T15749] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 2481.659892][T15749] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2481.666140][T15749] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2481.670871][T15749] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2481.675306][T15749] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2481.678685][T15749] usb 8-1: Product: syz [ 2481.680555][T15749] usb 8-1: Manufacturer: syz [ 2481.682453][T15749] usb 8-1: SerialNumber: syz [ 2481.686621][T15749] usb 8-1: config 0 descriptor?? [ 2481.695818][T15749] hub 8-1:0.0: bad descriptor, ignoring hub [ 2481.698288][T15749] hub 8-1:0.0: probe with driver hub failed with error -5 [ 2481.706720][T15749] usb 8-1: selecting invalid altsetting 0 [ 2481.804550][T17925] fuse: Bad value for 'fd' [ 2482.065370][T17933] netlink: 'syz.4.7583': attribute type 10 has an invalid length. [ 2483.562205][T17929] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2483.576966][T17932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2483.582624][T17933] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2483.692039][T17945] 9p: Bad value for 'wfdno' [ 2483.732399][ T40] audit: type=1326 audit(2000000035.970:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17947 comm="syz.0.7589" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 2483.886628][T17957] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2483.901765][T17957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2483.914255][T17957] netlink: 'syz.4.7591': attribute type 10 has an invalid length. [ 2483.917078][T17957] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2483.995175][T17963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7592'. [ 2484.132800][T17977] bridge0: port 1(syz_tun) entered blocking state [ 2484.135241][T17977] bridge0: port 1(syz_tun) entered disabled state [ 2484.138197][T17977] syz_tun: entered allmulticast mode [ 2484.141613][T17977] syz_tun: entered promiscuous mode [ 2484.144020][T17977] bridge0: port 1(syz_tun) entered blocking state [ 2484.146760][T17977] bridge0: port 1(syz_tun) entered forwarding state [ 2484.152988][T17977] netlink: 'syz.4.7597': attribute type 10 has an invalid length. [ 2484.156037][T17977] bridge0: port 1(syz_tun) entered disabled state [ 2484.368369][T17983] syz.4.7600 (17983): drop_caches: 2 [ 2484.374256][T17983] syz.4.7600 (17983): drop_caches: 2 [ 2484.926732][T17995] binder: 17994:17995 ioctl c0306201 0 returned -14 [ 2485.000227][T17999] 9p: Bad value for 'wfdno' [ 2485.458874][T27090] usb 8-1: USB disconnect, device number 11 [ 2485.541729][T18020] binder: 18019:18020 ioctl c0306201 0 returned -14 [ 2486.529687][T18040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.622578][ T39] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2486.626889][T18040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.709263][T18040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.784355][ T39] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 2486.787178][ T39] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2486.793890][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2486.799038][ T39] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2486.806160][ T39] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2486.818956][ T39] usb 9-1: Product: syz [ 2486.820328][ T39] usb 9-1: Manufacturer: syz [ 2486.821940][ T39] usb 9-1: SerialNumber: syz [ 2486.830084][ T39] usb 9-1: config 0 descriptor?? [ 2486.834130][ T39] hub 9-1:0.0: bad descriptor, ignoring hub [ 2486.835241][T18040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.836027][ T39] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2486.848809][ T39] usb 9-1: selecting invalid altsetting 0 [ 2486.916047][ T1178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2486.928605][ T1178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2486.936290][ T1178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2486.946721][ T1178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2487.004042][T18051] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2487.018763][T18051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2487.031646][T18051] netlink: 'syz.3.7628': attribute type 10 has an invalid length. [ 2487.035703][T18051] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2487.193633][T15667] usb 9-1: USB disconnect, device number 15 [ 2487.371952][ T39] hid_parser_main: 5 callbacks suppressed [ 2487.371970][ T39] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2487.393023][ T39] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2487.568368][T18081] 9p: Bad value for 'rfdno' [ 2487.609878][T18083] syz_tun: entered allmulticast mode [ 2487.616212][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7636'. [ 2487.639366][T18083] syz_tun (unregistering): left allmulticast mode [ 2487.747593][T18087] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2487.756788][T18087] syz_tun: left allmulticast mode [ 2487.759063][T18087] syz_tun: left promiscuous mode [ 2487.761339][T18087] bridge0: port 1(syz_tun) entered disabled state [ 2487.777252][T18087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2487.793709][T18087] netlink: 'syz.4.7638': attribute type 10 has an invalid length. [ 2487.796830][T18087] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2488.069088][T18102] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2488.098094][T18102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2488.147751][T18104] syzkaller0: entered promiscuous mode [ 2488.149720][T18104] syzkaller0: entered allmulticast mode [ 2488.270406][T18111] tipc: Enabled bearer , priority 0 [ 2488.273442][T18111] syzkaller0: entered promiscuous mode [ 2488.275459][T18111] syzkaller0: entered allmulticast mode [ 2488.289163][T18110] tipc: Resetting bearer [ 2488.304906][T18110] tipc: Disabling bearer [ 2488.811264][T18136] tipc: Enabled bearer , priority 0 [ 2488.816864][T18136] tipc: Resetting bearer [ 2488.826800][T18135] tipc: Disabling bearer [ 2488.932036][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7662'. [ 2488.939954][ T39] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 2488.953024][ T39] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2489.268739][T18149] loop5: detected capacity change from 0 to 7 [ 2489.315515][T13873] Dev loop5: unable to read RDB block 7 [ 2489.318088][T13873] loop5: AHDI p1 p2 p3 [ 2489.319699][T13873] loop5: partition table partially beyond EOD, truncated [ 2489.322429][T13873] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2489.325923][T13873] loop5: p3 start 335544320 is beyond EOD, truncated [ 2489.358894][T18149] Dev loop5: unable to read RDB block 7 [ 2489.361330][T18149] loop5: AHDI p1 p2 p3 [ 2489.369368][T18149] loop5: partition table partially beyond EOD, truncated [ 2489.372991][T18149] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2489.375845][T18149] loop5: p3 start 335544320 is beyond EOD, truncated [ 2490.782179][T18161] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2490.802985][T18161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2491.565092][T18210] bridge0: port 1(syz_tun) entered blocking state [ 2491.567957][T18210] bridge0: port 1(syz_tun) entered disabled state [ 2491.573580][T18210] syz_tun: entered allmulticast mode [ 2491.576827][T18210] syz_tun: entered promiscuous mode [ 2491.853840][T18227] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.963525][T18227] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2491.985989][T18234] program syz.4.7699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2492.025825][T18227] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.058697][T18236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2492.098572][T18227] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.184496][ T1178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2492.187294][ T1178] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2492.194851][ T1178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2492.202328][ T1178] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2492.533971][T18266] syzkaller0: entered promiscuous mode [ 2492.536394][T18266] syzkaller0: entered allmulticast mode [ 2492.687055][ T50] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 2492.691685][ T50] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2492.850227][T18281] syzkaller0: entered allmulticast mode [ 2493.207048][T18288] netlink: 'syz.4.7722': attribute type 10 has an invalid length. [ 2494.495849][T18297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7724'. [ 2494.512009][T18288] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2494.569861][ T40] audit: type=1326 audit(2000000046.810:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18300 comm="syz.4.7725" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0 [ 2495.843787][T18316] netlink: 'syz.3.7729': attribute type 10 has an invalid length. [ 2496.092412][T18316] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2496.250496][T18331] syzkaller0: entered promiscuous mode [ 2496.252878][T18331] syzkaller0: entered allmulticast mode [ 2496.501782][T18350] netlink: 'syz.3.7743': attribute type 10 has an invalid length. [ 2496.577892][T18355] syzkaller0: entered promiscuous mode [ 2496.579957][T18355] syzkaller0: entered allmulticast mode [ 2496.584384][T18357] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2496.597448][T18357] syz_tun: left allmulticast mode [ 2496.599097][T18357] syz_tun: left promiscuous mode [ 2496.600786][T18357] bridge0: port 1(syz_tun) entered disabled state [ 