last executing test programs: 11m17.50535706s ago: executing program 1 (id=3614): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000980)=0x7e) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003200), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000003240)='connect aa:aa:aa:aa:aa:10 0', 0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x2000489c) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="200002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 11m15.593839989s ago: executing program 1 (id=3622): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac0d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000340)="27c16304bbb5864ce53c27df0a8cb7636183", 0x12, 0x0}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000000c0)={0x7, 0x0, '\x00', {0x0, @reserved}}) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x24, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000480)={r2}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r6, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000044}, 0x64081) 11m15.497644942s ago: executing program 1 (id=3623): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048010) syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b010203010902480001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 11m14.301349681s ago: executing program 1 (id=3624): openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0xae582, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'veth0_vlan\x00', @random}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40048050}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c9) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100ff7f000020cd17436bf7516001b52ee8e138d6650f4a0faf104a380102030109021b0001000010000904590201801e2a00090582", @ANYRES32], 0x0) 11m13.381485478s ago: executing program 1 (id=3628): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x10020006, r0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)={'dummy0\x00'}) 11m12.90281952s ago: executing program 1 (id=3629): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) timerfd_create(0x1, 0x0) 11m12.773601248s ago: executing program 32 (id=3629): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) timerfd_create(0x1, 0x0) 7m17.719292876s ago: executing program 2 (id=4343): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000002340)=""/163) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001180)=""/212) syz_usb_connect$rtl8150(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x40, 0x20, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '=2='}, {0x5, 0x24, 0x0, 0xff01}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x400, 0x6, 0x5f}, {0x6, 0x24, 0x1a, 0x2, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x5, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x38, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x7b, 0xdb}}}}}}}]}}, 0x0) 7m16.108252408s ago: executing program 2 (id=4350): syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000"], 0x0) 7m14.943706926s ago: executing program 2 (id=4355): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x33) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x24, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x2040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000340)={0xfff, {{0xa, 0x4e22, 0x7, @mcast2, 0x8}}}, 0x88) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x0) 7m14.853823151s ago: executing program 2 (id=4356): syz_usb_connect(0x0, 0x36, 0x0, 0x0) 7m14.375460253s ago: executing program 2 (id=4362): r0 = socket(0x15, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20890}, 0x8011) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x24014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001a40)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40004}}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) keyctl$dh_compute(0x17, &(0x7f0000000080), &(0x7f0000000640)=""/4096, 0x1000, &(0x7f0000001780)={0x0}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x40, @local}) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x30e, 0x6, 0x7, 0xe, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @vsock={0x28, 0x0, 0x0, @local}, 0x21, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='syz_tun\x00', 0x6d, 0x200, 0xfffa}) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) setresuid(0x0, 0xee00, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x20, 0x0, 0x0}, &(0x7f0000000240)="438828b74e89", 0x0, 0x100004, 0x22, 0x3, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x400, 0x61, &(0x7f00000004c0)={0x0, 0x5, 0x0, 0x3}, 0xfffffffffffffd35, 0x2, 0x88, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)) 7m14.293967622s ago: executing program 2 (id=4363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0x0, 0xe, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xe, 0x3, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x4, 0x0, 0x40, 0x40}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1407}}, {0x11, &(0x7f0000000180)=@string={0x11, 0x3, "0612924f5bab25c2ee9e806121bca7"}}, {0xb6, &(0x7f00000001c0)=@string={0xb6, 0x3, "753465e958b5da6daece87ec1f93b7542cb74c60460569cad8d48785b696a59beb91c73bfdd30d2570cbbe47233814a4d417ba5f2708a7b58615580deae7ccbf372dbe4add00857b6da835055f43174407585e01936f8ca45674c91fa301cda9473bb92c983bd0d8692d5a8e57465a5017b7ec76f1f23332e9aa63de2388fb0249654d5342f14889fc88bcf1b95d6e6dcd6581b779eb76dc41dc650401049ee638e0ffa968348ad36694a4c96780bb0633056b17"}}, {0xd3, &(0x7f0000000280)=@string={0xd3, 0x3, "1afdbd531d02b49aa659f1ad761886fbfe1be0ccc00c232bd8ca470ae36f153ea064a51eff15f9649ded3721eb7a27129ffe3f2bfb4016ef65f05aaebb7da20f0768897c84c6eb1916f7c52b2eca8fb1ece8e6ac149dc6149ae3cd9518fdf13112c50f564366097c1f71df41196e05ae83e5fa100b4ee2810b5141b527e062c74b8caf68d3b01bd9ed1c0639e98afb23c197377913040f7a2a7f4cb00e8f8aca094ba436a2c10dcdaadc2a0cc709e1a2db781f0991cba1d65d3623ccf1374a10351946fd03b9eab86827d24fe56d2e26a4"}}, {0xdd, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}]}) clock_getres(0xfffffffffffffff1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m8.381547619s ago: executing program 4 (id=4382): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x7000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 7m8.2298668s ago: executing program 4 (id=4383): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x2, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) 7m5.12141917s ago: executing program 4 (id=4391): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x8a, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000500)={0x0, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m1.982875564s ago: executing program 4 (id=4394): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x5e9, 0x300100, 0xc}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x100) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x49, 0x0, 0x1}]}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002c3d00000000000b0000396cf174819fa78b616463617301d6ac232b742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x800) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000629bd7000fddbdf25010000000000000700000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r11 = syz_io_uring_setup(0x588d, &(0x7f0000000100)={0x0, 0x3d30, 0x400, 0x2, 0x49}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(0x0, 0x1a50, 0x0, 0x11, r11, 0x8000000) setreuid(r10, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) 7m1.385327861s ago: executing program 4 (id=4395): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "e39a0e756a544899da9745f153c7c1c96c278c96dfca4dcfa24bcd85b60862f70fa976"}, 0x37) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac0827c8b021fbb1fa832462ea175ae6dae31e42bbb3ce3469c6323fe898175fd9331455266e5f70a167d59e2a4a3dad4a44311f4c69292d304b2dd0e09872e408c6f25a2aed49c6c5a60debbce6", 0x80}, {&(0x7f0000000240)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49632042e317ae", 0x1a}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 6m59.904537608s ago: executing program 4 (id=4397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 6m59.429115029s ago: executing program 33 (id=4397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 6m58.195897842s ago: executing program 34 (id=4363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0x0, 0xe, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xe, 0x3, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x4, 0x0, 0x40, 0x40}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1407}}, {0x11, &(0x7f0000000180)=@string={0x11, 0x3, "0612924f5bab25c2ee9e806121bca7"}}, {0xb6, &(0x7f00000001c0)=@string={0xb6, 0x3, "753465e958b5da6daece87ec1f93b7542cb74c60460569cad8d48785b696a59beb91c73bfdd30d2570cbbe47233814a4d417ba5f2708a7b58615580deae7ccbf372dbe4add00857b6da835055f43174407585e01936f8ca45674c91fa301cda9473bb92c983bd0d8692d5a8e57465a5017b7ec76f1f23332e9aa63de2388fb0249654d5342f14889fc88bcf1b95d6e6dcd6581b779eb76dc41dc650401049ee638e0ffa968348ad36694a4c96780bb0633056b17"}}, {0xd3, &(0x7f0000000280)=@string={0xd3, 0x3, "1afdbd531d02b49aa659f1ad761886fbfe1be0ccc00c232bd8ca470ae36f153ea064a51eff15f9649ded3721eb7a27129ffe3f2bfb4016ef65f05aaebb7da20f0768897c84c6eb1916f7c52b2eca8fb1ece8e6ac149dc6149ae3cd9518fdf13112c50f564366097c1f71df41196e05ae83e5fa100b4ee2810b5141b527e062c74b8caf68d3b01bd9ed1c0639e98afb23c197377913040f7a2a7f4cb00e8f8aca094ba436a2c10dcdaadc2a0cc709e1a2db781f0991cba1d65d3623ccf1374a10351946fd03b9eab86827d24fe56d2e26a4"}}, {0xdd, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}]}) clock_getres(0xfffffffffffffff1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.838126949s ago: executing program 5 (id=5894): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) (async, rerun: 64) sendto$packet(r6, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r8, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4483, 0x100, 0x3, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x3, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 7.513676649s ago: executing program 5 (id=5895): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f00000006c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x25}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r3, r3, 0x0) poll(0x0, 0x0, 0x8000007) r4 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/anycast6\x00') fchdir(r5) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000040)='stat\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000004a00010026bd7000fbdbdf130a"], 0x20}}, 0x14008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x79, 0x5}) 6.509605601s ago: executing program 0 (id=5898): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e07"], 0xa) 6.42795753s ago: executing program 0 (id=5899): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480100000002010100000000000000000a0000002c010180060003400000000006000340000100000c000280050001000100000014000180080001000a01010008000200ac1414bb2c000180140003000000000000000000000000000000000114000400200100000000000000000000000000012c00d2018014000300000000000000000000000000000000011400f734ebff6d64af0400ff010000000000000000000000000001140001800800010000000000080002000a0101022c000180140003002001000000000000000000000000000114000400fc02000000000000000000000000000006000340000100002c000180140003000000fb8663e3000000000000000000016545e4cd3b89f7e3d590302f74f85a14000400fc0200000000000000000000000000002c00018014000300200100000000000000000000000000022d000400fe8000000000000000000000000000aa049b3749df7284935d3937c2147948b93c757c92529055"], 0x148}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r3 = socket(0x1e, 0x4, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f0000000540)={0x0}}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.995328179s ago: executing program 0 (id=5900): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xdfffffce, 0xdff, 0x3, 0x831a, 0x3, "04000000000000000400", 0x28, 0x7f}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f00000008c0)={0x7, 'vlan1\x00', {0xa}, 0xaf55}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) setpgid(0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r5 = openat$cgroup_type(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x9) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4.989046108s ago: executing program 0 (id=5903): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0xf, 0xa3, {0xa3, 0x2, "948757e982e1df1c2d5263ae32fc166a88a85e22763991917eb082df96daf3047ab8dfd7a653d368c27b4810c54291559bb7ba027ba8c528c8a70f917a374b776c9f573291f20043ff6c6f6d8c2f5f2d5f335a22ee5d5e22a6cc6e6d5492a7a3ebf131c6270ace0837d09cf0263dbabdb0dde9b923d2e6525adbf2f95a8e8eb45a44e7bb86158f30c5bcd7edf1345b66b9d36f13e0d500873049e75ebd6ab6ce0a"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40059f00000064a2e8f0a10aa6c803fd74c702cda4cf56b160fa5af780aab2decd66051a35a694727e7b80cf7bfb84bf259ca138f445396853f5059f9e7bfea8e87b1b9a2775f8ce157d4999e9d4ce61383aae53732810cbd7ecfbdfef31b935309b0338f985cfa19153bef766adc7de3de96bafad66acb4f42aa444964d3ade9a608c845013dc799f4b9dcc55b5bc9d3f6b23d10402b2f157798b3ecf7604daaaf7584bf6"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}}) 4.236738114s ago: executing program 5 (id=5906): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x75, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0xc, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14}}, 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000ac000700fc020000000000000000000000000000fe8000000000000000000000000000bb4e2400", @ANYRES32=0x0, @ANYBLOB="03000000000000004a0000000000000094710000000000001fc60000000000e2226dd2f46f00030000000000000075090000000000000800000000000000df82000000000000ffffff7f00000000fbffffffffffffff0500000000000000090000000000000001010000b56b6e000100020200"], 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000000)={0x60000015}) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0xfe, 0x0, 0x0) close_range(r7, r7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 3.867729161s ago: executing program 6 (id=5907): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e070909"], 0xa) 3.784744592s ago: executing program 6 (id=5908): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0xff, 0xfb, 0x4, 0x5, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x30000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.458916827s ago: executing program 5 (id=5909): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x600000e, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000017c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000598000/0x1000)=nil, 0x1000, 0x1}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000003840)={0x10, 0x0, r5}, 0x10) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x8, 0x4800003e, r2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000003c0)={0x2c, 0x2, r9, 0x20000000}, 0x10) bind$xdp(r7, &(0x7f0000000440)={0x2c, 0x2, 0x0, 0x9}, 0x10) syz_usb_connect$uac1(0x3, 0xda, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000010cc1710104000010203010902c80003010200030904000000010100000a2401156e3d000201020a240503078884590fad092403060204050308072404047c43a907240703030002092404010037baa1530924030200040101040904010000010200000904010101010200000905010910000500200725010821e4a6bffd814d6a015103000904020000010200000904020101010200001024020203004000098f8bede8fdfd90122402020d00b800c8c7ec28c8f2038ae41b092402020500ea0afd0a24020209000e00be060905820920000004fe0725010c020400"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x99, 0x2, 0x2, 0x40, 0x1}, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="ff0796b8db931c421a000044c48802919bff95f8bed51fdc0cf58ee58dd204f69efb9ff26deb6336e9fcd573b61eea2a5e5fea575229ddd3d961914b73fc43802100"/80], 0x6, [{0x7d, &(0x7f0000000580)=ANY=[]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80a}}]}) socket$kcm(0x10, 0x2, 0x0) 3.341228126s ago: executing program 3 (id=5910): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x13, '\x00', @data=0xfffffffe, 0x87}, {0x41, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffff001}, {0x2, @svalue=0xffff}, {0x3, @svalue=0xfffffffffffffc01}, {0x1, @uvalue=0x7}]}, 0x81}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x4000000, 0xb}}) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0x34}], 0x1}, 0x0) 3.340788177s ago: executing program 6 (id=5911): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 2.457361561s ago: executing program 0 (id=5912): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x9000) r1 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000019380)}) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) 2.301382924s ago: executing program 0 (id=5913): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 1.767805862s ago: executing program 5 (id=5914): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f00000f9000/0x9000)=nil, 0x9000, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x20240, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x0, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) utimes(0x0, &(0x7f00000001c0)={{}, {0x0, 0x2710}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21}, 0xe) landlock_restrict_self(r2, 0xa) socket$inet(0x2, 0x801, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r8 = shmget$private(0x0, 0x3000, 0xa2b7e14c61894e03, &(0x7f00000f9000/0x3000)=nil) shmctl$IPC_INFO(r8, 0x3, &(0x7f0000000180)=""/169) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.533927082s ago: executing program 5 (id=5915): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x4}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000004c0)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001440)) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.53364473s ago: executing program 3 (id=5916): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e070909"], 0xa) 1.482672702s ago: executing program 3 (id=5917): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4ee16ab13420000000", @ANYRES16=r1, @ANYBLOB="090928bd7000fbdbdf25010000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xa4}, 0x80) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14001a001e0021002bbd7000000000000a000000"], 0x14}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xbffffffffffffff8, 0x513300) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000000)=ANY=[]) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x222001, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) shutdown(r3, 0x1) sendmmsg$inet(r3, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000017464000100000000000000e5c064", 0x14}], 0x1}}], 0x1, 0x40000) userfaultfd(0x80801) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000480)={0x0, 0xe25b, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) socket(0x1e, 0x5, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r9, 0x40026f33, &(0x7f0000000040)=0x312) 642.531486ms ago: executing program 3 (id=5918): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x5, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) (fail_nth: 3) 417.605747ms ago: executing program 3 (id=5919): socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40}, {0x6b, 0x0, 0x8, 0x3e}], 0xfffffffc}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) (rerun: 32) r2 = fanotify_init(0x81, 0x40000) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r3, 0x0) (async) close(0x3) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0xced, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, &(0x7f0000000040)=0x84) fanotify_mark(r2, 0x105, 0x800101b, r1, 0x0) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1ba) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff3, 0x4012011, r6, 0x0) (async, rerun: 32) r7 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000300)={@nfc={0x27, 0x0, 0x0, 0x2}, {0x0}, 0x0, 0x32}, 0xa0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) (async) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 211.06893ms ago: executing program 6 (id=5920): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x100000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x1}) 78.964306ms ago: executing program 6 (id=5921): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x9000) r1 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000019380)}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) 33.863654ms ago: executing program 3 (id=5922): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x600000e, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000017c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000598000/0x1000)=nil, 0x1000, 0x1}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000003840)={0x10, 0x0, r5}, 0x10) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x8, 0x4800003e, r2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000003c0)={0x2c, 0x2, r9, 0x20000000}, 0x10) bind$xdp(r7, &(0x7f0000000440)={0x2c, 0x2, 0x0, 0x9}, 0x10) syz_usb_connect$uac1(0x3, 0xda, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000010cc1710104000010203010902c80003010200030904000000010100000a2401156e3d000201020a240503078884590fad092403060204050308072404047c43a907240703030002092404010037baa1530924030200040101040904010000010200000904010101010200000905010910000500200725010821e4a6bffd814d6a015103000904020000010200000904020101010200001024020203004000098f8bede8fdfd90122402020d00b800c8c7ec28c8f2038ae41b092402020500ea0afd0a24020209000e00be060905820920000004fe0725010c020400"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x99, 0x2, 0x2, 0x40, 0x1}, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="ff0796b8db931c421a000044c48802919bff95f8bed51fdc0cf58ee58dd204f69efb9ff26deb6336e9fcd573b61eea2a5e5fea575229ddd3d961914b73fc43802100"/80], 0x6, [{0x7d, &(0x7f0000000580)=ANY=[]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80a}}]}) 0s ago: executing program 6 (id=5923): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cgroups\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) poll(&(0x7f0000000080)=[{r1, 0x81}], 0x1, 0x2000009d) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     [ 1617.671782][T12202] usb 1-1: device descriptor read/64, error -71 [ 1617.747151][T25099] usb 7-1: LEGO USB Tower reset control request failed [ 1617.782048][T12202] usb usb1-port1: attempt power cycle [ 1617.915305][ T11] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1617.915324][ T11] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1617.930895][T24066] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1617.953349][T24113] usb 7-1: USB disconnect, device number 50 [ 1617.969870][T24113] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 1618.100970][T24066] usb 4-1: Using ep0 maxpacket: 32 [ 1618.103149][T24066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.103179][T24066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.103219][T24066] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1618.103243][T24066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.108899][T24066] usb 4-1: config 0 descriptor?? [ 1618.117299][T24066] hub 4-1:0.0: USB hub found [ 1618.121052][T12202] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1618.141867][T12202] usb 1-1: device descriptor read/8, error -71 [ 1618.312657][T24066] hub 4-1:0.0: 1 port detected [ 1618.380822][T12202] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1618.401467][T12202] usb 1-1: device descriptor read/8, error -71 [ 1618.512298][T12202] usb usb1-port1: unable to enumerate USB device [ 1618.585715][T25115] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1618.945873][T24066] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1618.947331][ T5799] usb 4-1: USB disconnect, device number 85 [ 1618.948415][T19913] usb 4-1: Failed to suspend device, error -19 [ 1619.120826][T12202] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1619.134537][ T11] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1619.134725][ T11] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1619.270752][T12202] usb 7-1: Using ep0 maxpacket: 32 [ 1619.273306][T12202] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1619.274511][T12202] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1619.274536][T12202] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1619.274557][T12202] usb 7-1: config 14 has no interface number 0 [ 1619.274574][T12202] usb 7-1: config 14 has no interface number 1 [ 1619.274624][T12202] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1619.274638][T12202] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1619.274651][T12202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1619.274666][T12202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1619.274680][T12202] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1619.274695][T12202] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.274709][T12202] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1619.274719][T12202] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1619.276908][T12202] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1619.276935][T12202] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.276955][T12202] usb 7-1: Product: syz [ 1619.276969][T12202] usb 7-1: Manufacturer: syz [ 1619.276977][T12202] usb 7-1: SerialNumber: syz [ 1619.734589][T12202] legousbtower 7-1:14.57: interrupt endpoints not found [ 1620.135332][T12202] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1620.137197][T12202] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1620.143261][T24113] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1620.194326][T12202] usb 6-1: USB disconnect, device number 56 [ 1620.247890][T25176] fuse: Bad value for 'fd' [ 1620.296450][T24113] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1620.296480][T24113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.296501][T24113] usb 1-1: Product: syz [ 1620.296515][T24113] usb 1-1: Manufacturer: syz [ 1620.296530][T24113] usb 1-1: SerialNumber: syz [ 1620.350120][T24113] usb 1-1: config 0 descriptor?? [ 1620.640831][T12202] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1620.690437][T25191] usb 7-1: LEGO USB Tower reset control request failed [ 1620.764547][T24113] usb 1-1: Firmware: major: 141, minor: 82, hardware type: UNKNOWN (66) [ 1620.790692][T12202] usb 6-1: Using ep0 maxpacket: 32 [ 1620.793336][T12202] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1620.794549][T12202] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1620.794574][T12202] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1620.794595][T12202] usb 6-1: config 14 has no interface number 0 [ 1620.794607][T12202] usb 6-1: config 14 has no interface number 1 [ 1620.794685][T12202] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1620.794700][T12202] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1620.794713][T12202] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1620.794727][T12202] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1620.794742][T12202] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1620.794756][T12202] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1620.794818][T12202] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1620.794836][T12202] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1620.797005][T12202] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1620.797031][T12202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.797051][T12202] usb 6-1: Product: syz [ 1620.797106][T12202] usb 6-1: Manufacturer: syz [ 1620.797115][T12202] usb 6-1: SerialNumber: syz [ 1620.893512][T16716] usb 7-1: USB disconnect, device number 51 [ 1620.951949][T16716] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 1620.993278][T24113] usb 1-1: no permanent extended address found, random address set [ 1620.993306][T24113] usb 1-1: atusb_probe: initialization failed, error = -524 [ 1620.993713][T24113] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 1621.040682][ T11] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1621.170617][ T11] usb 4-1: device descriptor read/64, error -71 [ 1621.194870][ T5799] usb 1-1: USB disconnect, device number 110 [ 1621.245568][T12202] legousbtower 6-1:14.57: interrupt endpoints not found [ 1621.412030][ T11] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1621.543318][ T11] usb 4-1: device descriptor read/64, error -71 [ 1621.645959][T12202] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1621.647900][T12202] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1621.650942][ T11] usb usb4-port1: attempt power cycle [ 1622.000790][ T11] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1622.021246][ T11] usb 4-1: device descriptor read/8, error -71 [ 1622.070636][T12202] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1622.170687][ T5799] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1622.202845][T25232] usb 6-1: LEGO USB Tower reset control request failed [ 1622.224894][T12202] usb 1-1: config 5 has an invalid interface number: 211 but max is 0 [ 1622.224921][T12202] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.224942][T12202] usb 1-1: config 5 has no interface number 0 [ 1622.227120][T12202] usb 1-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 1622.227148][T12202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.227169][T12202] usb 1-1: Product: syz [ 1622.227180][T12202] usb 1-1: Manufacturer: syz [ 1622.227187][T12202] usb 1-1: SerialNumber: syz [ 1622.270604][ T11] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1622.291381][ T11] usb 4-1: device descriptor read/8, error -71 [ 1622.307067][T12202] rndis_host 1-1:5.211: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1622.311216][ T5799] usb 7-1: device descriptor read/64, error -71 [ 1622.406924][T18708] usb 6-1: USB disconnect, device number 57 [ 1622.413792][ T11] usb usb4-port1: unable to enumerate USB device [ 1622.427110][T18708] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1622.550631][ T5799] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1622.682500][ T5799] usb 7-1: device descriptor read/64, error -71 [ 1622.790900][ T5799] usb usb7-port1: attempt power cycle [ 1623.130613][ T5799] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1623.151029][ T5799] usb 7-1: device descriptor read/8, error -71 [ 1623.170607][T16716] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1623.321464][T16716] usb 6-1: Using ep0 maxpacket: 32 [ 1623.323157][T16716] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1623.323181][T16716] usb 6-1: config 0 has no interface number 0 [ 1623.325324][T16716] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1623.325350][T16716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.325371][T16716] usb 6-1: Product: syz [ 1623.325390][T16716] usb 6-1: Manufacturer: syz [ 1623.325399][T16716] usb 6-1: SerialNumber: syz [ 1623.331943][T16716] usb 6-1: config 0 descriptor?? [ 1623.440569][ T5799] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1623.461194][ T5799] usb 7-1: device descriptor read/8, error -71 [ 1623.506310][T25257] fuse: Bad value for 'fd' [ 1623.580968][ T5799] usb usb7-port1: unable to enumerate USB device [ 1623.790526][T18708] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1623.808593][T16716] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1623.808612][T16716] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1623.945571][T18708] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1623.945604][T18708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.945619][T18708] usb 4-1: Product: syz [ 1623.945629][T18708] usb 4-1: Manufacturer: syz [ 1623.945644][T18708] usb 4-1: SerialNumber: syz [ 1624.078931][ T5799] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1625.030738][T16716] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1625.031042][T16716] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1625.164201][T24113] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1625.310443][T24113] usb 7-1: Using ep0 maxpacket: 8 [ 1625.313225][T24113] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1625.313257][T24113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1625.313284][T24113] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1625.316481][T24113] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1625.316508][T24113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.316529][T24113] usb 7-1: Product: syz [ 1625.316544][T24113] usb 7-1: Manufacturer: syz [ 1625.316559][T24113] usb 7-1: SerialNumber: syz [ 1625.417539][T24113] usb 7-1: config 0 descriptor?? [ 1625.426067][T25272] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1625.521651][T24113] rc_core: IR keymap rc-streamzap not found [ 1625.521672][T24113] Registered IR keymap rc-empty [ 1625.524597][T24113] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1625.532018][T24113] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input154 [ 1625.844612][ T5799] usb 4-1: Service connection timeout for: 256 [ 1625.844636][ T5799] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1625.890889][T18708] usb 