2496.610037][T18357] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2496.626144][T18357] netlink: 'syz.3.7744': attribute type 10 has an invalid length. [ 2496.628795][T18357] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2496.631301][T18360] syzkaller0: entered allmulticast mode [ 2496.993731][T18388] netlink: 'syz.4.7753': attribute type 12 has an invalid length. [ 2497.036726][T18392] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2497.040255][T18391] binder: 18389:18391 ioctl 4018620d 0 returned -22 [ 2497.055699][T18392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2497.071407][T18392] netlink: 'syz.3.7755': attribute type 10 has an invalid length. [ 2497.074840][T18392] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2497.106391][T18391] syz.4.7756 (18391): drop_caches: 2 [ 2497.112666][T18391] syz.4.7756 (18391): drop_caches: 2 [ 2497.176439][T18399] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2497.182666][T18399] netlink: 'syz.4.7758': attribute type 10 has an invalid length. [ 2497.186200][T18399] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2499.044362][T18437] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2499.067387][T18437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2499.084959][T18437] netlink: 'syz.4.7768': attribute type 10 has an invalid length. [ 2499.089257][T18437] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2499.099181][T18443] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2499.110444][T18443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2499.125866][T18443] netlink: 'syz.3.7772': attribute type 10 has an invalid length. [ 2499.128946][T18443] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2499.165073][T15599] syz_tun (unregistering): left allmulticast mode [ 2499.167763][T15599] syz_tun (unregistering): left promiscuous mode [ 2499.170176][T15599] bridge0: port 3(syz_tun) entered disabled state [ 2499.180443][ T40] audit: type=1326 audit(2000000051.420:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.0.7775" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 2499.236065][T18451] fuse: Unknown parameter 'grou00000000000000000000' [ 2499.573209][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2499.577777][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2499.584569][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2499.588097][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2499.590665][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2499.628617][T18478] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2499.643778][T18478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2499.656685][T18478] netlink: 'syz.3.7789': attribute type 10 has an invalid length. [ 2499.659617][T18478] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2499.729407][T18469] chnl_net:caif_netlink_parms(): no params data found [ 2499.787414][T18469] bridge0: port 1(bridge_slave_0) entered blocking state [ 2499.790124][T18469] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.793214][T18469] bridge_slave_0: entered allmulticast mode [ 2499.796946][T18469] bridge_slave_0: entered promiscuous mode [ 2499.801600][T18469] bridge0: port 2(bridge_slave_1) entered blocking state [ 2499.804374][T18469] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.807571][T18469] bridge_slave_1: entered allmulticast mode [ 2499.811723][T18469] bridge_slave_1: entered promiscuous mode [ 2499.832253][T18469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2499.839260][T18469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2499.868327][T18491] macsec1: entered promiscuous mode [ 2499.870385][T18491] bridge0: entered promiscuous mode [ 2499.872984][T18491] macsec1: entered allmulticast mode [ 2499.875352][T18491] bridge0: entered allmulticast mode [ 2499.878683][T18491] bridge0: port 1(macsec1) entered blocking state [ 2499.881806][T18491] bridge0: port 1(macsec1) entered disabled state [ 2499.887320][T18491] bridge0: left allmulticast mode [ 2499.889196][T18491] bridge0: left promiscuous mode [ 2499.897782][T18469] team0: Port device team_slave_0 added [ 2499.902345][T18469] team0: Port device team_slave_1 added [ 2499.923245][T18469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2499.925909][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2499.938775][T18469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2499.944664][T18469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2499.946872][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2499.957436][T18469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2499.986229][T18469] hsr_slave_0: entered promiscuous mode [ 2499.989138][T18469] hsr_slave_1: entered promiscuous mode [ 2500.066051][T18497] bridge0: port 1(syz_tun) entered blocking state [ 2500.068851][T18497] bridge0: port 1(syz_tun) entered disabled state [ 2500.071103][T18497] syz_tun: entered allmulticast mode [ 2500.076601][T18497] syz_tun: entered promiscuous mode [ 2500.102386][T18469] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.173191][T18469] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.288901][T18469] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.348608][T18469] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.412569][ T40] audit: type=1326 audit(2000000052.650:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18515 comm="syz.0.7803" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 2500.453224][T18518] fuse: Unknown parameter 'group_i00000000000000000000' [ 2500.530093][T18469] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2500.545961][T18469] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2500.555087][T18523] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 2500.558811][T18469] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2500.564212][T18469] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2500.576996][T18523] syz_tun: left allmulticast mode [ 2500.579298][T18523] syz_tun: left promiscuous mode [ 2500.581731][T18523] bridge0: port 1(syz_tun) entered disabled state [ 2500.586770][T18525] syz.4.7807 (18525): drop_caches: 2 [ 2500.590555][T18525] syz.4.7807 (18525): drop_caches: 2 [ 2500.596586][T18523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2500.618348][T18523] netlink: 'syz.3.7806': attribute type 10 has an invalid length. [ 2500.626162][T18523] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 2500.696517][T18469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2500.711625][T18469] 8021q: adding VLAN 0 to HW filter on device team0 [ 2500.721774][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 2500.725268][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2500.739905][T11729] bridge0: port 2(bridge_slave_1) entered blocking state [ 2500.742744][T11729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2500.848768][T18548] fuse: Unknown parameter 'group_i00000000000000000000' [ 2500.901457][T18469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2500.935979][T18469] veth0_vlan: entered promiscuous mode [ 2500.945729][T18469] veth1_vlan: entered promiscuous mode [ 2500.962987][T18469] veth0_macvtap: entered promiscuous mode [ 2500.967446][T18469] veth1_macvtap: entered promiscuous mode [ 2500.980892][T18469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2500.989244][T18469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2500.999226][T11729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.003195][T11729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.007581][T11729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.010728][T11729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.069458][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2501.076988][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2501.099342][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2501.102829][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2501.282314][T18563] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 2501.300389][T18563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2501.316364][T18563] netlink: 'syz.0.7818': attribute type 10 has an invalid length. [ 2501.319232][T18563] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 2501.359126][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7820'. [ 2501.463392][T18573] fuse: Unknown parameter 'group_i00000000000000000000' [ 2501.534427][T18575] syz.0.7824 (18575): drop_caches: 2 [ 2501.537001][T18575] syz.0.7824 (18575): drop_caches: 2 [ 2501.655906][ T40] audit: type=1326 audit(2000000053.900:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18580 comm="syz.0.7827" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 2501.672588][T14292] Bluetooth: hci0: command tx timeout [ 2501.825861][T18588] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2501.837207][T18588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2501.849668][T18588] netlink: 'syz.4.7830': attribute type 10 has an invalid length. [ 2501.853818][T18588] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2501.901584][T18594] syz.4.7833 (18594): drop_caches: 2 [ 2501.904330][T18594] syz.4.7833 (18594): drop_caches: 2 [ 2502.879545][T18619] tipc: Enabled bearer , priority 0 [ 2502.886379][T18619] tipc: Resetting bearer [ 2502.899089][T18618] tipc: Disabling bearer [ 2503.101833][T18638] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 2503.138020][T18638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2503.155732][T18638] netlink: 'syz.0.7849': attribute type 10 has an invalid length. [ 2503.159295][T18638] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 2503.403498][T18658] binder: 18657:18658 ioctl c0306201 0 returned -14 [ 