4-1: USB disconnect, device number 90 [ 1625.941307][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1625.975271][T12357] usb 7-1: USB disconnect, device number 56 [ 1626.012946][ T5799] ath9k_htc: Failed to initialize the device [ 1626.015102][T18708] usb 4-1: ath9k_htc: USB layer deinitialized [ 1626.045542][ T11] usb 1-1: USB disconnect, device number 111 [ 1626.084687][ T5320] usb 6-1: USB disconnect, device number 58 [ 1626.440392][ T11] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1626.610639][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 1626.618945][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1626.620064][ T11] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1626.620089][ T11] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1626.620108][ T11] usb 1-1: config 14 has no interface number 0 [ 1626.620117][ T11] usb 1-1: config 14 has no interface number 1 [ 1626.620155][ T11] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1626.620169][ T11] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1626.620183][ T11] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1626.620861][ T11] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1626.620892][ T11] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1626.620919][ T11] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1626.620947][ T11] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1626.620964][ T11] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1626.670334][ T5320] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1626.695544][ T11] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1626.695573][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.695649][ T11] usb 1-1: Product: syz [ 1626.695664][ T11] usb 1-1: Manufacturer: syz [ 1626.695678][ T11] usb 1-1: SerialNumber: syz [ 1626.800431][T12357] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1626.850790][ T5320] usb 4-1: Using ep0 maxpacket: 8 [ 1626.852626][ T5320] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1626.852657][ T5320] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1626.852712][ T5320] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 1626.852725][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.858593][ T5320] usb 4-1: config 0 descriptor?? [ 1626.970355][T12357] usb 7-1: Using ep0 maxpacket: 32 [ 1626.972837][T12357] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1626.973955][T12357] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1626.973979][T12357] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1626.974006][T12357] usb 7-1: config 14 has no interface number 0 [ 1626.974014][T12357] usb 7-1: config 14 has no interface number 1 [ 1626.974091][T12357] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1626.974106][T12357] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1626.974120][T12357] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1626.974134][T12357] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1626.974149][T12357] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1626.974163][T12357] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1626.974211][T12357] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1626.974221][T12357] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1626.976584][T12357] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1626.976610][T12357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.976626][T12357] usb 7-1: Product: syz [ 1626.976634][T12357] usb 7-1: Manufacturer: syz [ 1626.976642][T12357] usb 7-1: SerialNumber: syz [ 1627.160130][ T11] legousbtower 1-1:14.57: interrupt endpoints not found [ 1627.378735][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.378793][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.378810][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.378828][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.378844][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.378859][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.378875][ T5320] logitech-djreceiver 0003:046D:C517.0037: unknown main item tag 0x0 [ 1627.484096][T12357] legousbtower 7-1:14.57: interrupt endpoints not found [ 1627.487100][T25355] netlink: 'syz.5.5839': attribute type 4 has an invalid length. [ 1627.542629][ T11] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1627.554035][ T11] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1627.586218][T16716] usb 4-1: USB disconnect, device number 91 [ 1627.895304][T12357] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1627.926126][T12357] legousbtower 7-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 1628.102801][T25375] usb 1-1: LEGO USB Tower reset control request failed [ 1628.308065][T16716] usb 1-1: USB disconnect, device number 112 [ 1628.332781][T16716] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 1628.425172][T25391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1628.570390][T12357] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1628.700311][T12357] usb 4-1: device descriptor read/64, error -71 [ 1628.700419][T25255] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1628.863885][T25399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1628.863952][T25399] FAULT_INJECTION: forcing a failure. [ 1628.863952][T25399] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.863971][T25399] CPU: 0 UID: 0 PID: 25399 Comm: syz.0.5843 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1628.863986][T25399] Tainted: [L]=SOFTLOCKUP [ 1628.863990][T25399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1628.863997][T25399] Call Trace: [ 1628.864001][T25399] [ 1628.864006][T25399] dump_stack_lvl+0xe8/0x150 [ 1628.864022][T25399] should_fail_ex+0x467/0x600 [ 1628.864041][T25399] should_failslab+0xa8/0x100 [ 1628.864058][T25399] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1628.864080][T25399] ? __alloc_skb+0x1d7/0x7a0 [ 1628.864103][T25399] ? __alloc_skb+0x1d7/0x7a0 [ 1628.864131][T25399] __alloc_skb+0x1d7/0x7a0 [ 1628.864159][T25399] netlink_ack+0x136/0xb30 [ 1628.864175][T25399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1628.864195][T25399] ? ref_tracker_free+0x668/0x820 [ 1628.864214][T25399] ? ____sys_sendmsg+0x565/0x870 [ 1628.864231][T25399] ? ___sys_sendmsg+0x2a5/0x360 [ 1628.864247][T25399] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1628.864264][T25399] ? do_syscall_64+0x174/0x580 [ 1628.864285][T25399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.864312][T25399] netlink_rcv_skb+0x2a4/0x4a0 [ 1628.864333][T25399] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1628.864357][T25399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1628.864389][T25399] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.864407][T25399] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.864429][T25399] genl_rcv+0x28/0x40 [ 1628.864450][T25399] netlink_unicast+0x7f5/0x990 [ 1628.864486][T25399] netlink_sendmsg+0x813/0xb40 [ 1628.864515][T25399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.864537][T25399] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1628.864563][T25399] ? __kernel_text_address+0xd/0x30 [ 1628.864588][T25399] ? unwind_get_return_address+0x4d/0x90 [ 1628.864610][T25399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.864630][T25399] sock_sendmsg_nosec+0x13a/0x180 [ 1628.864655][T25399] ____sys_sendmsg+0x565/0x870 [ 1628.864684][T25399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.864712][T25399] ? import_iovec+0x73/0xa0 [ 1628.864739][T25399] ___sys_sendmsg+0x2a5/0x360 [ 1628.864756][T25399] ? __lock_acquire+0x6df/0x2e40 [ 1628.864779][T25399] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.864833][T25399] ? __fget_files+0x2a/0x420 [ 1628.864849][T25399] ? __fget_files+0x3a8/0x420 [ 1628.864874][T25399] __x64_sys_sendmsg+0x1b7/0x290 [ 1628.864901][T25399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1628.864938][T25399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.864957][T25399] do_syscall_64+0x174/0x580 [ 1628.864975][T25399] ? trace_irq_disable+0x3b/0x140 [ 1628.864994][T25399] ? clear_bhb_loop+0x40/0x90 [ 1628.865014][T25399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.865030][T25399] RIP: 0033:0x7f2e3081de59 [ 1628.865047][T25399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.865063][T25399] RSP: 002b:00007f2e2ea76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.865084][T25399] RAX: ffffffffffffffda RBX: 00007f2e30aa5fa0 RCX: 00007f2e3081de59 [ 1628.865098][T25399] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1628.865111][T25399] RBP: 00007f2e2ea76090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.865123][T25399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1628.865134][T25399] R13: 00007f2e30aa6038 R14: 00007f2e30aa5fa0 R15: 00007ffe07d06498 [ 1628.865165][T25399] [ 1628.878420][T25255] usb 6-1: Using ep0 maxpacket: 32 [ 1628.894282][T25255] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1628.894297][T25255] usb 6-1: config 0 has no interface number 0 [ 1628.940272][T12357] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1629.013592][T25255] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1629.013609][T25255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.013621][T25255] usb 6-1: Product: syz [ 1629.013628][T25255] usb 6-1: Manufacturer: syz [ 1629.013636][T25255] usb 6-1: SerialNumber: syz [ 1629.120303][T12357] usb 4-1: device descriptor read/64, error -71 [ 1629.232193][T12357] usb usb4-port1: attempt power cycle [ 1629.303292][T25255] usb 6-1: config 0 descriptor?? [ 1629.440188][ T5320] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1629.560914][T18708] usb 7-1: USB disconnect, device number 57 [ 1629.575777][T12357] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1629.591256][T12357] usb 4-1: device descriptor read/8, error -71 [ 1629.592505][ T5320] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1629.592532][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.607869][ T5320] usb 1-1: config 0 descriptor?? [ 1629.608835][T18708] legousbtower 7-1:14.228: LEGO USB Tower #-159 now disconnected [ 1629.624752][ T5320] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1629.712566][T25255] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1629.712584][T25255] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1629.834171][T12357] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1629.850862][T12357] usb 4-1: device descriptor read/8, error -71 [ 1629.960641][T12357] usb usb4-port1: unable to enumerate USB device [ 1629.970217][T18708] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1630.122924][T18708] usb 7-1: Using ep0 maxpacket: 32 [ 1630.125827][T18708] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1630.125844][T18708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.140759][T18708] usb 7-1: config 0 descriptor?? [ 1630.181157][T18708] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1630.251458][T25401] netlink: 