2503.419653][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7856'. [ 2503.458930][T18658] syz.0.7854 (18658): drop_caches: 2 [ 2503.461651][T18658] syz.0.7854 (18658): drop_caches: 2 [ 2503.743620][T14292] Bluetooth: hci0: command tx timeout [ 2503.883968][T18671] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2503.909522][T18671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2503.934918][T18671] netlink: 'syz.4.7861': attribute type 10 has an invalid length. [ 2503.937592][T18671] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2504.047569][T18679] ptrace attach of "/syz-executor exec"[18680] was attempted by "/syz-executor exec"[18679] [ 2504.202062][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7868'. [ 2505.308405][T18717] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 2505.319498][T18717] netlink: 'syz.2.7880': attribute type 10 has an invalid length. [ 2505.324359][T18717] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 2505.327376][T18719] netlink: 'syz.4.7881': attribute type 12 has an invalid length. [ 2505.388437][T18728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7885'. [ 2505.531417][T18742] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 2505.539228][T18742] netlink: 'syz.0.7890': attribute type 10 has an invalid length. [ 2505.541749][T18742] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 2505.594099][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7891'. [ 2505.615313][T18749] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 2505.620545][T18749] netlink: 'syz.0.7893': attribute type 10 has an invalid length. [ 2505.624027][T18749] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 2505.800366][T18762] fuse: Bad value for 'user_id' [ 2505.802841][T18762] fuse: Bad value for 'user_id' [ 2505.822750][T14292] Bluetooth: hci0: command tx timeout [ 2506.044697][T18773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2506.057024][T18773] netlink: 'syz.4.7904': attribute type 10 has an invalid length. [ 2506.104218][T18777] syz.2.7905 (18777): drop_caches: 2 [ 2506.106486][T18777] syz.2.7905 (18777): drop_caches: 2 [ 2506.148127][T18783] fuse: Bad value for 'user_id' [ 2506.150450][T18783] fuse: Bad value for 'user_id' [ 2506.201704][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7910'. [ 2506.278425][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7914'. [ 2506.565860][T18824] netlink: 'syz.4.7925': attribute type 3 has an invalid length. [ 2506.569513][T18824] netlink: 'syz.4.7925': attribute type 3 has an invalid length. [ 2506.829428][T18842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2506.841912][T18842] netlink: 'syz.4.7932': attribute type 10 has an invalid length. [ 2506.872116][T18846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7934'. [ 2506.880451][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7935'. [ 2506.947860][T18855] tipc: Enabled bearer , priority 0 [ 2506.955016][T18855] tipc: Resetting bearer [ 2506.960614][T18852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7937'. [ 2506.968065][T18854] tipc: Disabling bearer [ 2507.016166][T18858] netlink: 'syz.4.7939': attribute type 12 has an invalid length. [ 2507.245066][T18869] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2507.320382][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2507.324146][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2507.356550][T18873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7946'. [ 2507.387726][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7947'. [ 2507.407641][T18878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7948'. [ 2507.520584][T18891] netlink: 'syz.0.7955': attribute type 12 has an invalid length. [ 2507.551237][T18893] tipc: Started in network mode [ 2507.556063][T18893] tipc: Node identity e242f8eb0cee, cluster identity 4711 [ 2507.559486][T18893] tipc: Enabled bearer , priority 0 [ 2507.568183][T18893] tipc: Resetting bearer [ 2507.570261][T18896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7957'. [ 2507.589065][T18892] tipc: Disabling bearer [ 2507.686867][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7959'. [ 2507.902841][T14292] Bluetooth: hci0: command tx timeout [ 2508.105355][T18920] syzkaller0: entered promiscuous mode [ 2508.107890][T18920] syzkaller0: entered allmulticast mode [ 2508.311030][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7970'. [ 2509.397378][T18986] syzkaller0: entered promiscuous mode [ 2509.399821][T18986] syzkaller0: entered allmulticast mode [ 2509.669685][T19000] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2509.670185][T15948] IPVS: starting estimator thread 0... [ 2509.772703][T19003] IPVS: using max 45 ests per chain, 108000 per kthread [ 2511.026475][T19010] bridge_slave_0: left allmulticast mode [ 2511.028835][T19010] bridge_slave_0: left promiscuous mode [ 2511.030752][T19010] bridge0: port 1(bridge_slave_0) entered disabled state [ 2511.035955][T19010] bridge_slave_1: left allmulticast mode [ 2511.037802][T19010] bridge_slave_1: left promiscuous mode [ 2511.039951][T19010] bridge0: port 2(bridge_slave_1) entered disabled state [ 2511.047065][T19010] bond0: (slave bond_slave_0): Releasing backup interface [ 2511.051213][T19010] bond0: (slave bond_slave_1): Releasing backup interface [ 2511.072058][T19010] team0: Port device team_slave_0 removed [ 2511.081223][T19010] team0: Port device team_slave_1 removed [ 2511.085060][T19010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2511.088186][T19010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2511.095038][T19010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2511.098074][T19010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2511.106332][T19010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2511.119698][T19011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2511.133167][T19011] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2511.140553][T19019] tipc: Enabling of bearer rejected, failed to enable media [ 2511.413881][ T40] audit: type=1326 audit(2000000063.660:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19051 comm="syz.2.8014" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 2512.135656][ T40] audit: type=1326 audit(2000000064.380:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.152741][ T40] audit: type=1326 audit(2000000064.380:11195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.161576][ T40] audit: type=1326 audit(2000000064.390:11196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.173222][ T40] audit: type=1326 audit(2000000064.390:11197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.182016][ T40] audit: type=1326 audit(2000000064.390:11198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.192444][ T40] audit: type=1326 audit(2000000064.390:11199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.206029][ T40] audit: type=1326 audit(2000000064.390:11200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.216865][ T40] audit: type=1326 audit(2000000064.390:11201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.4.8021" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 2512.376924][T19091] __nla_validate_parse: 1 callbacks suppressed [ 2512.376942][T19091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8028'. [ 2512.458362][T19099] syzkaller0: entered promiscuous mode [ 2512.460990][T19099] syzkaller0: entered allmulticast mode [ 2512.502627][T26973] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2512.552838][T19106] ieee802154 phy0 wpan0: encryption failed: -22 [ 2512.592545][ T40] audit: type=1326 audit(2000000064.830:11202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.4.8036" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0 [ 2512.654757][T26973] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 2512.658441][T26973] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2512.662225][T26973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2512.667581][T26973] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2512.673496][T26973] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2512.676274][T26973] usb 5-1: Product: syz [ 2512.677786][T26973] usb 5-1: Manufacturer: syz [ 2512.679438][T26973] usb 5-1: SerialNumber: syz [ 2512.684939][T26973] usb 5-1: config 0 descriptor?? [ 2512.692685][T26973] hub 5-1:0.0: bad descriptor, ignoring hub [ 2512.694643][T26973] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2512.698282][T26973] usb 5-1: selecting invalid altsetting 0 [ 2512.917662][T19134] syzkaller0: entered promiscuous mode [ 2512.919540][T19134] syzkaller0: entered allmulticast mode [ 2513.069582][T19139] syzkaller0: entered promiscuous mode [ 2513.071689][T19139] syzkaller0: entered allmulticast mode [ 2513.213338][T19082] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 2513.218100][T19082] usb 5-1: device reset changed ep0 maxpacket size! [ 2513.226113][T15992] usb 5-1: USB disconnect, device number 5 [ 2513.378393][T19148] autofs4:pid:19148:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 2513.383086][T19148] autofs4:pid:19148:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 2513.414225][T19150] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 2513.428220][T19150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2513.439281][T19150] validate_nla: 3 callbacks suppressed [ 2513.439294][T19150] netlink: 'syz.2.8054': attribute type 10 has an invalid length. [ 2513.444451][T19150] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 2513.532661][T15992] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2513.540119][T19158] netlink: 392 bytes leftover after parsing attributes in process `syz.4.8058'. [ 