'syz.0.5844': attribute type 2 has an invalid length. [ 1630.251536][T25401] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5844'. [ 1630.884936][ T5320] usb 1-1: USB disconnect, device number 113 [ 1630.920660][T25255] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1630.920953][T25255] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1630.972821][T25420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.973499][T18708] gspca_sunplus: reg_r err -32 [ 1630.973584][T18708] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 1630.977693][T25420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.989697][T18708] usb 7-1: USB disconnect, device number 58 [ 1631.552543][T25255] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1631.710059][T25255] usb 4-1: Using ep0 maxpacket: 16 [ 1631.715209][T25255] usb 4-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1631.715235][T25255] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1631.719512][T25255] usb 4-1: language id specifier not provided by device, defaulting to English [ 1631.758447][T25255] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1631.758476][T25255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.758497][T25255] usb 4-1: Product: ᐉ [ 1631.758510][T25255] usb 4-1: Manufacturer: ᠌ [ 1631.758524][T25255] usb 4-1: SerialNumber: І [ 1631.890259][T16716] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1631.972156][T18708] usb 6-1: USB disconnect, device number 59 [ 1632.033093][T25255] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1632.050062][T16716] usb 7-1: Using ep0 maxpacket: 32 [ 1632.060103][T16716] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1632.063891][T16716] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1632.063916][T16716] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1632.063945][T16716] usb 7-1: config 14 has no interface number 0 [ 1632.063962][T16716] usb 7-1: config 14 has no interface number 1 [ 1632.064028][T16716] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1632.064052][T16716] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1632.064080][T16716] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1632.064108][T16716] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1632.064135][T16716] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1632.064161][T16716] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.064203][T16716] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1632.064221][T16716] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1632.144284][T16716] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1632.144313][T16716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.144333][T16716] usb 7-1: Product: syz [ 1632.144345][T16716] usb 7-1: Manufacturer: syz [ 1632.144360][T16716] usb 7-1: SerialNumber: syz [ 1632.186883][T25255] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1632.231659][T25255] usb 4-1: USB disconnect, device number 96 [ 1632.490043][T18708] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1632.620864][T18708] usb 6-1: device descriptor read/64, error -71 [ 1632.662149][T16716] legousbtower 7-1:14.57: interrupt endpoints not found [ 1632.844899][ T37] audit: type=1326 audit(2000000066.203:847): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25494 comm="syz.3.5853" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453c62de59 code=0x0 [ 1632.867859][T25458] syz.0.5849 (25458): drop_caches: 2 [ 1632.870369][T18708] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1632.976410][T25502] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5854'. [ 1633.010059][T18708] usb 6-1: device descriptor read/64, error -71 [ 1633.092089][T16716] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1633.093702][T16716] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1633.120374][T18708] usb usb6-port1: attempt power cycle [ 1633.189997][T12357] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1633.340010][T12357] usb 4-1: Using ep0 maxpacket: 8 [ 1633.341637][T12357] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1633.341674][T12357] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1633.341715][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1633.341734][T12357] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1633.341747][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1633.341761][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1633.341775][T12357] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1633.341790][T12357] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1633.342803][T12357] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1633.342845][T12357] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1633.342893][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1633.342909][T12357] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1633.342925][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1633.342950][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1633.342976][T12357] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1633.343002][T12357] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1633.344069][T12357] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1633.344104][T12357] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1633.344144][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1633.344172][T12357] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1633.344198][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1633.344225][T12357] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1633.344245][T12357] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1633.344260][T12357] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1633.347315][T12357] usb 4-1: string descriptor 0 read error: -22 [ 1633.347426][T12357] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1633.347440][T12357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.387442][T12357] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1633.460005][T18708] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1633.481073][T18708] usb 6-1: device descriptor read/8, error -71 [ 1633.594102][T25497] usb 7-1: LEGO USB Tower reset control request failed [ 1633.600217][T12357] usb 4-1: USB disconnect, device number 97 [ 1633.730102][T18708] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1633.750906][T18708] usb 6-1: device descriptor read/8, error -71 [ 1633.862154][T18708] usb usb6-port1: unable to enumerate USB device [ 1634.680296][T25521] usb 7-1: LEGO USB Tower reset control request failed [ 1634.682142][T18708] usb 7-1: USB disconnect, device number 59 [ 1634.694539][T18708] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 1635.182385][T25551] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1635.520960][T24113] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1635.689806][T24113] usb 6-1: Using ep0 maxpacket: 32 [ 1635.691782][T24113] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1635.691808][T24113] usb 6-1: config 0 has no interface number 0 [ 1635.694025][T24113] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1635.694059][T24113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.694079][T24113] usb 6-1: Product: syz [ 1635.694093][T24113] usb 6-1: Manufacturer: syz [ 1635.694107][T24113] usb 6-1: SerialNumber: syz [ 1635.698526][T24113] usb 6-1: config 0 descriptor?? [ 1635.750753][T18708] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1635.879925][T18708] usb 7-1: device descriptor read/64, error -71 [ 1636.105359][T24113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1636.105377][T24113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1636.119824][T18708] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1636.249841][T18708] usb 7-1: device descriptor read/64, error -71 [ 1636.361415][T18708] usb usb7-port1: attempt power cycle [ 1636.499829][T12357] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1636.662003][T12357] usb 1-1: Using ep0 maxpacket: 16 [ 1636.664594][T12357] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1636.664620][T12357] usb 1-1: config 1 has no interface number 0 [ 1636.664713][T12357] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 64090, setting to 64 [ 1636.664743][T12357] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1636.664772][T12357] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1636.664785][T12357] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1636.699798][T18708] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1636.736038][T12357] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1636.736067][T12357] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1636.736088][T12357] usb 1-1: Product: syz [ 1636.736102][T12357] usb 1-1: Manufacturer: syz [ 1636.736116][T12357] usb 1-1: SerialNumber: syz [ 1636.737671][T18708] usb 7-1: device descriptor read/8, error -71 [ 1636.950060][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1636.951318][T25605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1636.988622][T12357] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 1636.989870][T18708] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1637.027284][T18708] usb 7-1: device descriptor read/8, error -71 [ 1637.130047][T18708] usb usb7-port1: unable to enumerate USB device [ 1637.162418][T25611] vivid-007: ================= START STATUS ================= [ 1637.162433][T25611] vivid-007: Generate PTS: true [ 1637.162446][T25611] vivid-007: Generate SCR: true [ 1637.162467][T25611] tpg source WxH: 720x576 (Y'CbCr) [ 1637.162474][T25611] tpg field: 4 [ 1637.162479][T25611] tpg crop: (0,0)/720x576 [ 1637.162486][T25611] tpg compose: (0,0)/720x576 [ 1637.162493][T25611] tpg colorspace: 1 [ 1637.162498][T25611] tpg transfer function: 0/0 [ 1637.162503][T25611] tpg Y'CbCr encoding: 0/0 [ 1637.162508][T25611] tpg quantization: 0/0 [ 1637.162514][T25611] tpg RGB range: 0/2 [ 1637.162518][T25611] vivid-007: ================== END STATUS ================== [ 1637.216585][T25613] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.217483][T25613] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 1637.219354][T25613] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1637.321588][T24113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1637.321772][T24113] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1637.442277][ T5320] usb 1-1: USB disconnect, device number 114 [ 1637.469778][T18708] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1637.619790][T18708] usb 4-1: Using ep0 maxpacket: 32 [ 1637.622476][T18708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1637.622504][T18708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 1637.622527][T18708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1637.624611][T18708] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1637.624638][T18708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.624659][T18708] usb 4-1: Product: syz [ 1637.624673][T18708] usb 4-1: Manufacturer: syz [ 1637.624680][T18708] usb 4-1: SerialNumber: syz [ 1637.628936][T18708] usb 4-1: config 0 descriptor?? [ 1637.891141][T18708] usb 4-1: USB disconnect, device number 98 [ 1638.045622][ T37] audit: type=1326 audit(2000000071.414:848): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25643 comm="syz.0.5873" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e3081de59 code=0x0 [ 1638.343210][T16716] usb 6-1: USB disconnect, device number 64 [ 1638.687566][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5880'. [ 1638.688253][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5880'. [ 1638.738241][T18708] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1638.738506][T18708] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1638.738851][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5881'. [ 1638.743218][T18708] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1638.743490][T18708] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1638.743578][T18708] rtc rtc0: __rtc_set_alarm: err=-22 [ 1638.795020][T25678] netlink: 'syz.3.5881': attribute type 6 has an invalid length. [ 1638.979730][T16716] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1639.081629][T24113] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1639.149656][T16716] usb 7-1: Using ep0 maxpacket: 32 [ 1639.151900][T16716] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.151924][T16716] usb 7-1: config 0 has no interfaces? [ 1639.153978][T16716] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1639.154006][T16716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.154023][T16716] usb 7-1: Product: syz [ 1639.154031][T16716] usb 7-1: Manufacturer: syz [ 1639.154038][T16716] usb 7-1: SerialNumber: syz [ 1639.158298][T16716] usb 7-1: config 0 descriptor?? [ 1639.216680][T12202] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1639.299685][T24113] usb 6-1: Using ep0 maxpacket: 32 [ 1639.303076][T24113] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1639.303102][T24113] usb 6-1: config 0 has no interface number 0 [ 1639.305244][T24113] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1639.305271][T24113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.305292][T24113] usb 6-1: Product: syz [ 1639.305306][T24113] usb 6-1: Manufacturer: syz [ 1639.305314][T24113] usb 6-1: SerialNumber: syz [ 1639.326052][T24113] usb 6-1: config 0 descriptor?? [ 1639.349596][T24066] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1639.369574][T12202] usb 1-1: Using ep0 maxpacket: 8 [ 1639.378727][T12202] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 1639.378745][T12202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1639.378759][T12202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25548, setting to 1024 [ 1639.378774][T12202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1639.378798][T12202] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1639.378810][T12202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.452616][T12202] usb 1-1: config 0 descriptor?? [ 1639.523274][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.523301][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.523333][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.523430][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.523459][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.524576][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.524605][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.524635][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.524707][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.524723][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.525855][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.525878][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.525908][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.525969][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.525985][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.527075][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.527093][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.527110][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.527131][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.527151][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.728437][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.728462][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.728487][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.728565][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.728592][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.730437][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.730460][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.730490][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.730589][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.730627][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.735656][T24066] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1639.735669][T24066] usb 4-1: config 0 has no interface number 0 [ 1639.735687][T24066] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1639.735708][T24066] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1639.735722][T24066] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1639.738352][T24113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1639.738368][T24113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1639.770500][T24066] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1639.770529][T24066] usb 4-1: New USB device strings: Mfr=32, Product=187, SerialNumber=229 [ 1639.770549][T24066] usb 4-1: Product: syz [ 1639.770564][T24066] usb 4-1: Manufacturer: syz [ 1639.770578][T24066] usb 4-1: SerialNumber: syz [ 1639.920576][T24066] usb 4-1: config 0 descriptor?? [ 1640.073129][T12202] usb 1-1: string descriptor 0 read error: -71 [ 1640.090436][T12202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1640.108776][T12202] usb 1-1: USB disconnect, device number 115 [ 1640.150602][T24066] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 1640.174684][T24066] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1640.194555][T24066] usb 4-1: USB disconnect, device number 99 [ 1640.208047][T24066] ftdi_sio 4-1:0.97: device disconnected [ 1640.680596][T18708] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1640.841326][T18708] usb 1-1: device descriptor read/64, error -71 [ 1640.948354][T24113] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1640.948534][T24113] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 1641.083210][T18708] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1641.209517][T18708] usb 1-1: device descriptor read/64, error -71 [ 1641.320538][T18708] usb usb1-port1: attempt power cycle [ 1641.659613][T18708] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1641.666336][T12357] usb 7-1: USB disconnect, device number 64 [ 1641.681924][T18708] usb 1-1: device descriptor read/8, error -71 [ 1641.754034][ T37] audit: type=1326 audit(2000000075.114:849): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25760 comm="syz.6.5891" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a5c3de59 code=0x0 [ 1641.919655][T18708] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1641.940004][T18708] usb 1-1: device descriptor read/8, error -71 [ 1642.039547][ T5320] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1642.049907][T18708] usb usb1-port1: unable to enumerate USB device [ 1642.177530][T24113] usb 6-1: USB disconnect, device number 65 [ 1642.192742][ T5320] usb 4-1: Using ep0 maxpacket: 32 [ 1642.199184][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.199214][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.199252][ T5320] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1642.199275][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.287196][ T5320] usb 4-1: config 0 descriptor?? [ 1642.698115][ T5320] ft260 0003:0403:6030.0038: unknown main item tag 0x0 [ 1642.698151][ T5320] ft260 0003:0403:6030.0038: unknown main item tag 0x0 [ 1642.894320][ T5320] ft260 0003:0403:6030.0038: chip code: 0000 0000 [ 1642.939411][T24066] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1642.989385][T24113] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1643.113942][T24066] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.113997][T24066] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1643.114020][T24066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.114108][ T5320] ft260 0003:0403:6030.0038: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1643.158979][T24066] usb 6-1: config 0 descriptor?? [ 1643.170560][T24066] pwc: Askey VC010 type 2 USB webcam detected. [ 1643.188779][T24113] usb 7-1: config 4 has an invalid interface number: 49 but max is 0 [ 1643.188806][T24113] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.188832][T24113] usb 7-1: config 4 has no interface number 0 [ 1643.188909][T24113] usb 7-1: too many endpoints for config 4 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1643.188948][T24113] usb 7-1: config 4 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1643.188976][T24113] usb 7-1: config 4 interface 49 has no altsetting 0 [ 1643.189055][T24113] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1643.189075][T24113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.316820][ T5320] ft260 0003:0403:6030.0038: failed to retrieve status: -32, no wakeup [ 1643.499144][ T4903] Bluetooth: hci4: unexpected event for opcode 0x3030 [ 1643.522898][T24113] usb 7-1: string descriptor 0 read error: -71 [ 1643.525332][ T5799] usb 4-1: USB disconnect, device number 100 [ 1643.567323][T24066] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1643.568447][T24113] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1643.662466][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5899'. [ 1643.772063][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5895'. [ 1644.729713][T24113] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1644.729805][T24113] stv0680 7-1:4.49: STV(e): camera ping failed!! [ 1644.734871][T24113] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1644.734892][T24113] stv0680 7-1:4.49: last error: 0, command = 0x0 [ 1645.052282][T24113] usb 7-1: USB disconnect, device number 65 [ 1645.296473][ T37] audit: type=1326 audit(2000000078.654:850): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25860 comm="syz.6.5904" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a5c3de59 code=0x0 [ 1645.535364][T24066] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1645.536005][T24066] pwc: recv_control_msg error -71 req 04 val 1000 [ 1645.537972][T24066] pwc: recv_control_msg error -71 req 04 val 1300 [ 1645.540520][T24066] pwc: recv_control_msg error -71 req 04 val 1400 [ 1645.540977][T24066] pwc: recv_control_msg error -71 req 02 val 2000 [ 1645.541448][T24066] pwc: recv_control_msg error -71 req 02 val 2100 [ 1645.542273][T24066] pwc: recv_control_msg error -71 req 04 val 1500 [ 