2513.683187][T15992] usb 5-1: Using ep0 maxpacket: 8 [ 2513.687048][T15992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2513.691612][T15992] usb 5-1: config 0 has no interfaces? [ 2513.696232][T15992] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2513.699635][T15992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.705958][T15992] usb 5-1: config 0 descriptor?? [ 2513.744926][T19173] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2513.759464][T19173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2513.774316][T19173] netlink: 'syz.4.8065': attribute type 10 has an invalid length. [ 2513.776917][T19173] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2514.071482][T19198] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 2514.083074][T19198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2514.096460][T19200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8076'. [ 2514.098858][T19198] netlink: 'syz.2.8075': attribute type 10 has an invalid length. [ 2514.102336][T19198] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 2514.436824][T27011] usb 5-1: USB disconnect, device number 6 [ 2514.487806][T19223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2514.501358][T19223] netlink: 'syz.0.8087': attribute type 10 has an invalid length. [ 2514.503090][T19225] syzkaller0: entered promiscuous mode [ 2514.506428][T19225] syzkaller0: entered allmulticast mode [ 2515.152710][T27011] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2515.279859][T19257] syzkaller0: entered promiscuous mode [ 2515.283289][T19257] syzkaller0: entered allmulticast mode [ 2515.325390][T27011] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 2515.329246][T27011] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2515.333084][T27011] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2515.337766][T27011] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2515.341561][T27011] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2515.345034][T27011] usb 8-1: Product: syz [ 2515.346581][T27011] usb 8-1: Manufacturer: syz [ 2515.348539][T27011] usb 8-1: SerialNumber: syz [ 2515.353219][T27011] usb 8-1: config 0 descriptor?? [ 2515.356907][T27011] hub 8-1:0.0: bad descriptor, ignoring hub [ 2515.359420][T27011] hub 8-1:0.0: probe with driver hub failed with error -5 [ 2515.364965][T27011] usb 8-1: selecting invalid altsetting 0 [ 2515.645629][T19273] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2515.656058][T19271] netlink: 'syz.0.8106': attribute type 10 has an invalid length. [ 2515.882693][T19245] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 2515.886249][T19245] usb 8-1: device reset changed ep0 maxpacket size! [ 2515.888986][T15948] usb 8-1: USB disconnect, device number 12 [ 2516.043156][T15948] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2516.192627][T15948] usb 8-1: Using ep0 maxpacket: 8 [ 2516.195908][T15948] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.199694][T15948] usb 8-1: config 0 has no interfaces? [ 2516.201814][T15948] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2516.205624][T15948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.211018][T15948] usb 8-1: config 0 descriptor?? [ 2516.347776][T19289] syzkaller0: entered promiscuous mode [ 2516.350252][T19289] syzkaller0: entered allmulticast mode [ 2516.561108][T19293] tipc: Enabled bearer , priority 0 [ 2516.567824][T19293] tipc: Resetting bearer [ 2516.579773][T19292] tipc: Disabling bearer [ 2516.927426][ T39] usb 8-1: USB disconnect, device number 13 [ 2516.967720][T19309] syzkaller0: entered promiscuous mode [ 2516.969913][T19309] syzkaller0: entered allmulticast mode [ 2517.137371][T19321] tipc: Started in network mode [ 2517.139123][T19321] tipc: Node identity 0e26f230645a, cluster identity 4711 [ 2517.141495][T19321] tipc: Enabled bearer , priority 0 [ 2517.146886][T19321] tipc: Resetting bearer [ 2517.156840][T19320] tipc: Disabling bearer [ 2517.417008][T19338] netlink: 'syz.0.8135': attribute type 10 has an invalid length. [ 2517.421448][T19338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2517.425695][T19338] team0: Port device bond0 added [ 2517.452760][T15667] Oops: general protection fault, probably for non-canonical address 0xe000080fe291ad57: 0000 [#1] SMP KASAN NOPTI [ 2517.457148][T15667] KASAN: probably user-memory-access in range [0x0000607f148d6ab8-0x0000607f148d6abf] [ 2517.461057][T15667] CPU: 3 UID: 0 PID: 15667 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2517.464903][T15667] Tainted: [L]=SOFTLOCKUP [ 2517.466418][T15667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2517.470028][T15667] Workqueue: mld mld_ifc_work [ 2517.471733][T15667] RIP: 0010:bond_header_create+0xd8/0x390 [ 2517.473655][T15667] Code: 0f 85 08 01 00 00 e8 d7 1a 74 fb 48 85 ed 0f 84 a9 00 00 00 e8 c9 1a 74 fb 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 8a 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 2517.479986][T15667] RSP: 0000:ffffc90003d5f720 EFLAGS: 00010202 [ 2517.482086][T15667] RAX: dffffc0000000000 RBX: 00000000000086dd RCX: ffffffff86941363 [ 2517.484798][T15667] RDX: 00000c0fe291ad57 RSI: ffffffff86941257 RDI: ffff888029e20000 [ 2517.487452][T15667] RBP: 0000607f148d6ab8 R08: 0000000000000005 R09: 0000000000000000 [ 2517.490052][T15667] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 2517.492762][T15667] R13: ffff8880131d99c0 R14: 0000000000000000 R15: 0000000000000060 [ 2517.495407][T15667] FS: 0000000000000000(0000) GS:ffff888097446000(0000) knlGS:0000000000000000 [ 2517.498378][T15667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2517.500620][T15667] CR2: 00000000f72cc08e CR3: 000000005eea7000 CR4: 0000000000352ef0 [ 2517.503254][T15667] DR0: 000000006000003f DR1: 0000000000000000 DR2: 0000000000000000 [ 2517.506008][T15667] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2517.508592][T15667] Call Trace: [ 2517.509731][T15667] [ 2517.510734][T15667] ? __pfx_bond_header_create+0x10/0x10 [ 2517.512746][T26973] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2517.512876][T15667] neigh_connected_output+0x34d/0x5d0 [ 2517.517749][T15667] ip6_finish_output2+0xb0f/0x1ce0 [ 2517.519429][T15667] __ip6_finish_output+0x357/0xdf0 [ 2517.521210][T15667] ip6_output+0x2aa/0xa60 [ 2517.522648][T15667] ? __pfx_ip6_output+0x10/0x10 [ 2517.524330][T15667] ? __pfx_ip6_finish_output+0x10/0x10 [ 2517.526122][T15667] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 2517.527887][T15667] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 2517.529656][T15667] ? __pfx_ip6_output+0x10/0x10 [ 2517.531401][T15667] NF_HOOK.constprop.0+0x115/0x5a0 [ 2517.533308][T15667] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 2517.535684][T15667] ? __pfx_dst_output+0x10/0x10 [ 2517.537744][T15667] mld_sendpack+0x8f7/0xec0 [ 2517.539696][T15667] ? __pfx_mld_sendpack+0x10/0x10 [ 2517.541594][T15667] ? finish_task_switch.isra.0+0x200/0xb80 [ 2517.543502][T15667] mld_ifc_work+0x75a/0xc10 [ 2517.545086][T15667] ? rcu_is_watching+0x12/0xc0 [ 2517.546656][T15667] process_one_work+0xa23/0x19a0 [ 2517.548281][T15667] ? __pfx_process_one_work+0x10/0x10 [ 2517.550093][T15667] ? __pfx_mld_ifc_work+0x10/0x10 [ 2517.551852][T15667] worker_thread+0x5ef/0xe50 [ 2517.553370][T15667] ? __pfx_worker_thread+0x10/0x10 [ 2517.555260][T15667] ? kthread+0x13a/0x450 [ 2517.556642][T15667] ? __pfx_worker_thread+0x10/0x10 [ 2517.558310][T15667] kthread+0x370/0x450 [ 2517.559897][T15667] ? __pfx_kthread+0x10/0x10 [ 2517.559915][T15667] ret_from_fork+0x754/0xd80 [ 2517.559931][T15667] ? __pfx_ret_from_fork+0x10/0x10 [ 2517.559947][T15667] ? native_load_gs_index+0x1e/0xc0 [ 2517.559959][T15667] ? __switch_to+0x7b4/0x1120 [ 2517.568679][T15667] ? __pfx_kthread+0x10/0x10 [ 2517.568701][T15667] ret_from_fork_asm+0x1a/0x30 [ 2517.568719][T15667] [ 2517.573206][T15667] Modules linked in: [ 2517.575054][T15667] ---[ end trace 0000000000000000 ]--- [ 2517.589559][T15667] RIP: 0010:bond_header_create+0xd8/0x390 [ 2517.591472][T15667] Code: 0f 85 08 01 00 00 e8 d7 1a 74 fb 48 85 ed 0f 84 a9 00 00 00 e8 c9 1a 74 fb 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 8a 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 2517.595855][T19346] syzkaller0: entered promiscuous mode [ 2517.598267][T15667] RSP: 0000:ffffc90003d5f720 EFLAGS: 00010202 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2517.600686][T19346] syzkaller0: entered allmulticast mode [ 2517.602736][T15667] RAX: dffffc0000000000 RBX: 00000000000086dd RCX: ffffffff86941363 [ 2517.604578][ T40] audit: type=1326 audit(2000000069.850:11203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19347 comm="syz.0.8140" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe6f6c code=0x0 [ 2517.615257][T15667] RDX: 00000c0fe291ad57 RSI: ffffffff86941257 RDI: ffff888029e20000 [ 2517.622546][T15667] RBP: 0000607f148d6ab8 R08: 0000000000000005 R09: 0000000000000000 [ 2517.625082][T15667] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 2517.627585][T15667] R13: ffff8880131d99c0 R14: 0000000000000000 R15: 0000000000000060 [ 2517.630413][T15667] FS: 0000000000000000(0000) GS:ffff888097446000(0000) knlGS:0000000000000000 [ 2517.635804][T15667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2517.637932][T15667] CR2: 0000000057f0f4ec CR3: 000000000e598000 CR4: 0000000000352ef0 [ 2517.640458][T15667] DR0: 000000006000003f DR1: 0000000000000000 DR2: 0000000000000000 [ 2517.643194][T15667] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2517.645701][T15667] Kernel panic - not syncing: Fatal exception [ 2517.648290][T15667] Kernel Offset: disabled [ 2517.649666][T15667] Rebooting in 86400 seconds..