1645.544309][T24066] pwc: recv_control_msg error -71 req 02 val 2500 [ 1645.546087][T24066] pwc: recv_control_msg error -71 req 02 val 2400 [ 1645.546523][T24066] pwc: recv_control_msg error -71 req 02 val 2600 [ 1645.546955][T24066] pwc: recv_control_msg error -71 req 02 val 2900 [ 1645.547388][T24066] pwc: recv_control_msg error -71 req 02 val 2800 [ 1645.550247][T24066] pwc: recv_control_msg error -71 req 04 val 1100 [ 1645.551805][T24066] pwc: recv_control_msg error -71 req 04 val 1200 [ 1645.591799][T24066] pwc: Registered as video103. [ 1645.599085][T24066] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input155 [ 1645.618707][T24066] usb 6-1: USB disconnect, device number 66 [ 1645.664181][T24113] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1645.829337][T24113] usb 1-1: Using ep0 maxpacket: 8 [ 1645.833139][T24113] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1645.833167][T24113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.833187][T24113] usb 1-1: Product: syz [ 1645.833199][T24113] usb 1-1: Manufacturer: syz [ 1645.833207][T24113] usb 1-1: SerialNumber: syz [ 1645.848196][T24113] usb 1-1: config 0 descriptor?? [ 1646.061628][T24113] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1646.207875][ T4903] Bluetooth: hci3: unexpected event for opcode 0x3009 [ 1646.382048][T25905] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5908'. [ 1646.739531][T25922] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 1646.739551][T25922] netlink: 756 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1646.877668][T16716] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1646.891473][T24113] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1646.934172][T24113] usb 1-1: USB disconnect, device number 120 [ 1647.121164][T24066] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1647.150393][T16716] usb 6-1: Using ep0 maxpacket: 16 [ 1647.170714][T16716] usb 6-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1647.170740][T16716] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1647.198748][T16716] usb 6-1: language id specifier not provided by device, defaulting to English [ 1647.217538][T16716] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1647.217556][T16716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.217568][T16716] usb 6-1: Product: ᐉ [ 1647.217575][T16716] usb 6-1: Manufacturer: ᠌ [ 1647.217583][T16716] usb 6-1: SerialNumber: І [ 1647.289721][T24066] usb 7-1: Using ep0 maxpacket: 32 [ 1647.298430][T24066] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1647.312273][T24066] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1647.312312][T24066] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1647.312392][T24066] usb 7-1: config 14 has no interface number 0 [ 1647.312411][T24066] usb 7-1: config 14 has no interface number 1 [ 1647.312484][T24066] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1647.312564][T24066] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1647.312593][T24066] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1647.312621][T24066] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1647.312648][T24066] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1647.312730][T24066] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1647.312758][T24066] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1647.312776][T24066] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1647.401343][T24066] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1647.401374][T24066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.401393][T24066] usb 7-1: Product: syz [ 1647.401407][T24066] usb 7-1: Manufacturer: syz [ 1647.401422][T24066] usb 7-1: SerialNumber: syz [ 1647.493909][T16716] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1647.511949][T16716] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1647.536214][T16716] usb 6-1: USB disconnect, device number 67 [ 1647.645993][T25949] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1647.646012][T25949] binder: 25948:25949 ioctl 4018620d 2000000000c0 returned -1 [ 1647.894630][T24066] legousbtower 7-1:14.57: interrupt endpoints not found [ 1648.070117][T16716] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1648.296344][T16716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.296376][T16716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.296414][T16716] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1648.296487][T16716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.303402][T24066] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1648.389597][T24066] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1648.401451][T16716] usb 1-1: config 0 descriptor?? [ 1648.494917][ T37] audit: type=1326 audit(2000000081.854:851): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25974 comm="syz.5.5915" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e4aa8de59 code=0x0 [ 1648.614151][T16716] usbhid 1-1:0.0: can't add hid device: -71 [ 1648.614274][T16716] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1648.623707][T16716] usb 1-1: USB disconnect, device number 121 [ 1648.889456][T24113] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1649.039139][T24113] usb 6-1: Using ep0 maxpacket: 8 [ 1649.041408][T24113] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.041446][T24113] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1649.041497][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1649.041586][T24113] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.041613][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1649.041640][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1649.041663][T24113] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1649.041677][T24113] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1649.043738][T24113] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.043774][T24113] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1649.043813][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1649.043841][T24113] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.043867][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1649.043894][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1649.043981][T24113] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1649.044010][T24113] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1649.045394][T24113] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.045446][T24113] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1649.045485][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1649.045513][T24113] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.045538][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1649.045564][T24113] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1649.045591][T24113] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1649.045617][T24113] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1649.097179][T24066] usb 7-1: USB disconnect, device number 66 [ 1649.130589][T16716] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1649.256744][T24066] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 1649.322670][T16716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.322703][T16716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.323262][T16716] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1649.323288][T16716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.392034][T24113] usb 6-1: string descriptor 0 read error: -22 [ 1649.392186][T24113] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1649.392211][T24113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.436571][T16716] usb 1-1: config 0 descriptor?? [ 1649.469222][T24113] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1649.514030][T26015] FAULT_INJECTION: forcing a failure. [ 1649.514030][T26015] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.514074][T26015] CPU: 0 UID: 0 PID: 26015 Comm: syz.3.5918 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1649.514099][T26015] Tainted: [L]=SOFTLOCKUP [ 1649.514106][T26015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1649.514116][T26015] Call Trace: [ 1649.514124][T26015] [ 1649.514132][T26015] dump_stack_lvl+0xe8/0x150 [ 1649.514161][T26015] should_fail_ex+0x467/0x600 [ 1649.514190][T26015] should_failslab+0xa8/0x100 [ 1649.514216][T26015] __kmalloc_noprof+0xfb/0x790 [ 1649.514239][T26015] ? device_write+0x164/0xed0 [ 1649.514257][T26015] ? device_write+0x164/0xed0 [ 1649.514276][T26015] ? _copy_from_user+0x94/0xb0 [ 1649.514301][T26015] device_write+0x164/0xed0 [ 1649.514323][T26015] ? __pfx_device_write+0x10/0x10 [ 1649.514342][T26015] vfs_write+0x29f/0xbb0 [ 1649.514367][T26015] ? __pfx_vfs_write+0x10/0x10 [ 1649.514388][T26015] ? __fget_files+0x2a/0x420 [ 1649.514405][T26015] ? __fget_files+0x2a/0x420 [ 1649.514420][T26015] ? __fget_files+0x3a8/0x420 [ 1649.514436][T26015] ? __fget_files+0x2a/0x420 [ 1649.514459][T26015] ksys_write+0x156/0x270 [ 1649.514479][T26015] ? __pfx_ksys_write+0x10/0x10 [ 1649.514505][T26015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.514524][T26015] do_syscall_64+0x174/0x580 [ 1649.514543][T26015] ? trace_irq_disable+0x3b/0x140 [ 1649.514560][T26015] ? clear_bhb_loop+0x40/0x90 [ 1649.514581][T26015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.514600][T26015] RIP: 0033:0x7f453c62de59 [ 1649.514618][T26015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.514632][T26015] RSP: 002b:00007f453a886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1649.514651][T26015] RAX: ffffffffffffffda RBX: 00007f453c8b5fa0 RCX: 00007f453c62de59 [ 1649.514665][T26015] RDX: 0000000000000070 RSI: 0000200000001380 RDI: 0000000000000003 [ 1649.514674][T26015] RBP: 00007f453a886090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.514686][T26015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.514697][T26015] R13: 00007f453c8b6038 R14: 00007f453c8b5fa0 R15: 00007ffe74895f28 [ 1649.514723][T26015] [ 1649.691625][T25956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.698406][T25956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.733206][T24066] usb 6-1: USB disconnect, device number 68 [ 1649.734821][T16716] usbhid 1-1:0.0: can't add hid device: -71 [ 1649.734929][T16716] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1649.804934][T16716] usb 1-1: USB disconnect, device number 122 [ 1650.249219][T16716] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1650.268992][T24113] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1650.300274][ [ 1650.300274][ T5709] ================================================================== [ 1650.300284][ T5709] BUG: KASAN: slab-use-after-free in uea_upload_pre_firmware+0x8d/0x640 [ 1650.300302][ T5709] Read of size 8 at addr ffff88802b5db0b8 by task kworker/1:3/5709 [ 1650.300315][ T5709] [ 1650.300324][ T5709] CPU: 1 UID: 0 PID: 5709 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1650.300340][ T5709] Tainted: [L]=SOFTLOCKUP [ 1650.300344][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1650.300352][ T5709] Workqueue: events request_firmware_work_func [ 1650.300370][ T5709] Call Trace: [ 1650.300376][ T5709] [ 1650.300385][ T5709] dump_stack_lvl+0xe8/0x150 [ 1650.300408][ T5709] print_address_description+0x55/0x1e0 [ 1650.300433][ T5709] ? uea_upload_pre_firmware+0x8d/0x640 [ 1650.300449][ T5709] print_report+0x58/0x70 [ 1650.300470][ T5709] kasan_report+0x117/0x150 [ 1650.300495][ T5709] ? _request_firmware+0x1322/0x1780 [ 1650.300511][ T5709] ? uea_upload_pre_firmware+0x8d/0x640 [ 1650.300522][ T5709] uea_upload_pre_firmware+0x8d/0x640 [ 1650.300533][ T5709] ? __pfx__request_firmware+0x10/0x10 [ 1650.300547][ T5709] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 1650.300557][ T5709] ? lock_acquire+0x115/0x350 [ 1650.300567][ T5709] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 1650.300577][ T5709] request_firmware_work_func+0xf7/0x2d0 [ 1650.300591][ T5709] ? rcu_is_watching+0x15/0xb0 [ 1650.300603][ T5709] ? process_one_work+0x7fd/0x1480 [ 1650.300614][ T5709] process_one_work+0xaaf/0x1480 [ 1650.300628][ T5709] ? __pfx_process_one_work+0x10/0x10 [ 1650.300644][ T5709] ? do_raw_spin_lock+0x12b/0x2f0 [ 1650.300669][ T5709] ? assign_work+0x3cf/0x5d0 [ 1650.300689][ T5709] worker_thread+0xb05/0x10d0 [ 1650.300717][ T5709] kthread+0x388/0x470 [ 1650.300740][ T5709] ? __pfx_worker_thread+0x10/0x10 [ 1650.300752][ T5709] ? __pfx_kthread+0x10/0x10 [ 1650.300765][ T5709] ret_from_fork+0x514/0xb70 [ 1650.300780][ T5709] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.300793][ T5709] ? __switch_to+0xc89/0x1420 [ 1650.300805][ T5709] ? __pfx_kthread+0x10/0x10 [ 1650.300818][ T5709] ret_from_fork_asm+0x1a/0x30 [ 1650.300835][ T5709] [ 1650.300839][ T5709] [ 1650.300848][ T5709] Allocated by task 25355: [ 1650.300853][ T5709] kasan_save_track+0x3e/0x80 [ 1650.300869][ T5709] __kasan_kmalloc+0x93/0xb0 [ 1650.300890][ T5709] __kmalloc_node_track_caller_noprof+0x566/0x7b0 [ 1650.300914][ T5709] __alloc_skb+0x2bd/0x7a0 [ 1650.300935][ T5709] alloc_skb_with_frags+0xc6/0x760 [ 1650.300951][ T5709] sock_alloc_send_pskb+0x884/0x9a0 [ 1650.300969][ T5709] __ip6_append_data+0x2de9/0x40c0 [ 1650.300987][ T5709] ip6_append_data+0x108/0x280 [ 1650.300999][ T5709] icmp6_send+0x138a/0x1b50 [ 1650.301011][ T5709] ip6_link_failure+0x3b/0x4c0 [ 1650.301024][ T5709] xfrmi_xmit+0xa96/0x1ba0 [ 1650.301033][ T5709] dev_hard_start_xmit+0x2df/0x870 [ 1650.301050][ T5709] __dev_queue_xmit+0x14d2/0x3880 [ 1650.301060][ T5709] ip6_fragment+0x17bf/0x1dc0 [ 1650.301069][ T5709] ip6_output+0x337/0x540 [ 1650.301077][ T5709] ip6_send_skb+0x1cd/0x380 [ 1650.301086][ T5709] rawv6_push_pending_frames+0x69f/0x860 [ 1650.301097][ T5709] rawv6_sendmsg+0x134f/0x18c0 [ 1650.301107][ T5709] sock_sendmsg_nosec+0x10e/0x180 [ 1650.301119][ T5709] ____sys_sendmsg+0x565/0x870 [ 1650.301128][ T5709] ___sys_sendmsg+0x2a5/0x360 [ 1650.301136][ T5709] __x64_sys_sendmsg+0x1b7/0x290 [ 1650.301145][ T5709] do_syscall_64+0x174/0x580 [ 1650.301157][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.301168][ T5709] [ 1650.301171][ T5709] Freed by task 21: [ 1650.301176][ T5709] kasan_save_track+0x3e/0x80 [ 1650.301193][ T5709] kasan_save_free_info+0x40/0x50 [ 1650.301204][ T5709] __kasan_slab_free+0x5c/0x80 [ 1650.301230][ T5709] kfree+0x1c5/0x6c0 [ 1650.301241][ T5709] skb_release_data+0x85e/0xab0 [ 1650.301250][ T5709] __kfree_skb+0x5d/0x210 [ 1650.301257][ T5709] inet_sock_destruct+0x118/0x740 [ 1650.301271][ T5709] __sk_destruct+0x89/0x9e0 [ 1650.301279][ T5709] rcu_cpu_kthread+0x950/0x1480 [ 1650.301289][ T5709] smpboot_thread_fn+0x57c/0xa80 [ 1650.301300][ T5709] kthread+0x388/0x470 [ 1650.301311][ T5709] ret_from_fork+0x514/0xb70 [ 1650.301323][ T5709] ret_from_fork_asm+0x1a/0x30 [ 1650.301335][ T5709] [ 1650.301338][ T5709] The buggy address belongs to the object at ffff88802b5db000 [ 1650.301338][ T5709] which belongs to the cache kmalloc-2k of size 2048 [ 1650.301347][ T5709] The buggy address is located 184 bytes inside of [ 1650.301347][ T5709] freed 2048-byte region [ffff88802b5db000, ffff88802b5db800) [ 1650.301358][ T5709] [ 1650.301361][ T5709] The buggy address belongs to the physical page: [ 1650.301373][ T5709] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b5db000 pfn:0x2b5d8 [ 1650.301384][ T5709] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1650.301394][ T5709] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1650.301404][ T5709] page_type: f5(slab) [ 1650.301414][ T5709] raw: 0080000000000240 ffff88813fe3a000 ffffea0001009010 ffffea000176b410 [ 1650.301423][ T5709] raw: ffff88802b5db000 0000000800080007 00000000f5000000 0000000000000000 [ 1650.301432][ T5709] head: 0080000000000240 ffff88813fe3a000 ffffea0001009010 ffffea000176b410 [ 1650.301441][ T5709] head: ffff88802b5db000 0000000800080007 00000000f5000000 0000000000000000 [ 1650.301449][ T5709] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1650.301457][ T5709] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1650.301462][ T5709] page dumped because: kasan: bad access detected [ 1650.301470][ T5709] page_owner tracks the page as allocated [ 1650.301474][ T5709] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 149, tgid 149 (kworker/u8:6), ts 11620735816 [ 1650.301492][ T5709] post_alloc_hook+0x1f9/0x250 [ 1650.301505][ T5709] get_page_from_freelist+0x264c/0x26c0 [ 1650.301520][ T5709] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 1650.301534][ T5709] allocate_slab+0x7c/0x5e0 [ 1650.301546][ T5709] refill_objects+0x2d8/0x350 [ 1650.301556][ T5709] __pcs_replace_empty_main+0x330/0x690 [ 1650.301566][ T5709] __kmalloc_noprof+0x543/0x790 [ 1650.301578][ T5709] scsi_alloc_target+0x138/0xbc0 [ 1650.301590][ T5709] __scsi_scan_target+0x164/0xe10 [ 1650.301602][ T5709] scsi_scan_host_selected+0x3d6/0x7a0 [ 1650.301614][ T5709] do_scan_async+0x10e/0x660 [ 1650.301626][ T5709] async_run_entry_fn+0x9d/0x430 [ 1650.301636][ T5709] process_one_work+0xaaf/0x1480 [ 1650.301644][ T5709] worker_thread+0xb05/0x10d0 [ 1650.301654][ T5709] kthread+0x388/0x470 [ 1650.301665][ T5709] ret_from_fork+0x514/0xb70 [ 1650.301676][ T5709] page_owner free stack trace missing [ 1650.301680][ T5709] [ 1650.301683][ T5709] Memory state around the buggy address: [ 1650.301689][ T5709] ffff88802b5daf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1650.301695][ T5709] ffff88802b5db000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.301702][ T5709] >ffff88802b5db080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.301707][ T5709] ^ [ 1650.301712][ T5709] ffff88802b5db100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.301719][ T5709] ffff88802b5db180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.301724][ T5709] ================================================================== [ 1650.310510][ T5722] (NULL device *): [UEAGLE-ATM] firmware is not available [ 1650.310592][ T5722] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 1650.310609][ T5722] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 1650.310629][ T5722] CPU: 1 UID: 0 PID: 5722 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1650.310654][ T5722] Tainted: [L]=SOFTLOCKUP [ 1650.310660][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1650.310671][ T5722] Workqueue: events request_firmware_work_func [ 1650.310697][ T5722] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1650.310719][ T5722] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1650.310734][ T5722] RSP: 0018:ffffc90005f6f910 EFLAGS: 00010002 [ 1650.310749][ T5722] RAX: dffffc0000000000 RBX: ffffffff8b515340 RCX: 0000000080000002 [ 1650.310763][ T5722] RDX: 0000000000000000 RSI: ffffffff8b515340 RDI: 0000000000000004 [ 1650.310776][ T5722] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1650.310788][ T5722] R10: dffffc0000000000 R11: fffffbfff1fa1160 R12: 0000000000000020 [ 1650.310802][ T5722] R13: 0000000000000000 R14: 0000000000000020 R15: 0000000000000001 [ 1650.310814][ T5722] FS: 0000000000000000(0000) GS:ffff888125b00000(0000) knlGS:0000000000000000 [ 1650.310829][ T5722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1650.310843][ T5722] CR2: 00007f97a5c8b540 CR3: 000000003855c000 CR4: 00000000003526f0 [ 1650.310859][ T5722] Call Trace: [ 1650.310866][ T5722] [ 1650.310873][ T5722] __kasan_check_byte+0x12/0x40 [ 1650.310900][ T5722] lock_acquire+0x7d/0x350 [ 1650.310918][ T5722] ? __pfx__dev_err+0x10/0x10 [ 1650.310940][ T5722] ? rcu_is_watching+0x15/0xb0 [ 1650.310961][ T5722] _raw_spin_lock_irqsave+0x40/0x60 [ 1650.310981][ T5722] ? complete+0x28/0x1b0 [ 1650.311002][ T5722] complete+0x28/0x1b0 [ 1650.311021][ T5722] ? release_firmware+0x2e/0xb0 [ 1650.311048][ T5722] uea_upload_pre_firmware+0x2ef/0x640 [ 1650.311068][ T5722] ? __pfx__request_firmware+0x10/0x10 [ 1650.311087][ T5722] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 1650.311104][ T5722] ? lock_acquire+0x115/0x350 [ 1650.311122][ T5722] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 1650.311144][ T5722] request_firmware_work_func+0xf7/0x2d0 [ 1650.311163][ T5722] ? rcu_is_watching+0x15/0xb0 [ 1650.311183][ T5722] ? process_one_work+0x7fd/0x1480 [ 1650.311202][ T5722] process_one_work+0xaaf/0x1480 [ 1650.311227][ T5722] ? __pfx_process_one_work+0x10/0x10 [ 1650.311244][ T5722] ? do_raw_spin_lock+0x12b/0x2f0 [ 1650.311270][ T5722] ? assign_work+0x3cf/0x5d0 [ 1650.311289][ T5722] worker_thread+0xb05/0x10d0 [ 1650.311316][ T5722] kthread+0x388/0x470 [ 1650.311338][ T5722] ? __pfx_worker_thread+0x10/0x10 [ 1650.311356][ T5722] ? __pfx_kthread+0x10/0x10 [ 1650.311377][ T5722] ret_from_fork+0x514/0xb70 [ 1650.311400][ T5722] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.311422][ T5722] ? __switch_to+0xc89/0x1420 [ 1650.311443][ T5722] ? __pfx_kthread+0x10/0x10 [ 1650.311465][ T5722] ret_from_fork_asm+0x1a/0x30 [ 1650.311492][ T5722] [ 1650.311505][ T5722] Modules linked in: [ 1650.311523][ T5722] ---[ end trace 0000000000000000 ]--- [ 1650.311540][ T5722] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1650.311557][ T5722] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1650.311572][ T5722] RSP: 0018:ffffc90005f6f910 EFLAGS: 00010002 [ 1650.311587][ T5722] RAX: dffffc0000000000 RBX: ffffffff8b515340 RCX: 0000000080000002 [ 1650.311600][ T5722] RDX: 0000000000000000 RSI: ffffffff8b515340 RDI: 0000000000000004 [ 1650.311612][ T5722] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1650.311624][ T5722] R10: dffffc0000000000 R11: fffffbfff1fa1160 R12: 0000000000000020 [ 1650.311638][ T5722] R13: 0000000000000000 R14: 0000000000000020 R15: 0000000000000001 [ 1650.311649][ T5722] FS: 0000000000000000(0000) GS:ffff888125b00000(0000) knlGS:0000000000000000 [ 1650.311663][ T5722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1650.311676][ T5722] CR2: 00007f97a5c8b540 CR3: 000000003855c000 CR4: 00000000003526f0 [ 1650.311693][ T5722] Kernel panic - not syncing: Fatal exception [ 1650.311944][ T5722] Kernel Offset: disabled